 |
S5136S-8T4XS-EI-Q
H3C
New
1 Year
| Quantity: | |
|---|---|
Software Defined Network (SDN) is an innovative network architecture that simplifies network management and reduces maintenance complexity by separating network control layer and network forwarding layer through OpenFlow. More importantly, it implements flexible network flow control and provides a well-defined network platform for core network application and innovation.
H3C S5136S-EI series switches support a large network flow table. Combined with H3C SDN controller, it can easily implement a two-layer network architecture and quickly add functions in existing network in order to drastically reduce network management complexity while substantially lowers network maintenance cost.
H3C S5136S-EI series switches support IRF2 technology that connects multiple physical devices (up to 9) to a logical device, that is to say, users can manage and use these devices as a single device. IRF can bring the following benefits to the user:
Simplify the management: Any one of the ports can be connected to any of the devices to login to a unified logical device, and to manage the whole system and all the members of the system through the configuration of a single device, without the physical connection to each member of the device.
High scalability: With IRF2, plug-n-play device aggregation can be achieved by adding one or more switches into the IRF2 stack and enabling IRF2 stacking on the new device. New devices can be managed with a single IP, and upgraded at the same time to reduce network expansion cost.
High reliability: IRF2 patented 1: N standby technology allows each slave device in the IRF2 stack to serve as the backup of the master, creating control and data link redundancy, as well as uninterrupted layer-3 forwarding. This improves the reliability, avoids unplanned business downtime and serves to improve overall performance. When the master device fails, traffic remains uninterrupted.
Load balancing: IRF2 supports cross-device link aggregation, upstream and downstream can be connected to more than one physical link, which creates another layer of network redundancy and boosts the network resource utilization.
Availability: H3C Implements IRF2 through standard Gigabit Ethernet (1GE) ports ports which allocates bandwidth for business and application access and reasonably splits local traffic and upstream traffic.
H3C S5136S-EI series switches support innovative single-port triple-authentication function, the access authentication modes supported by different clients are different. For example, some clients can only perform MAC addresses Authentication (such as the printer terminal), and some user host for 802.1X authentication, and some user hosts only want to access through the Web portal authentication. In order to flexibly adapt to the multi-authentication requirements of the network environment, H3C S5136S-EI series switches s support single-port multi-authentication unified deployment.
H3C S5136S-EI series switches support SSH V2 (Secure Shell V2) to secure information security, and strong authentication protect the Ethernet network switch from attacks such as IP address spoofing and clear text interception.
ARP attack and ARP virus are major threats to LAN security, so H3C S5136S-EI series switches come with diverse ARP protection functions such as ARP Detection to challenge the legitimacy of client, validate the ARP packets, and set a speed limit for ARP to prevent ARP swarm attacks from targeting CPU.
H3C S5136S-EI series switches support EAD (End User Admission Domination) function. With the iMC (intelligent Management Centre) system, EAD integrates terminal security policies, such as anti-virus and patch update, network access control and access right control policies to form a cooperative security system. By checking, isolating, updating, managing, and monitoring access terminals, EAD changes to passive mode, single point network protection to active, comprehensive network protection, and changes separate management to centralized management, enhancing the network capability for preventing viruses, worms, and new threats.
H3C S5136S-EI series switches feature multiple redundancy measures at the device and link levels, support current and voltage surge control, overheat protection, power and fan troubleshooting and alert, as well as fan speed adjustment when the temperature changes.
Apart from device level redundancy, H3C S5136S-EI series switches also provide diverse link redundancy support such as LACP/STP/RSTP/MSTP/Smart Link protocols. It supports IRF2 and 1: N redundancy backup as well as cross-device link aggregation which substantially increases network reliability.
H3C S5136S-EI series switches support packet filtering at Layer 2 through Layer 4, and traffic classification based on source MAC addresses, destination MAC addresses, source IP addresses, destination IP addresses, TCP/UDP port numbers, protocol types, and VLANs. It supports flexible queue scheduling algorithms based on ports and queues, including strict priority (SP), weighted round Robin (WRR) and SP+WRR. H3C S5136S-EI series switches enable committed access rate (CAR) with the minimum granularity of 8 kbps. It supports port mirroring in the outbound and inbound directions, to transfer the packets on the specific ports, and to mirror the packets to the mirror port for network detection and troubleshooting.
H3C S5136S-EI series switches use professional built-in surge protection technology and supports the industry-leading 10KV service port surge protection capability, which greatly reduces the damage rate of surge strikes to equipment even in harsh working environments.
H3C S5136S-EI series switches make switch management with ease with the support of SNMPv1/v2/v3, which can be managed by NM platforms, such as Open View and iMC. With CLI and Telnet switch management is made easier. And with SSH 2.0 encryption, switch management security is enhanced.
H3C S5136S-EI series switches support PoE power supply and can remotely power powered devices (PDs) such as APs and cameras. In addition, H3C S5136S-EI series also integrates AI capabilities into PoE technology, allowing PoE switches to support:
Fast PoE: Typically, PIs (power interface) does not deliver power to PDs (powered device) the moment the PSE (power sourcing equipment) is powered on but wait until the PSE completes startup. Fast PoE enables PIs to deliver power to PDs within few seconds after power is supplied to the PSE.
Perpetual PoE: Perpetual PoE continuously monitors the PD states and ensures continued power supply to PDs even when the PSE device is hot rebooting.
PoE Watchdog: PoE watchdog function enables the adaptive monitoring network to have a “self-healing” function. When this function is turned on, the system can automatically detect the camera 24 hours. If the camera has no stream output, it is judged that the camera is crashed. The camera is restarted by cutting off the PoE power supply to solve the camera crashed problem. No manual operation is required, which can provide timely and reliable solutions for operation and maintenance.
H3C S5136S-EI series switches implement a variety of green energy saving features, including auto-power-down (port automatic energy saving), if the interface status has been down for a period of time, the system automatically stops the interface power and the system enters power-saving mode. They also support EEE energy feature, by which if a port stays idle for a period of time, the system will set the port to energy-saving mode. H3C S5136S-EI series switches are also compliant with material environmental protection and the EU RoHS safety standard.
