H3C S6520X-SI Series New Generation 10G Multi Rate Switch
The H3C S6520X-SI series switch is a three-layer 10 Gigabit Ethernet switch product independently developed by H3C Technology Co., Ltd. (hereinafter referred to as H3C). It is an intelligent and manageable switch designed for network environments that require high performance and easy installation.
The S6520X-SI series Ethernet switch provides 10/100/1000/2.5G/5G/10GBase-T adaptive Ethernet ports or 10GE SFP+optical ports, and can support 10GE electrical ports, 10GE SFP+optical ports, 25G SFP28 optical ports, 40GE QSFP+, and 100G QSFP28 optical ports through daughter cards. In the enterprise network, it can serve as an access device to provide gigabit/2.5G/5G/10G to desktop applications, or as the core of small and medium-sized enterprises; In metropolitan area networks or industry users, gigabit/10G access can be provided to end-users or converged to low-end switches downwards, and can be converged to core switches through 10G or 40GE fiber optic or link aggregation upwards.
The H3C S6520X-SI series switches currently include the following models:
• H3C S6520X-18C-SI: 16 1/2.5/10GE SFP Plus ports, 1 slot expansion slot, 2 power slots
• H3C S6520X-26C-SI: 24 1/2.5/10GE SFP Plus ports, 1 slot expansion slot, 2 power slots
• H3C S6520X-16ST-SI: 16 1/2.5/10GE SFP Plus ports (2 Combo 1G/2.5G/5G/10G Base-T adaptive Ethernet ports), two power slots
• H3C S6520X-24ST-SI: 24 1/2.5/10GE SFP Plus ports (2 Combo 1G/2.5G/5G/10G Base-T adaptive Ethernet ports), two power slots
• H3C S6520X-26MC-UPWR-SI， 24 1G/2.5G/5GBase-T (UPOE) ports, 1 slot, 2 power slots
• H3C S6520X-26MC -SI， 24 1G/2.5G/5GBase-T ports, 1 slot, 2 power slots
• H3C S6520X-26XC-UPWR-SI， 24 100M/1G/2.5G/5G/10G Base-T (UPOE) ports, 1 slot, 2 power slots
• H3C S6520X-54XC-UPWR-SI， 48 100M/1G/2.5G/5G/10G Base-T (UPOE) ports, 4 QSFP+interfaces, 1 Slot, 2 power slots
Product Features
Open Multi Service Architecture
The H3C S6520X-SI series switch is based on H3C's Open Service Architecture (OAA), which not only provides the functions of traditional switches, but also integrates high-performance OAP module cards including FW, IPS, load balancing, etc., making the S6520X-SI switch a converged multi service carrier platform.
High density 10G and multi speed access
As user bandwidth continues to increase, switches need to provide higher forwarding performance and 10 Gigabit port expansion capabilities. S6520X-18C-SI supports 16 1/2.5/10GE SFP Plus ports, comes with 1 slot expansion slot, and can expand 10GE/40GE optical interface boards; S6520X-26C-SI supports 24 1/2.5/10GE SFP Plus ports, comes with 1 slot expansion slot, and can expand 10GE/40GE optical interface boards; S6520X-16ST-SI supports 16 1/2.5/10GE SFP Plus ports (including 2 Combo 1G/2.5/5G/10G Base-T adaptive Ethernet ports); S6520X-24ST-SI supports 24 1/2.5/10GE SFP Plus ports (including 2 Combo 1G/2.5G/5G/10G Base-T adaptive Ethernet ports); S6520X-26MC-UPWR-SI supports 24 1G/2.5G/5GBase-T (UPOE) ports, with a maximum output power of 90W per port. It comes with one slot expansion slot, which can be used to expand 10GE/40GE optical interface boards; S6520X-26XC-UPWR-SI supports 24 100M/1G/2.5G/10G Base-T (UPOE) ports, with a single port output power of 90W, and comes with one slot expansion slot, S6520X-54XC-UPWR-SI， 48 100M/1G/2.5G/5G/10G Base-T (UPOE) ports, with a single port output power of 90W, 4 QSFP+interfaces, and 1 slot expansion slot.
IRF2 (Second Generation Intelligent Elastic Architecture)
The S6520X-SI series switch supports IRF2 (Second Generation Intelligent Elastic Architecture) technology, virtualizing multiple devices into one logical device. It has strong advantages in scalability, reliability, overall architecture, and availability, mainly reflected in four aspects:
Scalability: IRF2 technology allows switches to expand multiple devices using interconnect cables; It has the advantages of plug and play, single IP management, and synchronous upgrading, while greatly reducing the cost of system expansion.
Reliability: Through routing hot backup technology, redundant backup and uninterrupted three-layer forwarding of all information in the control plane and data plane are achieved throughout the entire IRF group, greatly enhancing the reliability and high performance of the IRF group, while eliminating single points of failure and avoiding business interruption.
