H3C S5130S-EI-G-V2 series high-performance Ethernet switch
The H3C S5130S-EI-G-V2 series switch is the latest independently controllable Ethernet switch product launched by New H3C Technology Co., Ltd. It supports multiple authentication methods and encryption technologies, and all hosts are fixed with 10G optical ports.
The H3C S5130S-EI-G-V2 series Ethernet switch currently includes the following models:
S5130S-48UN6X-EI-G-V2: 48 10/100/1G/2.5G BASE-T PoE++electrical ports, 6 1G/10G BASE-X SFP Plus ports, 2 power module slots.
S5130S-24UN8X-EI-G-V2: 24 10/100/1G/2.5G BASE-T PoE++electrical ports, 8 1G/10G BASE-X SFP Plus ports, 2 power module slots.
S5130S-48S6X-EI-G-V2: 48 100/1000Base-X SFP ports, 6 1G/10GBase-X SFP Plus ports, 2 power module slots.
S5130S-48T6X-EI-G-V2: 48 10/100/1000BASE-T electrical ports, 6 1G/10G BASE-X SFP Plus ports, 2 power module slots.
S5130S-48P6X-EI-G-V2: 48 10/100/1000BASE-T PoE+ports, 6 1G/10G BASE-X SFP Plus ports, 2 power module slots.
S5130S-28S8X-EI-G-V2: 28 1000BASE-X SFP ports (including 8 GE Combo ports), 8 1G/10G BASE-X SFP Plus ports, and 2 power module slots.
S5130S-28T8X-EI-G-V2: 28 10/100/1000BASE-T ports, 8 1G/10G BASE-X SFP Plus ports, 2 power module slots.
S5130S-28P8X-EI-G-V2: 28 10/100/1000BASE-T PoE+ports, 8 1G/10G BASE-X SFP Plus ports, 2 power module slots.
S5130S-48U6X-EI-G-V2: 48 10/100/1000BASE-T PoE++ports, 6 1G/10G BASE-X SFP Plus ports, 2 power module slots.
S5130S-28U4S8X-EI-G-V2: 28 10/100/1000BASE-T PoE++ports (including 4 SFP Combo ports), 8 1G/10G BASE-X SFP Plus ports, and 2 power module slots.
Product Features
High performance IPv4/IPv6 business capability
The H3C S5130S-EI-G-V2 series switches implement a hardware based IPv4/IPv6 dual stack platform, supporting multiple tunneling technologies, rich IPv4 and IPv6 three-layer routing protocols, multicast technology, and policy routing mechanisms, providing users with a comprehensive IPv4/IPv6 solution.
virtualization
The H3C S5130S-EI-G-V2 series switches support horizontal virtualization technology, which connects multiple physical devices to each other and virtualizes them as a logical device. In other words, users can manage and use these multiple devices as a single device. Virtualization can bring the following benefits to users:
After the simplified management virtualization architecture is formed, it can be connected to any port of any device to log in to a unified logical device. By configuring a single device, the effect of managing the entire intelligent elastic system and all member devices within the system can be achieved, without physically connecting to each member device to configure and manage them separately.
The various control protocols running in the logical devices formed by simplifying business virtualization are also uniformly operated as a single device. For example, routing protocols are uniformly calculated as a single device. With the application of cross device link aggregation technology, they can replace the original spanning tree protocol, which can save a large number of protocol packet interactions between devices, simplify network operation, and shorten convergence time during network turbulence.
Elastic expansion can be achieved according to user needs, ensuring user investment. And the newly added devices can achieve "hot plugging" when joining or leaving the virtualization architecture, without affecting the normal operation of other devices.
The high reliability of virtualization is reflected in three aspects: links, devices, and protocols. The physical ports between member devices support aggregation functionality, and the physical connections between virtualization systems and upper and lower level devices also support aggregation functionality. This improves the reliability of links through multi link backup; The virtualization system consists of multiple member devices. Once the Master device fails, the system will quickly and automatically elect a new Master to ensure uninterrupted business through the system, thus achieving device level 1: N backup; The virtualization system will have a real-time protocol hot backup function responsible for backing up the configuration information of the protocol to all other member devices, thereby achieving a 1: N protocol reliability.
For high-end switches, the improvement in performance and port density is limited by hardware architecture. The performance and port density of a virtualization system are the sum of the performance and number of ports of all devices within the virtualization. Therefore, virtualization technology can easily expand the switching capability of devices and the density of user ports by several times, thereby greatly improving the performance of devices.
Complete security control strategy
The H3C S5130S-EI-G-V2 series switch supports EAD (Terminal Access Control) function, which, when combined with the backend system, can integrate terminal security measures such as antivirus and patch repair with network access control and access permission control into a linked security system. Through the inspection, isolation, repair, management, and monitoring of network access terminals, the entire network transforms from passive defense to active defense, from single point defense to comprehensive defense, and from decentralized management to centralized policy management, enhancing the overall defense capability of the network against emerging security threats such as viruses and worms.
