H3C IPv6 Series Intelligent Switch -28P -28TP Overview H3C series switches are wire speed L3 multi protocols intelligent switches. They are intelligent network management switches intended for a network environment where abundant features, high performance and dense port distribution are required. The series switches are designed to accommodate the convergence on intranets and metropolitan area networks (MANs) and to meet the requirements at the access layer. Supporting IPv4/ IPv6 double stack, they offer abundant service features and routing functionalities. The series switches include the following models: -28P, -28TP, -28F and -52P. Features -52P Comprehensive support to IPv6 Based on IPv4/IPv6 double stack and IPv6 over IPv4 tunnel(6 to 4 tunnel/isatap tunnel/ Automatic IPv4-compatible IPv6 tunnel manually configured tunnel), the H3C series switches can support various IPv6 features comprehensively, which makes them adapt well to IPv4-only, IPv6-only, and hybrid networks. This protects customer s investment in network very well, and makes customer s network can not only adapt present internet condition, but also meet future internet development requirements. The series switches support abundant IPv6 routing protocols, including RIPng, ISISv6, OSPFV3, BGP4+for IPv6, support Neighbor Discovery Protocol (NDP), manage the interactions among neighboring nodes on the same link. Support Path Maximum Transport Unit(PMTU), the mechanism can determine an appropriate MTU for a link from the source node to destination node, this helps to utilize network resources more efficiently and to gain the optimal throughput. Abundant Qos policies The series switches support powerful ACL features, they can be classified based on the information about the link layer, the network layer, and the transport layer, such as the source MAC, destination MAC, VLAN Tag, VLAN range, IP protocol, IP source address, IP destination address, UDP/TCP port number and etc. The series switches support four priority criteria: IPprecedence priority, DSCP priority, 802.1P priority, discard priority. The series switches support the queue scheduling algorithms of Strict priority(sp) and Weighted Round Robin(WRR). The series switches support diversified flow-based QoS actions, based on the ACL defined, the switches can perform the following QoS actions: traffic mirroring, traffic redirection, rate limit, traffic statistics, and priority marking. Comprehensive security -28F The series switches support EAD(Endpoint Admission Defense). It enhances the proactive defense capacity of network terminals, and restrains the spread of viruses and worms in a network. Additionally, it disables the access authorities of terminals that fail to meet the security requirements, preventing insecure terminals from endangering the entire network. The series switches support ARP detection to guard ARP spoofing launching by hackers or attackers. According the ARP detection function, the switches check the validity of the ARP packets by using the DHCP-Snooping table or the manually configured IP binding table. You can also set trusted ports. ARP packets coming from the trusted ports will not be checked, while those from other ports will be checked through the DHCP- Snooping table or the manually configured IP binding table. The series switches support 802.1x authentication to identify users who attempt to access the network. With the 802.1x client version checking function enabled on a switch, the switch checks the version and validity of the 802.1x client running on supplicant systems to prevent those that use earlier versions of 802.1x client or illegal clients from logging in. 1
