S5560X-54s-Ei Ethernet Network Switch H3c High-Performance Converged Poe Switch

Model: S5560X-54S-EI

     


 

High-performance port expansion capability

H3C S5560X-EI series switch hosts are all solidified with 4 10 Gigabit optical ports, providing the most cost-effective port combination, realizing the lowest cost interconnection solution, and meeting the user's 1:1 non-convergence network deployment requirements;
H3C S5560X-EI series switches support rich and flexible port expansion boards, including Gigabit electrical/optical expansion boards, 10 Gigabit electrical/optical expansion boards, 25G expansion boards and 40G expansion boards. The whole machine supports a maximum of 12 One 10 Gigabit port or two 40G ports, to achieve high-density, high-performance port expansion capabilities, meet the needs of large-scale network aggregation or core deployment of small and medium-sized networks, as well as the configuration requirements for optoelectronic hybrid networking.

SmartMC (Smart Management Center)

As the network scale increases, a large number of access devices are required at the network edge, which makes the management of these devices very cumbersome. The main purpose of SmartMC is to solve the problem of centralized management of a large number of scattered network devices. It is designed to solve the switch-based operation and maintenance tasks of small enterprises. SmartMC realizes unified operation, maintenance and management of the network by means of built-in equipment and graphical operation.
The four business segments of SmartMC simplify the operation, maintenance and management of small and medium-sized parks:
Smart management:
It mainly includes device role selection, FTP server configuration, global configuration and network management port configuration, etc.
Intelligent operation and maintenance:
Mainly includes group management, equipment or group upgrade backup, monitoring and equipment failure replacement, etc.
Visualize:
It mainly includes networking topology visualization and management, device list display, etc.
Smart business:
Mainly includes user management, etc.: After network access users are created and successfully activated, these users can access the SmartMC network through the one-key-armed port.
H3C S5560X-EI series switches can be used as the management device of SmartMC. You can log in to the SmartMC network through the S5560X-EI to manage the entire network in a unified manner.

VxLAN features

H3C S5560X-EI series switches support VXLAN (Virtual Extensible LAN, virtual extended local area network). VXLAN encapsulates the data packets sent by the virtual machine in UDP, and uses the IP/MAC of the physical network as the outer-header after encapsulation on the physical IP network. After reaching the destination, the tunnel endpoint decapsulates and sends the data to the target virtual machine, which solves the problem of long-distance virtual machine migration between geographically dispersed data centers and supports EVPN mode.

visualization ability

H3C S5560X-EI series switches support Telemetry technology, and can upload real-time resource information and alarm information of the switch to the operation and maintenance platform through the GRPC protocol. The operation and maintenance platform analyzes the real-time data and can realize network quality backtracking, troubleshooting, and risk warning. , architecture optimization and other functions to accurately guarantee the user experience.

Highly available M-LAG architecture

H3C S5560X-EI series switches support M-LAG (Multichassis Link Aggregation Group) cross-device link aggregation technology (formerly DRNI technology), which realizes cross-device link aggregation by virtualizing two physical devices into one device at the forwarding layer, and keeps the control layer mutually Independent, elevates to device-level reliability.
M-LAG decouples the control plane from the data plane, and each node device can be upgraded independently, ensuring zero interruption of user services.
Active-active access of devices provides device-level redundancy protection and traffic load balancing, while improving system reliability.
It is suitable for overlay and traditional underlay scenarios, and the networking is flexible.

Multi-service integration

H3C S5560X-EI series switches are based on H3C's Open Service Architecture (OAA), which not only provides the functions of traditional switches, but also integrates security module cards including FW, IPS, load balancing, Eagle Vision scanner cards, mini-iMC Cards, Netstream cards, etc., make the S5560X-EI series switches a converged multi-service bearing platform.

High-performance IPv4/IPv6 service capability

H3C S5560X-EI series switches implement a hardware-based IPv4/IPv6 dual-stack platform, support multiple tunnel technologies, rich IPv4 and IPv6 Layer 3 routing protocols, multicast technologies and policy-based routing mechanisms, providing users with complete IPv4/IPv6 solutions Program.

IRF2 (Second Generation Intelligent Resilience Architecture)

H3C S5560X-EI series switches support IRF2 (Second Generation Intelligent Resilient Architecture) technology, which is to connect multiple physical devices to each other to make it virtual as a logical device, that is, users can regard these multiple devices as one Manage and use a single device. IRF can bring the following benefits to users:
 After the simplified management IRF architecture is formed, you can connect to any port of any device to log in to a unified logical device, and manage the entire intelligent elastic system and all member devices in the system through the configuration of a single device. Physically connect to each member device to configure and manage them individually.
 The various control protocols running in the logical device formed by the simplified service IRF are also run as a single device. For example, the routing protocol will be calculated as a single device. With the application of the cross-device link aggregation technology, it can replace the original generation tree protocol, which saves the interaction of a large number of protocol packets between devices, simplifies network operation, and shortens the convergence time when the network is turbulent.
 Elastic expansion It can achieve elastic expansion according to user needs and ensure user investment. And new devices can be "hot-swapped" when they join or leave the IRF architecture, without affecting the normal operation of other devices.
 The high reliability of high reliability IRF is reflected in three aspects: link, equipment and protocol. The physical ports between member devices support the aggregation function, and the physical connection between the IRF system and the upper and lower-layer devices also supports the aggregation function, which improves the reliability of the link through multi-link backup; the IRF system consists of multiple member devices. Once the master device fails, the system will quickly and automatically elect a new master to ensure uninterrupted services through the system, thus realizing device-level 1:N backup; the IRF system will have a real-time protocol hot backup function responsible for the configuration information of the protocol. Backup to all other member devices to achieve 1:N protocol reliability.
 High Performance For high-end switches, the increase in performance and port density is limited by the hardware structure. The performance and port density of an IRF system is the sum of the performance and port numbers of all devices inside the IRF. Therefore, the IRF technology can easily expand the switching capability of the device and the density of user ports several times, thereby greatly improving the performance of the device.

IRF3.1 (vertical virtualization)

The H3C S5560X-EI switch product supports the IRF3.1 (Intelligent Resilient Framework 3.1) vertical virtualization technology. Through the 802.1BR technology, the access device is added to the main device system as a remote interface board, and the core layer device and the access layer are vertically integrated. The device is virtualized as a logical device to achieve the purpose of expanding the I/O port capability and performing centralized control and management. IRF3.1 technology can simplify management, greatly reduce network management nodes, simplify wiring and compress network layers, and finally realize data forwarding plane virtualization. IRF3.1 vertical virtualization technology can bring the following benefits to users:
 Unified management: After the I RF3.1 architecture is formed, all members in the architecture can be centrally configured and managed by connecting to the master device, instead of being physically connected to each member device for individual configuration.
 Unified security policy: The security policy of the entire network only needs to be configured on the master device, which avoids potential policy conflicts caused by configuring devices on the entire network one by one, and greatly reduces the workload of security deployment.
 Simplified network level: Supports large-scale remote interface board expansion capabilities. The traditional network structure that requires a three-layer network architecture can be simplified to a two-layer network through IRF3.1. The physical and logical levels of the network are simplified, and the wiring is more complex. Simple.
 Simplified services: Various service configurations in the IRF3.1 architecture are configured based on a single logical device, which greatly simplifies the planning considerations for VLAN, IP, and routing of the entire network.
 Convenient maintenance: The configuration and software version of all access devices are automatically assigned by the master device. When adding or leaving new devices, "hot swap" and zero configuration can be realized, which will not affect the normal operation of other devices and the failure of the entire network. Exclusions are also single point.

SDN (Software Defined Networking)

Software Defined Network (SDN) is an innovative network architecture system. Its core technology, Openflow, combines the control layer of the network with
The data forwarding layer is separated, which greatly simplifies the management and maintenance of the network, and more importantly, realizes the flexible control of network traffic, which provides a good network platform for the innovation of core networks and applications.
The S5560X-EI series switches support large-scale flow tables, and with the H3C SDN controller, it can easily realize large-scale two-layer architecture networking and provide the function of quickly adding users to the existing network; it can greatly simplify the difficulty of network management and reduce the difficulty of network management. The cost of network maintenance.

Complete security control strategy

H3C S5560X-EI series switches support the EAD (terminal access control) function, and cooperate with the background system to integrate terminal security measures such as terminal antivirus and patch repair with network security measures such as network access control and access authority control into a linked system. The security system, through the inspection, isolation, repair, management and monitoring of network access terminals, enables the entire network to change from passive defense to active defense, from single-point defense to comprehensive defense, and from decentralized management to centralized policy management, improving network security. The overall defense capability of emerging security threats such as viruses and worms.
H3C S5560X-EI series switches support centralized MAC address authentication, 802.1x authentication, support dynamic or static binding of user identification elements such as user account, IP, MAC, VLAN, and port, and implement user policies (VLAN, QoS, ACL) at the same time It supports the real-time management of online users with the iMC system of H3C Company, and timely diagnoses and disintegrates illegal network behaviors.
H3C S5560X-EI series switches provide enhanced ACL control logic, support large-capacity ingress and egress port ACLs, and support VLAN-based ACL delivery, which simplifies the user configuration process and avoids waste of ACL resources. In addition, the S5560X-EI series will also support unicast reverse path finding technology (uRPF). The route between the source addresses formulated in the , that is, to verify its authenticity, and delete the data packet if it does not exist, so that we can effectively prevent the increasingly flooded source address spoofing in the network.

MACsec hardware encryption

Macsec is a link layer security protocol that is very suitable for Ethernet Hop by Hop. It implements the following three functions:
1) Packet encryption: Through the encryption algorithm and key, the plaintext is turned into garbled ciphertext, which is difficult to decrypt even if it is eavesdropped.
2) Anti-replay attack: Prevent hackers from intercepting the packets received by the destination host and send them to the destination host again to deceive the destination host, such as identity authentication.
3) Anti-tampering: Prevent hackers from tampering with the original message content at will to achieve ulterior motives.
The implementation of macsec is divided into two modes:
1) Host-oriented mode: the first hop protection for terminal access to the network.
2) Device-oriented mode: protection of interconnected links between user devices.
H3C S5560X-EI series switch hardware supports MACsec security encryption function, combined with our inode smart client and core switches (S10500, S75E) to build a complete MACsec solution;

Multiple reliability protection

The S5560X-EI series switches have multiple reliability protections at the device level and link level.
S5560X-EI series switches support pluggable AC and DC dual power supply modules, and pluggable dual fan reliability design, and can flexibly configure AC or DC power supply modules, flexibly configure front and rear air duct ventilation or Air duct ventilation, in addition, the whole machine also supports power supply and fan fault detection and alarm, and can automatically adjust the fan speed according to temperature changes. These designs make the device more reliable.
It supports dual-boot at the hardware level, and uses two FLASH chips to store the boot software (system boot program) to achieve hardware-level boot redundancy backup to avoid the switch from being unable to start due to the failure of the FLASH chip.
In addition to device-level reliability, the product also supports a wealth of link-level reliability technologies, including LACP/STP/RSTP/MSTP/Smart Link/RRPP fast ring network protection mechanisms and other protection protocols, supports IRF2 intelligent elastic architecture, supports 1 : N redundant backup, support ring stacking, support cross-device link aggregation, greatly improve network reliability, when the network carries multiple services and large traffic, it does not affect the network convergence time, ensuring the normal development of services.

Rich QoS policies

H3C S5560X-EI series switches support L2 (Layer 2) ~ L4 (Layer 4) packet filtering functions, providing based on source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocol type, Traffic classification for VLANs. Provides a flexible queue scheduling algorithm, which can be set based on ports and queues at the same time, and supports three modes: SP (Strict Priority), WRR (Weighted Round Robin), and SP+WRR. Supports the CAR (Committed Access Rate) function with a minimum granularity of 64Kbps. Supports port mirroring in both outbound and inbound directions, which is used to monitor the packets on the specified port, and copy the data packets on the port to the monitoring port for network detection and troubleshooting. At the same time, H3C S5560X-EI series switches also support the sFlow function, which samples data packets on the network and accurately monitors network traffic on Gigabit/10 Gigabit high-speed networks for statistical analysis and control of network traffic.

iNQA Intelligent Network Quality Analysis

H3C S5560X-EI series supports iNQA (Intelligent Network Quality Analyzer, intelligent network quality analysis), iNQA is suitable for large-scale IP networks, and can quickly measure network performance detection mechanism, H3C S5560X-EI currently supports packet loss measurement, which can measure forward , reverse and bidirectional packet loss (including the number of lost packets, packet loss rate, number of lost bytes, and byte loss rate), the measurement results can be used to quickly locate the packet loss time, packet loss location, Packet loss severity.

eMDI Enhanced Media Delivery Quality

The H3C S5560X-EI series supports eMDI (Enhanced Media Delivery Index, Enhanced Media Delivery Quality Index). eMDI is a network quality monitoring and fault delimiting solution specially designed for video and audio services. Real-time monitoring and analysis of service packets carried by TCP or RTP. The network administrator can combine the monitoring and analysis results of multiple network nodes to quickly delimit the fault location.

Audio quality analysis

Multimedia audio and video services are widely used in daily life, and the content is rich and diverse, and users' requirements for multimedia service experience are increasing day by day. In the process of transmitting user traffic, traditional network devices do not distinguish between multimedia traffic and other traffic. When network congestion occurs, multimedia audio and video services may freeze, which seriously affects user experience.
The H3C S5560X-EI series supports the service quality analysis function, which can identify users' multimedia traffic based on SIP (Session Initiation Protocol, Session Initiation Protocol). Analyze this type of traffic, collect and save traffic information and session information.

Netstream visualization

NetStream is a statistical technology based on network flow information. It defines a method for the device to output statistical data of network traffic. The device collects statistics and analyzes the data forwarded through it, and reports it to the network traffic analyzer. After combined processing Stored in the database for subsequent further analysis and processing.
H3C S5560X-EI series switches support Netstream network flow information statistics technology, which can analyze and count traffic, and establish flow table to realize unidirectional/bidirectional NetStream function.

PoE capability

H3C S5560X-EI series switches can support PoE+ (802.3at)/PoE (802.3af) functions, and a single port can provide up to 30W power supply, which can remotely supply power to APs, cameras and other powered devices (PDs). In addition, H3C S5560X-EI The series also incorporates AI capabilities into PoE technology, enabling PoE switches to support:
Fast PoE: After the PoE switch is powered on, it can supply power to the powered device in seconds without waiting for the switch to start up.
Perpetual PoE: When the switch uses the command to perform a hot restart, the power supply of the powered device will not be interrupted, and the normal operation of the powered device will be maintained.

Excellent manageability

H3C S5560X-EI series switches support rich management interfaces, such as Console port, micro usb port, out-of-band network management port, support SNMPv1/v2/v3 (Simple Network Management Protocol), support general network management platforms such as Open View, and iMC intelligent management center. Support CLI command line, TELNET, make device management more convenient, and support SSH2.0 and other encryption methods, making management more secure.
H3C S5560X-EI series switches support SPAN/RSPAN mirroring and multiple mirroring observation ports, and can analyze network traffic to take corresponding management and maintenance measures, making the originally invisible network service application traffic clear at a glance, and can provide users with a variety of The network flow analysis report helps users optimize the network structure and adjust resource deployment in time.

Professional lightning protection function

H3C S5560X-EI series switches adopt professional built-in lightning protection technology and support the lightning protection capability of 10KV service ports, which can greatly reduce the damage rate of lightning strikes to equipment even in relatively harsh working environments.