H3C S5130S-EI-G-V2 series switches support centralized MAC address authentication, 802.1x authentication, PORTAL authentication, and support user account authentication IP、MAC、VLAN、 Dynamic or static binding of user identification elements such as ports, while implementing dynamic issuance of user policies (VLAN, QoS, ACL); Support real-time management of online users in collaboration with H3C's iMC system, enabling timely diagnosis and dismantling of illegal online activities.
The H3C S5130S-EI-G-V2 series switch provides enhanced ACL control logic, supports high-capacity inbound and outbound port ACLs, and supports VLAN based ACL issuance, simplifying the user configuration process while avoiding wastage of ACL resources.
MACsec hardware encryption
MACsec (Media Access Control Security) defines a method for secure data communication based on IEEE 802 local area networks. MACsec can provide users with secure MAC layer data transmission and reception services, including user data encryption, data frame integrity checks, and data source authenticity verification.
MACsec is usually used in conjunction with the 802.1X authentication framework. After the successful 802.1X authentication process, it identifies the messages sent by authenticated devices and uses the MKA (MACsec Key Agreement) protocol to negotiate and generate keys to encrypt and check the integrity of authenticated user data, avoiding port processing of messages from unauthenticated devices or messages tampered with by unauthenticated devices.
Multiple reliability protection
The S5130S-EI-G-V2 series switch has multiple reliability protections at the device level and link level.
The S5130S-EI-G-V2 series switch supports redundant and reliable design of pluggable power modules. In addition, the whole machine also supports fault detection and alarm of power and fans, and can automatically adjust the fan speed according to temperature changes. These designs make the equipment more reliable.
In addition to device level reliability, this product also supports a variety of link level reliability technologies, including protection protocols such as LACP/STP/RSTP/MSTP/Smart Link/RRPP fast ring network protection mechanism, intelligent elastic architecture, 1: N redundant backup, ring stacking, and cross device link aggregation, greatly improving network reliability. When carrying multiple services and large traffic on the network, it does not affect the convergence time of the network, ensuring the normal development of services
Professional lightning protection function
The S5130S-EI-G-V2 series adopts professional built-in lightning protection technology and supports 10KV lightning protection capability, which can greatly reduce the damage rate of lightning strikes to equipment even in harsh working environments.
Rich QoS strategies
The H3C S5130S-EI-G-V2 series switch supports L2 (Layer 2) to L4 (Layer 4) packet filtering function, providing flow classification based on source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocol type, and VLAN. Provide flexible column scheduling algorithms that can be set based on both ports and queues simultaneously. Support CAR (Committed Access Rate) function. Support port mirroring in both outbound and inbound directions, used to monitor messages on specified ports, copy data packets on ports to monitoring ports for network detection and troubleshooting.
PoE capability
The H3C S5130S-EI-G-V2 series switch supports PoE+(802.3bt)/PoE+(802.3at)/PoE (802.3af) functions, with a maximum power supply of 100W per port, and can provide remote power supply for powered devices (PD) such as APs and cameras.
Network slicing
The H3C S5130S-EI-G-V2 series switches can support network slicing technology, enabling the splitting of multiple independent virtual networks on a physical network, allocating resources as needed for different services, and providing differentiated queue scheduling capabilities to meet the different needs of various services without affecting existing networks. In networks deployed with network slicing functionality, network slicing channels are identified and associated with network slicing instances through network slicing instance IDs. Multiple network slicing channels can be created on each interface, and independent scheduling queues can be assigned to each network slicing channel. The scheduling queues of different network slicing channels do not affect each other.
Excellent management skills
The H3C S5130S-EI-G-V2 series switches support a variety of management interfaces, such as Console ports, external network ports, ID indicator lights, support for SNMP v1/v2/v3 (Simple Network Management Protocol), and iMC intelligent management center. Support CLI command line, web network management, TELNET， Support reset button and clear configuration button, making device management more convenient, and support encryption methods such as SSH 2.0, making management more secure.
The H3C S5130S-EI-G-V2 series switch can analyze network traffic to take corresponding management and maintenance measures, making previously invisible network business application traffic clear at a glance. It can provide users with various network flow analysis reports to help optimize network structure and adjust resource deployment in a timely manner.
The H3C S5130S-EI-G-V2 series switch supports 2G of memory, allowing for storage of more address table capacity and access control lists, ensuring stable and efficient operation under different application loads and network conditions.
The H3C S5130S-EI-G-V2 series switch supports automatic scanning and identification of access terminal devices, including MAC address, manufacturer, type, IP, and operating system information of the online terminal, and supports access terminal visualization. Built in network management software, supporting one click device replacement, batch configuration distribution, resource monitoring, and vertical virtualization unified management.