Quidway S5300 Series Gigabit Switches

Quidway S5300 Series Gigabit Switches

1 Quidway S5300 Series Gigabit Switches

Quidway S5300 Series Gigabit Switches Product Overview Quidway S5300 series gigabit switches (hereinafter referred to as the S5300) are a new generation of Ethernet gigabit switches developed by Huawei to meet the requirements for high-bandwidth access and Ethernet multi-service convergence. The S5300 can provide powerful Ethernet functions. Based on a new generation of high-performance hardware and Huawei uniform Versatile Routing Platform (VRP) software, the S5300 features large capacity and gigabit interfaces of high density, provides 10G uplinks, and meets customers' requirements for the 1G and 10 G uplink devices of high density. The S5300 can meet the requirements of multiple scenarios such as service convergence in campus networks and enterprise networks, the access from the gigabit to the IDC, and the access from the gigabit to the desktop on the enterprise network. The S5300 is a case-shaped device with a chassis of 1 U high. The S5300 has a standard version (SI) and an enhanced version (EI). The S5300 of the SI version supports Layer 2 and Layer 3 functions, and the S5300 of the EI version supports complicated routing protocols and rich service features. The models of the S5300 are as follows: S5324TP/PWR /EI /PWR-EI -EI-24S S5348TP/PWR /EI /PWR-EI 2

www.huawei.com Appearance of the S5300 S5324TP: provides twenty-four 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces, and supports DC or AC power supply. S5324TP S5324TP: provides twenty-four 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces, and supports AC power supply and POE. S5324TP S5348TP: provides forty-eight 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces, and support DC or AC power supply. S5348TP: provides forty-eight 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces, and supports AC power supply and POE. S5348TP/PWR : provides twenty-four 10/100/1000Base-T interfaces, four 1000Base-X Combo interfaces, and two 10GE XFPs or four 1000Base-X SFPs. The is installed with double hot-swappable power modules. : provides twenty-four 10/100/1000Base-T interfaces, four 1000Base-X Combo interfaces, and two 10GE XFPs or four 1000Base-X SFPs. The -PWR-ST is installed with double hot-swappable power modules, and supports AC power supply and POE. /PWR : provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The is installed with double hot-swappable power modules. : provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The is installed with double hot-swappable power modules, and supports AC power supply and POE. /PWR 3

Quidway S5300 Series Gigabit Switches -EI: provides twenty-four 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The -EI is installed with double hot-swappable power modules. -PWR-EI: provides twenty-four 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The -PWR-EI is installed with double hot-swappable power modules, uses the AC power supply, and supports POE. -EI/PWR-EI -EI-24S: provides twenty-four 100/1000Base-X SFP interfaces, four 10/100/1000Base-T Combo interfaces, and two 10GE XFPs or four 1000Base-X SFPs. The -EI-24S is installed with double hot-swappable power modules. -EI-24S -EI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The -EI is installed with double hot-swappable power modules. -PWR-EI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The -PWR-EI is installed with double hot-swappable power modules, and supports AC power supply and POE. -EI/PWR-EI 4

