H3C S6525XE-HI series intelligent 10 Gigabit Ethernet switch
The H3C S6525XE-HI series switch is a new generation of high-performance, high port density, and high security 10G/100G interface three-layer Ethernet switch developed by H3C Technology Co., Ltd. (hereinafter referred to as H3C) using industry professional ASIC technology. It supports IPv4/IPV6 dual stack management and forwarding, static routing protocols and RIP, OSPF, BGP, ISIS and other routing protocols, MPLS, and rich management and security features.
The S6525XE-HI series switch provides 48 SFP+ports and 6 QSFP28 ports, serving as an aggregation layer device in campus networks or as a core for small and medium-sized enterprises; In metropolitan area networks or industry users, 10G aggregation lower layer switches can be provided downwards, and 40G/100G fiber or link aggregation can be used upwards to converge to the core switch, building high-performance end-to-end IP network solutions together with other H3C products.
The S6525XE-HI series switches support 40G/100G stacking, allowing users to stack switches located in different locations over long distances using fiber optics. This enables multiple devices distributed in different areas and locations to form a logical entity, with 1: N backup between devices, further improving network reliability and ease of management.
The H3C S6525XE-HI series Ethernet switch currently includes the following models:
S6525XE-54HF-HI: 48 SFP+ports, 6 QSFP28 ports, 5 fan module slots, 2 power module slots;
Product Features
VxLAN features
The H3C S6525XE-HI series switch supports VXLAN (Virtual Extensible LAN). VXLAN encapsulates data packets sent by virtual machines in UDP and uses the IP/MAC of the physical network as the outer header for transmission over the physical IP network. Upon arrival at the destination, the packet is unblocked by the tunnel endpoint and sent to the target virtual machine, solving the problem of long-distance virtual machine migration between geographically dispersed data centers. It supports EVPN mode. The H3C S6525XE-HI series switches are compatible with H3C AD Ampus solutions.
SmartMC (Intelligent Management Center)
With the increase of network scale, a large number of access devices are required at the network edge, which makes the management of these devices very cumbersome. The main purpose of SmartMC is to solve the centralized management problem of a large number of dispersed network devices. Intended to solve the operation and maintenance tasks of small businesses mainly focused on switches. SmartMC achieves unified operation, maintenance, and management of networks through built-in devices and graphical operations
SmartMC simplifies the operation, maintenance, and management of small and medium-sized industrial parks through its four major business segments:
• Intelligent management:
Mainly includes device role selection, FTP server configuration, global configuration, and network management port configuration, etc
Intelligent operation and maintenance:
Mainly includes group management, device or group upgrade backup, monitoring, and device failure replacement, etc
• Visualization:
Mainly includes network topology visualization and management, device list display, etc
Intelligent business:
Mainly including user management: After creating network access users and successfully activating them, these users can access the internal SmartMC network through a one click armed port.
The H3C S6525XE-HI series switch is equipped with SmartMC, which enables vertical virtualization and unified management.
High performance IPv4/IPv6 business capability
The S6525XE-HI series switch supports IPv4/IPv6 dual protocol stack, with hardware support for IPV4 and IPv6 forwarding. It can be used for the evolution of IPV4 to IPV6 networking, and with the development of IPV6 technology and network progress, it smoothly transitions to IPV6 network, with extremely high network adaptability and scalability, protecting user investment.
IRF2 (Second Generation Intelligent Elastic Architecture)
The H3C S6525XE-HI series switch supports IRF2 (Second Generation Intelligent Elastic Architecture) technology, which connects multiple physical devices to each other and virtualizes them as a logical device. In other words, users can manage and use these multiple devices as a single device. IRF can bring the following benefits to users:
After the formation of the simplified management IRF architecture, it is possible to connect to any port of any device to log in to a unified logical device. By configuring a single device, the effect of managing the entire intelligent elastic system and all member devices within the system can be achieved, without physically connecting to each member device to configure and manage them separately.
The various control protocols running in the logical devices formed by simplifying business IRF are also uniformly operated as a single device. For example, routing protocols are uniformly calculated as a single device. With the application of cross device link aggregation technology, they can replace the original spanning tree protocol, which can save a large number of protocol packet interactions between devices, simplify network operation, and shorten convergence time during network turbulence.
