Software Defined Network (SDN) is an innovative network architecture that simplifies network management and reduces maintenance complexity by separating network control layer and network forwarding layer through OpenFlow. More importantly, it implements flexible network flow control and provides a well-defined network platform for core network application and innovation.
H3C S5130S-EI series switches support a large network flow table. Combined with H3C SDN controller, it can easily implement a two-layer network architecture and quickly add functions in existing network in order to drastically reduce network management complexity while substantially lowers network maintenance cost.
H3C S5130S-EI series switches support IRF2 technology that connects multiple physical devices (up to 9) to a logical device that users can manage and use these devices as a single device. IRF can bring the following benefits to the user：
Simplify the management: Any one of the ports can be connected to any of the devices to login to a unified logical device, and to manage the whole system and all the members of the system through the configuration of a single device, without the physical connection to each member of the device.
High scalability: With IRF2, plug-n-play device aggregation can be achieved by adding one or more switches into the IRF2 stack and enabling IRF2 stacking on the new device. New devices can be managed with a single IP, and upgraded at the same time to reduce network expansion cost.
High reliability: IRF2 patented 1: N standby technology allows each slave device in the IRF2 stack to serve as the backup of the master, creating control and data link redundancy, as well as uninterrupted layer-3 forwarding. This improves the reliability, avoids unplanned business downtime and serves to improve overall performance. When the master device fails, traffic remains uninterrupted.
Load balancing: IRF2 supports cross-device link aggregation, upstream and downstream can be connected to more than one physical link, which creates another layer of network redundancy and boosts the network resource utilization.
Availability: H3C Implements IRF2 through standard Gigabit Ethernet (1GE) ports or 10 Gigabit Ethernet (10GE) ports which allocates bandwidth for business and application access and reasonably splits local traffic and upstream traffic.
H3C S5130S-EI series switches support innovative single-port multi-authentication function, the access authentication modes supported by different clients are different. For example, some clients can only perform MAC addresses Authentication (such as the printer terminal), and some user host for 802.1X authentication, and some user hosts only want to access through the Web portal authentication. In order to flexibly adapt to the multi-authentication requirements of the network environment, H3C S5130S-EI series switches support single-port multi-authentication unified deployment.
H3C S5130S-EI series switches support SSHv2 (Secure Shell V2) to secure information security, and strong authentication protect the Ethernet network switch from attacks such as IP address spoofing and clear text interception.
ARP attack and ARP virus are major threats to LAN security, so H3C S5130S-EI series switches come with diverse ARP protection functions such as ARP Detection to challenge the legitimacy of client, validate the ARP packets, and set a speed limit for ARP to prevent ARP swarm attacks from targeting CPU.
H3C S5130S-EI series switches support EAD (End User Admission Domination) function. With the iMC (intelligent Management Centre) system, EAD integrates terminal security policies, such as anti-virus and patch update, network access control and access right control policies to form a cooperative security system. By checking, isolating, updating, managing, and monitoring access terminals, EAD changes to passive mode, single point network protection to active, comprehensive network protection, and changes separate management to centralized management, enhancing the network capability for preventing viruses, worms, and new threats.
H3C S5130S-EI series switches feature multiple redundancy measures at the device and link levels, support current and voltage surge control, overheat protection, power and fan troubleshooting and alert, as well as fan speed adjustment when the temperature changes. S5130S-28F-EI/S5130S-52F-EI switch also supports hot swappable AC/DC dual power supply.
Apart from device level redundancy, H3C S5130S-EI series switches also provide diverse link redundancy support such as LACP/STP/RSTP/MSTP/Smart Link protocols. It supports IRF2 and 1: N redundancy backup as well as cross-device link aggregation which substantially increases network reliability.
H3C S5130S-EI series switches support packet filtering at Layer 2 through Layer 4, and traffic classification based on source MAC addresses, destination MAC addresses, source IP addresses, destination IP addresses, TCP/UDP port numbers, protocol types, and VLANs. It supports flexible queue scheduling algorithms based on ports and queues, including strict priority (SP), weighted round Robin (WRR) and SP+WRR. The S5130S-EI switch series enables committed access rate (CAR) with the minimum granularity of 8 kbps. It supports port mirroring in the outbound and inbound directions, to monitor the packets on the specific ports, and to mirror the packets to the monitor port for network detection and troubleshooting.
H3C S5130S-EI series switches use professional built-in surge protection technology and supports the industry-leading 10KV service port surge protection capability, which greatly reduces the damage rate of surge strikes to equipment even in harsh working environments.
