DEFENSE INFORMATION SYSTEMS AGENCY P. O. BOX 549 FORT MEADE, MARYLAND Joint Interoperability Test Command (JTE) 19 Oct 15

Transcription

1 DEFENSE INFORMATION SYSTEMS AGENCY P. O. BOX 549 FORT MEADE, MARYLAND IN REPLY REFER TO: Joint Interoperability Test Command (JTE) 19 Oct 15 MEMORANDUM FOR DISTRIBUTION SUBJECT: Extension of the Joint Interoperability Certification of the Brocade VDX 6740, Software Release Network Operating System (NOS) 5.0.1a References: (a) Department of Defense Instruction , "DoD Unified Capabilities (UC)," 9 December 2010 (b) Office of the Department of Defense Chief Information Officer, Department of Defense Unified Capabilities Requirements 2013, Errata 1, 1 July 2013 (c) through (e), see Enclosure 1 Certification Authority. References (a) and (b) establish the Joint Interoperability Test Command (JITC) as the Joint Interoperability Certification Authority for the Unified Capabilities (UC) products. Conditions of Certification. The Brocade VDX 6740, Software Release NOS 5.0.1a; hereinafter referred to as the System Under Test (SUT), meets the critical requirements of the Unified Capabilities Requirements (UCR), Reference (b), and is certified for joint use as Assured Services Local Area Network (ASLAN) Core, Distribution, and Layer 2/3 Access for data and Voice and Video over Internet Protocol (VVoIP) endpoints that do not require Power over Ethernet (PoE) with the conditions (see Table 1). Brocade VDX 6740 are certified as Core, Distribution, and Access products. Brocade VDX 6740T are certified as Access products only. This certification expires upon changes that affect interoperability, but no later than the expiration date specified in the UC Approved Products List (APL) memorandum. Desktop Review (DTR) 1 was requested to update this certification from the currently certified NOS 5.0.1a to NOS See test details in paragraph 4. Table 1. Conditions None Condition The SUT does not support tunneling as described in RFC 4087 and RFC As such, the SUT is not certified for IPv4 or IPv6 in standalone mode. The SUT is certified for IPv4/IPv6 dual stack mode only. Operational Impact UCR Waivers Conditions of Fielding (CoF) Remarks The SUT does not support PoE 802.3af-2003 or 802.at-2009 for

2 VVoIP hard phones and other PoE dependent subtending equipment. Therefore, the SUT is certified for data and VVoIP endpoints that do not require PoE. Some configurations of the VDX 6740 stack did not meet the UCR Core and Distribution requirements for blocking and are therefore certified as Access Only. (BR-VDX6740T-1G-F/R, BR-VDX6740T-24-F/R, BR-VDX6740T-48-F/R) Some configurations of the VDX 6740 stack did not meet the UCR Core and Distribution requirements for blocking. The SUT must be configured with at least 16-fiber ports of 10 GbE and 2- ports of 40 GbE for switch stack interconnections in order to be certified as Core or Distribution. (BR-VDX F/R, BR- VDX F/R, BR-VDX F/R BR-VDX ALLSW-F/R) Some configurations of the VDX 6740 stack did not meet the UCR Core and Distribution requirements for blocking. The SUT must be configured with at least 16-copper ports of 10 GbE and 2-ports of 40 GbE for switch stack interconnections in order to be certified as Core or Distribution. (BR-VDX-6740T-64-F/R BR- VDX-6740T-64-ALLSW-F/R) Per LoC, the SUT partially comply with UCR 2013 Paragraph IPv6 Network Management IP and Paragraph IPv6 Product IP , IP The SUT is certified for dual stack functionality only, not tunnel. Per LoC, the SUT partially comply with UCR 2013 Paragraph IPv6 Routing Functions IP The SUT currently supports MLD snooping but not IPv6 multicast. Per LoC and Test, the SUT partially comply with UCR 2013 Paragraph Port Interface Rates EDG The SUT does not support 100 Mbps interfaces rate. However, it does support 1/10/40 Gbps interfaces rate. Open Test Discrepancies with POA&M None, Change Requirement a minor operational impact with the condition of fielding that the SUT be certified for IPv4/IPv6 dual stack functionality only. DISA has accepted and approved the vendor s POA&M and adjudicated this discrepancy as having a minor operational impact.. The requirement to minimally support 100 Mbps interfaces is being removed from the next version of the UCR. CoF Conditions of Fielding DISA Defense Information Systems Agency GbE Gigabit Ethernet Gbps Gigabits per second IP Internet Protocol LoC Letter of Compliance MLD Multicast Listener Discovery POA&M Plan of Action and Milestones PoE Power over Ethernet RFC Request for Comments SUT System Under Test UCR Unified Capabilities Requirements v4 version 4 v6 version 6 VVoIP Voice and Video over Internet Protocol Interoperability Status. Table 2 provides the SUT interface interoperability status. Table 3 provides the Capability Requirements (CR) and Functional Requirements (FR) status. Table 4 provides a Unified Capabilities (UC) Approved Products List (APL) product summary. Table 2. ASLAN Interface Status Interface Applicability Co D A Threshold CRs/FRs ID (See note 1.) Status (Met, Partially Met, Not Met, Not Tested) Network Management Interfaces (See note 2.) IEEE 802.3i (10BaseT UTP) C C C 1 and 3. Met IEEE 802.3u (100BaseT UTP) C C C 1 and 3. Met IEEE 802.3ab (1000BaseT UTP) C C C 1 and 3. Met Remarks 2

