S6550XE-HI series 25G Ethernet switch
The H3C S6550XE-HI series switch is a new generation of high-performance, high port density, and high security 25G/100G interface three-layer Ethernet switch developed by H3C Technology Co., Ltd. (hereinafter referred to as H3C) using industry professional ASIC technology. It supports IPv4/IPV6 dual stack management and forwarding, static routing protocols and RIP, OSPF, BGP, ISIS and other routing protocols, MPLS, and rich management and security features.
The S6550XE-HI series switch provides 48 SFP28 ports, 8 QSFP28 ports, and 1 SFP port, serving as an aggregation layer device in campus networks or as a core for small and medium-sized enterprises; In metropolitan area networks or industry users, 10G/25G aggregation can be provided for lower layer switches downwards, and 40G/100G fiber or link aggregation can be used upwards to converge to the core switch, building a high-performance end-to-end IP network solution together with other H3C products.
The S6550XE-HI series switches support 25G/100G stacking, allowing users to stack switches located in different locations over long distances using fiber optics. This creates a logical entity for multiple devices distributed in different areas and locations, with 1: N backup between devices, further improving network reliability and ease of management.
The S6550XE-HI series switch is based on H3C's advanced Commware V7 software platform, which enables seamless integration of wired and wireless communication. The H3C S6550XE-HI series switch can expand wireless control functions, achieve wireless/wired local forwarding at the access layer, eliminate wireless control bandwidth bottlenecks, expand wireless deployment scale, and save user investment costs.
The H3C S6550XE-HI series Ethernet switch currently includes the following models:
S6550XE-56HF-HI: 48 SFP28 ports, 8 QSFP28 ports, 1 SFP port, 5 fan module slots, 2 power module slots;
Product Features
VxLAN features
The H3C S6550XE-HI series switch supports VXLAN (Virtual Extensible LAN). VXLAN encapsulates data packets sent by virtual machines in UDP and uses the IP/MAC of the physical network as the outer header for transmission over the physical IP network. Upon arrival at the destination, the packet is unblocked by the tunnel endpoint and sent to the target virtual machine, solving the problem of long-distance virtual machine migration between geographically dispersed data centers. It supports EVPN mode.
High performance IPv4/IPv6 business capability
The S6550XE-HI series switch supports IPv4/IPv6 dual protocol stack, with hardware support for IPV4 and IPv6 forwarding. It can be used for the evolution of IPV4 to IPV6 networking, and with the development of IPV6 technology and network progress, it smoothly transitions to IPV6 network, with extremely high network adaptability and scalability, protecting user investment.
INQA Intelligent Network Quality Analysis
The H3C S6550XE-HI series supports iNQA (Intelligent Network Quality Analyzer), which is a detection mechanism suitable for large-scale IP networks and can quickly measure network performance. The H3C S6550XE-HI series currently supports packet loss measurement, which can measure forward, reverse, and bidirectional packet loss situations (including the number of lost packets, packet loss rate, number of lost bytes, and byte loss rate). The measurement results can be used to quickly locate packet loss time, location, and severity.
Highly available M-LAG architecture
The H3C S6550XE-HI series switches support M-LAG (MultichasisLinkAggregationGroup) cross device link aggregation technology (formerly DRNI technology), which achieves cross device link aggregation by virtualizing two physical devices as one device at the forwarding layer, maintaining control layer independence and improving device level reliability.
M-LAG decouples the control plane from the data plane, and each node device can be independently upgraded to ensure zero interruption of user business.
The dual active access of the device provides device level redundancy protection and traffic load sharing, while improving system reliability.
Suitable for overlay and traditional underlay scenarios, with flexible networking.
Rich features
The S6550XE-HI series switch adopts a modular dual power supply and fan frame design, and all modular accessories support hot plugging; Adopting a modular software platform, relevant software functional modules can be flexibly added or removed according to requirements. Through precise physical structure and software process optimization, the end-to-end packet processing latency has been significantly reduced.
