H3C S5570S-EI High Performance Intelligent Ethernet Switch
H3C S5570S-EI is a new generation of intelligent, network managed Gigabit Ethernet switch developed by H3C using industry professional ASIC technology. It has high performance, high port density, high security, and is easy to install. It supports IPv4/IPV6 dual stack management and forwarding, static routing protocols, RIP, OSPF, BGP, ISIS and other routing protocols, and supports rich management and security features.
The H3C S5570S-EI product is mainly positioned at the access layer and aggregation layer of enterprises and parks, meeting high-density gigabit access, fixed 10G uplink ports, supporting PoE+, and building high-performance end-to-end IP network solutions together with other H3C products.
The H3C S5570S-EI series Ethernet switch currently includes the following models:
S5570S-28S-EI: 24 10/100/1000BASE-T ports, 4 1/10GE SFP+ports;
S5570S-54S-EI: 48 10/100/1000BASE-T ports, 6 1/10GE SFP+ports;
S5570S-28S-HPWR-EI: 24 10/100/1000BASE-T PoE+ports, 4 1/10GE SFP+ports;
S5570S-54S-PWR-EI: 48 10/100/1000BASE-T PoE+ports, 6 1/10GE SFP+ports;
S5570S-36F-EI: 24 100/1000BASE-X SFP ports, 8 10/100/1000BASE-T ports, 4 1/10GE SFP+ports;
S5570S-54F-EI: 48 100/1000 BASE-X SFP ports, 6 1/10GE SFP+ports;
S5570S-30MS-UPWR-EI: 24 100/1000/2.5G BASE-T PoE++ports, 6 1/10GE SFP+ports;
S5570S-28S-HPWR-EI-A: 24 10/100/1000BASE-T PoE+ports, 4 1/10GE SFP+ports;
S5570S-54S-PWR-EI-A: 48 10/100/1000BASE-T PoE+ports, 6 1/10GE SFP+ports;
Product Features
SmartMC (Intelligent Management Center)
With the increase of network size, a large number of access devices are required at the network edge, which makes the management of these devices very cumbersome. The main purpose of SmartMC is to solve the centralized management problem of a large number of dispersed network devices. Intended to solve the operation and maintenance tasks of small businesses mainly focused on switches. SmartMC achieves unified operation, maintenance, and management of networks through built-in devices and graphical operations
SmartMC simplifies the operation, maintenance, and management of small and medium-sized industrial parks through its four major business segments:
• Intelligent management:
Mainly includes device role selection, FTP server configuration, global configuration, and network management port configuration, etc
Intelligent operation and maintenance:
Mainly includes group management, device or group upgrade backup, monitoring, and device failure replacement, etc
• Visualization:
Mainly includes network topology visualization and management, device list display, etc
Intelligent business:
Mainly including user management: After creating network access users and successfully activating them, these users can access the internal SmartMC network through a one click armed port.
The H3C S5570S-EI series switch is equipped with SmartMC, which enables vertical virtualization and unified management functions.
Visualization ability
The H3C S5570S-EI series switch supports Telemetry technology, which can upload real-time resource information and alarm information of the switch to the operation and maintenance platform through the GRPC protocol. The operation and maintenance platform analyzes the real-time data and can achieve functions such as network quality traceability, fault diagnosis, risk warning, architecture optimization, etc., accurately ensuring user experience.
High performance IPv4/IPv6 business capability
The H3C S5570S-EI series switch implements a hardware based IPv4/IPv6 dual stack platform, supporting multiple tunneling technologies, rich IPv4 and IPv6 three-layer routing protocols, multicast technology, and policy routing mechanisms, providing users with a comprehensive IPv4/IPv6 solution.
