Cisco Catalyst Sup720 V S2T
Posted by: Sulaiman Syed
Cisco has recently introduced the S2T. We ran a comparison from the prospective of backplane capacity between the Nexus 7000k and Catalyst 6500 previously. We would like to run another comparison between the latest S2T and SUP720-10G-3C. The Supervisor shown below has 2 X2 10G ports, 3 SFP 1G ports, and one 1G management port, not to mention the console port. Pic courtesy of Cisco.
It would be best made in a table format. so that it can be seen easily without confusing or rechecking the paragraphs. The table was made after going through the data sheets of both SUP720 and S2T.
|
Scalability |
||||
|
Name |
VS-S2T-10G |
VS-S2T-10G-XL |
VS-S720-10G-3C * |
VS-S720-10G-3CXL* |
|
IPv4 routing |
In hardware |
In hardware |
In hardware |
In hardware |
|
Up to 720 Mpps** |
Up to 720 Mpps** |
Up to 450 Mpps** |
Up to 450 Mpps** |
|
|
IPv6 routing |
In hardware |
In hardware |
In hardware |
In hardware |
|
Up to 390 Mpps** |
Up to 390 Mpps** |
Up to 225 Mpps** |
Up to 225 Mpps** |
|
|
L2 bridging |
In hardware |
In hardware |
In hardware |
In hardware |
|
Up to 720 Mpps** |
Up to 720 Mpps** |
Up to 450 Mpps** |
Up to 450 Mpps** |
|
|
MPLS |
MPLS in hardware to enable use of Layer 3 VPNs and EoMPLS tunneling. Up to 8192 VRFs with a total of up to 256K* forwarding entries per system. |
MPLS in hardware to enable use of Layer 3 VPNs and EoMPLS tunneling. Up to 8192 VRFs with a total of up to 1024K forwarding entries per system. |
MPLS in hardware to enable use of layer 3 VPNs and EoMPLS tunneling. Up to 1024 VRFs with a total of up to 256,000 routes per system. |
MPLS in hardware to enable use of layer 3 VPNs and EoMPLS tunneling. Up to 1024 VRFs with a total of up to 1,000,000 routes per system. |
|
VLAN |
4K |
4K |
4K |
4K |
|
Bridge domains |
16k |
16k |
* |
* |
|
VPLS |
In hardware (Up to 390 Mpps**) |
In hardware (Up to 390 Mpps**) |
* |
* |
|
GRE |
In hardware (Up to 390 Mpps**) |
In hardware (Up to 390 Mpps**) |
In hardware |
In hardware |
|
NAT |
Hardware assisted |
Hardware assisted |
Hardware assisted |
Hardware assisted |
|
MAC entries |
128k |
128k |
96,000 |
96,000 |
|
Routes |
256K(IPv4) |
1024K (IPv4) |
256,000 (IPv4); |
1,000,000 (IPv4); |
|
128K (IPv6) |
512K (IPv6) |
128,000 (IPv6) |
500,000 (IPv6) |
|
|
Netflow entries |
512K |
1024K |
128,000 |
256,000 |
|
Multicast routes |
128K (IPv4) |
128K (IPv4) |
* |
* |
|
128K (IPv6) |
128K (IPv6) |
* |
* |
|
|
QoS Features and Scalability |
|
|
|
|
|
Feature |
VS-S2T-10G |
VS-S2T-10G-XL |
VS-S720-10G-3C* |
VS-S720-10G-3CXL* |
|
Layer-3 classification and marking access control entries (ACEs) |
64K shared for QOS / Security |
256K shared for QOS/Security |
32 K dedicated for QoS |
32K dedicated for QoS |
|
Aggregate traffic rate-limiting policers |
16348 |
16348 |
1023 |
1023 |
|
Flow-based rate-limiting method; number of rates |
Per source address, destination address, or full flow; 64 rates |
Per source address, destination address, or full flow; 64 rates |
Per source address, destination address, or full flow; 64 rates |
Per source address, destination address, or full flow; 64 rates |
|
Layer 2 rate limiters |
20 ingress/6 egress |
20 ingress/6 egress |
