DEFENSE INFORMATION SYSTEMS AGENCY P. O. BOX 549 FORT MEADE, MARYLAND Joint Interoperability Test Command (JTE) 10 Aug 15

Transcription

1 DEFENSE INFORMATION SYSTEMS AGENCY P. O. BOX 549 FORT MEADE, MARYLAND IN REPLY REFER TO: Joint Interoperability Test Command (JTE) 10 Aug 15 MEMORANDUM FOR DISTRIBUTION SUBJECT: Extension of the Joint Interoperability Certification of the Brocade ICX 6000 Series, FastIron Software Release a References: (a) Department of Defense Instruction , "DoD Unified Capabilities (UC)," 9 December 2010 (b) Office of the Department of Defense Chief Information Officer, Department of Defense Unified Capabilities Requirements 2013, Errata 1, 1 July 2013 (c) through (e), see Enclosure 1 1. Certification Authority. References (a) and (b) establish the Joint Interoperability Test Command (JITC) as the Joint Interoperability Certification Authority for the Unified Capabilities (UC) products. 2. Conditions of Certification. The Brocade ICX 6000 Series with FastIron Software Release a, hereinafter referred to as the System Under Test (SUT) meets the critical requirements of the Unified Capabilities Requirements (UCR), Reference (b), and is certified for joint use as Assured Services Local Area Network (ASLAN) Core, Distribution, and Layer 2/3 Access switch with conditions (see Table 1). The ICX 6000 series models can be configured in a stacked or standalone configuration. In the stacked configuration, all models (ICX 6610, ICX 6450, and ICX 6650) met Core, Distribution, and Access requirements with noted conditions. In the standalone configuration, the ICX 6610 and ICX 6650 met Core, Distribution, and Access blocking requirements. The ICX models met Core, Distribution, and Access requirements. The ICX 6450-C12 model and ICX models in a standalone configuration are certified as an Access product only because of blocking factor limitations. Table 3-3 of Enclosure 3 provides detailed model information. This certification expires upon changes that affect interoperability, but no later than the expiration date specified in the UC Approved Products List (APL) memorandum. Desktop Review (DTR) 1 was requested to update the original certified Brocade software release from a to b. See paragraph 4 for test details.

2 Table 1. Conditions None Condition In the standalone, non-stacked configuration, the SUT must be fielded in a dual product redundancy configuration to meet ASLAN redundancy requirements. Per LoC, the SUT partially comply with UCR 2013 Paragraph IPv6 Network Management IP , IP , and IP CoF Conditions of Fielding DISA Defense Information Systems Agency IPv6 Internet Protocol version 6 LoC Letter of Compliance UCR Waivers Operational Impact Conditions of Fielding (CoF) Minor with CoF Open Test Discrepancies Minor POA&M SUT UCR Remarks On 17 April 2015, DISA adjudicated the ICX standalone models be certified as Assured Services Core and Distribution when fielded in a dual product configuration. DISA has accepted and approved the vendor s POA&M and adjudicated this discrepancy as having a minor operational impact. Plan of Action and Milestones System Under Test Unified Capabilities Requirements 3. Interoperability Status. Table 2 provides the SUT interface interoperability status. Table 3 provides the Capability Requirements (CR) and Functional Requirements (FR) status. Table 4 provides a Unified Capabilities (UC) Approved Products List (APL) product summary. Interface Table 2. ASLAN Interface Status Applicability Co D A Threshold CRs/FRs ID (See note 1.) Status (Met, Partially Met, Not Met, Not Tested) Remarks Network Management Interfaces (See note 2.) IEEE 802.3i (10BaseT UTP) C C C 1 and 3. Met IEEE 802.3u (100BaseT UTP) C C C 1 and 3. Met IEEE 802.3ab (1000BaseT UTP) C C C 1 and 3. Met Access (User) Interfaces (See note 2.) IEEE 802.3i (10BaseT UTP) C C R 1, 2, and 3. Met See note 3. IEEE 802.3u (100BaseT UTP) R R R 1, 2, and 3. Met See note 3. IEEE 802.3u (100BaseFX) C C R 1, 2, and 3. Met See note 4. IEEE 802.3ab (1000BaseT UTP) C C R 1, 2, and 3. Met See note 3. IEEE 802.3z (1000BaseX Fiber) R R R 1, 2, and 3. Met IEEE 802.3ae (10GBaseX) C C C 1, 2, and 3. Met Uplink (Trunk) Interfaces (See note 2.) IEEE 802.3u (100BaseT UTP) R R R 1, 2, 3, and 4. Met IEEE 802.3u (100BaseFX) C C R 1, 2, 3, and 4. Met See note 4. IEEE 802.3ab (1000BaseT UTP) C C R 1, 2, 3, and 4. Met IEEE 802.3z (1000BaseX Fiber) R R R 1, 2, 3, and 4. Met IEEE 802.3ae (10GBaseX) C C C 1, 2, 3, and 4. Met IEEE 802.3ba (40GBaseX) C C C 1, 2, 3, and 4. Met See note 5. IEEE 802.3ba (100GBaseX) C C C 1, 2, 3, and 4. Not Tested See note 6. 2

