H3C S5590-HI series Ethernet switch
The H3C S5590-HI series switch is a new generation of high-performance, high port density, and high security three-layer Ethernet switch developed by H3C Technology Co., Ltd. (hereinafter referred to as H3C) using professional ASIC technology. It supports IPv4/IPV6 dual stack management and forwarding, static routing protocols and RIP, OSPF, BGP, ISIS and other routing protocols, and supports rich management and security features. It is a gigabit three-layer Ethernet switch product for converged business networks.
In the park network, the S5590-HI series switches can serve as aggregation layer devices or as the core of small and medium-sized enterprises; Downward, it can provide high-density GE junction lower layer switches, and upward, it can be converged to the core switch through 10G/25G/40G/100G fiber or link aggregation, building a high-performance end-to-end IP network solution together with other H3C products.
The H3C S5590-HI series Ethernet switches currently include the following models:
S5590-28T8XC-HI: 28 10/100/1000BASE-T ports (4-combo SFP ports), 8 10G/1G BASE-X SFP+ports, 2 slot expansion slots, 2 modular fan slots, 2 pluggable power slots;
S5590-48T4XC-HI: 48 10/100/1000BASE-T ports, 4 10G/1G BASE-X SFP+ports, 2 slot expansion slots, 2 modular fan slots, 2 pluggable power slots;
S5590-28S8XC-HI: 28 100/1000BASE-X SFPs (4-combo GE ports), 8 10G/1G BASE-X SFP+ports, 2 slot expansion slots, 2 modular fan slots, 2 pluggable power slots;
S5590-48S4XC-HI: 48 100/1000BASE-X SFPs, 4 10G/1G BASE-X SFP+ports, 2 slot expansion slots, 2 modular fan slots, 2 pluggable power slots;
Product Features
SmartMC (Intelligent Management Center)
With the increase of network size, a large number of access devices are required at the network edge, which makes the management of these devices very cumbersome. The main purpose of SmartMC is to solve the centralized management problem of a large number of dispersed network devices. Intended to solve the operation and maintenance tasks of small businesses mainly focused on switches. SmartMC achieves unified operation, maintenance, and management of networks through built-in devices and graphical operations
SmartMC simplifies the operation, maintenance, and management of small and medium-sized industrial parks through its four major business segments:
• Intelligent management:
Mainly includes device role selection, FTP server configuration, global configuration, and network management port configuration, etc
Intelligent operation and maintenance:
Mainly includes group management, device or group upgrade backup, monitoring, and device failure replacement, etc
• Visualization:
Mainly includes network topology visualization and management, device list display, etc
Intelligent business:
Mainly including user management: After creating network access users and successfully activating them, these users can access the internal SmartMC network through a one click armed port.
The H3C S5590-HI series switches are equipped with SmartMC, which enables vertical virtualization and unified management functions.
VxLAN features
The H3C S5590-HI series switches support VXLAN (Virtual Extensible LAN), which encapsulates data packets sent by virtual machines in UDP and uses the IP/MAC of the physical network as the outer header for transmission over the physical IP network. Upon arrival at the destination, the packets are unblocked by the tunnel endpoint and sent to the target virtual machine, solving the problem of long-distance virtual machine migration between geographically dispersed data centers. VXLAN supports EVPN mode.
Highly available M-LAG architecture
The H3C S5590-HI series switches support M-LAG (Multichasis Link Aggregation Group) cross device link aggregation technology (formerly DRNI technology), which achieves cross device link aggregation by virtualizing two physical devices as one device at the forwarding layer, maintaining control layer independence and improving device level reliability.
M-LAG decouples the control plane from the data plane, and each node device can be independently upgraded to ensure zero interruption of user business.
The dual active access of the device provides device level redundancy protection and traffic load sharing, while improving system reliability.
Suitable for overlay and traditional underlay scenarios, with flexible networking.
Multi business integration
The H3C S5590-HI series switches are based on H3C's Open Service Architecture (OAA), which not only provides the functions of traditional switches, but also integrates security modules such as FW, IPS, load balancing, Eagle Vision scanner, mini iMC, Netstream, etc., making the S5590-HI series switches a converged multi service carrier platform.
The H3C S5590-HI series switch supports AC fusion, manages AP devices, and achieves wired and wireless integrated management.
High performance IPv4/IPv6 business capability
The H3C S5590-HI series switches implement a hardware based IPv4/IPv6 dual stack platform, supporting multiple tunneling technologies, rich IPv4 and IPv6 three-layer routing protocols, multicast technology, and policy routing mechanisms, providing users with a comprehensive IPv4/IPv6 solution.
IRF2 (Second Generation Intelligent Elastic Architecture)
The H3C S5590-HI series switches support IRF2 (Second Generation Intelligent Elastic Architecture) technology, which connects multiple physical devices to each other and virtualizes them as a logical device. In other words, users can manage and use these multiple devices as a single device. IRF can bring the following benefits to users:
After the formation of the simplified management IRF architecture, it is possible to connect to any port of any device to log in to a unified logical device. By configuring a single device, the effect of managing the entire intelligent elastic system and all member devices within the system can be achieved, without physically connecting to each member device to configure and manage them separately.