H3C S5136S-EI series switches have fanless design, include 8-port, 24-port, and 48-port switches, significantly reduce devices power consumption and noise.
Features | S5136S-8T4XS-EI-Q | ||
Port Switching Capacity | 60Gbps | ||
Forwarding Capacity | 45Mpps | ||
System Switching Capacity | 336Gbps | ||
CPU | Dual Core, 1.2GHz | ||
Flash | 1G | ||
SDRAM | 2G | ||
Dimensions(H x W x D) | 44 × 266 × 161 mm | ||
Weight | ≤ 1.1KG | ||
10/100/1000 Base-T port | 8 | ||
SFP port | 2 | ||
SFP Plus port | 2 | ||
Console Port | 1 | ||
Type-CConsole Port | 1 | ||
Management Ethernet Port | 1 | ||
USB Port | 1 | ||
Maximum Stacking Bandwidth | 40Gbps | ||
Input Voltage | Rated voltage range: 100 VAC to 240 VAC @ 50 Hz or 60 Hz | ||
Power consumption (static) Data collection standard: no load | 5 W | ||
Power consumption (with typical configuration) Data collection standard: fully configured with DAC cables or twisted pair cables, 30% loaded | 8 W | ||
Power consumption (fully configured) Data collection standard: fully configured with transceiver modules or twisted pair cables, 100% loaded | 16 W | ||
Fan NUM | Fanless | ||
Sound pressure level at 27°C (80.6°F) | NA | ||
MTBF(Year) | 141 | ||
MTTR(Hour) | 1 | ||
Operating Temperature | -5℃ ~ 50℃(Normal operating temperature) | ||
Storage Temperature | -40℃ ~ 70℃ | ||
Operating & storage humidity | 5% RH to 95% RH, non-condensing | ||
Feature | S5136S-EI switch series |
LAN | VLAN ID range 0 to 4095(Total 4096, 0 and 4095 are reserved) Access/Trunk/Hybrid VLAN Port-based VLAN MAC-based VLAN IP subnet-based VLAN Protocol-based VLAN IEEE 802.1P(CoS priority) Private VLAN Voice VLAN QinQ (802.1Q-in-802.1Q) Vlan mapping Static/Dynamic/Blackhole/Multiport unicast MAC MAC automatic learning and aging Port-based/VLAN-based MAC learning limit MAC filter Port isolation Loop detection MVRP (Multiple VLAN Registration Protocol) GVRP (Generic VLAN Registration Protocol) STP (Spanning tree protocol) RSTP (Rapid Spanning Tree Protocol) MSTP (Multiple Spanning Tree Protocol) PVST (Per-VLAN Spanning Tree) (compatible with PVST+/RPVST+/PVRST+) BPDU/root/loop/TC-BPDU/PVST BPDU/dispute loopback guard BPDU filter Role/TC-BPDU transmission restriction LLDP (Link Layer Discovery Protocol) and LLDP-MED Broadcast/multicast/unknown unicast storm constrain Jumbo frame |
Ethernet link aggregation | Static aggregation Dynamic aggregation Port aggregation LACP (Link Aggregation Control Protocol) S-MLAG |
PoE | Fast PoE Perpetual PoE PoE watchdog (Self-healing PoE) PSE power monitoring |
IP Services | Static/Dynamic/Gratuitous/proxy ARP ARP snooping/fast-reply/direct route advertisement/ping ARP attack detection ARP source suppression DHCP (Dynamic Host Configuration Protocol) DHCP Server/relay agent/client/snooping DNS (Domain Name System) IRDP (ICMP Router Discovery Protocol) UDP helper ND (Neighbor Discovery) ND snooping/proxy/direct route advertisement/ping DHCPv6 Server/relay agent/client/snooping/guard HTTP redirect IPv4/IPv6 over IPv4 tunneling, and IPv4/IPv6 over IPv6 tunneling IPv4/IPv6 Fast Forwarding |
Routing | Static routing, RIP, OSPF IPv4/IPv6 dual stack IPv4/IPv6 ECMP (Equal-cost multi-path routing) IPv4/IPv6 PBR (Policy-based routing) IPv4/IPv6 Routing policy IPv6 static routing, RIPng, OSPFv3 Pingv6, Telnetv6, FTPv6, TFTPv6, DNSv6, ICMPv6 Dual-stack PBR |
Forwarding | Hardware-based (ASlC) Wire-speed/Line-rate architecture Store-and-forward |
Broadcast/Multicast/Unicast storm suppression | Storm suppression based on port bandwidth percentage Storm suppression based on PPS Storm suppression based on BPS Broadcast traffic/Multicast traffic/Unknown unicast traffic suppression |
Multicast | PIM snooping IGMPv1/IGMPv2/IGMPv3 IGMP Snooping IGMP snooping proxying IGMP Filter and IGMP Fast leave IPv6 PIM snooping MLDv1/MLDV2 MLD Snooping MLD snooping proxying Multicast VLAN |
ACL/QoS | ACL (Access Control List) Advanced ACL User-defined ACL Ingress and Egress ACL Ingress/Egress CAR Diff-Serv QoS Eight queues on a port 802.1P/DSCP Priority marking and remarking 802.1p, TOS, DSCP, and EXP priority mapping Flexible queue scheduling algorithms including SP, WRR, SP+WRR Traffic shaping Traffic redirecting Time ranges Traffic classification based on source MAC, destination MAC, source IP, destination IP, port, protocol, and VLAN |
VPN | VPN-instance MCE (Multi-VPN Instance Customer Edge) IPv6 MCE |
Security | RBAC (Role-based access control) AAA (Authentication, Authorization, and Accounting) RADIUS (Remote Authentication Dial-In User Service) TACACS (Terminal Access Controller Access Control System) HWTACACS (HW Terminal Access Controller Access Control System) (Same authentication processes and implementations with TACACS+) 802.1X authentication Portal authentication MAC authentication Web authentication Triple authentication Port security SSH1.x and SSH2.0 (Secure Shell) SSL (Secure Sockets Layer) HTTP/HTTPs Public Key Infrastructure (PKI) Control Plane Protection (CoPP) Attack detection and prevention TCP attack prevention IPSG (IP source guard) IPv6 RA Guard ARP attack protection ND attack protection MFF (MAC-forced forwarding) SAVI (Source Address Validation Improvement) FIPS (Federal Information Processing Standards) Hierarchical user management and password protection EAD (Endpoint Admission Defense) Basic and advanced ACLs for packet filtering OSPF, RIPv2, plain text and MD5 authentication |