3 Access (User) Interfaces (See note 2.) IEEE 802.3i (10BaseT UTP) C C R 1, 2, and 3. Not Tested See note 3. IEEE 802.3u (100BaseT UTP) R R R 1, 2, and 3. Not Tested See note 3. IEEE 802.3u (100BaseFX) C C R 1, 2, and 3. Not Tested See note 3. IEEE 802.3ab (1000BaseT UTP) C C R 1, 2, and 3. Met IEEE 802.3z (1000BaseX Fiber) R R R 1, 2, and 3. Met IEEE 802.3ae (10GBaseX) C C C 1, 2, and 3. Met Uplink (Trunk) Interfaces (See note 2.) IEEE 802.3u (100BaseT UTP) R R R 1, 2, 3, and 4. Not Tested See note 3. IEEE 802.3u (100BaseFX) C C R 1, 2, 3, and 4. Met See note 4. IEEE 802.3z (1000BaseX Fiber) R R R 1, 2, 3, and 4. Met IEEE 802.3ae (10GBaseX) C C C 1, 2, 3, and 4. Met IEEE 802.3ba (40GBaseX) C C C 1, 2, 3, and 4. Met IEEE 802.3ba (100GBaseX) C C C 1, 2, 3, and 4. Not Tested See note 3. NOTE(S): 1. The SUT high-level CR and FR ID numbers depicted in the Threshold CRs/FRs column are cross-referenced in Table 3. These high-level CR/FR requirements refer to a detailed list of requirements provided in Enclosure Core and Distribution products must minimally support 100Base-X (802.3u) and 1000Base-X (802.3z). Access products must minimally support one of the following standards: 802.3i (10BaseT), 802.3j (10BaseF), 802.3u (100BaseT/F), 802.3z (1000BaseF), or 802.3ab (1000BaseT). Other rates and standards may be provided as conditional interfaces. 3. The SUT does not support this interface. 4. Based on JITC analysis, this interface was not tested but is certified based on similarity to other Ethernet interfaces that demonstrated compliance to Ethernet requirements at higher data rates ab 1000BaseT Gbps Ethernet over twisted pair at 1 Gbps 802.3ae 10 Gbps Ethernet 802.3ba 40 and 100 Gigabit Ethernet Architecture 802.3i 10BaseT 10 Mbps Ethernet over twisted pair 802.3u Standard for carrier sense multiple access with collision detection at 100 Mbps 802.3z Gigabit Ethernet Standard 10BaseT 10 Mbps (Baseband Operation, Twisted Pair) Ethernet 100BaseT 100 Mbps (Baseband Operation, Twisted Pair) Ethernet 100BaseFX 100 Mbps Ethernet over Fiber 1000BaseX 1000 Mbps Ethernet over Fiber or Copper 1000BaseT 1000 Mbps (Baseband Operation, Twisted Pair) Ethernet 10000BaseX Mbps Ethernet over Fiber or Copper 10GBaseX Mbps Ethernet over Fiber or Copper 40GBaseX Mbps Ethernet over Fiber or Copper 100GBaseX Mbps Ethernet over Fiber or Copper A ASLAN C Co CRs D FRs Gbps ID IEEE Mbps R SUT UTP Access Assured Services Local Area Network Conditional Core Capability Requirements Distribution Functional Requirements Gigabits per second Identification Institute of Electrical and Electronics Engineers Megabits per second Required System Under Test Unshielded Twisted Pair 3