The S6550XE-HI series switches support device level, link level, and network level packet loss detection, with network level support for end-to-end and hop by hop packet loss detection.
The S6550XE-HI series switch supports ISSU (uninterrupted service upgrade) and OAM (operation, management, and maintenance), fully meeting the network's needs for high performance, easy management, and green energy saving of devices.
The S6550XE-HI series switches are designed with large meter items and have the ability to access large-scale campus networks.
The S6550XE-HI series switch supports AC fusion and manages WiFi-5 and WiFi-6 AP devices, achieving integrated wired and wireless management.
IRF2 (Second Generation Intelligent Elastic Architecture)
The H3C S6550XE-HI series switch supports IRF2 (Second Generation Intelligent Elastic Architecture) technology, which connects multiple physical devices to each other and virtualizes them as a logical device. In other words, users can manage and use these multiple devices as a single device. IRF can bring the following benefits to users:
After the formation of the simplified management IRF architecture, it is possible to connect to any port of any device to log in to a unified logical device. By configuring a single device, the effect of managing the entire intelligent elastic system and all member devices within the system can be achieved, without physically connecting to each member device to configure and manage them separately.
The various control protocols running in the logical devices formed by simplifying business IRF are also uniformly operated as a single device. For example, routing protocols are uniformly calculated as a single device. With the application of cross device link aggregation technology, they can replace the original spanning tree protocol, which can save a large number of protocol packet interactions between devices, simplify network operation, and shorten convergence time during network turbulence.
Elastic expansion can be achieved according to user needs, ensuring user investment. And the newly added devices can achieve "hot plugging" when joining or leaving the IRF architecture, without affecting the normal operation of other devices.
The high reliability of IRF is reflected in three aspects: links, devices, and protocols. The physical ports between member devices support aggregation function, and the physical connections between the IRF system and the upper and lower level devices also support aggregation function. This improves the reliability of the links through multi link backup; The IRF system consists of multiple member devices. In the event of a Master device failure, the system will quickly and automatically elect a new Master to ensure uninterrupted business through the system, thus achieving device level 1: N backup; The IRF system will have a real-time protocol hot backup function responsible for backing up the configuration information of the protocol to all other member devices, thereby achieving a 1: N protocol reliability.
For high-end switches, the improvement in performance and port density is limited by hardware architecture. The performance and port density of the IRF system are the sum of the performance of all devices and the number of ports within the IRF. Therefore, IRF technology can easily increase the switching capability and user port density of devices by several times, thereby significantly improving device performance.
SDN (Software Defined Networking)
Software Defined Network (SDN) is an innovative network architecture system. Its core technology Openflow separates the control layer and data forwarding layer of the network, greatly simplifying the difficulty of network management and maintenance. More importantly, it achieves flexible control of network traffic, providing a good network platform for innovation in core networks and applications.
The S6550XE-HI series switches support large-scale flow meters and, when combined with H3C SDN controllers, can easily achieve large-scale layer 2 architecture networking and provide the ability to quickly add users to existing networks; While significantly simplifying the difficulty of network management, it can also significantly reduce the cost of network maintenance.
S6550XE-HI also supports receiving multicast NAT flow tables issued by SDN controllers through Openflow, and flexibly transforming fields such as MAC and IP quintuples for multicast messages, which can meet the networking requirements of IP based broadcasting SDI networks.
Powerful QACL functionality
The H3C S6550XE-HI series switches support inbound ACL, outbound ACL, VLAN ACL, and provide comprehensive Diff Server/QoS support. Support packet classification based on information from the data link layer, network layer, and transport layer, such as MAC address, IP protocol type, source/destination (host, network segment) address, and even application port number. Provide flow mapping and classification under various rule combinations, traffic supervision CAR (supporting dual speed tri color and single speed dual color markers, bidirectional CAR), congestion control methods (WRED, Tail Drop), queue scheduling (SP, WRR, SP+WRR), priority labeling and priority mapping (802.1P, DSCP), and support flow shaping based on port/port queue output. This can provide users with service guarantees of different service quality levels, making IP networks truly become A comprehensive network that simultaneously carries data, voice, and video services.