High Availability | Ethernet OAM (IEEE 802.3ah) CFD (Connectivity Fault Detection) (IEEE 802.1ag and ITU-T Y.1731) DLDP (Device Link Detection Protocol) RRPP (Rapid Ring Protection Protocol) ERPS (G.8032 Ethernet Ring Protection Switching) Smart Link Monitor Link VRRPv2(Virtual Router Redundancy Protocol) VRRPv3 BFD (Bidirectional forwarding detection) Hardware BFD BFD for VRRP/OSPF /static routing, with a failover detection time less than 50 milliseconds IRF stacking convergency time less than 50 milliseconds Track Process redundancy/placement CPU protection Hot patching Link aggregation VCT (virtual cable test) Smart-Link Secure boot ISSU (In-Service Software Upgrade) |
Network Management | NQA (Network quality analyzer) Performance management through gRPC or NETCONF MDI/MDIX (medium-dependent interface/MDI crossover) NTP (Network Time Protocol) SNMPv1/SNMPv2c/SNMPv3 RMON (Remote Network Monitoring) and groups 1,2,3 and 9 MIB NETCONF/YANG Restful/Restconf API EAA (Embedded Automation Architecture) Port mirroring SPAN (Switch Port Analyzer)/RSPAN (Remote SPAN) Flow mirroring sFlow Information center Multiple syslog server connection VCF (Virtual Converged Framework) CWMP (CPE WAN Management Protocol/TR-069) ONVIF (Open Network Video Interface Forum) Fault alarm and automatic fault recovery System logs Alarming based on severity Debugging information output Device status monitoring mechanism, including the CPU engine, backplane, chips and other key components Configuration through CLI, Telnet, and console port Web-based configuration Zero Touch Provisioning Cloud management WebSocket Loading and upgrading through XModem/FTP/TFTP/SFTP/USB iMC network management system SmartMC (embedded Smart Graphical Management Center) No additional license required for switch software and hardware |
Stacking | Intelligent Resilient Framework 2 (IRF2) (fast convergence within 50ms) Distributed device management Distributed link aggregation Distributed resilient routing Stacking through standard Ethernet ports Local device stacking and remote device stacking LACP-, BFD-, and ARP-based multi-active detection (MAD) |
Automatic Configuration | Server-based automatic configuration USB-based automatic configuration |
Programmability and Automation | Ansible Auto DevOps by using Python, NETCONF, TCL, and Restful APIs for automated network programming |
Visualization | gRPC (Google remote procedure call) Flow group |
OpenFlow | OpenFlow 1.3 Multiple controllers (EQUAL, master/slave） Multiple tables flow Group table |
EMC | FCC Part 15 Subpart B CLASS A ICES-003 CLASS A VCCI CLASS A CISPR 32 CLASS A EN 55032 CLASS A CISPR 35 AS/NZS CISPR 32 EN 55035 EN 61000-3-2 EN 61000-3-3 ETSI EN 300 386 |
Safety | CSA C22.2 No. 62368-1-14 IEC 62368-1 EN 62368-1 EN 60825-1 AS/NZS 62368-1 GB 4943.1 |
RoHS | EU RoHS2.0 Directive China RoHS 2.0 |
Entries | S5136S-EI Series Switches |
MAC address entries | 16K |
VLAN | 4096 (VLAN 0 and 4095 are reserved) |
Active VLAN | 4094 |
VLAN interface | 32 |
IPv4 routing entries | 3000 |
IPv4 ARP entries | 2048 |
IPv4 ACL entries | 1024 |
IPv6 unicast routing entries | 750 |
IPv6 ACL entries | 1024 |
IPv6 ND entries | 750 |
Multicast L2 entries | 999 |
Jumbo frame length | 10000 |
QOS forward queues | 8 |
MAX num in one link group | 8 |
Link group num | 124 |
Multicast Group | 500 |
Groups of RMON | 4 |
Product Name | Total PoE power capacity | PoE Ports Quantity |
S5136S-8FP4XS-EI-Q | 125 W | 15.4W (802.3af): 8 |
S5136S-10FPT4X-EI-Q | 125 W | 15.4W (802.3af): 8 |
S5136S-16FP4X-EI | 248 W | 15.4W (802.3af): 16 |
S5136S-24P4X-EI | 248 W | 15.4W (802.3af): 16 |
S5136S-24FP4S4X-EI | 405 W | 15.4W (802.3af): 24 |
S5136S-24FP4T4S-EI S5136S-48P4S-EI | 405 W | 15.4W (802.3af): 24 |
390 W | 15.4W (802.3af): 25 | |
S5136S-48P4X-EI | 390 W | 15.4W (802.3af): 25 |
S5136S-48FP4S-EI | 770 W | 15.4W (802.3af): 48 |
S5136S-48FP4X-EI | 770 W | 15.4W (802.3af): 48 |
Removable power supplies | S5136S-24S8T4X-EI S5136S-48ST4X-EI S5136S-48S2T4X-EI |
CA-70A12 (AC) | Pluggable 70W AC Power Supply |
PSR150-D1-GL (DC) | Supported |
Organization | Standards And Protocols |
IEEE | 802.1x Port based network access control protocol |
802.1ab Link Layer Discovery Protocol | |
802.1ak MVRP and MRP | |
802.1ax Link Aggregation | |
802.1d Media Access Control Bridges | |
802.1p Priority | |
802.1q VLANs | |
802.1s Multiple Spanning Trees | |
802.1ag Connectivity Fault Management | |