www.huawei.com Features of the S5300 Powerful service support The S5300 supports the enhanced selective QinQ function. The start of this function does not consume ACL resources. The S5300 can map the CoS value in an inner VLAN tag to an outer VLAN tag or modify the CoS value in an outer VLAN tag. In addition, the S5300 can flexibly mark the QoS classes based on services to meet the requirement for multi-service bearing. The S5300 supports IGMP snooping, IGMPv3 snooping, IGMP filter, IGMP fast leave, and IGMP proxy. The S5300 supports replication of multicast packets across VLANs at line speed, multicast load balancing among aggregated interfaces, and controllable multicast. Therefore, the S5300 can meet the requirements for IPTV services and other multicast services. The S5300 supports MCE. It can isolate users of different VPNs, thus ensuring the security of user data and reducing the investment costs of users. High reliability Besides traditional STP, RSTP, and MSTP, the S5300 supports enhanced Ethernet technologies such as Smart Link and RRPP, implements millisecond-level protection switchover for links, and ensures the network quality. In addition, the S5300 provides multi-instance for Smart Link and RRPP and implements load balancing among links, further improving bandwidth utilization. The S5300 supports BFD and provides millisecond-level detection for protocols such as OSPF, IS-IS, VRRP, and PIM, which improves high reliability of networks. The S5300 supports dual power supplies for backup, and the AC power and DC power can be input at the same time. Users can select the operation mode of the power supply module, that is, single power supply or dual power supplies, which improves the reliability of devices. The S5300 supports VRRP, and can set up VRRP backup groups with other Layer 3 switches. The S5300 can set up the backup topology structure in the case of a fault and keeps the continuity and reliability of communications, which effectively ensures the stability of networks. Multiple equal-cost routes can be configured on the S5300 to implement the route redundancy. When the active uplink route is faulty, traffic is automatically switched to a standby route. Thus, multi-level backup is implemented for the uplink routes. Perfect QoS policies and security mechanism TThe S5300 can implement complex traffic classification based on the information such as the quintuple information, IP preference, ToS, DSCP, IP protocol type, ICMP type, TCP source interface, VLAN ID, the protocol type of an Ethernet frame, and CoS. The S5300 supports the flow-based two rate and three color CAR. Each interface supports eight priority queues and multiple queue scheduling algorithms such as WRR, DRR, SP, WRR+SP, and DRR+SP, which effectively ensures the quality of network services such as voice, video and data services. The S5300 series switches provide multiple security measures to protect user security. The S5300 listens to information about the MAC or IP address of an access user, lease, VLAN ID, and interface by establishing and maintaining a DHCP snooping binding table. In this manner, the problem of locating the IP address and interface of a DHCP user is solved. The S5300 directly discards illegal packets such as ARP spoofing packets and packets with tampered IP addresses that do not match binding entries. In this manner, the S5300 prevents common middleman attacks on campus networks initiated by hackers or attackers by using ARP packets. The trusted interface feature of DHCP snooping is used to ensure the validity of the DHCP server. The S5300 supports strict learning of ARP entries to prevent ARP entries of the S5300 being fully occupied caused by ARP spoofing attacks. In this manner, normal users can access the Internet. The S5300 supports IP source check and 5

Quidway S5300 Series Gigabit Switches prevents DoS attacks caused by bogus illegal addresses for MAC address spoofing and IP address spoofing. The S5300 supports centralized MAC address authentication, 802.1X authentication, and NAC functions; supports dynamic or static binding of user identity elements including the user account, IP address, MAC address, VLAN ID, interface number, and client for antivirus protection; implements dynamic delivery of user policies including VLAN, QoS, and ACL policies. The S5300 supports the source MAC address learning limit based on an interface. In this manner, source MAC address spoofing of users on MAC address entries of the S5300 is prevented and the flooding caused by normal users failing to learn MAC addresses in the MAC address table is prevented. Easy deployment and no maintenance The S5300 is easy to apply and deploy. The S5300 supports automatic configuration, plug-and-play, automatic upgrade, batch upgrade, and remote upgrade, which greatly reduces maintenance costs. The S5300 supports diversified management and maintenance modes such as SNMPv1/v2/v3, CLI, Web network management, and HGMP, which makes device management more flexible. In addition, the S5300 supports NTP, SSHv2.0, TACACS+, RMON, multi-log host, interface-based traffic statistics, and NQA, which helps to better plan and adjust networks. Rich IPv6 features The S5300 supports the IPv6/IPv6 dual stack, IPv6 over IPv4 tunnels (including manual tunnels, 6to4 tunnels, and ISATAP tunnels), and Layer 3 line-speed forwarding. Therefore, the S5300 can be deployed in IPv4 networks, IPv6 networks, and networks that run IPv4 and IPv6 simultaneously. This makes the networking flexible and meets the requirements for the network transit from IPv4 to IPv6. The S5300 supports rich IPv6 routing protocols including RIPng and OSPFv3. The S5300 supports the Neighbor Discovery Protocol (NDP) of IPv6, and manages packets exchanged between neighbors. The S5300 supports the Path MTU Discovery (PMTU) mechanism. The S5300 selects a proper MTU on the path from the source to the destination to optimize network resources and obtain maximum throughput. POE The S5300 PWR series switches support PoE by configuring the PoE power supply of different power levels. That is, the S5300 provides -48 V DC power supply for remotely connected Powered Devices (PDs) such as the IP phone, VLAN AP, security, and Bluetooth AP through twisted pair cables. In this manner, the S5300 provides the power supply for the remote PDs. As the Power Sourcing Equipment (PSE), the S5300 supports IEEE 802.3af and is compatible with PDs that do not comply with IEEE 802.3af. When the S5300 supplies power to remote PDs, each Ethernet interface of the S5300 provides the power supply with a maximum power supply of 15.4 W for the devices connected to the interfaces. With the PoE and voice VLAN technologies, the S5300 provides a perfect solution to the integration of data and voice. Good expansibility The S5300 series switches support intelligent stacking and plug-and-play. The system starts to construct the stack virtual structure automatically after the stack cables are connected. Stack members are classified into master, slave, and standby devices. After the standby switch is configured, the period of service interruption caused by the failure of the master switch is reduced. The S5300 supports intelligent upgrade. Therefore, the software version of the switch does not need to be changed during stack expansion. The S5300 supports the stack of up to nine devices and the maximum stack bandwidth of 48 Gbit/s. 6

