S600-S24S28X

Description

Product overview
FutureMatrix S600 series switches (hereinafter referred to as “S600”) are 10-Gigabit switches designed for the enterprise network market and equipped with VRP authorized by Huawei Versatile Routing Platform (Versatile Routing Platform) software platform, providing 24 gigabit plus 28 Gigabit models; Supports rich service features, comprehensive security control policies, and rich QoS. The depth of the switch is only 220mm. With a power front design, the switch provides a high-density Gigabit / 10-Gigabit optical access port. It can be widely deployed in aggregation or core scenarios of campus networks, and small data centers to meet the interconnection requirements of 10-gigabit optical ports.

Product features and advantages

High-capacity and high-density 10-Gigabit access
With the increasing demand for service bandwidth on the client side, the application of 10GE network cards on the server side is becoming more and more widespread to provide greater bandwidth services. Data center server switches urgently need to provide higher forwarding performance and 10-gigabit port expansion capabilities. This series of switches has the industry’s leading 10 gigabit port density and switching capacity, and a single device can support up to 28 10 Gigabit ports with full line speed forwarding.

This series of switches supports flexible access to GE and 10GE ports and automatically identifies the type of optical modules to be installed, maximizing investment protection and flexibility. For the data center data traffic and non-blocking transmission requirements, the product can provide powerful caching capabilities, and support advanced caching scheduling mechanism, so as to ensure the maximum effective use of device caching capabilities.

Perfect security control strategy
This series of switches provides a variety of security protection functions. Denial of Service (DOS) attacks, network attacks, and user attacks are supported. The DOS attack defense mainly covers SYN Flood, Land, Smurf, and ICMP Flood attacks. Network attack defense mainly refers to the BPDU/Root attack of STP. The attack defense involves DHCP phishing attacks, man-in-the-middle attacks, IP/MAC Spoofing attacks, DHCP request flood attacks, and DOS attacks that change CHADDR values. The DHCP Snooping binding table can be established and maintained to discard illegal packets (such as ARP spoofing packets and unauthorized IP address changes) that do not match the binding entries, effectively preventing hackers or attackers from implementing common man-in-the-middle attacks on campus networks through ARP packets. The trusted port feature of DHCP Snooping also ensures the legitimacy of DHCP servers.

This series of switches supports strict ARP entry learning to prevent ARP spoofing attacks from overloading the switch ARP entries and preventing normal users from accessing the Internet. In addition, it supports IP Source Check to prevent DOS attacks caused by illegal address spoofing, including MAC spoofing, IP spoofing, and MAC/IP spoofing. This series of switches support the URPF function to ensure that when receiving data packets, the port will reverse search the path to verify the authenticity of the data packets, which effectively prevents the increasingly widespread source address spoofing on the network.

This series of switches support centralized MAC address authentication and 802.1x authentication, support user ID elements such as user account, IP, MAC, VLAN, port, and whether the client is installed with virus defense, and realize dynamic delivery of user policies (VLAN, QoS, and ACL).

This series of switches supports port-based restriction of source MAC address learning, which effectively prevents user source MAC address spoofing from attacking MAC address entries, causing normal users to fail to learn MAC address tables and thus flooding.

Complete reliability protection mechanism
This series of switches enhances the traditional STP/RSTP/MSTP spanning tree, supports MSTP multi-process, and greatly increases the number of access loop instances. It also supports enhanced Ethernet technologies such as Smartlink and RRPP, which can realize millisecond link protection switching and ensure high reliability of network quality. In addition, the multi-instance function is provided for both Smartlink and RRPP to realize link load balancing and further improve link bandwidth utilization.

Switches in this series support the Ethernet Trunk (E-Trunk) function. After an E-Trunk is used, a CE device can be connected to two PE devices in dual-return mode. This implements cross-device link aggregation and link load balancing, and greatly improves the reliability of devices on the access side.

Smart Ethernet Protection (SEP) is a ring network protocol dedicated to the Ethernet link layer. SEP is applicable to half-ring networking scenarios, providing millisecond fast service switching performance to ensure service continuity. SEP protocol is simple and reliable, high switching performance, easy maintenance, and flexible topology, which can greatly facilitate users to manage and plan the network.

This series of switches supports the G.8032 (Ethernet Ring Protection Switching, referred to as ERPS) ring network standard protocol, which is based on the traditional Ethernet MAC and bridge functions. Using the mature OAM function of Ethernet and a Ring network automatic protection switching (R-APS) protocol, the millisecond level fast protection switching of Ethernet ring network is realized. ERPS supports multiple services with flexible networking modes, providing customers with lower OPEX and CAPEX.