802.1v VLAN classification by Protocol and Port | |
802.1w Rapid Reconfiguration of Spanning Tree | |
802.3ad Link Aggregation Control Protocol | |
802.3af Power over Ethernet | |
802.3at Power over Ethernet | |
802.3az Energy Efficient Ethernet | |
802.3ah Ethernet in the First Mile | |
802.3x Full Duplex and flow control | |
802.3z 1000BASE-SX,1000BASE-LX | |
802.3u 100BASE-T | |
802.3ab 1000BASE-T | |
IETF | RFC 768 User Datagram Protocol (UDP) |
RFC 791 Internet Protocol (IP) | |
RFC 792 Internet Control Message Protocol (ICMP) | |
RFC 793 Transmission Control Protocol (TCP) | |
RFC 813 Window and Acknowledgement Strategy in TCP | |
RFC 815 IP datagram reassembly algorithms | |
RFC 8201 Path MTU Discovery for IP version 6 | |
RFC 826 Address Resolution Protocol (ARP) | |
RFC 879 TCP maximum segment size and related topics | |
RFC 896 Congestion control in IP/TCP internetworks | |
RFC 917 Internet subnets | |
RFC 919 Broadcasting Internet Datagrams | |
RFC 922 Broadcasting Internet Datagrams in the Presence of Subnets (IP_BROAD) | |
RFC 951 BOOTP | |
RFC 1027 Proxy ARP | |
RFC 1122 Requirements for Internet Hosts - Communications Layers | |
RFC 1213 MIB-2 Stands for Management Information Base | |
RFC 1215 Convention for defining traps for use with the SNMP | |
RFC 1256 ICMP Router Discovery Messages | |
RFC 1350 TFTP Protocol (revision 2) | |
RFC 1393 Traceroute Using an IP Option | |
RFC 1519 Classless Inter-Domain Routing (CIDR) | |
RFC 1542 BOOTP Extensions | |
RFC 1583 OSPF Version 2 | |
RFC 1591 Domain Name System Structure and Delegation | |
RFC 1757 Remote Network Monitoring Management Information Base | |
RFC 1772 Application of the Border Gateway Protocol in the Internet | |
RFC 1812 Requirements for IP Version 4 Router | |
RFC 1918 Address Allocation for Private Internet | |
RFC 2131 Dynamic Host Configuration Protocol (DHCP) | |
RFC 2132 DHCP Options and BOOTP Vendor Extensions | |
RFC 2273 SNMPv3 Applications | |
RFC 2328 OSPF Version 2 | |
RFC 2375 IPv6 Multicast Address Assignments | |
RFC 2401 Security Architecture for the Internet Protocol | |
RFC 2402 IP Authentication Header | |
RFC 2460 Internet Protocol, Version 6 (IPv6) Specification | |
RFC 2464 Transmission of IPv6 over Ethernet Networks | |
RFC 2576 (Coexistence between SNMP V1, V2, V3) | |
RFC 2579 Textual Conventions for SMIv2 | |
RFC 2580 Conformance Statements for SMIv2 | |
RFC 2711 IPv6 Router Alert Option | |
RFC 2787 Definitions of Managed Objects for the Virtual Router Redundancy Protocol | |
RFC 2925 Definitions of Managed Objects for Remote Ping, Traceroute, and Lookup Operations | |
RFC 3101 OSPF Not-so-stubby-area option | |
RFC 3046 DHCP Relay Agent Information Option | |
RFC 3056 Connection of IPv6 Domains via IPv4 Clouds | |
RFC 3137 OSPF Stub Router Advertisement sFlow | |
RFC 3416 (SNMP Protocol Operations v2) | |
RFC 3417 (SNMP Transport Mappings) | |
RFC 3418 Management Information Base (MIB) for the Simple Network Management Protocol (SNMP) | |
RFC 3484 Default Address Selection for IPv6 | |
RFC 3509 Alternative Implementations of OSPF Area Border Routers | |
RFC 3580 IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines | |
RFC 3623 Graceful OSPF Restart | |
RFC 3768 Virtual Router Redundancy Protocol (VRRP) | |
RFC 4022 MIB for TCP | |
RFC 4113 MIB for UDP | |
RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Routers | |
RFC 4251 The Secure Shell (SSH) Protocol | |
RFC 4252 SSHv6 Authentication | |
RFC 4253 SSHv6 Transport Layer | |
RFC 4254 SSHv6 Connection | |
RFC 4291 IP Version 6 Addressing Architecture | |
RFC 4292 IP Forwarding Table MIB | |
RFC 4293 Management Information Base for the Internet Protocol (IP) | |
RFC 4419 Key Exchange for SSH | |
RFC 4443 ICMPv6 | |
RFC 4541 IGMP & MLD Snooping Switch | |
RFC 4552 Authentication/Confidentiality for OSPFv3 | |
RFC 4750 OSPFv2 MIB partial support no SetMIB | |
RFC 4861 IPv6 Neighbor Discovery | |
RFC 4862 IPv6 Stateless Address Auto-configuration | |
RFC 4940 IANA Considerations for OSPF | |
RFC 5095 Deprecation of Type 0 Routing Headers in IPv6 | |
RFC 5187 OSPFv3 Graceful Restart | |
RFC 5340 OSPFv3 for IPv6 | |
RFC 5424 Syslog Protocol | |
RFC 5798 VRRP (exclude Accept Mode and sub-sec timer) | |
RFC 5880 Bidirectional Forwarding Detection | |
RFC 5905 Network Time Protocol Version 4: Protocol and Algorithms Specification | |
RFC 6987 OSPF Stub Router Advertisement | |
RFC 5280 Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile | |
RFC 5381 Experience of Implementing NETCONF over SOAP |
Software Defined Network (SDN) is an innovative network architecture that simplifies network management and reduces maintenance complexity by separating network control layer and network forwarding layer through OpenFlow. More importantly, it implements flexible network flow control and provides a well-defined network platform for core network application and innovation.