3 Table 2. ASLAN Interface Status (continued) NOTE(S): 1. The SUT high-level CR and FR ID numbers depicted in the Threshold CRs/FRs column are cross-referenced in Table 3. These high-level CR/FR requirements refer to a detailed list of requirements provided in Enclosure 3 of the original cert. 2. Core and Distribution products must minimally support 100Base-X (802.3u) and 1000Base-X (802.3z). Access products must minimally support one of the following standards: 802.3i (10BaseT), 802.3j (10BaseF), 802.3u (100BaseT/F), 802.3z (1000BaseF), or 802.3ab (1000BaseT). Other rates and standards may be provided as conditional interfaces. 3. USAISEC TIC tested the 1/10 Gbps interfaces but not the 10/100BaseT interfaces. Analysis determined the 10/100BaseT interfaces are low risk for certification based on the vendor s Letters of Compliance to comply with the IEEE 802.3i/u standards and the testing data collected at all other data rates. 4. Due to test equipment limitations, this interface was not tested but is certified based on similarity and its use in an operational environment with no known operational impact. The SUT is compliant at higher data rates, therefore this is considered a low risk for certification. 5. This interface with software version a was tested during a DTR and met the interface requirements. Reference (e) contains the test details. 6. The SUT does not support this interface ab 1000BaseT Gbps Ethernet over twisted pair at 1 Gbps 802.3ae 10 Gbps Ethernet 802.3ba 40 and 100 Gigabit Ethernet Architecture 802.3i 10BaseT 10 Mbps Ethernet over twisted pair 802.3u Standard for carrier sense multiple access with collision detection at 100 Mbps 802.3z Gigabit Ethernet Standard 10BaseT 10 Mbps (Baseband Operation, Twisted Pair) Ethernet 100BaseT 100 Mbps (Baseband Operation, Twisted Pair) Ethernet 100BaseFX 100 Mbps Ethernet over Fiber 1000BaseX 1000 Mbps Ethernet over Fiber or Copper 1000BaseT 1000 Mbps (Baseband Operation, Twisted Pair) Ethernet 10000BaseX Mbps Ethernet over Fiber or Copper 10GBaseX Mbps Ethernet over Fiber or Copper 40GBaseX Mbps Ethernet over Fiber or Copper 100GBaseX Mbps Ethernet over Fiber or Copper A ASLAN C Co CRs D DTR FRs Gbps ID IEEE Mbps R SUT UTP Access Assured Services Local Area Network Conditional Core Capability Requirements Distribution Desktop Review Functional Requirements Gigabits per second Identification Institute of Electrical and Electronics Engineers Megabits per second Required System Under Test Unshielded Twisted Pair Table 3. ASLAN Capability Requirements and Functional Requirements Status CR/FR ID UCR Requirement (High-Level) (See note 1.) UCR 2013 Reference Status (Met, Partially Met, Not Met, Not Tested) 1 General LAN Switch and Router Product Requirements (R) Partially Met (See notes 2, 3, and 4.) 2 LAN Switch and Router Redundancy Requirements (R) Met (see note 5.) 3 LAN Product Requirements Summary (R) Met (See note 2.) 4 Multiprotocol Label Switching in ASLANs (O) Not Tested (See note 6.) NOTE(S): 1. The annotation of required refers to a high-level requirement category. Enclosure 3 of the original certification addresses the applicability of each sub-requirement. 2. The SUT met the requirements with the exceptions noted in Table 1. DISA adjudicated these exceptions as minor. 3. Security is tested by a USAISEC TIC-led Information Assurance test team and the results published in a separate report, Reference (d). 4. The SUT met optional layer 3 routing protocols as an Access product. 5. Since this product does not support dual processors for single product redundancy, DISA adjudicated the SUT to be certified as Core and Distribution with condition of fielding that the SUT must be configured as Standalone switch and cannot be fielded without being paired with another UC APL certified Core or Distribution switch. 6. Multiprotocol Label Switching is an optional requirement, was not tested, and therefore is not certified for use. ASLAN Assured Services Local Area Network CR Capability Requirement DISA Defense Information Systems Agency FR Functional Requirement ID Identification LAN Local Area Network O Optional R Required SUT System Under Test TIC Technology Integration Center UCR Unified Capabilities Requirements USAISEC United States Army Information Systems Engineering Command 3