This series of switches support the VRRP virtual routing redundancy protocol, build VRRP backup groups, maintain the continuity and reliability of communication, and effectively ensure the continuity and reliability of network access. Multiple equal-cost routes can be configured on the device to implement redundant uplink backup. When the primary uplink route fails, the uplink automatically switches to the next backup route. In this way, the uplink can be backed up at multiple levels.

Rich Qos control
This series of switches supports a variety of QOS control methods, and can implement complex traffic classification based on information such as quanta, IP priority, TOS, DSCP, IP protocol type, ICMP type, TCP source port, VLAN, Ethernet frame protocol type, and CoS, and supports bidirectional ACLs.

This series of switches supports the stream-based two-speed three-color rate limiting function, eight priority queues per port, multiple queue scheduling algorithms such as WRR, DRR, SP, WRR+SP, DRR+SP, and WRED congestion avoidance mechanism, effectively ensuring different quality requirements for voice, video, and data network services.

Thoughtful manageability
The switch series adopts the “one stop” solution and supports automatic configuration, plug and play, and automatic batch remote upgrade, facilitating deployment, upgrade, service provisioning, and simplifying subsequent management and maintenance performance. Thus, maintenance costs are greatly reduced.

This series of switches supports SNMP v1/v2c/v3, CLI command line, Web network management and other diversified management and maintenance modes, making device management more flexible. support

NTP, SSHv2.0, HWTACACS, RMON, multi-log host, port-based traffic statistics, support NQA network quality analysis, facilitate further network planning and transformation.

This series of switches supports GVRP to achieve dynamic VLAN distribution, registration, and transmission of VLAN attributes, reducing manual configuration, ensuring correct VLAN configuration, and reducing network interworking problems caused by inconsistent configuration.

The switch series supports the MUX VLAN function. The MUX VLAN provides a Layer 2 traffic isolation mechanism between VLAN ports. The two-layer VLAN isolation technology allows only the upper-layer vlans to be globally visible and the lower-layer vlans to be isolated from each other. MUX vlans are typically used to prevent mutual communication between network devices connected to certain interfaces or interface groups, but allow communication with the default gateway. For example, on an enterprise Intranet, the client port can communicate with the server port, but the client port cannot communicate with each other.

This series of switches supports fast BFD link detection and provides a millisecond detection mechanism for protocols such as OSPF, VRRP, and PIM, improving network reliability. This series of switches comply with IEEE 802.3ah and 802.1ag to provide point-to-point Ethernet fault management, which can be used to detect faults on user links. The perfect Ethernet OAM function can effectively improve the Ethernet network management and maintenance ability and ensure the stable operation of the network.

Rich IPv6 features
This series of switches provides dual protocol stacks for smooth upgrade. This series of switch hardware supports both IPv4/IPv6 dual stack and IPv6 over IPv4 tunnels (including manual tunnels, 6to4 tunnels, ISATAP tunnels), and can be used on either pure IPv4 or IPv6 networks. It can also be used on the coexistence of IPv4 and IPv6 networks, and the networking mode is flexible, fully meeting the needs of the current network transition from IPv4 to IPv6.

The switches support various IPv6 routing protocols, including RIPng and OSPFv3. Supports IPv6 Neighbor Discovery Protocol (NDP) to manage the interaction between neighbor nodes. The Path MTU Discovery (PMTU) mechanism can be used to find an appropriate MTU value on the path from the source to the destination to efficiently utilize network resources and achieve greater throughput.

Smart device stacking
Supports intelligent device stacking. Multiple switches that support stacking are grouped together to logically form one switch.

Improved device-level reliability through redundant backup between multiple member devices; Link level reliability is improved through cross-device link aggregation.

Provides powerful network expansion capabilities. By adding member devices, you can easily expand the number of ports, bandwidth, and processing power of the stack system.

Simplifies configuration and management. After a stack is formed, multiple physical devices become one virtual device. Users can log in to the stack system from any member device to configure and manage all member devices in a unified manner.

Support uplink and downlink service port stacking, simple stack system, low cost

OPS
OPS (Open Programmability System) is an open programmable system based on Python language. IT administrators can program the switch operation and maintenance functions through Python scripts, quickly realize functional innovation, and realize intelligent operation and maintenance.

Product specification