IRF2 (Second Generation Intelligent Elastic Architecture)
The H3C S5570S-EI series switches support IRF2 (Second Generation Intelligent Elastic Architecture) technology, which connects multiple physical devices to each other and virtualizes them as a logical device. In other words, users can manage and use these multiple devices as a single device. IRF can bring the following benefits to users:
After the formation of the simplified management IRF architecture, it is possible to connect to any port of any device to log in to a unified logical device. By configuring a single device, the effect of managing the entire intelligent elastic system and all member devices within the system can be achieved, without physically connecting to each member device to configure and manage them separately.
The various control protocols running in the logical devices formed by simplifying business IRF are also uniformly operated as a single device. For example, routing protocols are uniformly calculated as a single device. With the application of cross device link aggregation technology, they can replace the original spanning tree protocol, which can save a large number of protocol packet interactions between devices, simplify network operation, and shorten convergence time during network turbulence.
Elastic expansion can be achieved according to user needs, ensuring user investment. And the newly added devices can achieve "hot plugging" when joining or leaving the IRF architecture, without affecting the normal operation of other devices.
The high reliability of IRF is reflected in three aspects: links, devices, and protocols. The physical ports between member devices support aggregation function, and the physical connections between the IRF system and the upper and lower level devices also support aggregation function. This improves the reliability of the links through multi link backup; The IRF system consists of multiple member devices. In the event of a Master device failure, the system will quickly and automatically elect a new Master to ensure uninterrupted business through the system, thus achieving device level 1: N backup; The IRF system will have a real-time protocol hot backup function responsible for backing up the configuration information of the protocol to all other member devices, thereby achieving a 1: N protocol reliability.
For high-end switches, the improvement in performance and port density is limited by hardware architecture. The performance and port density of the IRF system are the sum of the performance of all devices and the number of ports within the IRF. Therefore, IRF technology can easily increase the switching capability and user port density of devices by several times, thereby significantly improving device performance.
Complete security control strategy
The H3C S5570S-EI series switch supports EAD (Terminal Access Control) function, which, when combined with the backend system, can integrate terminal security measures such as antivirus and patch repair with network access control and access permission control into a linked security system. Through the inspection, isolation, repair, management, and monitoring of network access terminals, the entire network changes from passive defense to active defense, from single point defense to comprehensive defense, and from decentralized management to centralized policy management, enhancing the overall defense capability of the network against emerging security threats such as viruses and worms.
The H3C S5570S-EI series switches support centralized MAC address authentication, 802.1x authentication, PORTAL authentication, and support user account authentication IP、MAC、VLAN、 Dynamic or static binding of user identification elements such as ports, while implementing dynamic issuance of user policies (VLAN, QoS, ACL); Support real-time management of online users in collaboration with H3C's iMC system, enabling timely diagnosis and dismantling of illegal online activities.
The H3C S5570S-EI series switch provides enhanced ACL control logic, supports high-capacity inbound and outbound port ACLs, and supports VLAN based ACL issuance, simplifying the user configuration process while avoiding wastage of ACL resources. In addition, the S5570S-EI series will also support Unicast Reverse Path Lookup (uRPF) technology. The principle is that when a data packet is received on one interface of the device, it will reverse search the path to verify whether there is a route between the receiving interface and the source address specified in the packet, that is, to verify its authenticity. If it does not exist, the data packet will be deleted, so that we can effectively prevent the increasingly rampant source address spoofing in the network.
Multiple reliability protection
The S5570S-EI series switches have multiple reliability protections at the device level and link level.
The S5570S-EI series switch supports the reliable design of pluggable AC and DC dual power modules, which can be flexibly configured with AC or DC power modules according to actual environmental needs. In addition, the whole machine also supports fault detection and alarm of power and fan, and can automatically adjust the fan speed according to temperature changes. These designs make the equipment more reliable.
In addition to device level reliability, this product also supports rich link level reliability technologies, including protection protocols such as LACP/STP/RSTP/MSTP/Smart Link/RRPP fast ring network protection mechanism, IRF2 intelligent elastic architecture, 1: N redundant backup, ring stacking, and cross device link aggregation, greatly improving network reliability. When carrying multiple services and large traffic on the network, it does not affect the convergence time of the network, ensuring the normal development of services
Support basic network protection mechanisms and various types of protection, such as ARP protection. When the ARP rate exceeds the attack threshold, isolate users who engage in attack behavior.