4 Table 4. SUT Product Summary Product Identification Product Name Software Release Brocade FI-ICX6000 Series a UC Product Type(s) Assured Services Local Area Network (ASLAN) Core/Distribution/Access Switch (L2/L3) Product Description The Brocade FI-ICX6000 Series delivers voice-class availability, 1/10/40 Gigabit Ethernet for switching VoIP, video, and data traffic. Product Components (See note 1.) Component Name (See note 2.) Version Remarks Brocade ICX F-PE, ICX P-PE, ICX DC-E, ICX E, ICX I, ICX PE, ICX PI, ICX F-DC-E, ICX F-E, ICX F-I, ICX F-PI, ICX P-E, ICX P-I, ASLAN Core/Distribution/Access Switch ICX P-PE, ICX P-PI, ICX DC-E, ICX6610- Redundant power b 48-E, ICX I, ICX PE, ICX PI, ICX6610- modules 48P-E, ICX P-I, ICX P-PI, ICX ADV, ICX E-ADV, ICX E-ADV, ICX6450-C12-PD, ICX A, ICX P-A, ICX A, ICX P-A, ICX E-ADV (See note 3.) NOTE(S): 1. The detailed component and subcomponent list is provided in Enclosure 3 of the original certification. 2. Components bolded and underlined were tested by USAISEC TIC. The other components in the family series were not tested but are also certified for joint use. JITC certifies those additional components because they utilize the same software and similar hardware and JITC analysis determined them to be functionally identical for interoperability certification purposes. 3. In Reference (e) stated, The ICX E-ADV was tested with the 40G interface. ASLAN Assured Services Local Area Network JITC Joint Interoperability Test Command L2/L3 Layer2/Layer 3 SUT System Under Test TIC Technology Integration Center UC USAISEC VoIP Unified Capabilities U.S. Army Information Systems Engineering Command Voice over Internet Protocol 4. Test Details. The extension of this certification is based upon DTR 1. The original certification is based on interoperability testing, DISA adjudication of open test discrepancy reports (TDRs), review of the vendor s Letters of Compliance (LoC), and DISA Certifying Authority (CA) recommendation for inclusion on the UC APL. Testing was conducted at the U.S. Army Information Systems Engineering Command (USAISEC) - Mission Engineering Directorate (MED), Technology Integration Center (TIC), hereafter referred to as USAISEC TIC, at Fort Huachuca, Arizona, from 5 January 2015 through 18 February 2015 using test procedures derived from Reference (c). DISA adjudication of outstanding TDRs was completed on 17 April Review of the vendor s LoC was completed on 6 March Information Assurance (IA) testing was conducted by USAISEC TIC-led IA test teams and the results published in a separate report, Reference (d). Enclosure 2 documents the test results and describes the tested network and system configurations. Enclosure 3 provides a detailed list of the interface, capability, and functional requirements. DTR1 was requested to update the original certified Brocade software release from a to b. JITC determined there was minor risk in approving this DTR without further interoperability testing, because this updated software provides commercial enhancements and describes the resolution of software defects that did not have an impact on the previously certified configuration of the SUT. DTR1 has no impact on the approved IA posture, so the original CA approval still applies. Therefore, JITC approves this DTR. 5. Additional Information. JITC distributes interoperability information via the JITC Electronic Report Distribution (ERD) system, which uses Sensitive but Unclassified IP Data 4

5 (formerly known as NIPRNet) . Interoperability status information is available via the JITC System Tracking Program (STP). STP is accessible by.mil/.gov users at Test reports, lessons learned, and related testing documents and references are on the JITC Joint Interoperability Tool (JIT) at Due to the sensitivity of the information, the Information Assurance Accreditation Package (IAAP) that contains the approved configuration and deployment guide must be requested directly from the Unified Capabilities Certification Office (UCCO), All associated information is available on the DISA UCCO website located at 6. Point of Contact (POC). The testing point of contact is Mr. James Hatch, commercial telephone (520) , DSN telephone ; address The JITC point of contact is Mr. Matthew Quinn, commercial telephone (520) , DSN telephone , FAX DSN ; address ; mailing address Joint Interoperability Test Command, ATTN: JTE (Mr. Matthew Quinn) P.O. Box 12798, Fort Huachuca, AZ The UCCO tracking number for the SUT is FOR THE COMMANDER: Enclosure a/s for RIC HARRISON Chief Networks/Communications and UC Portfolio 5

6 Distribution (electronic mail): DoD CIO Joint Staff J-6, JCS USD(AT&L) ISG Secretariat, DISA, JTA U.S. Strategic Command, J665 US Navy, OPNAV N2/N6FP12 US Army, DA-OSA, CIO/G-6 ASA(ALT), SAIS-IOQ US Air Force, A3CNN/A6CNN US Marine Corps, MARCORSYSCOM, SIAT, A&CE Division US Coast Guard, CG-64 DISA/TEMC DIA, Office of the Acquisition Executive NSG Interoperability Assessment Team DOT&E, Netcentric Systems and Naval Warfare Medical Health Systems, JMIS IV&V HQUSAISEC, ELIE-ISE-ME UCCO 6

7 ADDITIONAL REFERENCES (c) Joint Interoperability Test Command, Assured Services Local Area Network (ASLAN) Test Procedures Version 1.1 for Unified Capabilities Requirements (UCR) 2013 Errata 1, November 2014 (d) Joint Interoperability Test Command, Information Assurance (IA) Assessment of Brocade FastIron-ICX6000 Series (Tracking Number ), 21 January 2015 (e) Joint Interoperability Test Command, Memo, JTE, Extension of the Special Interoperability Test Certification of the Brocade ICX6000 Series with Release 7.3.0c, 19 December 2014 Enclosure