H3C S5130S-EI series switches make switch management with ease with the support of SNMPv1/v2c/v3, which can be managed by NM platforms, such as Open View and iMC. With CLI and Telnet switch management is made easier. And with SSH 2.0 encryption, switch management security is enhanced.
H3C S5130S-EI series switches implement a variety of green energy saving features, including auto-power-down (port automatic energy saving), if the interface status has been down for a period of time, the system automatically stops the interface power and the system enters power-saving mode. They also support EEE energy feature, by which if a port stays idle for a period of time, the system will set the port to energy-saving mode. H3C S5130S-EI series switches are also compliant with material environmental protection and the EU RoHS safety standard.
The S5130S-EI switch series 8-port (S5130S-10P-EI, S5130S-12TP-EI, S5130S-10P-HPWR-EI and S5130S-12TP-HPWR-EI) and 24-port (S5130S-28P-EI) switches are fanless design, significantly reduce devices power consumption and noise.
Features | S5130S-52S-EI | |
Port Switching Capacity | 176Gbps | |
Forwarding capacity | 131Mpps | |
Box Switching Capacity | 336Gbps | |
CPU | 1 Core, 800MHz | |
Flash/SDRAM | 256MB/512MB | |
Latency (64byte/µs) | GE: < 5µs 10GE < 3µs | |
Dimensions(W× D×H) | 440×230×43.6 mm | |
Weight | ≤3.5kg | |
10/100/1000 Base-T port | 48 | |
SFP+ port | 4 | |
Maximum Stacking Bandwidth | 80Gbps | |
Maximum Stacking num | 9 | |
Input Voltage | AC: Rated voltage range: 100V~240V AC, 50/60Hz | |
Power consumption(full configuration) | MIN: | |
Fan NUM | 1 | |
MTBF(Year) | 153.41 | |
MTTR(Hour) | 1 | |
Operating | -5℃ ~ 50℃(normal operating temperature) | |
Storage Temperature | -40℃ ~ 70℃ | |
Operating & Storage Relative Humidity | 5% RH to 95% RH, non-condensing | |
Feature | S5130S-EI Series Switches |
VLAN | VLAN ID range 0 to 4095(Total 4096, 0 and 4095 are reserved for the system ) Access/Trunk/Hybrid VLAN port-based VLAN MAC-based VLAN IP subnet-based VLAN protocol-based VLAN IEEE 802.1P(CoS priority) Private VLAN Voice VLAN Guest VLAN MVRP (Multiple VLAN Registration Protocol) (compliance with GVRP) QinQ (802.1Q-in-802.1Q) Vlan mapping Static/Dynamic/Blackhole/Multiport unicast MAC MAC automatic learning and aging port-based/VLAN-based MAC learning limit MAC filter Port isolation Loop detection STP(Spanning tree protocol ) RSTP (Rapid Spanning Tree Protocol) MSTP (Multiple Spanning Tree Protocol) PVST (Per-VLAN Spanning Tree) (compatible with PVST+/RPVST+) BPDU/root/loop/TC-BPDU/PVST BPDU guard Role/TC-BPDU transmission restriction LLDP (Link Layer Discovery Protocol) and LLDP-MED Jumbo frame Store-and-forward |
Ethernet link aggregation | static aggregation dynamic aggregation GE/10GE port aggregation LACP (Link Aggregation Control Protocol) S-MLAG (Simple multichassis link aggregation) |
IP Services | ARP snooping/fast-reply/direct route advertisement/ping ARP attack detection ARP source suppression DHCP (Dynamic Host Configuration Protocol) DHCP Server/relay agent/client/snooping DNS (Domain Name System) UDP helper ND (Neighbor Discovery) ND snooping/proxy/direct route advertisement/ping DHCPv6 Server/relay agent/client/snooping/guard HTTP redirect |
Routing | Static routing, RIP, OSPF IPv6 static routing, RIPng, OSPFv3 IPv4/IPv6 dual stack Pingv6, Telnetv6, FTPv6, TFTPv6, DNSv6, ICMPv6 |
Multicast | PIM snooping IGMP Snooping Multicast VLAN IPv6 PIM snooping MLD Snooping IPv6 Multicast VLAN |
ACL/QoS | ACL (Access Control List) Advanced ACL Ingress and Egress ACL Diff-Serv QoS Eight queues on a port 802.1P/DSCP Priority marking and remarking 802.1p, TOS, DSCP priority mapping Flexible queue scheduling algorithms including SP, WRR, SP+WRR Traffic shaping Time ranges Traffic classification based on source MAC, destination MAC, source IP, destination IP, port, protocol, and VLAN |