The various control protocols running in the logical devices formed by simplifying business IRF are also uniformly operated as a single device. For example, routing protocols are uniformly calculated as a single device. With the application of cross device link aggregation technology, they can replace the original spanning tree protocol, which can save a large number of protocol packet interactions between devices, simplify network operation, and shorten convergence time during network turbulence.
Elastic expansion can be achieved according to user needs, ensuring user investment. And the newly added devices can achieve "hot plugging" when joining or leaving the IRF architecture, without affecting the normal operation of other devices.
The high reliability of IRF is reflected in three aspects: links, devices, and protocols. The physical ports between member devices support aggregation function, and the physical connections between the IRF system and the upper and lower level devices also support aggregation function. This improves the reliability of the links through multi link backup; The IRF system consists of multiple member devices. In the event of a Master device failure, the system will quickly and automatically elect a new Master to ensure uninterrupted business through the system, thus achieving device level 1: N backup; The IRF system will have a real-time protocol hot backup function responsible for backing up the configuration information of the protocol to all other member devices, thereby achieving a 1: N protocol reliability.
For high-end switches, the improvement in performance and port density is limited by hardware architecture. The performance and port density of the IRF system are the sum of the performance of all devices and the number of ports within the IRF. Therefore, IRF technology can easily increase the switching capability and user port density of devices by several times, thereby significantly improving device performance.
Complete security control strategy
The H3C S5590-HI series switch supports EAD (Terminal Access Control) function, which, when combined with the backend system, can integrate terminal security measures such as antivirus and patch repair with network access control and access permission control into a linked security system. Through the inspection, isolation, repair, management, and monitoring of network access terminals, the entire network changes from passive defense to active defense, from single point defense to comprehensive defense, and from decentralized management to centralized policy management, enhancing the overall defense capability of the network against emerging security threats such as viruses and worms.
The H3C S5590-HI series switches support centralized MAC address authentication, 802.1x authentication, and support for user accounts IP、MAC、VLAN、 Dynamic or static binding of user identification elements such as ports, while implementing dynamic issuance of user policies (VLAN, QoS, ACL); Support real-time management of online users in collaboration with H3C's iMC system, enabling timely diagnosis and dismantling of illegal online activities.
The H3C S5590-HI series switch provides enhanced ACL control logic, supports high-capacity inbound and outbound port ACLs, and supports VLAN based ACL issuance, simplifying the user configuration process while avoiding wastage of ACL resources. In addition, the S5590-HI series will also support unicast reverse path lookup technology (uRPF). The principle is that when a data packet is received on one interface of the device, the path will be reverse searched to verify whether there is a route between the receiving interface and the source address specified in the packet, that is, to verify its authenticity. If it does not exist, the data packet will be deleted, so that we can effectively prevent the increasingly rampant source address spoofing in the network.
MACsec hardware encryption
MACsec (Media Access Control Security) defines a method for secure data communication based on IEEE 802 local area networks. MACsec can provide users with secure MAC layer data transmission and reception services, including user data encryption, data frame integrity checks, and data source authenticity verification.
MACsec is usually used in conjunction with the 802.1X authentication framework. After the successful 802.1X authentication process, it identifies the messages sent by authenticated devices and uses the MKA (MACsec Key Agreement) protocol to negotiate and generate keys to encrypt and check the integrity of authenticated user data, avoiding port processing of messages from unauthenticated devices or messages tampered with by unauthenticated devices.
The H3C S5590-HI series switches support upgraded MACsec encryption technology, using a 256 bit encryption algorithm to further improve data security; In addition, the S5590-HI series switch is based on a special hardware design and has full port MACsec encryption capability, which can provide 256 bit MACsec encryption for all ports of the device to ensure data security.
Multiple reliability protection
The H3C S5590-HI series switches have multiple reliability protections at the device level and link level, using overcurrent protection, overvoltage protection, and overheat protection technologies.
The H3C S5590-HI series switch supports pluggable AC and DC dual power modules, supports "1+1" power redundancy, and has a reliable design of pluggable dual fans. It can flexibly configure AC or DC power modules, front and rear air duct ventilation, or rear front air duct ventilation according to actual environmental needs. In addition, the whole machine also supports power and fan fault detection and alarm, and can automatically adjust the fan speed according to temperature changes. These designs make the equipment more reliable.
In addition to device level reliability, this product also supports a variety of link level reliability technologies, including protection protocols such as LACP/STP/RSTP/MSTP/Smart Link/RRPP/ERPS/PVST fast ring network protection mechanism, IRF2 intelligent elastic architecture, 1: N redundant backup, ring stacking, and cross device link aggregation, greatly improving network reliability. When carrying multiple services and large traffic on the network, it does not affect the convergence time of the network, ensuring the normal development of services.