H3C S5136S-EI series switches support a large network flow table. Combined with H3C SDN controller, it can easily implement a two-layer network architecture and quickly add functions in existing network in order to drastically reduce network management complexity while substantially lowers network maintenance cost.
H3C S5136S-EI series switches support IRF2 technology that connects multiple physical devices (up to 9) to a logical device, that is to say, users can manage and use these devices as a single device. IRF can bring the following benefits to the user:
Simplify the management: Any one of the ports can be connected to any of the devices to login to a unified logical device, and to manage the whole system and all the members of the system through the configuration of a single device, without the physical connection to each member of the device.
High scalability: With IRF2, plug-n-play device aggregation can be achieved by adding one or more switches into the IRF2 stack and enabling IRF2 stacking on the new device. New devices can be managed with a single IP, and upgraded at the same time to reduce network expansion cost.
High reliability: IRF2 patented 1: N standby technology allows each slave device in the IRF2 stack to serve as the backup of the master, creating control and data link redundancy, as well as uninterrupted layer-3 forwarding. This improves the reliability, avoids unplanned business downtime and serves to improve overall performance. When the master device fails, traffic remains uninterrupted.
Load balancing: IRF2 supports cross-device link aggregation, upstream and downstream can be connected to more than one physical link, which creates another layer of network redundancy and boosts the network resource utilization.
Availability: H3C Implements IRF2 through standard Gigabit Ethernet (1GE) ports ports which allocates bandwidth for business and application access and reasonably splits local traffic and upstream traffic.
H3C S5136S-EI series switches support innovative single-port triple-authentication function, the access authentication modes supported by different clients are different. For example, some clients can only perform MAC addresses Authentication (such as the printer terminal), and some user host for 802.1X authentication, and some user hosts only want to access through the Web portal authentication. In order to flexibly adapt to the multi-authentication requirements of the network environment, H3C S5136S-EI series switches s support single-port multi-authentication unified deployment.
H3C S5136S-EI series switches support SSH V2 (Secure Shell V2) to secure information security, and strong authentication protect the Ethernet network switch from attacks such as IP address spoofing and clear text interception.
ARP attack and ARP virus are major threats to LAN security, so H3C S5136S-EI series switches come with diverse ARP protection functions such as ARP Detection to challenge the legitimacy of client, validate the ARP packets, and set a speed limit for ARP to prevent ARP swarm attacks from targeting CPU.
H3C S5136S-EI series switches support EAD (End User Admission Domination) function. With the iMC (intelligent Management Centre) system, EAD integrates terminal security policies, such as anti-virus and patch update, network access control and access right control policies to form a cooperative security system. By checking, isolating, updating, managing, and monitoring access terminals, EAD changes to passive mode, single point network protection to active, comprehensive network protection, and changes separate management to centralized management, enhancing the network capability for preventing viruses, worms, and new threats.
H3C S5136S-EI series switches feature multiple redundancy measures at the device and link levels, support current and voltage surge control, overheat protection, power and fan troubleshooting and alert, as well as fan speed adjustment when the temperature changes.
Apart from device level redundancy, H3C S5136S-EI series switches also provide diverse link redundancy support such as LACP/STP/RSTP/MSTP/Smart Link protocols. It supports IRF2 and 1: N redundancy backup as well as cross-device link aggregation which substantially increases network reliability.
H3C S5136S-EI series switches support packet filtering at Layer 2 through Layer 4, and traffic classification based on source MAC addresses, destination MAC addresses, source IP addresses, destination IP addresses, TCP/UDP port numbers, protocol types, and VLANs. It supports flexible queue scheduling algorithms based on ports and queues, including strict priority (SP), weighted round Robin (WRR) and SP+WRR. H3C S5136S-EI series switches enable committed access rate (CAR) with the minimum granularity of 8 kbps. It supports port mirroring in the outbound and inbound directions, to transfer the packets on the specific ports, and to mirror the packets to the mirror port for network detection and troubleshooting.
H3C S5136S-EI series switches use professional built-in surge protection technology and supports the industry-leading 10KV service port surge protection capability, which greatly reduces the damage rate of surge strikes to equipment even in harsh working environments.
H3C S5136S-EI series switches make switch management with ease with the support of SNMPv1/v2/v3, which can be managed by NM platforms, such as Open View and iMC. With CLI and Telnet switch management is made easier. And with SSH 2.0 encryption, switch management security is enhanced.
H3C S5136S-EI series switches support PoE power supply and can remotely power powered devices (PDs) such as APs and cameras. In addition, H3C S5136S-EI series also integrates AI capabilities into PoE technology, allowing PoE switches to support:
Fast PoE: Typically, PIs (power interface) does not deliver power to PDs (powered device) the moment the PSE (power sourcing equipment) is powered on but wait until the PSE completes startup. Fast PoE enables PIs to deliver power to PDs within few seconds after power is supplied to the PSE.
Perpetual PoE: Perpetual PoE continuously monitors the PD states and ensures continued power supply to PDs even when the PSE device is hot rebooting.
PoE Watchdog: PoE watchdog function enables the adaptive monitoring network to have a “self-healing” function. When this function is turned on, the system can automatically detect the camera 24 hours. If the camera has no stream output, it is judged that the camera is crashed. The camera is restarted by cutting off the PoE power supply to solve the camera crashed problem. No manual operation is required, which can provide timely and reliable solutions for operation and maintenance.
H3C S5136S-EI series switches implement a variety of green energy saving features, including auto-power-down (port automatic energy saving), if the interface status has been down for a period of time, the system automatically stops the interface power and the system enters power-saving mode. They also support EEE energy feature, by which if a port stays idle for a period of time, the system will set the port to energy-saving mode. H3C S5136S-EI series switches are also compliant with material environmental protection and the EU RoHS safety standard.