4 Table 3. ASLAN Capability Requirements and Functional Requirements Status CR/FR ID UCR Requirement (High-Level) (See note 1.) UCR 2013 Reference Status (Met, Partially Met, Not Met, Not Tested) 1 General LAN Switch and Router Product Requirements (R) Partially Met (See notes 2, 3, and 4.) 2 LAN Switch and Router Redundancy Requirements (O) Met 3 LAN Product Requirements Summary (R) Partially Met (See note 2.) 4 Multiprotocol Label Switching in ASLANs (O) Not Tested (See note 5.) NOTE(S): 1. The annotation of required refers to a high-level requirement category. Enclosure 3 addresses the applicability of each sub-requirement. 2. The SUT met the requirements with the conditions noted in Table 1. DISA adjudicated these exceptions as minor. 3. Security is tested by a USAISEC TIC-led Information Assurance test team and the results published in a separate report, Reference (d). 4. The VDX 6740 supports and is certified for L3 switching. The device supports BGP and OSPF routing protocols. 5. Multiprotocol Label Switching is an optional requirement, was not tested, and therefore is not certified for use. ASLAN Assured Services Local Area Network BGP Border Gateway Protocol CR Capability Requirement DISA Defense Information Systems Agency FR Functional Requirement ID Identification LAN Local Area Network O Optional OSPF Open Shortest Path First R Required SUT System Under Test TIC Technology Integration Center UCR Unified Capabilities Requirements USAISEC United States Army Information Systems Engineering Command Table 4. SUT Product Summary Product Identification Product Name Brocade VDX 6740 Software Release Network Operating System (NOS) (see Note 4) UC Product Type(s) Assured Services Local Area Network (ASLAN) Core/Distribution/Access Switch (L2/L3) Product Description The Brocade VDX 6740 delivers voice-class availability, 1/10/40 Gigabit Ethernet for switching VoIP, video, and data traffic. Product Components (See note 1.) Component Name (See note 2.) Version Remarks ASLAN Core/Distribution/Access Switch Brocade VDX F/R, BR-VDX F/R, BR-VDX F/R, BR-VDX ALLSW-F/R, BR-VDX6740T-24-F/R (see note 3.), NOS (see Note Redundant power modules BR-VDX6740T-48-F/R (see note 3.), BR-VDX6740T-64-F/R (see note 3.), BR-VDX6740T-64-ALLSW-F/R (see note 3.), BR-VDX6740T-1G-F/R (see note 3.) 4) NOTE(S): 1. The detailed component and subcomponent list is provided in Enclosure Components bolded and underlined were tested by USAISEC TIC. The other components in the family series were not tested but are also certified for joint use. JITC certifies those additional components because they utilize the same software and similar hardware and JITC analysis determined them to be functionally identical for interoperability certification purposes. 3. The USAISEC TIC did not test the 10 GbE copper switch models designated with T, but they are certified as Access devices only, based upon similarity to the 10GbE fiber switches which were tested and certified. 4. NOS updated from NOS 5.0.1a to NOS per DTR#2. ASLAN Assured Services Local Area Network JITC Joint Interoperability Test Command L2/L3 Layer 2/Layer 3 SUT System Under Test TIC UC USAISEC VoIP Technology Integration Center Unified Capabilities U.S. Army Information Systems Engineering Command Voice over Internet Protocol 4

