SUCCESS STORY

High-availability hosting at CKW Conex

Place of installation

Giger Caf AG Merkur Kaffee Rosca Caff
Located in Switzerland, the new production center for Giger Caf AG, Merkur Kaffee, and Rosca Caff presents top of the line coffee processing, along with advanced networking to facilitate efficiency and intercommunication.
Company mergers demand high standards of IT infrastructure. When Rosca, Merkur and Giger, three established Swiss coffee roasters consolidated their businesses, it was immediately clear that their entire IT infrastructure had to be centralized and reorganized. To meet these requirements, a high-availability hosting solution with two high performance firewalls and ZyXEL switches (the ZyWALL 1050 and the ES-4124) was developed at CKW Conex AG.

IT service provider

ZyXEL Solution

ROSCA MERKUR GIGER

WEITERE Data Center CKW CONEX
CKW Conex AG Hirschengraben Luzern Tel. Fax www.ckwconex.ch Contact: Mr. Patrick Mchler

ES-4124

ZyWALL 1050 WAN
LAN Fall back up ES-4124 ZyWALL 1050

Initial situation

When the three Swiss coffee roasters merged, their IT environment had to be consolidated and centralized. An additional requirement was to increase security. None of the three companies had an acceptably secure server room, as the local IT solutions where housed in the production area.

Challenge

The KMU Solutions department of CKW Conex AG, a company specializing in IT and communication solutions, was tasked with coming up with an optimal plan. The biggest challenge was to achieve a high-availability environment in order to insure the three companies' business activities at any time. Another goal was to develop a fairly homogenous environment -- to use products of only a few manufacturers. This simplified know-how accumulation, allowed for interchangeability and made work more efficient due to the reduced number of counterparts.
These requirements gave CKW Conex the impulse to develop a hosting offer. A high-availability and well secured data center was established for customers and their servers. At its core are two ZyXEL ZyWALL 1050 units and a glass fiber connection with SDSL fallback. The two firewalls work in hot standby mode. If the active ZyWALL 1050 fails, the backup firewall automatically takes over. Two redundant ZyXEL Switches ES-4124 integrate the individual customers' consolidated and centralized server infrastructures.
Advantages for the customer
With outsourcing, CKW Conex AG found a perfect solution for their customers. These can concentrate on their core business while IT system operations are handled by CKW Conex. Currently, CKW Conex serves approx. 70 IT customers through outsourcing. Among these, four customers run their servers hosted by CKW Conex AG, with this trend increasing monthly. Hosting solutions open interesting revenue sources for retailers. And ZyXEL provides the necessary professional equipment. Patrick Mchler, a department manager at KMU Solutions, has been cooperating with Studerus Telecom for 7 years. For security and switches, he uses ZyXEL products. My philosophy is to use products from as few manufacturers as possible, who in turn provide a very deep coverage of products needed in this area, says Mchler. He especially values the close communication with Studerus Telecom: Direct contact with the manufacturer really adds value.

Products used

ZyXEL ZyWALL 1050
Stateful packet inspection firewall with VPN 1000 VPN tunnels VPN partner authentication with certificates (PKI) 5 Gigabit ports freely configurable 32 VLANs configurable

ZyXEL ES-4124

Managed layer-3+-Switch 24 ports 10/100-TX throughput 12.8 Gbps/9.6 million packets per second (Mpps) 64 routing domains, RIP, OSPF V2 rule based QoS, traffic shaping, access control etc.
Copyright 2007 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice.

Ultimate L3+ Platform Empowers Intelligent Network Convergence
4GbE Uplink Hardware Architecture Advanced Routing Protocol (OSPF, RIP, VRRP and DVMRP) Backup Power System (BPS) Multi-layer Aware (L2/L3/L4) ACL for Optimizing Traffic Prioritization IEEE802.1p 8 Hardware Priority Queue WFQ, WRR and SPQ Queuing Algorithms Multi-layer Aware (L2/L3/L4) ACL for Security protection Port Security and enhanced 802.1x Port Authentication MAC Freeze and Intrusion Lock VLAN Stacking (Q-in-Q) Intelligent QoS for Multi-Service Optimization
The ES-4124 comes with comprehensive features sets for QoS, like DVMRP, multi-layer aware ACL (L2/L3/L4), 8 hardware priority queues, DSCP and WFQ scheduling algorithm, etc to easily harness IP applications, like VoIP, Video streaming, video-conferencing and IP TV. In addition, the ES-4124 supports flexible bandwidth control with granularity of 64kbps that enables network operators to perform efficient bandwidth administration.