H3C S5136S-EI series switches have fanless design, include 8-port, 24-port, and 48-port switches, significantly reduce devices power consumption and noise.
Features | S5136S-8T4XS-EI-Q | ||
Port Switching Capacity | 60Gbps | ||
Forwarding Capacity | 45Mpps | ||
System Switching Capacity | 336Gbps | ||
CPU | Dual Core, 1.2GHz | ||
Flash | 1G | ||
SDRAM | 2G | ||
Dimensions(H x W x D) | 44 × 266 × 161 mm | ||
Weight | ≤ 1.1KG | ||
10/100/1000 Base-T port | 8 | ||
SFP port | 2 | ||
SFP Plus port | 2 | ||
Console Port | 1 | ||
Type-CConsole Port | 1 | ||
Management Ethernet Port | 1 | ||
USB Port | 1 | ||
Maximum Stacking Bandwidth | 40Gbps | ||
Input Voltage | Rated voltage range: 100 VAC to 240 VAC @ 50 Hz or 60 Hz | ||
Power consumption (static) Data collection standard: no load | 5 W | ||
Power consumption (with typical configuration) Data collection standard: fully configured with DAC cables or twisted pair cables, 30% loaded | 8 W | ||
Power consumption (fully configured) Data collection standard: fully configured with transceiver modules or twisted pair cables, 100% loaded | 16 W | ||
Fan NUM | Fanless | ||
Sound pressure level at 27°C (80.6°F) | NA | ||
MTBF(Year) | 141 | ||
MTTR(Hour) | 1 | ||
Operating Temperature | -5℃ ~ 50℃(Normal operating temperature) | ||
Storage Temperature | -40℃ ~ 70℃ | ||
Operating & storage humidity | 5% RH to 95% RH, non-condensing | ||
Feature | S5136S-EI switch series |
LAN | VLAN ID range 0 to 4095(Total 4096, 0 and 4095 are reserved) Access/Trunk/Hybrid VLAN Port-based VLAN MAC-based VLAN IP subnet-based VLAN Protocol-based VLAN IEEE 802.1P(CoS priority) Private VLAN Voice VLAN QinQ (802.1Q-in-802.1Q) Vlan mapping Static/Dynamic/Blackhole/Multiport unicast MAC MAC automatic learning and aging Port-based/VLAN-based MAC learning limit MAC filter Port isolation Loop detection MVRP (Multiple VLAN Registration Protocol) GVRP (Generic VLAN Registration Protocol) STP (Spanning tree protocol) RSTP (Rapid Spanning Tree Protocol) MSTP (Multiple Spanning Tree Protocol) PVST (Per-VLAN Spanning Tree) (compatible with PVST+/RPVST+/PVRST+) BPDU/root/loop/TC-BPDU/PVST BPDU/dispute loopback guard BPDU filter Role/TC-BPDU transmission restriction LLDP (Link Layer Discovery Protocol) and LLDP-MED Broadcast/multicast/unknown unicast storm constrain Jumbo frame |
Ethernet link aggregation | Static aggregation Dynamic aggregation Port aggregation LACP (Link Aggregation Control Protocol) S-MLAG |
PoE | Fast PoE Perpetual PoE PoE watchdog (Self-healing PoE) PSE power monitoring |
IP Services | Static/Dynamic/Gratuitous/proxy ARP ARP snooping/fast-reply/direct route advertisement/ping ARP attack detection ARP source suppression DHCP (Dynamic Host Configuration Protocol) DHCP Server/relay agent/client/snooping DNS (Domain Name System) IRDP (ICMP Router Discovery Protocol) UDP helper ND (Neighbor Discovery) ND snooping/proxy/direct route advertisement/ping DHCPv6 Server/relay agent/client/snooping/guard HTTP redirect IPv4/IPv6 over IPv4 tunneling, and IPv4/IPv6 over IPv6 tunneling IPv4/IPv6 Fast Forwarding |
Routing | Static routing, RIP, OSPF IPv4/IPv6 dual stack IPv4/IPv6 ECMP (Equal-cost multi-path routing) IPv4/IPv6 PBR (Policy-based routing) IPv4/IPv6 Routing policy IPv6 static routing, RIPng, OSPFv3 Pingv6, Telnetv6, FTPv6, TFTPv6, DNSv6, ICMPv6 Dual-stack PBR |
Forwarding | Hardware-based (ASlC) Wire-speed/Line-rate architecture Store-and-forward |
Broadcast/Multicast/Unicast storm suppression | Storm suppression based on port bandwidth percentage Storm suppression based on PPS Storm suppression based on BPS Broadcast traffic/Multicast traffic/Unknown unicast traffic suppression |
Multicast | PIM snooping IGMPv1/IGMPv2/IGMPv3 IGMP Snooping IGMP snooping proxying IGMP Filter and IGMP Fast leave IPv6 PIM snooping MLDv1/MLDV2 MLD Snooping MLD snooping proxying Multicast VLAN |
ACL/QoS | ACL (Access Control List) Advanced ACL User-defined ACL Ingress and Egress ACL Ingress/Egress CAR Diff-Serv QoS Eight queues on a port 802.1P/DSCP Priority marking and remarking 802.1p, TOS, DSCP, and EXP priority mapping Flexible queue scheduling algorithms including SP, WRR, SP+WRR Traffic shaping Traffic redirecting Time ranges Traffic classification based on source MAC, destination MAC, source IP, destination IP, port, protocol, and VLAN |
VPN | VPN-instance MCE (Multi-VPN Instance Customer Edge) IPv6 MCE |