5 Test Details. The extension of this certification is based on Desktop Review (DTR) 1. The original certification is based on interoperability testing, DISA adjudication of open test discrepancy reports (TDRs), review of the vendor s Letters of Compliance (LoC), and DISA Certifying Authority (CA) recommendation for inclusion on the UC APL. Testing was conducted at the U.S. Army Information Systems Engineering Command (USAISEC) - Mission Engineering Directorate (MED), Technology Integration Center (TIC), hereafter referred to as USAISEC TIC, at Fort Huachuca, Arizona, from 5 January 2015 through 18 February 2015 using test procedures derived from Reference (c). DISA adjudication of outstanding TDRs was completed on 17 April Review of the vendor s LoC was completed on 6 March Information Assurance (IA) testing was conducted by USAISEC TIC-led IA test teams and the results published in a separate report, Reference (d). Reference (e), Enclosure 2 documents the test results and describes the tested network and system configurations. Reference (e), Enclosure 3 provides a detailed list of the interface, capability, and functional requirements. DTR1 was requested to update the original certified Brocade NOS from NOS 5.0.1a to NOS In reviewing the vendor documentation for NOS 6.0.1, JITC analysis determined this software release included multiple enhancements to commercials features such as Virtual Forward Routing, Virtual Fabric extensions, Fiber Channel over Ethernet and included field reported defects that had been resolved with this software update. Based on this analysis, JITC determined there is minor risk in approving this DTR without further interoperability testing because the software update does not impact features and functions that were previously interoperability certified. DTR1 has no impact on the approved IA posture, so the original DISA CA approval still applies to the SUT. Therefore, JITC approves this DTR. Additional Information. JITC distributes interoperability information via the JITC Electronic Report Distribution (ERD) system, which uses Sensitive but Unclassified IP Data (formerly known as NIPRNet) . Interoperability status information is available via the JITC System Tracking Program (STP). STP is accessible by.mil/.gov users at Test reports, lessons learned, and related testing documents and references are on the JITC Joint Interoperability Tool (JIT) at Due to the sensitivity of the information, the Information Assurance Accreditation Package (IAAP) that contains the approved configuration and deployment guide must be requested directly from the Unified Capabilities Certification Office (UCCO), disa.meade.ns.list.unified-capabilitiescertification-office@mail.mil. All associated information is available on the DISA UCCO website located at 5

6 Point of Contact (POC). The testing point of contact is Mr. James Hatch, commercial telephone (520) , DSN telephone ; address The JITC point of contact is Mr. Matthew Quinn, commercial telephone (520) , DSN telephone , FAX DSN ; address mailing address Joint Interoperability Test Command, ATTN: JTE (Mr. Matthew Quinn) P.O. Box 12798, Fort Huachuca, AZ The UCCO tracking number for the SUT is FOR THE COMMANDER: Enclosure a/s for RIC HARRISON Chief Networks/Communications and UC Portfolio Distribution (electronic mail): DoD CIO Joint Staff J-6, JCS USD(AT&L) ISG Secretariat, DISA, JTA U.S. Strategic Command, J665 US Navy, OPNAV N2/N6FP12 US Army, DA-OSA, CIO/G-6 ASA(ALT), SAIS-IOQ US Air Force, A3CNN/A6CNN US Marine Corps, MARCORSYSCOM, SIAT, A&CE Division US Coast Guard, CG-64 DISA/TEMC DIA, Office of the Acquisition Executive NSG Interoperability Assessment Team DOT&E, Netcentric Systems and Naval Warfare Medical Health Systems, JMIS IV&V HQUSAISEC, ELIE-ISE-ME UCCO 6

7 ADDITIONAL REFERENCES (c) Joint Interoperability Test Command, Assured Services Local Area Network (ASLAN) Test Procedures Version 1.1 for Unified Capabilities Requirements (UCR) 2013 Errata 1, November 2014 (d) Joint Interoperability Test Command, Information Assurance (IA) Assessment of Brocade VDX 6740 (Tracking Number ), 21 January 2015 (e) Joint Interoperability Test Command, Joint Interoperability Certification of the Brocade, VDX, 2 July 2015 Enclosure