Benefits

High Performance L3+ Platform for Intelligent Network Convergence
ZyXEL ES-4124 is a 24-port premium L3+ managed switch. Besides, comprehensive L2+ features and resilient hardware design, advanced routing like RIP, OSPF, VRRP, IGMP and DVMRP are supported to fully shoulder the tough tasks in the network core. For service providers, public sectors, healthcare industry, and SMB, the ES-4124 is the ideal solution to build up a convergence network empowering high network resiliency, superior QoS and strict security protection.
Robust and High-Availability System Design
The ES-4124 supports VRRP routing protocol for failover transmissions. BPS, second DC power source, protects from internal AC power supply failure. IEEE802.3ad Link aggregation reduces network downtime by providing more packet paths and bandwidth aggregation to critical paths. The 4G uplink not only gives superb transmission bandwidth, but also allows users to set up Gigabit aggregation to secure critical path transmission. IEEE802.1w Rapid spanning tree (RSTP) allows immediate recovery from failed links by sending packets via a backup link path.
Complete, Multi-Layer Protection
Multi-layer aware ACL (Access Control List) enforces policy-based protection by utilizing parameters (MAC,
Managed L3+ Fast Ethernet Switch es-4124
VLAN, IP, Protocol, TCP/UDP, and DSCP). To fine-tune device access control levels, you can configure MAC freeze, MAC filtering and limit the number of MAC address on a port. To complement user authentication, 802.1x can further facilitate the assignment of VLAN and bandwidth. Intrusion lock can down the link once link status change. In addition, VLAN Stacking (Q-in-Q) can be applied for enterprise-class L2VPN application. All the features above allow users to implement strict layer 1 to layer 4 security policies.

Specifications

Standard Compliance
IEEE 802.3 10Base-T Ethernet IEEE 802.3u 100Base-Tx Ethernet IEEE 802.3ab 1000Base-T Ethernet IEEE 802.3z IEEE 802.3x Flow control IEEE 802.1D Spanning tree protocol IEEE 802.1w Rapid Spanning tree protocol IEEE 802.1p Class of service, priority protocols IEEE 802.1Q VLAN tagging IEEE 802.1x Port Authentication IEEE 802.3ad LACP aggregation IEEE802.1ad VLAN Stacking
IP Routing and Service Features
64 IP routing domains 4K IP address table Wire-speed IP forwarding RIP v1, v2 OSPF v2 Static Routing DVMRP IGMP v1, v2 VRRP Support DHCP Server/Relay

Link Aggregation

IEEE 802.3ad LACP link aggregation compliant Support static manually port trunking Up to 6 aggregation groups, 8 ports/per group randomly selected

Performance

12.8Gbps non-blocking switching fabric Switching Forwarding Rate 9.6Mpps (1488000pps/1000Base-T/1000Base-X, 148800pps/100Base-TX) Wire-speed performance

Resilient Network

VRRP IEEE802.1w Rapid Spanning Tree Protocol (RSTP)

MAC and Packet Buffer

16K MAC entries 32MB Packet Buffer
BPS (Backup Power System)
User Security and Authentication
MAC filtering per port secures access to each port Specific MAC forwarding per port: only specified MAC addresses can access the network (Port Security) Limited MAC number per port IP Filtering TCP/UDP Socket Filtering 802.1x port-based authentication, compensated assignment over VLAN and bandwidth for valid access IEEE 802.1Q tag-based and port-based VLAN Support GVRP, automatic VLAN member registration 256 static VLAN, up to 4K dynamic VLAN Full range 4K PVID support Port-based VLAN & VLAN isolation MAC Freeze Intrusion Lock Double VLAN tagging (Q-in-Q) BPDU transparency
Traffic Management and QoS
Rate Limiting: Rule-based/Port-based bandwidth control, 64kbps granularity Supports Dual-Rate-Three-Color (set CIR/PIR for bandwidth control) Port-based egress traffic shaping Broadcast Storm Control IEEE 802.1p with 8 priority queues per port for different traffic types WFQ (Weighted Fair Queuing)/WRR (Weighted Round Robin)/SPQ scheduling algorithm Supports DSCP Supports DSCP to 802.1p priority mapping Supports IGMP/IGMP snooping Supports MVR Congestion control on all ports

Network Administration Security
User name/password required for Web/Telnet/local console administrators Two-level security by specific SNMP read/write community Multiple login session Multiple access permission management SSH v1/v2 SSL/TLS

Hardware Specifications

Support of auto-negotiation Support of auto MDI/MDI-X Console: D-Sub 9 pin Female (DCE) Management: 1 out-of-band management RJ-45 port Ports: 24x10/100Baee-T, RJ-45 ports, 2 x1000Base-T, RJ-45 ports and 2 dualpersonality GbE ports (RJ-45 or SFP open slots)

Network Management

ZyXEL iStacking, up to 24 switches managed by single IP address Web-based management Telnet CLI SNMP v1, v2, v3* RS-232c Local console IP management: static IP or DHCP client RMON four RMON groups 1, 2, 3, 9 (history, statistics, alarms, and events) for enhanced traffic management, monitoring, and analysis Port mirroring: supports Source/Destination/ Both port mirroring