Security | RBAC (Role-based access control) AAA (Authentication, Authorization, and Accounting) RADIUS (Remote Authentication Dial-In User Service) TACACS (Terminal Access Controller Access Control System) HWTACACS (HW Terminal Access Controller Access Control System) (Same authentication processes and implementations with TACACS+) 802.1X authentication Portal authentication MAC authentication Web authentication Triple authentication Port security SSH1.x and SSH2.0 (Secure Shell) SSL (Secure Sockets Layer) HTTP/HTTPs Public Key Infrastructure (PKI) Control Plane Protection (CoPP) Attack detection and prevention TCP attack prevention IPSG (IP source guard) IPv6 RA Guard ARP attack protection ND attack protection MFF (MAC-forced forwarding) SAVI (Source Address Validation Improvement) FIPS (Federal Information Processing Standards) Hierarchical user management and password protection EAD (Endpoint Admission Defense) Basic and advanced ACLs for packet filtering OSPF, RIPv2, plain text and MD5 authentication |
High Availability | Ethernet OAM (IEEE 802.3ah) CFD (Connectivity Fault Detection) (IEEE 802.1ag and ITU-T Y.1731) DLDP (Device Link Detection Protocol) RRPP (Rapid Ring Protection Protocol) ERPS (G.8032 Ethernet Ring Protection Switching) Smart Link Monitor Link VRRPv2(Virtual Router Redundancy Protocol) VRRPv3 BFD (Bidirectional forwarding detection) Hardware BFD BFD for VRRP/OSPF /static routing, with a failover detection time less than 50 milliseconds IRF stacking convergency time less than 50 milliseconds Track Process redundancy/placement CPU protection Hot patching Link aggregation VCT (virtual cable test) Smart-Link Secure boot ISSU (In-Service Software Upgrade) |
Network Management | NQA (Network quality analyzer) Performance management through gRPC or NETCONF MDI/MDIX (medium-dependent interface/MDI crossover) NTP (Network Time Protocol) SNMPv1/SNMPv2c/SNMPv3 RMON (Remote Network Monitoring) and groups 1,2,3 and 9 MIB NETCONF/YANG Restful/Restconf API EAA (Embedded Automation Architecture) Port mirroring SPAN (Switch Port Analyzer)/RSPAN (Remote SPAN) Flow mirroring sFlow Information center Multiple syslog server connection VCF (Virtual Converged Framework) CWMP (CPE WAN Management Protocol/TR-069) ONVIF (Open Network Video Interface Forum) Fault alarm and automatic fault recovery System logs Alarming based on severity Debugging information output Device status monitoring mechanism, including the CPU engine, backplane, chips and other key components Configuration through CLI, Telnet, and console port Web-based configuration Zero Touch Provisioning Cloud management WebSocket Loading and upgrading through XModem/FTP/TFTP/SFTP/USB iMC network management system SmartMC (embedded Smart Graphical Management Center) No additional license required for switch software and hardware |
Stacking | Intelligent Resilient Framework 2 (IRF2) (fast convergence within 50ms) Distributed device management Distributed link aggregation Distributed resilient routing Stacking through standard Ethernet ports Local device stacking and remote device stacking LACP-, BFD-, and ARP-based multi-active detection (MAD) |
Automatic Configuration | Server-based automatic configuration USB-based automatic configuration |
Programmability and Automation | Ansible Auto DevOps by using Python, NETCONF, TCL, and Restful APIs for automated network programming |
Visualization | gRPC (Google remote procedure call) Flow group |
OpenFlow | OpenFlow 1.3 Multiple controllers (EQUAL, master/slave） Multiple tables flow Group table |
EMC | FCC Part 15 Subpart B CLASS A ICES-003 CLASS A VCCI CLASS A CISPR 32 CLASS A EN 55032 CLASS A CISPR 35 AS/NZS CISPR 32 EN 55035 EN 61000-3-2 EN 61000-3-3 ETSI EN 300 386 |
Safety | CSA C22.2 No. 62368-1-14 IEC 62368-1 EN 62368-1 EN 60825-1 AS/NZS 62368-1 GB 4943.1 |
RoHS | EU RoHS2.0 Directive China RoHS 2.0 |
Entries | S5136S-EI Series Switches |
MAC address entries | 16K |
VLAN | 4096 (VLAN 0 and 4095 are reserved) |
Active VLAN | 4094 |
VLAN interface | 32 |
IPv4 routing entries | 3000 |
IPv4 ARP entries | 2048 |
IPv4 ACL entries | 1024 |
IPv6 unicast routing entries | 750 |
IPv6 ACL entries | 1024 |
IPv6 ND entries | 750 |
Multicast L2 entries | 999 |
Jumbo frame length | 10000 |
QOS forward queues | 8 |
MAX num in one link group | 8 |
Link group num | 124 |
Multicast Group | 500 |
Groups of RMON | 4 |
Product Name | Total PoE power capacity | PoE Ports Quantity |
S5136S-8FP4XS-EI-Q | 125 W | 15.4W (802.3af): 8 |
S5136S-10FPT4X-EI-Q | 125 W | 15.4W (802.3af): 8 |
S5136S-16FP4X-EI | 248 W | 15.4W (802.3af): 16 |
S5136S-24P4X-EI | 248 W | 15.4W (802.3af): 16 |
S5136S-24FP4S4X-EI | 405 W | 15.4W (802.3af): 24 |
S5136S-24FP4T4S-EI S5136S-48P4S-EI | 405 W | 15.4W (802.3af): 24 |
390 W | 15.4W (802.3af): 25 | |
S5136S-48P4X-EI | 390 W | 15.4W (802.3af): 25 |
S5136S-48FP4S-EI | 770 W | 15.4W (802.3af): 48 |
S5136S-48FP4X-EI | 770 W | 15.4W (802.3af): 48 |
Removable power supplies | S5136S-24S8T4X-EI S5136S-48ST4X-EI S5136S-48S2T4X-EI |
CA-70A12 (AC) | Pluggable 70W AC Power Supply |
PSR150-D1-GL (DC) | Supported |
Organization | Standards And Protocols |
IEEE | 802.1x Port based network access control protocol |