Security | RBAC (Role-based access control) AAA (Authentication, Authorization, and Accounting) RADIUS (Remote Authentication Dial-In User Service) TACACS (Terminal Access Controller Access Control System) HWTACACS (HW Terminal Access Controller Access Control System) (Same authentication processes and implementations with TACACS+) 802.1X authentication Portal authentication MAC authentication Web authentication Triple authentication Port security SSH1.x and SSH2.0 (Secure Shell) SSL (Secure Sockets Layer) HTTPs Public Key Infrastructure (PKI) Control Plane Protection (CoPP) Attack detection and prevention CPU attack prevention ARP attack prevention ICMP attack prevention TCP attack prevention Storm suppression based on PPS/BPS/port bandwidth percentage Broadcast traffic/Multicast traffic/Unknown unicast traffic suppression IPSG (IP source guard) IPv6 RA Guard MFF (MAC-forced forwarding) SAVI (Source Address Validation Improvement) FIPS (Federal Information Processing Standards ) Hierarchical user management and password protection EAD (Endpoint Admission Defense) Basic and advanced ACLs for packet filtering OSPF, RIPv2 plain text and MD5 authentication |
High Availability | Ethernet OAM (IEEE 802.3ah) CFD (Connectivity Fault Detection)(IEEE 802.1ag and ITU-T Y.1731) DLDP (Device Link Detection Protocol ) RRPP (Rapid Ring Protection Protocol) ERPS (G.8032 Ethernet Ring Protection Switching ) Smart Link Monitor Link VRRPv2(Virtual Router Redundancy Protocol) VRRPv3 BFD (Bidirectional forwarding detection) BFD for VRRP/OSPF/RSVP/static routing Track CPU protection Link aggregation VCT (virtual cable test) |
Network Management | NQA (Network quality analyzer) performance management through gRPC or NETCONF NTP (Network Time Protocol) SNMPv1/SNMPv2c/SNMPv3 RMON (Remote Network Monitoring) and groups 1,2,3 and 9 NETCONF/YANG EAA (Embedded Automation Architecture) Port mirroring SPAN (Switch Port Analyzer)/RSPAN(Remote SPAN) Flow mirroring sFlow Information center VCF (Virtual Converged Framework) CWMP (CPE WAN Management Protocol/TR-069) System logs Debugging information output Configuration through CLI, Web UI, Telnet, and console port Zero Touch Provisioning Loading and upgrading through XModem/FTP/TFTP/SFTP/USB iMC network management system SmartMC(embedded Smart Graphical Management Center) Member |
Stacking | IRF2(Intelligent Resilient Framework 2） Distributed device management Distributed link aggregation Distributed resilient routing Stacking through standard Ethernet ports Local device stacking and remote device stacking LACP-, BFD-, and ARP-based multi-active detection (MAD) |
Visualization | gRPC (Google remote procedure call) |
Programmability and Automation | Auto DevOps by using Python, NETCONF, TCL, and Restful APIs for automated network programming |
Forwarding | Wire-speed/Line-rate architecture |
Energy Saving | EEE (802.3az Energy Efficient Ethernet) |
EMC | FCC Part 15 Subpart B CLASS A ICES-003 CLASS A VCCI CLASS A CISPR 32 CLASS A EN 55032 CLASS A AS/NZS CISPR32 CLASS A CISPR 24 EN 55024 EN 61000-3-2 EN 61000-3-3 ETSI EN 300 386 |
Safety | UL 60950-1 CAN/CSA C22.2 No 60950-1 IEC 60950-1 EN 60950-1 AS/NZS 60950-1 FDA 21 CFR Subchapter J GB 4943.1 |
Entries | S5130S-EI Series Switches |
MAC address entries | 16K |
VLAN table | 4096 (VLAN IDs 0 and 4095 are reserved) |
Active VLAN | 4094 |
VLAN interface | 32* |
IPv4 routing entries | 1024 |
IPv4 ARP entries | 1024 |
IPv4 ACL entries | 512 |
IPv4 multicast L2 entries | 1000 |
IPv6 unicast routing entries | 240 |