Physical Specifications

ES-4124 (28 ports) 24 x 10/100 ports + 2 x 1000Base-T ports + 2 x Dual-personality GbE ports Dimensions: 438 (W) x 270 (D) x 44.45 (H) mm Weight: 4.0 Kg

Power Requirements

Input voltage of AC: 100-240VAC, 50/60Hz Max power rating of AC: 60 Watt
Intelligent ACL (L2/L3/L4 Access List Control)
Based on MAC address Based on VLAN Based on IP address Based on Protocol type Based on TCP/UDP type Based on DSCP
Backup power supply into 12V DC
Environmental Specifications
Operating temperature: 0C ~ 45C Storage temperature: -25C ~ 70C Operating humidity: 10% ~ 90%, (non-condensing)

Safety MIB Information

RFC1213 MIB II RFC1493 Bridge MIB RFC1643 Ethernet MIB RFC1757 RMON group 1, 2, 3, 9 RFC2011 IP MIB RFC2012 TCP MIB RFC2013 UDP MIB RFC2233 ifVHCPacketGroup RFC2674 VLAN MIB RFC2925 PING-MIB and TRACEROUTE-MIB ZyXEL Private MIB UL 60950-1 CSA 60950-1 EN 60950-1 IEC 60950-1
* Firmware upgradeable for future enhancement

Operational Information

Transceiver (Optional) Model Name SFP-SX SFP-LX-10 SFP-LHX1310-40 SFP-ZX-80

Optical Receiver Sensitivity Transmission Distance vs. Fiber Cable Specification Wavelength Connector 62.5um Multi-Mode Fiber 220 m 550 m 50um Multi-Mode Fiber 550 m 550 m 9/10um Single-Mode Fiber 10 km 40 km 80 km Operational Ranges Supply Voltage Max Current
-17 dBm -20 dBm -23 dBm -24 dBm
850 nm 1310 nm 1310 nm 1550 nm

LC LC LC LC

3.15 ~ 3.45 V 3.15 ~ 3.45 V 3.15 ~ 3.45 V 3.15 ~ 3.45 V
300 mA 300 mA 300 mA 300 mA
For more produc t information, visit us on the web www.ZyXEL.com
Corporate Headquarters ZyXEL Communications Corp.
Tel: +886-3-578-3942 Fax: +886-3-578-2439 Email: sales@zyxel.com.tw http://www.zyxel.com http://www.zyxel.com.tw

ZyXEL Denmark A/S

Tel: +00 Fax: +07 Email: sales@zyxel.dk http://www.zyxel.dk

ZyXEL France SARL

Tel: +33 (0)97 Fax: +33 (0)20 Email: info@zyxel.fr http://www.zyxel.fr

ZyXEL Hungary

Tel: +36-1-336-1646 Fax: +36-1-325-9100 Email: info@zyxel.hu http://www.zyxel.hu

ZyXEL North America

Tel: +1-714-632-0882 Fax: +1-714-632-0858 Email: sales@zyxel.com http://www.us.zyxel.com

ZyXEL Poland

Tel: +48 (22) Fax: +48 (22) Email: info@pl.zyxel.com http://www.pl.zyxel.com

ZyXEL Spain

Tel: +Fax: +Email: sales@zyxel.es http://www.zyxel.es

ZyXEL UK Ltd.

Tel: +44 (0) Fax: +44 (0) Email: sales@zyxel.co.uk http://www.zyxel.co.uk

ZyXEL Czech s.r.o.

Tel: +Fax: +Email: info@zyxel.cz http://www.zyxel.cz

ZyXEL Finland Oy

Tel: +358-9-Fax: +358-9-Email: sales@zyxel.fi http://www.zyxel.fi

ZyXEL Germany GmbH.

Tel: +49 (0) 2405-Fax: +49 (0) 2405-Email: sales@zyxel.de http://www.zyxel.de

ZyXEL Kazakhstan

Tel: +7-327-2-590-699 Fax: +7-327-2-590-689 Email: sales@zyxel.kz http://www.zyxel.kz

ZyXEL Norway A/S

Tel: +80 Fax: +81 Email: sales@zyxel.no http://www.zyxel.no

ZyXEL Russia

Tel: +7 (095) 542-8920 Fax: +7 (095) 542-8925 Email: info@zyxel.ru http://www.zyxel.ru

ZyXEL Sweden A/S

Tel: +46 (0) Fax: +46 (0) Email: sales@zyxel.se http://www.zyxel.se

ZyXEL Ukraine

Tel: +31 Fax: +32 Email: sales@ua.zyxel.com http://www.ua.zyxel.com
Copyright 2006 ZyXEL Communications Corp. All rights reserved. ZyXEL, ZyXEL logo are registered trademarks of ZyXEL Communications Corp. All other brands, product names, or trademarks mentioned are the property of their respective owners. All specifications are subject to change without notice.