www.huawei.com Product Specifications Item Forwarding performance 36Mpps Switching capacity of interfaces Switching capacity of the backplane Interface description MAC address table VLAN Reliability IP Routing S5324TP S5324TP 36Mpps 66Mpps 66Mpps 72Mpps 72Mpps 102Mpps 102Mpps 66Mpps 66Mpps 66Mpps 102Mpps 102Mpps 48Gbps 48Gbps 88Gbps 88Gbps 96Gbps 96Gbps 136Gbps 136Gbps 88Gbps 88Gbps 88Gbps 136Gbps 136Gbps The S5324TP/PWR provides twenty-four 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces The S5348TP/PWR provides forty-eight 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces 256G The /PWR provides twenty-four 10/100/1000Base-T interfaces, four 1000Base-X Combo interfaces, and two 10GE XFPs or four 1000Base-X SFPs The /PWR provides forty-eight 10/100/1000Base-T interfaces, and two 10GE XFPs or four 1000Base-X SFPs The -EI/PWR-EI provides twenty-four 10/100/1000Base-T interfaces, and two 10GE XFPs or four 1000Base-X SFPs The -EI-24S provides twenty-four 100/1000Base-X interfaces, four 10/100/1000Base-T Combo interfaces, and two 10GE XFPs or four 1000Base-X SFPs The -EI/PWR-EI provides forty-eight 10/100/1000Base-T interfaces, and two 10GE XFPs or four 1000Base-X SFPs Complies with IEE P802.17 standards Supports up to 32K MAC address entries Supports the automatic learning and aging of MAC addresses Supports static, dynamic, and blackhole MAC entries Supports the packet filtering based on source MAC addresses Supports up to 4K VLANs Supports guest VLANs and voice VLANs Supports VLANs based on MAC addresses, protocols, IP subnets and policies Supports 1:1 and N:1 VLAN switching S5300 S5348TP S5348TP -EI -PWR-EI S5300-EI -EI-24S -EI -PWR-EI Supports basic QinQ Supports selective QinQ Supports the RRPP topology and RRPP multi-instance Supports the Smart Link tree topology and Smart Link multi-instance and provides the millisecond-level protection Support BFD for OSPF, BFD for IS-IS, BFD for VRRP, and BFD for PIM Supports STP, RSTP, and MSTP Supports BPDU protection, root protection, and loopback protection Supports static route, RIP-1, RIP-2, OSPF, IS-IS, Supports static route, RIP-1, RIP-2, and ECMP BGP, and ECMP 7

Quidway S5300 Series Gigabit Switches Item IPv6 Multicast QoS/ACL S5324TP S5324TP S5300 S5348TP S5348TP Supports multicast forwarding within a VLAN and replication of multicast packets across VLANs Supports multicast load balancing among aggregated interfaces Supports controllable multicast Supports interface-based multicast traffic statistics Supports IGMPv1/v2/v3 -EI -PWR-EI S5300-EI -EI-24S -EI -PWR-EI Supports Neighbor Discovery (ND) Supports PMTU Supports IPv6 Ping, IPv6 Tracert, and IP v6 Telnet Supports manually configured tunnels Supports 6to4 tunnels Supports ISATAP tunnels Supports ACLs based on the source IPv6 address, destination IPv6 address, Layer 4 interface, or protocol type Supports IGMPv1/v2/v3 snooping and the fast leave mechanism Supports IGMPv1/v2/v3 snooping and the fast leave mechanism Supports multicast forwarding within a VLAN and replication of multicast packets across VLANs Supports multicast load balancing among aggregated interfaces Supports controllable multicast Supports interface-based multicast traffic statistics Supports IGMPv1/v2/v3, PIM-SM, and PIM-DM Supports the limit on the rate of received and sent packets on interfaces Supports packet redirection Supports interface-based traffic policing and two rate and three color CAR Supports eight queues on each interface Supports WRR, DRR, SP, WRR+SP, and DRR+SP queue scheduling algorithms Supports the re-marking of the 802.1p priority and DSCP value of packets Supports Layer 2 and Layer 4 packet filtering, and invalid frame filtering based on the source MAC address, destination MAC address, source IP address, destination IP address, interface, protocol, and VLAN Support queue-based rate limit and interface shaping 8