The series switches support Centralized MAC address authentication, it controls accesses to a network through ports and MAC addresses. This kind of authentication requires no client software. When operating in centralized MAC address authentication mode, a switch begins to authenticate the user if it detects a new user MAC address. Furthermore, the H3C series switches can perform 802.1x authentication and MAC address-based authentication simultaneously. MAC-IP-port binding allows a device to filter packets and thus enhancing security. With MAC-IP-port binding configured, a port checks whether the source MAC and IP addresses of an inbound packet is identical to the configured MAC-to-IP binding on the port. If so, it forwards the packet, otherwise, it discards the packet. High reliability The series switches support STP/RSTP/MSTP. This feature can be greatly improved to guarantee the network stability by the redundancy back-up and error tolerance capability. The series switches support LACP, It is a simple and cheap way to expand the bandwidth of a switch port and balance the traffic among all the ports in a link aggregation. Moreover, it enhances the connection reliability. The series switches support VRRP, It is a fault-tolerant protocol that can improve the reliability of the connection between a router and an external network. VRRP ensures reliability by assigning the routers on a LAN segment to a standby group. series switches support both VRPP v2 and V3, which are based on IPv4 and IPv6 respectively. The series switches provide two power supply modules, allows for power load balancing and redundant backup. Superior manageability and maintainability The series switches support Simple Network Management Protocol (SNMP) v1/v2/v3 and RMON (Remote Monitoring) v1/2/3/9 groups of MIBs. They can be managed by general network management platform such as H3C imc network management system. The series switches support HGMP V2 cluster management, After enabling HGMP V2, the network administrator can manage several member switches through one command switch and only the command switch need a public network IP address, it can save public IP address greatly and manage the network more efficiently. The series switches support VCT (Virtual Cable Test) which is convenient for troubleshooting. Customers can start the virtual cable test (VCT) to make the system test the cable connected to the current electrical Ethernet port. The test items include: whether short or open circuit exists in the Rx/Tx direction of the cable, and what is the length of the cable in normal status or the length from the port to the fault point of the cable. The series switches support DLDP (Device Link Detection Protocol), DLDP can detect the link status of the optical fiber cable or copper twisted pair. If DLDP finds a unidirectional link, it disables the related port automatically or informs users to disable it manually depending on specific configuration, to avoid potential network problems. 2
Specifications Item -28P -28TP -52P -28F Fixed ports Extended ports Wire speed L2/L3 switching MAC address VLAN Link aggregation Port STP/RSTP/MSTP IP routing Multicast DHCP 24 10/100 BASE-TX 1 console port 4 1000M SFP extended ports 24 10/100 BASE-TX 2 10/100/1000 BASE-T 1 console port 2 1000M SFP extended ports 48 10/100 BASE-TX 1 console port 4 1000M SFP extended ports Switching capacity (28 ports/52 ports): 12.8 Gbps/17.6 Gbps Packet forwarding rate (28 ports/52 ports):9.53 Mpps/13.1 Mpps Support 16 K MAC addresses Support MAC address black hole Support MAC address learning limit Support port-based VLAN (4k VLANs) Support protocol-based VLAN Support VLAN based on IPv4 subnets Support Voice VLAN Support GVRP Support VLAN VPN(QinQ), Selective QinQ and BPDU tunnel Support VLAN translation Support LACP Support static link aggregation Aggregation of FE/GE ports: Up to 8 FE or 4 GE ports in each aggregation group Support up to 14 or 26 aggregation groups Support IEEE 802.3x flow control (full-duplex) Support port-based broadcast suppression Support STP/RSTP Support MSTP Support static route and default route Support RIP v1/v2, RIPng Support OSPF v1/v2, OSPFv3 Support IS-IS, IS-ISv6 Support BGP, BGP4+ for IPV6 Support ECMP Support routing policy Support VRRP/VRRPv3 Support IGMP snooping v1/v2/v3, MLD snooping Support IGMP v1/v2/v3 Support PIM-DM/PIM-SM/MSDP Support DHCP server Support DHCP relay Support DHCP client Support DHCP snooping Support DHCP relay option82. DHCP snooping option82 24 100BASE-FX SFP ports; 2 10/100/1000 BASE-T 1 console port 2 1000M SFP extended ports 3