Elastic expansion can be achieved according to user needs, ensuring user investment. And the newly added devices can achieve "hot plugging" when joining or leaving the IRF architecture, without affecting the normal operation of other devices.
The high reliability of IRF is reflected in three aspects: links, devices, and protocols. The physical ports between member devices support aggregation function, and the physical connections between the IRF system and the upper and lower level devices also support aggregation function. This improves the reliability of the links through multi link backup; The IRF system consists of multiple member devices. In the event of a Master device failure, the system will quickly and automatically elect a new Master to ensure uninterrupted business through the system, thus achieving device level 1: N backup; The IRF system will have a real-time protocol hot backup function responsible for backing up the configuration information of the protocol to all other member devices, thereby achieving a 1: N protocol reliability.
For high-end switches, the improvement in performance and port density is limited by hardware architecture. The performance and port density of the IRF system are the sum of the performance of all devices and the number of ports within the IRF. Therefore, IRF technology can easily increase the switching capability and user port density of devices by several times, thereby significantly improving device performance.
SDN (Software Defined Networking)
Software Defined Network (SDN) is an innovative network architecture system. Its core technology Openflow combines the control layer of the network with
The separation of the data forwarding layer greatly simplifies the management and maintenance difficulty of the network, and more importantly, achieves flexible control of network traffic, providing a good network platform for innovation in core networks and applications.
The S6525XE-HI series switches support large-scale flow meters and, when combined with H3C SDN controllers, can easily achieve large-scale layer 2 architecture networking and provide the ability to quickly add users to existing networks; While significantly simplifying the difficulty of network management, it can also significantly reduce the cost of network maintenance.
Powerful QACL functionality
The H3C S6525XE-HI series switches support inbound ACL, outbound ACL, VLAN ACL, and provide comprehensive Diff Server/QoS support. Support packet classification based on information from the data link layer, network layer, and transport layer, such as MAC address, IP protocol type, source/destination (host, network segment) address, and even application port number. Provide flow mapping and classification under various rule combinations, traffic supervision CAR (supporting dual speed tri color and single speed dual color markers, bidirectional CAR), congestion control methods (WRED, Tail Drop), queue scheduling (SP, WRR, SP+WRR), priority labeling and priority mapping (802.1P, DSCP), and support flow shaping based on port/port queue output. This can provide users with service guarantees of different service quality levels, making IP networks truly become A comprehensive network that simultaneously carries data, voice, and video services.
Visualization ability
The H3C S6525XE-HI series switch supports Telemetry technology, which can upload real-time resource information and alarm information of the switch to the operation and maintenance platform through the GRPC protocol. The operation and maintenance platform analyzes the real-time data and can achieve network quality traceability, fault diagnosis, risk warning, architecture optimization and other functions, accurately ensuring user experience.
The H3C S6525XE-HI series switches support MOD (Mirror On Drop) technology, which can monitor specific traffic forwarding within the device and packet loss events caused by specific reasons. When packet loss occurs, relevant information is collected and reported to the collector, so that managers can timely understand the packet loss situation inside the device.
The H3C S6525XE-HI series switch supports TCB (Transient Capture Buffer), which is used to monitor queues. When a packet loss occurs in the queue, information such as packet loss time, reason, and characteristics of the lost message is reported to the network administrator through gRPC or SNMP, making it easy for network administrators to be aware of packet loss events on the device in a timely manner.
INQA Intelligent Network Quality Analysis
The H3C S6525XE-HI series supports iNQA (Intelligent Network Quality Analyzer), which is a detection mechanism suitable for large-scale IP networks and can quickly measure network performance. The H3C S6525XE-HI series currently supports packet loss measurement, which can measure forward, reverse, and bidirectional packet loss situations (including the number of lost packets, packet loss rate, number of lost bytes, and byte loss rate). The measurement results can be used to quickly locate packet loss time, location, and severity.
Highly available M-LAG architecture
The H3C S6525XE-HI series switches support M-LAG (MultichasisLinkAggregationGroup) cross device link aggregation technology (formerly DRNI technology), which achieves cross device link aggregation by virtualizing two physical devices as one device at the forwarding layer, maintaining control layer independence and improving device level reliability.
M-LAG decouples the control plane from the data plane, and each node device can be independently upgraded to ensure zero interruption of user business.
The dual active access of the device provides device level redundancy protection and traffic load sharing, while improving system reliability.
