H3C S7500X-G series high-end multi service routing switch
The H3C S7500X-G series product is a high-end multi service routing switch developed by H3C Technology Co., Ltd. (hereinafter referred to as H3C) for converged business networks. It is a virtualization software system based on IRF2 technology and fully compatible with 40GE/100GE Ethernet standards. It provides various highly reliable technologies such as uninterrupted forwarding, uninterrupted upgrades, elegant restarts, and ring network protection. While improving user productivity, it ensures the maximum normal operation time of the network, thereby reducing the total cost of ownership (TCO) for customers.
The H3C S7500X-G series includes S7510X-G, S7506X-G/S7506X-G-MF, S7503X-G, and S7503X-M-G products, all of which support redundant controllers. Through the CLOS architecture, they support continuously expanding switching capabilities and port densities, and support a variety of Ethernet interfaces such as gigabit optical, gigabit electric, gigabit optical, gigabit electric, 25G, 40G, and 100G. H3C S7500X-G can be widely used in various network environments such as metropolitan area networks, campus network cores, and aggregation, providing users with various industry solutions such as secure switching integration and wired wireless integration.
Product Features
Rich business, adapting to the trend of integrated business network development
IRF2
H3C S7500X-G has launched software virtualization technology represented by IRF2 for the evolution of data center technology, providing collaborative work, unified management, and uninterrupted maintenance functions for multiple hosts; IRF2 has not only become a key technology for high-performance and virtualization of data center switching equipment, but also an important component of H3C's value-added services for traditional enterprise network applications, thanks to its high reliability and seamless upgrade and expansion capabilities; In addition, H3C's IRF2 technology can also support long-distance (80KM) ordinary Ethernet 10 Gigabit fiber stacking according to networking requirements.
• High performance IPv4/IPv6 business capabilities
H3C S7500X-G supports IPv4/IPv6 dual protocol stack, multiple tunneling technologies, and IPv4/IPv6 multicast technology, providing users with a comprehensive IPv4/IPv6 solution; H3C S7500X-G adopts a distributed architecture to achieve line speed non blocking forwarding of IPv4/IPv6 services; H3C S7500X-G has passed the IPv6 network access certification of the Ministry of Information Industry and is a mature commercial IPv6 product.
• Integrated wired and wireless connectivity
The H3C S7500X-G integrated wireless control module provides rich business capabilities, including fine user control management, comprehensive RF management and security mechanisms, fast roaming, super strong QoS, and support for IPv6; The wireless control module achieves endpoint access defense for wireless access users through linkage with the security policy server, improving the security of the entire network.
The H3C S7500X-G adopts a chip design that supports AC function, providing customers with richer choices for building wired and wireless integrated networks.
EAD endpoint access protection technology
H3C S7500X-G supports high-capacity Portal authentication function and can serve as an EAD gateway device in thousands of users' local area networks, providing EAD security authentication function for all network users; It can serve as a convergence/core device in large and medium-sized campus networks, while providing Portal authentication functionality for authentication and billing in student dormitory areas.
BYOD basic network architecture
Supporting a variety of access authentication methods, it can serve as an authentication gateway device in the local area networks of thousands of users, providing secure authentication functions for access users; H3C S7500X-G provides the basic network architecture for BYOD mobile office features, making it easy to expand BYOD applications such as mobile ERP, OA, UC&C.
Comprehensive security measures to resist various security threats
Three plane security guarantee mechanism
H3C S7500X-G provides a comprehensive security protection mechanism to ensure network security from the three planes of control, management, and forwarding. In the control plane, it has a built-in protocol packet attack identification module to prevent protocol packet attacks such as TCN and ARP. The OSPF/BGP/IS-IS routing protocol uses MD5 verification to prevent network paralysis caused by illegal routing updates; In the management plane, the SNMPv3 network management protocol, SSH V2， User authentication based on 802.1x, AAA/Radio, and hierarchical user permission management ensure the security of device management; In the forwarding plane, it supports precise binding of various combinations such as IP, VLAN, MAC, and ports; Support uRPF unicast reverse path forwarding to prevent illegal traffic from accessing the network. Adopt the longest matching packet by packet forwarding mechanism to effectively resist virus attacks.
Enhanced ACL features
H3C S7500X-G series products support powerful ACL capabilities: supporting standard and extended ACLs; Support VLAN based ACL for convenient user configuration and saving ACL resources; Support ACL for both outbound and inbound directions, meeting the strict access control requirements of industries such as finance.
Telecom grade high reliability ensures long-term stable operation of user services
Telecom grade high reliability design
H3C S7500X-G adopts a no single point of failure design, and all key components such as the main control board, power supply, and fan are designed with redundancy; Passive backplane avoids single point of failure in the chassis; All single boards and power modules support hot swappable functionality; The H3C S7500X-G series can operate stably for a long time in harsh environments, achieving 99.999% telecom grade reliability.
• Multi business high reliability operation
H3C S7500X-G supports uninterrupted forwarding and elegant restart, providing millisecond level switching time; Support equivalent routing, which can help users establish multiple equivalent paths, achieve load balancing and redundant backup of traffic; Support RRPP fast ring network protection protocol; Support Smart Link protocol to ensure fast switching of business in milliseconds for dual uplink network topology. Through the above technology, H3C S7500X-G can operate continuously while carrying multiple services, achieving business sustainability. Distributed maintenance engine, intelligent CPU system supporting intelligent power management, can support online status check of devices, sequential power on and off of single boards (reducing power impact caused by simultaneous power on of single boards, improving equipment life, reducing electromagnetic radiation and system power consumption).
HA based on IRF2 architecture
IRF2 technology can virtualize multiple S7500X-Gs into a "joint device", which can be used and configured as if it were a single machine. It also expands the number of ports and switching capabilities, and enhances device reliability through mutual backup between multiple devices, providing millisecond level link convergence capability. Simplified management process, reduced management costs, and can smoothly expand network capacity according to actual needs. Support hardware based rich OAM fault detection mechanisms to achieve millisecond level link fault detection.
• Highly available M-LAG architecture
The S7500X-G series switches support M-LAG (Multicasting Link Aggregation Group) cross device link aggregation technology (formerly DRNI technology), which achieves cross device link aggregation by virtualizing two physical devices as one device at the forwarding layer, maintaining control layer independence from each other, thereby improving single board level reliability to device level reliability.
Integrate access aggregation and reduce costs
The S7500X-G OLT is equipped with the S7500X-G three-layer switch function, which not only reduces the cost of purchasing multiple devices at the same time, but also reduces the management cost and failure rate of port interconnection between multiple devices.
The distributed architecture design eliminates the bottleneck of traditional OLT centralized processing, ensuring fast forwarding of IPv4/IPv6 business lines and meeting the constantly evolving needs of network services.
All components of OLT (engine board, business board, power supply, fan) support hot swapping; Redundant backup of dual main control modules;
Redundant backup of power module; Fan redundancy; Passive backplane design greatly reduces the failure rate and significantly lowers operating expenses. Ensure the stable and reliable operation of the system.
The whole machine supports a maximum of 240 10GEPON/XGPON ports, with a maximum splitting ratio of 1:128.