H3C S10500X-G series Ethernet core switch
The H3C S10500X-G series switch products are specially designed and developed by H3C Technology Co., Ltd. (hereinafter referred to as H3C) for cloud computing data center cores and next-generation smart park cores. The S10500X-G is based on H3C's proprietary Comware V7 operating system, providing customers with a trusted and secure platform. Redundant design of key components such as main control, network board, fan, power supply, etc., providing telecom grade high reliability guarantee. Supports high-density GE/10GE/25GE/40GE/100GE Ethernet ports, mainstream technologies such as VXLAN, MDC, M-LAG, and IRF2, and integrates various network services such as MPLS VPN, IPv6, wireless, and traffic analysis. At the same time, H3C S10500X-G adopts a green and energy-saving environmentally friendly design process, which complies with the RoHS (Restriction of Hazardous Substances in Electronic Equipment) standard.
Product Features
Advanced hardware design
Adopting the CLOS without intermediate board switching architecture, the forwarding plane and control plane are completely separated, and the current single slot bidirectional support is 4.8T, providing continuous bandwidth upgrade capability;
Adopting hardware orthogonal design, the S10500X-G line card is completely orthogonal (90 degrees) to the switching network board. Cross line card business traffic is directly connected to the switching network board through orthogonal connectors, supporting cell switching and reducing backplane routing to zero, greatly avoiding signal attenuation;
Supports 40GE and 100GE Ethernet standards, fully meeting the application and future development needs of non blocking campus networks;
• Supports high-density GE/10GE/25GE/40GE/100GE Ethernet ports, fully meeting future application development needs;
Supports 400G high-speed Ethernet ports to meet the interconnection needs across campuses and data centers;
The chassis size has been redesigned to accommodate high-performance forwarding in a small size, fully improving the utilization of cabinet space;
Support multi fan frame design, and automatically allocate air volume when one of the fans fails;
The redundant design of key components such as the main control slot, network board slot, fan frame, power frame, and power main switch can cope with unexpected situations and greatly improve the overall reliability of the equipment. The business board, main control board, and switching network board are all connected. When one of the switching network boards fails, the system automatically allocates traffic to other switching network boards.
Distributed Multi Engine Design
The S10500X-G adopts innovative hardware design, providing powerful control capability and millisecond level high reliability guarantee for the system through fully distributed independent control engine, detection engine, and maintenance engine:
Distributed control engine, all business boards provide powerful control processing systems that easily handle various protocol and control messages, and support fine control of protocol messages, providing the system with comprehensive resistance to protocol message attacks.
Distributed detection engine, all business boards can perform fast fault detection such as BFD and OAM in a distributed manner, and are linked with control plane protocols to support fast protection switching and convergence. It can achieve millisecond level fault detection and ensure uninterrupted business operations.
Distributed maintenance engine, intelligent CPU system supporting intelligent power management, can support online status check of devices, sequential power on and off of single boards (reducing power impact caused by simultaneous power on of single boards, improving equipment life, reducing electromagnetic radiation and system power consumption).
Network virtualization technology
• Support M-LAG (Multicasting Link Aggregation Group) cross device link aggregation technology (formerly DRNI technology), which achieves cross device link aggregation by virtualizing two physical devices as one device at the forwarding level, keeping the control level independent of each other and integrating the management interface, thereby improving single board level reliability to device level reliability.
• Supports MDC (Multi tenant Device Context), which can partition a switch into multiple independent virtual switches. Each switch virtualized by MDC is isolated from each other and cannot communicate directly, providing high security. Virtual switches have independent hardware resources and management permissions, meeting the needs of multiple businesses/customers sharing core switches and saving the cost of purchasing new network equipment and upgrading network equipment hardware.
Comprehensive IPv6 solution
The S10500X-G series switch fully supports the IPv6 protocol family, including IPv6 static routing, RIPng, OSPFv3, IS-ISv6, BGP4+and other IPv6 routing protocols. It also supports a variety of IPv4 to IPv6 transition technologies, including IPv6 manual tunneling, 6to4 tunneling, ISATAP tunneling, GRE tunneling, etc., to ensure a smooth transition from IPv4 to IPv6.
Excellent security mechanism
H3C S10500X-G provides a comprehensive security protection mechanism, which can comprehensively guarantee the security of the network from the three planes of control, management, and forwarding:
In the control plane, there is a built-in protocol packet attack recognition module to prevent protocol packet attacks such as TCN and ARP. The OSPF/BGP/IS-IS routing protocol uses MD5 verification to prevent network paralysis caused by illegal routing updates; Support trusted computing, enabling trusted authentication and measurement of startup software.
In the management plane, the SNMPv3 network management protocol, SSH V2， User authentication based on 802.1x, AAA/Radio, and hierarchical user permission management ensure the security of device management; Support firewall, intrusion prevention SSLVPN、 Expansion of security boards such as internet behavior management to meet the requirements of network security integration deployment.
In the forwarding plane, it supports precise binding of various combinations such as IP, VLAN, MAC, and ports; Support uRPF unicast reverse path forwarding to prevent illegal traffic from accessing the network. Adopt the longest matching packet by packet forwarding mechanism to effectively resist virus attacks; The new upgrade supports full port hardware level encryption technology MACsec (802.1ae), with a key length of up to 256 bits, protecting layer 2 protocols from attacks at the root; Simultaneously supporting Cloudsec encryption technology to ensure the security of VXLAN based business traffic
Green and energy-saving design
Comprehensively carry out green and energy-saving transformation from chassis hardware to chassis appearance design, responding to the strategic call of "carbon peak and carbon neutrality":
The S10500X-G series switch chassis is designed with water-based paint and electroplating free technology, significantly reducing carbon emissions;
Adopting a strict front to back, rear to front direct air duct design, the chassis has low air resistance and higher fan heat dissipation efficiency, meeting the needs of parallel deployment of cabinets;
Fan partition heat dissipation, refined intelligent speed regulation, speed response time reaches the second level, achieving power saving of the whole machine through intelligent heat dissipation;