Complete security control strategy
The H3C S6550XE-HI series switch supports EAD (Terminal Access Control) function, which, when combined with the backend system, can integrate terminal security measures such as antivirus and patch repair with network access control and access permission control into a linked security system. Through the inspection, isolation, repair, management, and monitoring of network access terminals, the entire network can transform from passive defense to active defense, from single point defense to comprehensive defense, and from decentralized management to centralized policy management, enhancing the overall defense capability of the network against emerging security threats such as viruses and worms.
The H3C S6550XE-HI series switch supports centralized MAC address authentication, 802.1x authentication, and supports user accounts IP、MAC、VLAN、 Dynamic or static binding of user identification elements such as ports, while implementing dynamic issuance of user policies (VLAN, QoS, ACL); Support real-time management of online users in collaboration with H3C's iMC system, enabling timely diagnosis and dismantling of illegal online activities.
The H3C S6550XE-HI series switch provides enhanced ACL control logic, supports high-capacity inbound and outbound port ACLs, and supports VLAN based ACL issuance, simplifying the user configuration process while avoiding wastage of ACL resources. In addition, the S6550XE-HI series will also support unicast reverse path lookup technology (uRPF). The principle is that when a data packet is received on one interface of the device, it will reverse search the path to verify whether there is a route between the receiving interface and the source address specified in the packet, that is, to verify its authenticity. If it does not exist, the data packet will be deleted, so that we can effectively prevent the increasingly rampant source address spoofing in the network.
Multiple reliability protection
The H3C S6550XE-HI series switch has multiple reliability protections at the device level and link level.
The S6550XE-HI series switch supports 2 pluggable power modules and 5 pluggable fan modules. In addition to device level reliability, the product also supports a variety of link level reliability technologies, including LACP/STP/RSTP/Smart Link/RRPP protection protocols, IRF2 intelligent elastic architecture, 1: N redundant backup, ring stacking, and cross device link aggregation, greatly improving network reliability. When carrying multiple services and large traffic on the network, it does not affect the convergence time of the network, ensuring the normal development of services. Support power and fan fault detection and alarm, support over temperature alarm and over temperature protection, and can automatically adjust fan speed according to temperature changes.
Support hardware level dual boot, using two FLASH chips to store boot software (system boot program), achieving hardware level boot redundancy backup, avoiding switch failure caused by FLASH chip failure.
• Supports ERPS Ethernet Ring Protection Switching (G.8032) protocol, which is a highly reliable and stable link layer technology for Ethernet ring networks, capable of achieving millisecond level fast protection switching.
Rich QoS strategies
The H3C S6550XE-HI series switch supports L2 (Layer 2) to L4 (Layer 4) packet filtering function, providing flow classification based on source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocol type, and VLAN. Provide flexible column scheduling algorithms that can be set based on both ports and queues, supporting three modes: SP (Strict Priority), WRR (Weighted Round Robin), and SP+WRR. Supports CAR (Committed Access Rate) function with a minimum granularity of 64Kbps. Support port mirroring in both outbound and inbound directions, used to monitor messages on specified ports, copy data packets on ports to monitoring ports for network detection and troubleshooting. At the same time, the H3C S6550XE-HI series switch also supports sFlow function, which samples data packets on the network and accurately monitors network traffic on gigabit/10 gigabit high-speed networks for statistical analysis and control of network traffic.
MOD
The H3C S6550XE-HI series switches support MOD (Mirror On Drop) technology, which can monitor specific traffic forwarding within the device and packet loss events caused by specific reasons. When packet loss occurs, relevant information is collected and reported to the collector, so that managers can timely understand the packet loss situation inside the device.