www.huawei.com Item Security Management and maintenance Environmental requirements Input voltage S5300 S5324TP S5324TP S5348TP S5348TP Supports hierarchical user management and password protection Supports defense against DoS and ARP attacks Supports the binding of the IP address, MAC address, and interface Supports interface isolation and interface security Supports blackhole MAC addresses Supports the limit on the number of MAC addresses to be learned Supports IEEE 802.1X authentication and the limit on the maximum number of users on an interface Supports multiple authentication methods including AAA authentication, RADIUS authentication, and TACACS+ authentication Supports SSH v2.0 Supports CPU protection Supports MFF Supports the virtual cable test Supports Ethernet OAM (802.3ah and 802.1ag) Supports interface mirroring and RSPAN Supports remote configuration and maintenance through Telnet Supports SNMPv1/v2/v3 Supports RMON Supports imanager network management system Supports HGMP Supports the system log and hierarchical alarm Temperature: 0 C to 50 C; relative humidity: 10% to 90% (non-condensing) AC: Rated voltage: 100 V to 240 V AC; 50/60 Hz Maximum voltage: 90 V to 264 V AC; 50/60 Hz DC: Rated voltage: 48 V to 60 V DC Maximum voltage: 36 V to 72 V DC -EI -PWR-EI S5300-EI -EI-24S -EI -PWR-EI Dimensions (W x D x H) 442 220 43.6 442 420 43.6 Power consumption 40W Switch: 455W PoE: 370W 65W Switch: 466W PoE: 370W 84.2W Swithch: 907W PoE: 740W 85.2W Switch: 917W PoE: 740W 63W Switch: 472W PoE: 370W 62W 91W Switch: 930W PoE: 740W 9

Quidway S5300 Series Gigabit Switches Order Information Order information of S5300 series Ethernet switches LS-5324TP-AC LS-5324TP-DC LS-5324TP LS-5328C LS-5328C-EI LS-5328C LS-5328C-PWR-EI LS-5328C-EI-24S LS-5348TP-AC LS-5348TP-DC LS-5348TP LS-5352C LS-5352C-EI LS-5352C LS-5352C-PWR-EI For the S5324TP-AC, the input voltage is 220 V AC. For the S5324TP-DC, the input voltage is 48 V DC. For the S5324TP, that supports PoE, the input voltage is 220 V AC. For the that is installed with double power modules, the input voltage is 220 V AC or 48 V DC. For the -EI that is installed with double power modules, the input voltage is 220 V AC or 48 V DC. For the that supports PoE, the input voltage is 220 V AC. For the -PWR-EI that is installed with double power modules and supports PoE, the input voltage is 220 V AC. For the -EI-24S that is installed with double power modules, the input voltage is 220 V AC or 48 V DC. For the S5348TP-AC, the input voltage is 220 V AC. For the S5348TP-DC, the input voltage is 48 V DC. For the S5348TP that supports PoE, the input voltage is 220 V AC. For the that is installed with double power modules, the input voltage is 220 V AC or 48 V DC. For the -EI that is installed with double power modules, the input voltage is 220 V AC or 48 V DC. For the that supports PoE, the input voltage is 220 V AC. For the -PWR-EI that is installed with double power modules and supports PoE, the input voltage is 220 V AC. For more information, visit www.huawei.com or contact the Huawei local sale office. 10

2009 Trademarks Notice, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd. Other trademarks, product, service and company names mentioned are the property of their respective owners. 20090325 NO WARRANTY THE CONTENTS OF THIS MANUAL ARE PROVIDED AS IS. EXCEPT AS REQUIRED BY APPLICABLE LAWS, NO WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE MADE IN RELATION TO THE ACCURACY, RELIABILITY OR CONTENTS OF THIS MANUAL.