Specifications (continued) Item -28P -28TP -52P -28F IPV6 MCE Security features QoS/ACL ACL ACL flow template QoS Management and maintenance Support Neighbor Discovery (ND) Support PMTU Support IPv6 ping and IPv6 tracert Support IPv6 Telnet,TFTP Support manual tunnel configuration Support 6to4 tunnel Support ISATAP(Intra-site Automatic Tunneling Protocol) tunnel Support Auto-tunnel Supports Multi-VRF (MCE) Support hierarchical management and password protection of users Support IEEE 802.1X authentication Support AAA / RADIUS /HWTACACS authentication Support centralized MAC address based authentication Support port isolation Support IP + MAC + port binding Support ARP detection Support IP source check Support EAD Support traffic classification based on source MAC address, destination MAC address, source IP address, destination IP address, Layer 4 port, protocol type, VLAN, and so on Support user-defined ACL Support the VLAN-based ACL Support the time range Support traffic classification based on source IPv6 address, destination IPv6 address, Layer 4 port, protocol type, and so on Flow-based traffic rate limit Support flow-based priority tag Flow-based packet VLAN ID change Flow-based redirection of packets to another port or IP next hop Flow-based traffic statistics Flow-based traffic mirroring Support SP/WRR/SP+WRR queue scheduling Support port mirroring and RSPAN (remote port mirroring) Support port traffic shaping Support congestion avoidance and drop policies Support the Command Line Interface (CLI),Telnet, Console port Support Simple Network Management Protocol (SNMP) v1/v2/v3 Support Remote Monitoring (RMON) 1/2/3/9 groups of MIBs Support H3C imc NMS, Web-based network management Support system log, hierarchical alarms Support HGMP v2 Support remote dialing through modem Support SSH v2 Support power supply status detection and alarms Support Debugging Information Output Support PING, Tracert, HWPing Support remote maintenance through Telnet Support VCT,DLDP 4
Specifications (continued) Item -28P -28TP -52P -28F Dimensions 43.6 440 260 mm (1.7 17.3 10.2 in.) (HxWxD) Weight Input voltage Maximum system power consumption Noise parameter MTBF Operating temperature Relative humidity (noncondensing) -52P: 3.8KG -28P: 3.6KG -28TP: 3.7KG -28F: 3.8KG The H3C series can be AC-powered or DC-powered. AC: Rated voltage range: 100 VAC to 240 VAC; 50 Hz or 60 Hz Max voltage range: 90 VAC to 264 VAC; 50 Hz or 60 Hz DC: Rated voltage range: -48 V to -60 V Max voltage range: -36 V to -72 V -52P: 45 W -28P: 35 W -28TP: 40 W -28F: 60 W -52P:47.8dBA -28P:41.7dBA -28TP:41.6dBA -28F:48.8dBA -52P: 30.3years -28P: 32.2years -28TP: 31.4years -28F: 26.9years 0 C to 45 C (32 F to 113 F) 10% to 90% Industry standards support Ethernet Protocol IEEE 802.1D (STP) IEEE 802.1p (CoS) IEEE 802.1Q (VLANs) IEEE 802.1s (MSTP) IEEE 802.1w (RSTP) IEEE 802.1Q(GVRP) IEEE 802.1X (Security) IEEE 802.3i (10BASE-T) IEEE 802.3u (Fast Ethernet) IEEE 802.3x (Flow Control) IEEE 802.3z (Gigabit Ethernet) IEEE 802.3ad (Link Aggregation) IEEE802.3p (four levels of priority) IEEE 802.3ac (VLAN Tag Frame Extension) 5