Distributed: By using distributed link aggregation technology, multiple uplink links can share the load and backup each other, thereby improving the redundancy of the entire network architecture and the utilization of link resources.
• Availability: The intelligent elastic architecture is implemented through a standard 10 Gigabit Ethernet interface, which can allocate business bandwidth and system connection bandwidth according to demand, and allocate local and upstream traffic reasonably; Not only can it achieve intelligent and elastic architecture within racks, across racks, and even across regions over long distances.
IRF3.1 (Vertical Virtualization)
The H3C S6520X-SI switch product supports IRF3.1 (Intelligent Resilient Framework 3.1) vertical virtualization technology, which adds access devices as remote interface boards to the main device system through 802.1BR technology, virtualizing core layer devices and access layer devices as a logical device in the vertical dimension to expand I/O port capabilities and achieve centralized control and management. IRF3.1 technology can simplify management and significantly reduce network management nodes; Simplify the wiring compression network hierarchy and ultimately achieve data forwarding plane virtualization. IRF3.1 vertical virtualization technology can bring the following benefits to users:
Unified management: After the IRF3.1 architecture is formed, all members within the architecture can be centrally configured and managed by connecting to the main device, without physically connecting to each member device for separate configuration.
Unified security policy: The security policy of the entire network only needs to be configured on the main device, avoiding potential policy conflicts caused by configuring each device on the entire network and significantly reducing the workload of security deployment.
Simplify network hierarchy: Supports large-scale remote interface board expansion capabilities. The traditional networking structure that requires a three-layer network architecture can be simplified to a two-layer networking structure through IRF3.1, simplifying the physical and logical hierarchy of the network and wiring.
Simplify business: Various business configurations in the IRF3.1 architecture are based on a single logical device, which can greatly simplify planning considerations such as VLANs, IPs, and routing for the entire network.
• Convenient maintenance: The configuration and software versions of all connected devices are automatically assigned by the main device. When new devices are added or removed, "hot plugging" and zero configuration can be achieved without affecting the normal operation of other devices. The troubleshooting of the entire network is also single point.
INQA Intelligent Network Quality Analysis
The H3C S6520X-SI series supports iNQA (Intelligent Network Quality Analyzer), which is a detection mechanism suitable for large-scale IP networks and can quickly measure network performance. The H3C S6520X-SI series currently supports packet loss measurement, which can measure forward, reverse, and bidirectional packet loss situations (including the number of lost packets, packet loss rate, number of lost bytes, and byte loss rate). The measurement results can be used to quickly locate packet loss time, location, and severity.
Enhanced Media Transmission Quality with eMDI
The H3C S6520X-SI series supports eMDI (Enhanced Media Delivery Index), which is a network quality monitoring and fault demarcation scheme specifically designed for video and audio services. It can directly monitor and analyze real-time service packets carried by TCP or RTP on various network nodes in IP networks. Network administrators can quickly delineate the location of faults by combining monitoring and analysis results from multiple network nodes.
Audio Quality Analysis
Multimedia audio and video services are widely used in daily life, with rich and diverse content, and users' demands for multimedia service experience are increasing. Traditional network devices do not distinguish multimedia traffic from other traffic during the transmission of user traffic. When network congestion occurs, multimedia audio and video services may experience lag, seriously affecting the user experience.
The H3C S6520X-SI series supports quality of service analysis function, which can identify users' multimedia traffic based on SIP (Session Initiation Protocol). After enabling this function, the device will prioritize forwarding such traffic to ensure service quality. The device will analyze such traffic, collect and save traffic information and session information.
Visualization ability
The H3C S6520X-SI series switch supports Telemetry technology, which can upload real-time resource information and alarm information of the switch to the operation and maintenance platform through the GRPC protocol. The operation and maintenance platform analyzes the real-time data and can achieve functions such as network quality traceability, fault diagnosis, risk warning, architecture optimization, etc., accurately ensuring user experience.
Rich features
The S6520X-SI series switch adopts a modular dual power design, and all modular accessories support hot plugging; Adopting a modular software platform, relevant software functional modules can be flexibly added or removed according to requirements. Through precise physical structure and software process optimization, the end-to-end packet processing latency has been significantly reduced.
Software Defined Network (SDN) is an innovative network architecture system. Its core technology Openflow separates the control layer and data forwarding layer of the network, greatly simplifying the difficulty of network management and maintenance. More importantly, it achieves flexible control of network traffic, providing a good network platform for innovation in core networks and applications.
The S6520X-SI series switch supports VXLAN (Virtual Extensible LAN), which encapsulates data packets sent by virtual machines in UDP and uses the IP/MAC of the physical network as the outer header for transmission over the physical IP network. After reaching the destination, the data is unblocked by the tunnel endpoint and sent to the target virtual machine, solving the problem of long-distance virtual machine migration between geographically dispersed data centers.