802.1ab Link Layer Discovery Protocol | |
802.1ak MVRP and MRP | |
802.1ax Link Aggregation | |
802.1d Media Access Control Bridges | |
802.1p Priority | |
802.1q VLANs | |
802.1s Multiple Spanning Trees | |
802.1ag Connectivity Fault Management | |
802.1v VLAN classification by Protocol and Port | |
802.1w Rapid Reconfiguration of Spanning Tree | |
802.3ad Link Aggregation Control Protocol | |
802.3af Power over Ethernet | |
802.3at Power over Ethernet | |
802.3az Energy Efficient Ethernet | |
802.3ah Ethernet in the First Mile | |
802.3x Full Duplex and flow control | |
802.3z 1000BASE-SX,1000BASE-LX | |
802.3u 100BASE-T | |
802.3ab 1000BASE-T | |
IETF | RFC 768 User Datagram Protocol (UDP) |
RFC 791 Internet Protocol (IP) | |
RFC 792 Internet Control Message Protocol (ICMP) | |
RFC 793 Transmission Control Protocol (TCP) | |
RFC 813 Window and Acknowledgement Strategy in TCP | |
RFC 815 IP datagram reassembly algorithms | |
RFC 8201 Path MTU Discovery for IP version 6 | |
RFC 826 Address Resolution Protocol (ARP) | |
RFC 879 TCP maximum segment size and related topics | |
RFC 896 Congestion control in IP/TCP internetworks | |
RFC 917 Internet subnets | |
RFC 919 Broadcasting Internet Datagrams | |
RFC 922 Broadcasting Internet Datagrams in the Presence of Subnets (IP_BROAD) | |
RFC 951 BOOTP | |
RFC 1027 Proxy ARP | |
RFC 1122 Requirements for Internet Hosts - Communications Layers | |
RFC 1213 MIB-2 Stands for Management Information Base | |
RFC 1215 Convention for defining traps for use with the SNMP | |
RFC 1256 ICMP Router Discovery Messages | |
RFC 1350 TFTP Protocol (revision 2) | |
RFC 1393 Traceroute Using an IP Option | |
RFC 1519 Classless Inter-Domain Routing (CIDR) | |
RFC 1542 BOOTP Extensions | |
RFC 1583 OSPF Version 2 | |
RFC 1591 Domain Name System Structure and Delegation | |
RFC 1757 Remote Network Monitoring Management Information Base | |
RFC 1772 Application of the Border Gateway Protocol in the Internet | |
RFC 1812 Requirements for IP Version 4 Router | |
RFC 1918 Address Allocation for Private Internet | |
RFC 2131 Dynamic Host Configuration Protocol (DHCP) | |
RFC 2132 DHCP Options and BOOTP Vendor Extensions | |
RFC 2273 SNMPv3 Applications | |
RFC 2328 OSPF Version 2 | |
RFC 2375 IPv6 Multicast Address Assignments | |
RFC 2401 Security Architecture for the Internet Protocol | |
RFC 2402 IP Authentication Header | |
RFC 2460 Internet Protocol, Version 6 (IPv6) Specification | |
RFC 2464 Transmission of IPv6 over Ethernet Networks | |
RFC 2576 (Coexistence between SNMP V1, V2, V3) | |
RFC 2579 Textual Conventions for SMIv2 | |
RFC 2580 Conformance Statements for SMIv2 | |
RFC 2711 IPv6 Router Alert Option | |
RFC 2787 Definitions of Managed Objects for the Virtual Router Redundancy Protocol | |
RFC 2925 Definitions of Managed Objects for Remote Ping, Traceroute, and Lookup Operations | |
RFC 3101 OSPF Not-so-stubby-area option | |
RFC 3046 DHCP Relay Agent Information Option | |
RFC 3056 Connection of IPv6 Domains via IPv4 Clouds | |
RFC 3137 OSPF Stub Router Advertisement sFlow | |
RFC 3416 (SNMP Protocol Operations v2) | |
RFC 3417 (SNMP Transport Mappings) | |
RFC 3418 Management Information Base (MIB) for the Simple Network Management Protocol (SNMP) | |
RFC 3484 Default Address Selection for IPv6 | |
RFC 3509 Alternative Implementations of OSPF Area Border Routers | |
RFC 3580 IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines | |
RFC 3623 Graceful OSPF Restart | |
RFC 3768 Virtual Router Redundancy Protocol (VRRP) | |
RFC 4022 MIB for TCP | |
RFC 4113 MIB for UDP | |
RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Routers | |
RFC 4251 The Secure Shell (SSH) Protocol | |
RFC 4252 SSHv6 Authentication | |
RFC 4253 SSHv6 Transport Layer | |
RFC 4254 SSHv6 Connection | |
RFC 4291 IP Version 6 Addressing Architecture | |
RFC 4292 IP Forwarding Table MIB | |
RFC 4293 Management Information Base for the Internet Protocol (IP) | |
RFC 4419 Key Exchange for SSH | |
RFC 4443 ICMPv6 | |
RFC 4541 IGMP & MLD Snooping Switch | |
RFC 4552 Authentication/Confidentiality for OSPFv3 | |
RFC 4750 OSPFv2 MIB partial support no SetMIB | |
RFC 4861 IPv6 Neighbor Discovery | |
RFC 4862 IPv6 Stateless Address Auto-configuration | |
RFC 4940 IANA Considerations for OSPF | |
RFC 5095 Deprecation of Type 0 Routing Headers in IPv6 | |
RFC 5187 OSPFv3 Graceful Restart | |
RFC 5340 OSPFv3 for IPv6 | |
RFC 5424 Syslog Protocol | |
RFC 5798 VRRP (exclude Accept Mode and sub-sec timer) | |
RFC 5880 Bidirectional Forwarding Detection | |
RFC 5905 Network Time Protocol Version 4: Protocol and Algorithms Specification | |
RFC 6987 OSPF Stub Router Advertisement | |
RFC 5280 Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile | |
RFC 5381 Experience of Implementing NETCONF over SOAP |