Support hardware level dual boot, using two Flash chips to store boot software (system boot program), achieving hardware level boot redundancy backup, and avoiding switch failure caused by Flash chip failure.
Support ISSU (Uninterrupted Service Upgrade) and OAM (Operation, Management, and Maintenance), fully meeting the network's needs for high-performance, easy to manage, and green energy-saving devices.
MOD packet loss image
MOD (Mirror On Drop) is a technology specifically used to monitor packet loss during internal device forwarding. Once MOD detects packet loss inside the device, it will immediately collect the time of packet loss, the reason for packet loss, and the characteristics of discarded messages, and report them to the remote collector so that administrators can timely understand the packet loss situation inside the device.
The H3C S5590-HI series switches support MOD packet loss mirroring technology, which can monitor packet loss events caused by specific reasons during the internal forwarding process of specific traffic within the device, and collect relevant information when packet loss occurs and report it to the collector.
Rich QoS strategies
The H3C S5590-HI series switches support L2 (Layer 2) to L4 (Layer 4) packet filtering function, providing flow classification based on source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocol type, and VLAN. Provide flexible column scheduling algorithms that can be set based on both ports and queues, supporting three modes: SP (Strict Priority), WFQ (Weighted Fair Queuing), and SP+WFQ. Support CAR (Committed Access Rate) function. Support port mirroring in both outbound and inbound directions, used to monitor messages on specified ports, copy data packets on ports to monitoring ports for network detection and troubleshooting. At the same time, the H3C S5590-HI series switches also support sFlow function, which samples data packets on the network and accurately monitors network traffic on gigabit/ten gigabit high-speed networks for statistical analysis and control of network traffic.
INQA Intelligent Network Quality Analysis
The H3C S5590-HI series supports iNQA (Intelligent Network Quality Analyzer), which is a detection mechanism suitable for large-scale IP networks and can quickly measure network performance. H3C S5590-HI currently supports packet loss measurement, which can measure forward, reverse, and bidirectional packet loss situations (including the number of lost packets, packet loss rate, number of lost bytes, and byte loss rate). The measurement results can be used to quickly locate packet loss time, location, and severity.
Enhanced Media Transmission Quality with eMDI
The H3C S5590-HI series supports eMDI (Enhanced Media Delivery Index), which is a network quality monitoring and fault demarcation scheme specifically designed for video and audio services. It can directly monitor and analyze real-time service packets carried by TCP or RTP on various network nodes in IP networks. Network administrators can quickly delineate the location of faults by combining monitoring and analysis results from multiple network nodes.
Audio Quality Analysis
Multimedia audio and video services are widely used in daily life, with rich and diverse content. Users have increasingly high demands for multimedia service experience. Traditional network devices do not distinguish multimedia traffic from other traffic during the transmission of user traffic. When network congestion occurs, multimedia audio and video services may experience lag, seriously affecting the user experience.
The H3C S5590-HI series supports service quality analysis function, which can identify users' multimedia traffic based on SIP (Session Initiation Protocol). After enabling this function, this device will prioritize forwarding such traffic to ensure service quality. Additionally, this device will analyze such traffic, collect and save traffic and session information.
Telemetry visualization
The H3C S5590-HI series switches support Telemetry technology, which can upload real-time resource information and alarm information of the switch to the operation and maintenance platform through the GRPC protocol. The operation and maintenance platform analyzes the real-time data and can achieve functions such as network quality traceability, fault diagnosis, risk warning, architecture optimization, etc., accurately ensuring user experience.
Netstream visualization
NetStream is a statistical technique based on network flow information, which defines a method for devices to output statistical data of network traffic. The devices perform statistics and analysis on the data forwarded through them, and report it to the network traffic analyzer. After merging and processing, it is stored in the database for further analysis and processing.
The H3C S5590-HI series switches support Netstream network flow information statistics technology, which enables traffic analysis and statistics, and establishes flow tables to achieve one-way/two-way Netstream functionality.
Excellent management skills
The H3C S5590-HI series switch supports a variety of management interfaces, such as Console port and external network port, and supports SNMPv1/v2/v3（Simple Network Management Protocol）， It can support general network management platforms such as Open View and iMC intelligent management center. Support CLI command line TELNET， Make device management more convenient and support encryption methods such as SSH 2.0, making management more secure.
The H3C S5590-HI series switch supports SPAN/RSPAN mirroring and multiple mirroring observation ports, which can analyze network traffic to take corresponding management and maintenance measures, making previously invisible network business application traffic clear at a glance. It can provide users with various network flow analysis reports to help optimize network structure and adjust resource deployment in a timely manner.
Professional lightning protection function
The H3C S5590-HI series switch adopts professional built-in lightning protection technology, supporting 10KV business port lightning protection capability, which can greatly reduce the damage rate of lightning strikes to equipment even in harsh working environments.