The Journey of a Network Engineer

Jul 20 2011   7:13AM GMT

Cisco Catalyst Sup720 V S2T

Sulaiman Syed Profile: Sulaiman Syed

Cisco has recently introduced the S2T. We ran a comparison from the prospective of backplane capacity between the Nexus 7000k and Catalyst 6500 previously. We would like to run another comparison between the latest S2T and SUP720-10G-3C. The Supervisor shown below has 2 X2 10G ports, 3 SFP 1G ports, and one 1G management port, not to mention the console port. Pic courtesy of Cisco.

Photobucket

It would be best made in a table format. so that it can be seen easily without confusing or rechecking the paragraphs. The table was made after going through the data sheets of both SUP720 and S2T.

Scalability

Name

VS-S2T-10G

VS-S2T-10G-XL

VS-S720-10G-3C *

VS-S720-10G-3CXL*

IPv4 routing

In hardware

In hardware

In hardware

In hardware

Up to 720 Mpps**

Up to 720 Mpps**

Up to 450 Mpps**

Up to 450 Mpps**

IPv6 routing

In hardware

In hardware

In hardware

In hardware

Up to 390 Mpps**

Up to 390 Mpps**

Up to 225 Mpps**

Up to 225 Mpps**

L2 bridging

In hardware

In hardware

In hardware

In hardware

Up to 720 Mpps**

Up to 720 Mpps**

Up to 450 Mpps**

Up to 450 Mpps**

MPLS

MPLS in hardware to enable use of Layer 3 VPNs and EoMPLS tunneling. Up to 8192 VRFs with a total of up to 256K* forwarding entries per system.

MPLS in hardware to enable use of Layer 3 VPNs and EoMPLS tunneling. Up to 8192 VRFs with a total of up to 1024K forwarding entries per system.

MPLS in hardware to enable use of layer 3 VPNs and EoMPLS tunneling. Up to 1024 VRFs with a total of up to 256,000 routes per system.

MPLS in hardware to enable use of layer 3 VPNs and EoMPLS tunneling. Up to 1024 VRFs with a total of up to 1,000,000 routes per system.

VLAN

4K

4K

4K

4K

Bridge domains

16k

16k

*

*

VPLS

In hardware (Up to 390 Mpps**)

In hardware (Up to 390 Mpps**)

*

*

GRE

In hardware (Up to 390 Mpps**)

In hardware (Up to 390 Mpps**)

In hardware

In hardware

NAT

Hardware assisted

Hardware assisted

Hardware assisted

Hardware assisted

MAC entries

128k

128k

96,000

96,000

Routes

256K(IPv4)

1024K (IPv4)

256,000 (IPv4);

1,000,000 (IPv4);

128K (IPv6)

512K (IPv6)

128,000 (IPv6)

500,000 (IPv6)

Netflow entries

512K

1024K

128,000

256,000

Multicast routes

128K (IPv4)

128K (IPv4)

*

*

128K (IPv6)

128K (IPv6)

*

*

QoS Features and Scalability

Feature

VS-S2T-10G

VS-S2T-10G-XL

VS-S720-10G-3C*

VS-S720-10G-3CXL*

Layer-3 classification and marking access control entries (ACEs)

64K shared for QOS / Security

256K shared for QOS/Security

32 K dedicated for QoS

32K dedicated for QoS

Aggregate traffic rate-limiting policers

16348

16348

1023

1023

Flow-based rate-limiting method; number of rates

Per source address, destination address, or full flow; 64 rates

Per source address, destination address, or full flow; 64 rates

Per source address, destination address, or full flow; 64 rates

Per source address, destination address, or full flow; 64 rates

Layer 2 rate limiters

20 ingress/6 egress

20 ingress/6 egress

*

*

MAC ACLs featuring per-port/per VLAN granularity

Yes

Yes

Yes

Yes

Distributed policers

Yes

Yes

*

*

Shared uFlow policers

Yes

Yes

*

*

Egress uFlow policers

Yes

Yes

*

*

Packet or byte policers

Yes

Yes

*

*

Per port per VLAN

Yes

Yes

*

*

Security Features and Scalability

Feature

VS-S2T-10G

VS-S2T-10G-XL

VS-S720-10G-3C*

VS-S720-10G-3CXL*

Port security

Yes

Yes

Yes

Yes

IEEE 802.1x and 802.1x extensions

Yes

Yes

Yes

Yes

VLAN and router ACLs and port ACLs

Yes

Yes

Yes

Yes

1:1 mask ratio to ACE values

Yes

Yes

*

*

Security ACL entries

64K shared for QOS / Security

256K shared for QOS/Security

32K

32 K

CPU rate limiters (DoS protection)

57

57

10 special case rate limiters plus Control Plane Policing

10 special case rate limiters plus Control Plane Policing

uRPF check (IPv4/IPv6)

Up to 16

Up to 16

Up to 6 paths

Up to 6 paths

Number of interfaces with unique ACL

16k

16k

512

4000

RPF interfaces

16

16

*

*

Private VLANs

Yes

Yes

Yes

Yes

MAC ACLs on IP

Yes

Yes

No

Yes

Logical interfaces

128k

128k

*

*

EtherChannel hash

8 bits

8 bits

3 bits

3 bits

Cisco TrustSec support (including L2 encryption)

Yes

Yes

No

No

CPU HW rate limiters by PPS or BPS

Yes

Yes

*

*

CoPP for multicast

L2 and L3 support

L2 and L3 support

*

*

CoPP for exceptions (MTU, TTL)

Yes

Yes

*

*

CoPP exceptions Netflow support

Yes

Yes

*

*

ACL labels

16K

16K

*

*

Port ACL

8K

8K

*

*

ACL dry run

Yes

Yes

*

*

Hitless ACL changes

Yes

Yes

*

*

MPLS and Virtualization Features

Feature

VS-S2T-10G

VS-S2T-10G-XL

VS-S720-10G-3C*

VS-S720-10G-3CXL*

VSS

Yes

Yes

Yes

Yes

Label imposition/disposition (MPLS-PE), swapping (MPLS-P)

Yes

Yes

Yes

Yes

Label Distribution Protocol (LDP)

Yes

Yes

Yes

Yes

MPLS VPN

Yes

Yes

Yes

Yes

VRF Lite

Yes

Yes

Yes

Yes

QoS mechanisms using experimental (EXP) bits

Yes

Yes

Yes

Yes

MPLS-RSVP-TE

Yes

Yes

Yes

Yes

MPLS differentiated services (diffserv)-aware traffic engineering (MPLS-DS-TE)

Yes

Yes

Yes

Yes

MPLS traceroute

Yes

Yes

Yes, see release notes for details

Yes, see release notes for details

EoMPLS

Yes

Yes

Yes

Yes

EoMPLS tunnels

16k

16k

*

*

Native VPLS in HW

Yes

Yes

*

*

Native L2 over multipoint GRE

Yes

Yes

*

*

VRF-aware operational contexts

Yes

Yes

*

*

VPN Netflow support

Yes

Yes

*

*

VPN aware NAT

Yes

Yes

*

*

VRF-lite scalability

VLAN reuse per sub-interface

VLAN reuse per sub-interface

*

*

Per VPN interface statistics

Yes

Yes

*

*

* The data sheet did not mention it, further research is required to find out.

** Requires DFC3

As it can be seen from the table above. That when it comes to numbers, then the S2T boost as much as 50% increase in terms of performance above the strongest SUP720, which is SUP720-10G-3CXL.

 Comment on this Post

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to: