Upload
lytram
View
238
Download
6
Embed Size (px)
Citation preview
Quidway® S5300 Series Gigabit Switches
Quidway® S5300 Series Gigabit Switches
1
Quidway® S5300 Series Gigabit Switches
Quidway S5300 series gigabit switches (hereinafter referred to as the S5300) are a new generation of Ethernet gigabit
switches developed by Huawei to meet the requirements for high-bandwidth access and Ethernet multi-service
convergence. The S5300 can provide powerful Ethernet functions. Based on a new generation of high-performance
hardware and Huawei uniform Versatile Routing Platform (VRP) software, the S5300 features large capacity and
gigabit interfaces of high density, provides 10G uplinks, and meets customers' requirements for the 1G and 10 G
uplink devices of high density. The S5300 can meet the requirements of multiple scenarios such as service convergence
in campus networks and enterprise networks, the access from the gigabit to the IDC, and the access from the gigabit
to the desktop on the enterprise network.
The S5300 is a case-shaped device with a chassis of 1 U high. The S5300 has a standard version (SI) and an enhanced
version (EI). The S5300 of the SI version supports Layer 2 and Layer 3 functions, and the S5300 of the EI version
supports complicated routing protocols and rich service features. The models of the S5300 are as follows:
Product Overview
S5324TP-SI/PWR-SI
S5328C-SI/EI
S5328C-PWR-SI/PWR-EI
S5328C-EI-24S
S5348TP-SI/PWR-SI
S5352C-SI/EI
S5352C-PWR-SI/PWR-EI
2
www.huawei.com
S5324TP-SI: provides twenty-four 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces, and
supports DC or AC power supply.
S5324TP-PWR-SI: provides twenty-four 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces,
and supports AC power supply and POE.
S5348TP-SI: provides forty-eight 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces, and
support DC or AC power supply.
S5348TP-PWR-SI: provides forty-eight 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces,
and supports AC power supply and POE.
S5328C-SI: provides twenty-four 10/100/1000Base-T interfaces, four 1000Base-X Combo interfaces, and two 10GE
XFPs or four 1000Base-X SFPs. The S5328C-SI is installed with double hot-swappable power modules.
S5328C-PWR-SI: provides twenty-four 10/100/1000Base-T interfaces, four 1000Base-X Combo interfaces, and
two 10GE XFPs or four 1000Base-X SFPs. The S5328C-PWR-ST is installed with double hot-swappable power modules,
and supports AC power supply and POE.
S5352C-SI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The
S5352C-SI is installed with double hot-swappable power modules.
S5352C-PWR-SI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X
SFPs. The S5352C-PWR-SI is installed with double hot-swappable power modules, and supports AC power supply and
POE.
Appearance of the S5300
S5352C-SI/PWR-SI
S5324TP-SI
S5324TP-PWR-SI
S5348TP-SI/PWR-SI
S5328C-SI/PWR-SI
3
Quidway® S5300 Series Gigabit Switches
S5328C-EI: provides twenty-four 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The
S5328C-EI is installed with double hot-swappable power modules.
S5328C-PWR-EI: provides twenty-four 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X
SFPs. The S5328C-PWR-EI is installed with double hot-swappable power modules, uses the AC power supply, and
supports POE.
S5328C-EI-24S: provides twenty-four 100/1000Base-X SFP interfaces, four 10/100/1000Base-T Combo
interfaces, and two 10GE XFPs or four 1000Base-X SFPs. The S5328C-EI-24S is installed with double hot-swappable
power modules.
S5352C-EI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The
S5352C-EI is installed with double hot-swappable power modules.
S5352C-PWR-EI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X
SFPs. The S5352C-PWR-EI is installed with double hot-swappable power modules, and supports AC power supply and
POE.
S5328C-EI-24S
S5328C-EI/PWR-EI
S5352C-EI/PWR-EI
4
www.huawei.com
Features of the S5300
Powerful service supportThe S5300 supports the enhanced selective QinQ function. The start of this function does not consume ACL resources. The S5300 can map the CoS value in an inner VLAN tag to an outer VLAN tag or modify the CoS value in an outer VLAN tag. In addition, the S5300 can flexibly mark the QoS classes based on services to meet the requirement for multi-service bearing.
The S5300 supports IGMP snooping, IGMPv3 snooping, IGMP filter, IGMP fast leave, and IGMP proxy. The S5300 supports replication of multicast packets across VLANs at line speed, multicast load balancing among aggregated interfaces, and controllable multicast. Therefore, the S5300 can meet the requirements for IPTV services and other multicast services.
The S5300 supports MCE. It can isolate users of different VPNs, thus ensuring the security of user data and reducing the investment costs of users.
High reliabilityBesides traditional STP, RSTP, and MSTP, the S5300 supports enhanced Ethernet technologies such as Smart Link and RRPP, implements millisecond-level protection switchover for links, and ensures the network quality. In addition, the S5300 provides multi-instance for Smart Link and RRPP and implements load balancing among links, further improving bandwidth utilization.
The S5300 supports BFD and provides millisecond-level detection for protocols such as OSPF, IS-IS, VRRP, and PIM, which improves high reliability of networks.
The S5300 supports dual power supplies for backup, and the AC power and DC power can be input at the same time. Users can select the operation mode of the power supply module, that is, single power supply or dual power supplies, which improves the reliability of devices.
The S5300 supports VRRP, and can set up VRRP backup groups with other Layer 3 switches. The S5300 can set up the backup topology structure in the case of a fault and keeps the continuity and reliability of communications, which effectively ensures the stability of networks. Multiple equal-cost routes can be configured on the S5300 to implement the route redundancy. When the active uplink route is faulty, traffic is automatically switched to a standby route. Thus, multi-level backup is implemented for the uplink routes.
Perfect QoS policies and security mechanismTThe S5300 can implement complex traffic classification based on the information such as the quintuple information, IP preference, ToS, DSCP, IP protocol type, ICMP type, TCP source interface, VLAN ID, the protocol type of an Ethernet frame, and CoS. The S5300 supports the flow-based two rate and three color CAR. Each interface supports eight priority queues and multiple queue scheduling algorithms such as WRR, DRR, SP, WRR+SP, and DRR+SP, which effectively ensures the quality of network services such as voice, video and data services.The S5300 series switches provide multiple security measures to protect user security.The S5300 listens to information about the MAC or IP address of an access user, lease, VLAN ID, and interface by establishing and maintaining a DHCP snooping binding table. In this manner, the problem of locating the IP address and interface of a DHCP user is solved. The S5300 directly discards illegal packets such as ARP spoofing packets and packets with tampered IP addresses that do not match binding entries. In this manner, the S5300 prevents common middleman attacks on campus networks initiated by hackers or attackers by using ARP packets. The trusted interface feature of DHCP snooping is used to ensure the validity of the DHCP server.The S5300 supports strict learning of ARP entries to prevent ARP entries of the S5300 being fully occupied caused by ARP spoofing attacks. In this manner, normal users can access the Internet. The S5300 supports IP source check and
5
Quidway® S5300 Series Gigabit Switches
prevents DoS attacks caused by bogus illegal addresses for MAC address spoofing and IP address spoofing.The S5300 supports centralized MAC address authentication, 802.1X authentication, and NAC functions; supports dynamic or static binding of user identity elements including the user account, IP address, MAC address, VLAN ID, interface number, and client for antivirus protection; implements dynamic delivery of user policies including VLAN, QoS, and ACL policies.The S5300 supports the source MAC address learning limit based on an interface. In this manner, source MAC address spoofing of users on MAC address entries of the S5300 is prevented and the flooding caused by normal users failing to learn MAC addresses in the MAC address table is prevented.
Easy deployment and no maintenanceThe S5300 is easy to apply and deploy. The S5300 supports automatic configuration, plug-and-play, automatic upgrade, batch upgrade, and remote upgrade, which greatly reduces maintenance costs. The S5300 supports diversified management and maintenance modes such as SNMPv1/v2/v3, CLI, Web network management, and HGMP, which makes device management more flexible. In addition, the S5300 supports NTP, SSHv2.0, TACACS+, RMON, multi-log host, interface-based traffic statistics, and NQA, which helps to better plan and adjust networks.
Rich IPv6 featuresThe S5300 supports the IPv6/IPv6 dual stack, IPv6 over IPv4 tunnels (including manual tunnels, 6to4 tunnels, and ISATAP tunnels), and Layer 3 line-speed forwarding. Therefore, the S5300 can be deployed in IPv4 networks, IPv6 networks, and networks that run IPv4 and IPv6 simultaneously. This makes the networking flexible and meets the requirements for the network transit from IPv4 to IPv6.
The S5300 supports rich IPv6 routing protocols including RIPng and OSPFv3. The S5300 supports the Neighbor Discovery Protocol (NDP) of IPv6, and manages packets exchanged between neighbors. The S5300 supports the Path MTU Discovery (PMTU) mechanism. The S5300 selects a proper MTU on the path from the source to the destination to optimize network resources and obtain maximum throughput.
POEThe S5300 PWR series switches support PoE by configuring the PoE power supply of different power levels. That is, the S5300 provides -48 V DC power supply for remotely connected Powered Devices (PDs) such as the IP phone, VLAN AP, security, and Bluetooth AP through twisted pair cables. In this manner, the S5300 provides the power supply for the remote PDs. As the Power Sourcing Equipment (PSE), the S5300 supports IEEE 802.3af and is compatible with PDs that do not comply with IEEE 802.3af. When the S5300 supplies power to remote PDs, each Ethernet interface of the S5300 provides the power supply with a maximum power supply of 15.4 W for the devices connected to the interfaces. With the PoE and voice VLAN technologies, the S5300 provides a perfect solution to the integration of data and voice.
Good expansibilityThe S5300 series switches support intelligent stacking and plug-and-play. The system starts to construct the stack virtual structure automatically after the stack cables are connected. Stack members are classified into master, slave, and standby devices. After the standby switch is configured, the period of service interruption caused by the failure of the master switch is reduced. The S5300 supports intelligent upgrade. Therefore, the software version of the switch does not need to be changed during stack expansion.The S5300 supports the stack of up to nine devices and the maximum stack bandwidth of 48 Gbit/s.
6
www.huawei.com
Product Specifications
Forwarding
performance36Mpps 36Mpps 66Mpps 66Mpps 72Mpps 72Mpps 102Mpps 102Mpps 66Mpps 66Mpps 66Mpps 102Mpps 102Mpps
Switching
capacity of
interfaces
48Gbps 48Gbps 88Gbps 88Gbps 96Gbps 96Gbps 136Gbps 136Gbps 88Gbps 88Gbps 88Gbps 136Gbps 136Gbps
Switching
capacity of
the backplane
256G
Interface description
The S5324TP-SI/PWR-SI provides twenty-four 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces
The S5348TP-SI/PWR-SI provides forty-eight 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces
The S5328C-SI/PWR-SI provides twenty-four 10/100/1000Base-T interfaces, four 1000Base-X Combo interfaces, and two 10GE XFPs or four 1000Base-X SFPs
The S5352C-SI/PWR-SI provides forty-eight 10/100/1000Base-T interfaces, and two 10GE XFPs or four 1000Base-X SFPs
The S5328C-EI/PWR-EI provides twenty-four 10/100/1000Base-T interfaces, and two 10GE XFPs or four 1000Base-X SFPs
The S5328C-EI-24S provides twenty-four 100/1000Base-X interfaces, four 10/100/1000Base-T Combo interfaces, and two 10GE XFPs or four 1000Base-X SFPs
The S5352C-EI/PWR-EI provides forty-eight 10/100/1000Base-T interfaces, and two 10GE XFPs or four 1000Base-X SFPs
MAC address table
Complies with IEE P802.17 standards
Supports up to 32K MAC address entries
Supports the automatic learning and aging of MAC addresses
Supports static, dynamic, and blackhole MAC entries
Supports the packet filtering based on source MAC addresses
VLAN
Supports up to 4K VLANs
Supports guest VLANs and voice VLANs
Supports VLANs based on MAC addresses, protocols, IP subnets and policies
Supports 1:1 and N:1 VLAN switching
Supports basic QinQ
Supports selective QinQ
Reliability
Supports the RRPP topology and RRPP multi-instance
Supports the Smart Link tree topology and Smart Link multi-instance and provides the millisecond-level protection
Support BFD for OSPF, BFD for IS-IS, BFD for VRRP, and BFD for PIM
Supports STP, RSTP, and MSTP
Supports BPDU protection, root protection, and loopback protection
IP Routing Supports static route, RIP-1, RIP-2, and ECMPSupports static route, RIP-1, RIP-2, OSPF, IS-IS, BGP, and ECMP
Item S5324TP-SI
S5324TP-PWR-SI
S5328C-SI
S5328C-PWR-SI
S5348TP-SI
S5348TP-PWR-SI
S5352C-SI
S5352C-PWR-SI
S5328C-EI
S5328C-PWR-EI
S5328C-EI-24S
S5352C-EI
S5352C-PWR-EI
S5300-SI S5300-EI
7
Quidway® S5300 Series Gigabit Switches
S5324TP-SI
S5324TP-PWR-SI
S5328C-SI
S5328C-PWR-SI
S5348TP-SI
S5348TP-PWR-SI
S5352C-SI
S5352C-PWR-SI
S5328C-EI
S5328C-PWR-EI
S5328C-EI-24S
S5352C-EI
S5352C-PWR-EI
S5300-SI S5300-EI
IPv6
Supports Neighbor Discovery (ND)
Supports PMTU
Supports IPv6 Ping, IPv6 Tracert, and IP v6 Telnet
Supports manually configured tunnels
Supports 6to4 tunnels
Supports ISATAP tunnels
Supports ACLs based on the source IPv6 address, destination IPv6 address, Layer 4 interface, or protocol type
Multicast
Supports IGMPv1/v2/v3 snooping and the fast leave mechanism
Supports multicast forwarding within a VLAN and replication of multicast packets across VLANs
Supports multicast load balancing among aggregated interfaces
Supports controllable multicast
Supports interface-based multicast traffic statistics
Supports IGMPv1/v2/v3
Supports IGMPv1/v2/v3 snooping and the fast leave mechanism
Supports multicast forwarding within a VLAN and replication of multicast packets across VLANs
Supports multicast load balancing among aggregated interfaces
Supports controllable multicast
Supports interface-based multicast traffic statistics
Supports IGMPv1/v2/v3, PIM-SM, and PIM-DM
QoS/ACL
Supports the limit on the rate of received and sent packets on interfaces
Supports packet redirection
Supports interface-based traffic policing and two rate and three color CAR
Supports eight queues on each interface
Supports WRR, DRR, SP, WRR+SP, and DRR+SP queue scheduling algorithms
Supports the re-marking of the 802.1p priority and DSCP value of packets
Supports Layer 2 and Layer 4 packet filtering, and invalid frame filtering based on the source MAC address, destination MAC address, source IP address, destination IP address, interface, protocol, and VLAN
Support queue-based rate limit and interface shaping
Item
8
www.huawei.com
Security
Supports hierarchical user management and password protection
Supports defense against DoS and ARP attacks
Supports the binding of the IP address, MAC address, and interface
Supports interface isolation and interface security
Supports blackhole MAC addresses
Supports the limit on the number of MAC addresses to be learned
Supports IEEE 802.1X authentication and the limit on the maximum number of users on an interface
Supports multiple authentication methods including AAA authentication, RADIUS authentication, and TACACS+ authentication
Supports SSH v2.0
Supports CPU protection
Management and
maintenance
Supports MFF
Supports the virtual cable test
Supports Ethernet OAM (802.3ah and 802.1ag)
Supports interface mirroring and RSPAN
Supports remote configuration and maintenance through Telnet
Supports SNMPv1/v2/v3
Supports RMON
Supports iManager network management system
Supports HGMP
Supports the system log and hierarchical alarmEnvironmental requirements
Temperature: 0°C to 50°C; relative humidity: 10% to 90% (non-condensing)
Input voltage
AC:
Rated voltage: 100 V to 240 V AC; 50/60 Hz
Maximum voltage: 90 V to 264 V AC; 50/60 Hz
DC:
Rated voltage: –48 V to –60 V DC
Maximum voltage: –36 V to –72 V DC
Dimensions (W x D x H)
442×220×43.6 442×420×43.6
Power consumption
40W
Switch: 455W
PoE: 370W
65W
Switch: 466W
PoE: 370W
84.2W
Swithch: 907W
PoE: 740W
85.2W
Switch: 917W
PoE: 740W
63W
Switch: 472W
PoE: 370W
62W 91W
Switch: 930W
PoE:740W
S5324TP-SI
S5324TP-PWR-SI
S5328C-SI
S5328C-PWR-SI
S5348TP-SI
S5348TP-PWR-SI
S5352C-SI
S5352C-PWR-SI
S5328C-EI
S5328C-PWR-EI
S5328C-EI-24S
S5352C-EI
S5352C-PWR-EI
S5300-SI S5300-EIItem
9
Quidway® S5300 Series Gigabit Switches
Order InformationOrder information of S5300 series Ethernet switches
LS-5324TP-SI-AC For the S5324TP-SI-AC, the input voltage is 220 V AC.LS-5324TP-SI-DC For the S5324TP-SI-DC, the input voltage is –48 V DC.
LS-5324TP-PWR-SI For the S5324TP-PWR-SI, that supports PoE, the input voltage is 220 V AC.
LS-5328C-SIFor the S5328C-SI that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.
LS-5328C-EIFor the S5328C-EI that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.
LS-5328C-PWR-SI For the S5328C-PWR-SI that supports PoE, the input voltage is 220 V AC.
LS-5328C-PWR-EIFor the S5328C-PWR-EI that is installed with double power modules and supports PoE, the input voltage is 220 V AC.
LS-5328C-EI-24SFor the S5328C-EI-24S that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.
LS-5348TP-SI-AC For the S5348TP-SI-AC, the input voltage is 220 V AC.LS-5348TP-SI-DC For the S5348TP-SI-DC, the input voltage is –48 V DC.
LS-5348TP-PWR-SI For the S5348TP-PWR-SI that supports PoE, the input voltage is 220 V AC.
LS-5352C-SIFor the S5352C-SI that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.
LS-5352C-EIFor the S5352C-EI that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.
LS-5352C-PWR-SI For the S5352C-PWR-SI that supports PoE, the input voltage is 220 V AC.
LS-5352C-PWR-EIFor the S5352C-PWR-EI that is installed with double power modules and supports PoE, the input voltage is 220 V AC.
For more information, visit www.huawei.com or contact the Huawei local sale office.
Model Description
10
Trademarks Notice , HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.
Other trademarks, product, service and company names mentioned are the property of their respective owners.
NO WARRANTYTHE CONTENTS OF THIS MANUAL ARE PROVIDED “AS IS”. EXCEPT AS REQUIRED BY APPLICABLE LAWS, NO WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE MADE IN RELATION TO THE ACCURACY, RELIABILITY OR CONTENTS OF THIS MANUAL.
2009
20090325