* |
* |
|
MAC ACLs featuring per-port/per VLAN granularity |
Yes |
Yes |
Yes |
Yes |
|
Distributed policers |
Yes |
Yes |
* |
* |
|
Shared uFlow policers |
Yes |
Yes |
* |
* |
|
Egress uFlow policers |
Yes |
Yes |
* |
* |
|
Packet or byte policers |
Yes |
Yes |
* |
* |
|
Per port per VLAN |
Yes |
Yes |
* |
* |
|
Security Features and Scalability |
|
|
|
|
|
Feature |
VS-S2T-10G |
VS-S2T-10G-XL |
VS-S720-10G-3C* |
VS-S720-10G-3CXL* |
|
Port security |
Yes |
Yes |
Yes |
Yes |
|
IEEE 802.1x and 802.1x extensions |
Yes |
Yes |
Yes |
Yes |
|
VLAN and router ACLs and port ACLs |
Yes |
Yes |
Yes |
Yes |
|
1:1 mask ratio to ACE values |
Yes |
Yes |
* |
* |
|
Security ACL entries |
64K shared for QOS / Security |
256K shared for QOS/Security |
32K |
32 K |
|
CPU rate limiters (DoS protection) |
57 |
57 |
10 special case rate limiters plus Control Plane Policing |
10 special case rate limiters plus Control Plane Policing |
|
uRPF check (IPv4/IPv6) |
Up to 16 |
Up to 16 |
Up to 6 paths |
Up to 6 paths |
|
Number of interfaces with unique ACL |
16k |
16k |
512 |
4000 |
|
RPF interfaces |
16 |
16 |
* |
* |
|
Private VLANs |
Yes |
Yes |
Yes |
Yes |
|
MAC ACLs on IP |
Yes |
Yes |
No |
Yes |
|
Logical interfaces |
128k |
128k |
* |
* |
|
EtherChannel hash |
8 bits |
8 bits |
3 bits |
3 bits |
|
Cisco TrustSec support (including L2 encryption) |
Yes |
Yes |
No |
No |
|
CPU HW rate limiters by PPS or BPS |
Yes |
Yes |
* |
* |
|
CoPP for multicast |
L2 and L3 support |
L2 and L3 support |
* |
* |
|
CoPP for exceptions (MTU, TTL) |
Yes |
Yes |
* |
* |
|
CoPP exceptions Netflow support |
Yes |
Yes |
* |
* |
|
ACL labels |
16K |
16K |
* |
* |
|
Port ACL |
8K |
8K |
* |
* |
|
ACL dry run |
Yes |
Yes |
* |
* |
|
Hitless ACL changes |
Yes |
Yes |
* |
* |
|
MPLS and Virtualization Features |
|
|
|
|
|
Feature |
VS-S2T-10G |
VS-S2T-10G-XL |
VS-S720-10G-3C* |
VS-S720-10G-3CXL* |
|
VSS |
Yes |
Yes |
Yes |
Yes |
|
Label imposition/disposition (MPLS-PE), swapping (MPLS-P) |
Yes |
Yes |
Yes |
Yes |
|
Label Distribution Protocol (LDP) |
Yes |
Yes |
Yes |
Yes |
|
MPLS VPN |
Yes |
Yes |
Yes |
Yes |
|
VRF Lite |
Yes |
Yes |
Yes |
Yes |
|
QoS mechanisms using experimental (EXP) bits |
Yes |
Yes |
Yes |
Yes |
|
MPLS-RSVP-TE |
Yes |
Yes |
Yes |
Yes |
|
MPLS differentiated services (diffserv)-aware traffic engineering (MPLS-DS-TE) |
Yes |
Yes |
Yes |
Yes |
|
MPLS traceroute |
Yes |
Yes |
Yes, see release notes for details |
Yes, see release notes for details |
|
EoMPLS |
Yes |
Yes |
Yes |
Yes |
|
EoMPLS tunnels |
16k |
16k |
* |
* |
|
Native VPLS in HW |
Yes |
Yes |
* |
* |
|
Native L2 over multipoint GRE |
Yes |
Yes |
* |
* |
|
VRF-aware operational contexts |
Yes |
Yes |
* |
* |
|
VPN Netflow support |
Yes |
Yes |
* |
* |
|
VPN aware NAT |
Yes |
Yes |
* |
* |
|
VRF-lite scalability |
VLAN reuse per sub-interface |
VLAN reuse per sub-interface |
* |
* |
|
Per VPN interface statistics |
Yes |
Yes |
* |
* |
* The data sheet did not mention it, further research is required to find out.
** Requires DFC3
As it can be seen from the table above. That when it comes to numbers, then the S2T boost as much as 50% increase in terms of performance above the strongest SUP720, which is SUP720-10G-3CXL.