Administration Protocol RFC 1812 (IPv4) RFC 826 (ARP) RFC 959 (FTP) RFC 783 (TFTP) RFC 768 (UDP) RFC 791 (IP) RFC 792 (ICMP) RFC 793 (TCP) RFC 2622 (Routing policy) RFC 2474 (Diffserv) RFC 2131 (DHCP) RFC 1058 (RIPv1) RFC1723 (RIPv2) RFC 2328 (OSPF v2) RFC 2370 (OSPF Opaque LSA Option) RFC 1587 (OSPF NSSA option) RFC 1765 (OSPF Database Overflow) RFC 2338 (VRRP) RFC 2362 (PIM-SM) RFC 1112 (IGMPv1) RFC 2236 (IGMPv2) RFC 2865 (Radius Authentication) RFC 2866 (Radius Accounting) RFC 2869 (RADIUS Extensions) RFC 2267 (Network Ingress Filtering) RFC 1157 (SNMP) RFC 1902 (SNMPv2) RFC 854 (Telnet) RFC 896 (Congestion control in IP/TCP network) RFC 925 (Multi-LAN ARP/Proxy ARP) RFC 1122 (Requirements for Internet Hosts) RFC 1156 (TCP/IP MIB) RFC 1212 (Concise MIB definitions) RFC 1213 (MIB for Network Management of TCP/IP based internets (MIB II)) RFC 1757 (RMON (groups 1 2 3 and 9)) RFC 1901 (Community based SNMPv2) RFC 2573 (SNMPv3 Applications) RFC 2576 (Coexistence between SNMP V1, V2, V3) RFC 2597 (Assured Forwarding PHB group (partial support)) RFC 2618 (Radius Authentication Client MIB) RFC 2620 (Radius Accounting MIB) RFC 2819 (Remote Network Monitoring MIB (group 1,2,3,9)) RFC 2865 (Remote Authentication Dial In User Service) RFC 2869bis (Radius Support for Extensible Authentication Protocol (EAP)) RFC 2932IP (Multicast Routing MIB) RFC 3046 (DHCP/BootP Relay)RFC2765 (Stateless IP/ICMP Translation Algorithm) Safety and Compliance Emissions / Agency Approvals CISPR 22 Class A FCC Part 15 Class A EN 55022 Class A ICES -003 Class A VCCI Class A AS/NZS 3548 Class A EN 61000-3-2 EN 61000-3-3 Safety Agency Certifications UL 60950 3rd ed. IEC 60950: 1999, corr. Feb. 2000; all national deviations EN 60950: 2000, ZB and ZC deviations CSA 22.2 No. 950 3rd ed., 1995 AS/NZS 60950:2000, Australia Immunity Product conforms to: EN 55024: 1998 EN 61000-4-2 EN 61000-4-3 EN 61000-4-4 EN 61000-4-5 EN 61000-4-6 EN 61000-4-11 6
Networking Applications Broadband Ethernet Access for Residential Community On the broadband access network of a residential community, an H3C series switch is located in the center. It downlinks to the series switches to reach the Ethernet users and uplinks to a core L3 switch through a GE extension module to connect to the MAN backbone. MAN Backbone S7500 GE GE GE FE FE PoE PoE In Networks of Branches or Small-to Medium-Sized Enterprises For small-to medium-sized enterprises or branches of a large enterprise, the H3C series switches can serve as the backbone switches on their networks and can be connected to the headquarters or other branches through routers. Other Buildings Server WAN FE/GE FE/GE AR18 FE FE WorkGroup 1 WorkGroup 2 7
In Large Enterprise and Campus Network In a large enterprise or campus network, the H3C series switches are located at the convergence layer. They downlink to layer 2 switches, series switches for example; and uplink to a layer 3 switch through GE interfaces. These switches together provide a network-wide intranet solution that covers gigabit-tobackbone and 100 Mbps-to-desktop. Intranet Backbone L2/L3 100M/1,000M L3 GE(1,000M) GE(1,000M) Department Server FE(100M) L2 10M/100M IPv4/IPv6 Hybrid Networking Full IPv4 networking and full IPv6 networking are similar. At the early stage of IPv6 implementation, however, IPv4/IPv6 hybrid networks are common. This gives full play to the IPv4/IPv6 dualstack and IPv6 over IPv4 tunneling features provided by the H3C series switches and enables flexible networking. IPv4 Network IPv4 Backbone IPv6 Network 6to4 tunnel L3 6to4 tunnel IPv6 Server IPv4 Network IPv6 Network IPv6 Host IPv6 Host IPv4 Host IPv4 Host IPv6 Host IPv6 Host H3C Technologies Co. Limited Add: Suites 3001-6, Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong Tel: 2501 1111 Fax: 2537 1149 Service Hotline: 2907 0456 Email: marketing_hk@h3c.com Version No. HK 20111013-BR-3.0 Copyright 2011 by H3C Technologies Co., Limited All product photography in this literature is intended for reference only. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any company or person and product names may be trademarks of their respective companies. While every effort is made to ensure the information given is accurate, H3C Technologies Co., Limited does not accept liability for any errors or mistakes which may arise. Specification and other information in this document may be subject to change without notice. www.h3c.com 8