The S6520X-SI series switch supports ISSU (uninterrupted service upgrade) and OAM (operation, management, and maintenance), fully meeting the network's needs for high performance, easy management, and green energy saving of devices.
The S6520X-SI series switch supports AC fusion, manages AP devices, and achieves wired and wireless integrated management.
MACsec hardware encryption
Macsec is a hop by hop link layer security protocol that is highly suitable for Ethernet. It achieves the following three functions:
1) Message encryption: By using encryption algorithms and keys, plaintext is transformed into scrambled ciphertext, which is difficult to decrypt even if eavesdropped.
2) Anti replay attack: To prevent hackers from intercepting messages received by the destination host and sending them back to the destination host, in order to deceive the destination host, such as identity authentication.
3) Anti tampering: preventing hackers from arbitrarily tampering with the original message content to achieve undisclosed purposes.
The implementation of MACsec can be divided into two modes:
1) Host oriented mode: used for first hop protection of terminal access to the network.
2) Device oriented mode: Protection of interconnection links between user devices.
The H3C S6520X-SI series switch hardware supports MACsec security encryption function, combined with our inode intelligent client and core switches (S10500, S75E) to build a complete MACsec solution;
Highly available M-LAG architecture
The H3C S6520X-SI series switches support M-LAG (MultichassisLink Aggregation Group) cross device link aggregation technology (formerly DRNI technology), which achieves cross device link aggregation by virtualizing two physical devices as one device at the forwarding layer, maintaining control layer independence and improving device level reliability.
M-LAG decouples the control plane from the data plane, and each node device can be independently upgraded to ensure zero interruption of user business.
The dual active access of the device provides device level redundancy protection and traffic load sharing, while improving system reliability.
Suitable for overlay and traditional underlay scenarios, with flexible networking.
A comprehensive security control strategy
The H3C S6520X-SI series switch supports AAA, Radius authentication, and supports user accounts IP、MAC、VLAN、 Dynamic or static binding of user identification elements such as ports; Support real-time management of online users in collaboration with H3C's iMC platform, enabling timely diagnosis and dismantling of illegal online activities.
The H3C S6520X-SI series switch provides enhanced ACL control logic, supports large capacity inbound and outbound port ACLs, and supports VLAN based ACL issuance, simplifying the user configuration process while avoiding wastage of ACL resources.
Multiple reliability protection
The H3C S6520X-SI series switches also have multiple reliability protections at the device level and link level. Adopting overcurrent protection, overvoltage protection, and overheat protection technologies.
Plug in power supply improves the hardware reliability of the device. H3C S6520X-SI series supports modular dual power components; The interface board and power module of all models can be hot plugged without affecting the normal operation of the equipment. In addition, the whole machine also supports power failure detection and alarm, and can automatically adjust the fan speed according to temperature changes.
Support hardware level dual boot, using two FLASH chips to store boot software (system boot program), achieving hardware level boot redundancy backup, avoiding switch failure caused by FLASH chip failure.
• Supports ERPS Ethernet Ring Protection Switching (G.8032) protocol, which is a highly reliable and stable link layer technology for Ethernet ring networks, capable of achieving millisecond level fast protection switching.
Excellent management skills
The H3C S6520X-SI series switch supports a variety of management interfaces, such as Console, external network ports, USB ports, supports SNMP v1/V2/v3, and supports iMC intelligent management center. Support CLI command line, TELNET and FTP configuration, support OAM for easier device management, and support SSH 2.0, SSL and other encryption methods for more secure management.
SmartMC (Intelligent Management Center)
With the increase of network size, a large number of access devices are required at the network edge, which makes the management of these devices very cumbersome. The main purpose of SmartMC is to solve the centralized management problem of a large number of dispersed network devices. Intended to solve the operation and maintenance tasks of small businesses mainly focused on switches. SmartMC achieves unified operation, maintenance, and management of networks through built-in devices and graphical operations
SmartMC simplifies the operation, maintenance, and management of small and medium-sized industrial parks through its four major business segments:
• Intelligent management:
Mainly includes device role selection, FTP server configuration, global configuration, and network management port configuration, etc
Intelligent operation and maintenance:
Mainly includes group management, device or group upgrade backup, monitoring, and device failure replacement, etc
• Visualization:
Mainly includes network topology visualization and management, device list display, etc
Intelligent business:
• Mainly includes user management, etc.: After creating network access users and successfully activating them, these users can access the internal SmartMC network through one click defense ports.
The H3C S6520X-SI series switch can be used as a managed device of SmartMC, connected to the SmartMC network as a managed device, and can be easily maintained.
Professional lightning protection function
The H3C S6520X-SI series switch adopts professional built-in lightning protection technology, supporting 10KV business port lightning protection capability, which can greatly reduce the damage rate of lightning strikes to equipment even in harsh working environments.