Suitable for overlay and traditional underlay scenarios, with flexible networking.
Rich features
The S6525XE-HI series switch adopts a modular dual power supply and fan frame design, and all modular accessories support hot plugging; Adopting a modular software platform, relevant software functional modules can be flexibly added or removed according to requirements. Through precise physical structure and software process optimization, the end-to-end packet processing latency has been significantly reduced.
The S6525XE-HI series switches support device level, link level, and network level packet loss detection, with network level support for end-to-end and hop by hop packet loss detection.
The S6525XE-HI series switch supports ISSU (uninterrupted service upgrade) and OAM (operation, management, and maintenance), fully meeting the network's needs for high performance, easy management, and green energy saving of devices.
The S6525XE-HI series switches are designed with large meter items and have the ability to access large-scale campus networks.
The S6525XE-HI series switch supports AC fusion and manages WiFi-5 and WiFi-6 AP devices, achieving integrated wired and wireless management.
Complete security control strategy
The H3C S6525XE-HI series switch supports EAD (Terminal Access Control) function, which, when combined with the backend system, can integrate terminal security measures such as antivirus and patch repair with network access control and access permission control into a linked security system. Through the inspection, isolation, repair, management, and monitoring of network access terminals, the entire network changes from passive defense to active defense, from single point defense to comprehensive defense, and from decentralized management to centralized policy management, enhancing the overall defense capability of the network against emerging security threats such as viruses and worms.
The H3C S6525XE-HI series switch supports centralized MAC address authentication, 802.1x authentication, and supports user accounts IP、MAC、VLAN、 Dynamic or static binding of user identification elements such as ports, while implementing dynamic issuance of user policies (VLAN, QoS, ACL); Support real-time management of online users in collaboration with H3C's iMC system, enabling timely diagnosis and dismantling of illegal online activities.
The H3C S6525XE-HI series switch provides enhanced ACL control logic, supports high-capacity inbound and outbound port ACLs, and supports VLAN based ACL issuance, simplifying the user configuration process while avoiding wastage of ACL resources. In addition, the S6525XE-HI series will also support unicast reverse path lookup technology (uRPF). The principle is that when a data packet is received on one interface of the device, it will reverse search the path to verify whether there is a route between the receiving interface and the source address specified in the packet, that is, to verify its authenticity. If it does not exist, the data packet will be deleted, so that we can effectively prevent the increasingly rampant source address spoofing in the network.
Multiple reliability protection
The H3C S6525XE-HI series switch has multiple reliability protections at the device level and link level.
The S6525XE-HI series switch supports 2 pluggable power modules and 5 pluggable fan modules. In addition to device level reliability, the product also supports a variety of link level reliability technologies, including LACP/STP/RSTP/Smart Link/RRPP protection protocols, IRF2 intelligent elastic architecture, 1: N redundant backup, ring stacking, and cross device link aggregation, greatly improving network reliability. When carrying multiple services and large traffic on the network, it does not affect the convergence time of the network, ensuring the normal development of services. Support power and fan fault detection and alarm, support over temperature alarm and over temperature protection, and can automatically adjust fan speed according to temperature changes.
Support hardware level dual boot, using two FLASH chips to store boot software (system boot program), achieving hardware level boot redundancy backup, avoiding switch failure caused by FLASH chip failure.
Supports ERPS Ethernet Ring Protection Switching protocol (G.8032), which is a highly reliable and stable link layer technology for Ethernet ring networks, capable of achieving millisecond level fast protection switching.
Rich QoS strategies
The H3C S6525XE-HI series switch supports L2 (Layer 2) to L4 (Layer 4) packet filtering function, providing flow classification based on source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocol type, and VLAN. Provide flexible column scheduling algorithms that can be set based on both ports and queues, supporting three modes: SP (Strict Priority), WRR (Weighted Round Robin), and SP+WRR. Supports CAR (Committed Access Rate) function with a minimum granularity of 64Kbps. Support port mirroring in both outbound and inbound directions, used to monitor messages on specified ports, copy data packets on ports to monitoring ports for network detection and troubleshooting. At the same time, the H3C S6525XE-HI series switch also supports sFlow function, which samples data packets on the network and accurately monitors network traffic on gigabit/10 gigabit high-speed networks for statistical analysis and control of network traffic.