Rich QoS strategies
The H3C S5570S-EI series switch supports L2 (Layer 2) to L4 (Layer 4) packet filtering function, providing flow classification based on source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocol type, and VLAN. Provide flexible column scheduling algorithms that can be set based on both ports and queues, supporting SP (Strict Priority), WRR (Weighted Round Robin), and SP+WRR modes. Supports CAR (Committed Access Rate) function with a minimum granularity of 16Kbps. Support port mirroring in both outbound and inbound directions, used to monitor messages on specified ports, copy data packets on ports to monitoring ports for network detection and troubleshooting.
Excellent management skills
The H3C S5570S-EI series switch supports a variety of management interfaces, such as Console port, external network port, and supports SNMPv1/v2/v3（Simple Network Management Protocol）， It can support general network management platforms such as Open View and iMC intelligent management center. Support CLI command line, TELNET， Make device management more convenient and support encryption methods such as SSH 2.0, making management more secure.
The H3C S5570S-EI series switch supports SPAN/RSPAN mirroring and multiple mirroring observation ports, which can analyze network traffic to take corresponding management and maintenance measures, making previously invisible network business application traffic clear at a glance. It can provide users with various network flow analysis reports to help optimize network structure and adjust resource deployment in a timely manner.
Cloudnet Cloud Simplified Network
H3C S5570S-EI series switches all support Cloudnet cloud network. Yunjian Network is a new generation of public cloud network solution created by H3C for the digital transformation of small and medium-sized enterprises. Based on the powerful capabilities of H3C U-Center unified operation and maintenance cloud, it provides minimalist network deployment, excellent network experience, and strong value-added services for small and medium-sized enterprises.
AD Ampere Solution
H3C Application Driven Campus Network Solution (AD Campus) innovatively introduces cloud native architecture, which not only achieves unified entry for network control, orchestration, and management, but also integrates campus, data center, and wide area network scenarios. At the same time, SeerAnalyzer is introduced to bring intelligent operation and maintenance capabilities to the campus network through refined data collection and big data, AI analysis. The H3C S5570S-EI series switches support the access role in AD Ampus solutions.
Professional lightning protection function
The H3C S5570S-EI series switch adopts professional built-in lightning protection technology, supporting industry-leading 10KV business port lightning protection capability, which can greatly reduce the damage rate of lightning strikes to equipment even in harsh working environments.
PoE capability
The H3C S5570S-EI series switch supports PoE+(802.3at)/PoE (802.3af) functionality, with a maximum power supply of 30W per port, enabling remote power supply for powered devices (PDs) such as APs and cameras. In addition, the H3C S5570S-EI series also integrates AI capabilities into PoE technology, allowing PoE switches to support:
Fast PoE: After powering on the PoE switch, it can provide power to powered devices in seconds without waiting for the switch to complete startup
Perpetual PoE: When the switch uses commands for hot restart, it ensures that the power supply to the powered devices will not be interrupted, maintaining the normal operation of the powered devices
Green Energy Saving
H3CS5570S - The Japanese series switches adopt new energy-saving chips and innovative architecture design solutions to achieve lower power consumption of dry-gigabit switches, bringing users a new network access product that is green, environmentally friendly, and energy-saving, reducing costs
Low user maintenance costs.
At the same time, the H3C S5570S-EI series switches adopt various green energy-saving designs, including auto power down (port automatic energy-saving). If the interface status remains down for a period of time, the system automatically stops supplying power to the interface and enters energy-saving mode automatically; Supporting EEE energy-saving function, if the port is idle for a continuous period of time, the system will set the port to energy-saving mode. When there is message transmission and reception, the port will be awakened by a timed monitoring stream to restore business, achieving energy-saving effect and meeting the EU RoHS standards for material environmental protection and safety.