QOS forward queues | 8 |
IPv6 ACL entries | 512 |
IPv6 ND entries | 240 |
Jumbo frame length | 10240 |
MAX num in one link group | 8 |
Link group num | 124 |
*Special versions support 64 VLAN interfaces
Organization | Standards And Protocols |
IEEE | 802.1x Port based network access control protocol |
802.1ab Link Layer Discovery Protocol | |
802.1ak MVRP and MRP | |
802.1ax Link Aggregation | |
802.1d Media Access Control Bridges | |
802.1p Priority | |
802.1q VLANs | |
802.1s Multiple Spanning Trees | |
802.1ag Connectivity Fault Management | |
802.1v VLAN classification by Protocol and Port | |
802.1w Rapid Reconfiguration of Spanning Tree | |
802.3ad Link Aggregation Control Protocol | |
802.3af Power over Ethernet | |
802.3at Power over Ethernet | |
802.3bt Power over Ethernet | |
802.3az Energy Efficient Ethernet | |
802.3ah Ethernet in the First Mile | |
802.3x Full Duplex and flow control | |
802.3u 100BASE-T | |
802.3ab 1000BASE-T | |
802.3z 1000BASE-X | |
802.3ae 10-Gigabit Ethernet | |
IETF | RFC 768 User Datagram Protocol (UDP) |
RFC 791 Internet Protocol (IP) | |
RFC 792 Internet Control Message Protocol (ICMP) | |
RFC 793 Transmission Control Protocol (TCP) | |
RFC 813 Window and Acknowledgement Strategy in TCP | |
RFC 815 IP datagram reassembly algorithms | |
RFC 8201 Path MTU Discovery for IP version 6 | |
RFC 826 Address Resolution Protocol (ARP) | |
RFC 879 TCP maximum segment size and related topics | |
RFC 896 Congestion control in IP/TCP internetworks | |
RFC 917 Internet subnets | |
RFC 919 Broadcasting Internet Datagrams | |
RFC 922 Broadcasting Internet Datagrams in the Presence of Subnets (IP_BROAD) | |
RFC 951 BOOTP | |
RFC 1027 Proxy ARP | |
RFC 1122 Requirements for Internet Hosts - Communications Layers | |
RFC 1213 MIB-2 Stands for Management Information Base | |
RFC 1215 Convention for defining traps for use with the SNMP | |
RFC 1256 ICMP Router Discovery Messages | |
RFC 1350 TFTP Protocol (revision 2) | |
RFC 1393 Traceroute Using an IP Option | |
RFC 1519 Classless Inter-Domain Routing (CIDR) | |
RFC 1542 BOOTP Extensions | |
RFC 1583 OSPF Version 2 | |
RFC 1591 Domain Name System Structure and Delegation | |
RFC 1757 Remote Network Monitoring Management Information Base | |
RFC 1772 Application of the Border Gateway Protocol in the Internet | |
RFC 1812 Requirements for IP Version 4 Router | |
RFC 1918 Address Allocation for Private Internet | |
RFC 2131 Dynamic Host Configuration Protocol (DHCP) | |
RFC 2132 DHCP Options and BOOTP Vendor Extensions | |
RFC 2273 SNMPv3 Applications | |
RFC 2328 OSPF Version 2 | |
RFC 2375 IPv6 Multicast Address Assignments | |
RFC 2401 Security Architecture for the Internet Protocol | |
RFC 2402 IP Authentication Header | |
RFC 2460 Internet Protocol, Version 6 (IPv6) Specification | |
RFC 2464 Transmission of IPv6 over Ethernet Networks | |
RFC 2576 (Coexistence between SNMP V1, V2, V3) | |
RFC 2579 Textual Conventions for SMIv2 | |
RFC 2580 Conformance Statements for SMIv2 | |
RFC 2711 IPv6 Router Alert Option | |
RFC 2787 Definitions of Managed Objects for the Virtual Router Redundancy Protocol | |
RFC 2925 Definitions of Managed Objects for Remote Ping, Traceroute, and Lookup Operations | |
RFC 3101 OSPF Not-so-stubby-area option | |
RFC 3046 DHCP Relay Agent Information Option | |
RFC 3056 Connection of IPv6 Domains via IPv4 Clouds | |
RFC 3137 OSPF Stub Router Advertisement sFlow | |
RFC 3416 (SNMP Protocol Operations v2) | |
RFC 3417 (SNMP Transport Mappings) | |
RFC 3418 Management Information Base (MIB) for the Simple Network Management Protocol (SNMP) | |
RFC 3484 Default Address Selection for IPv6 | |
RFC 3509 Alternative Implementations of OSPF Area Border Routers | |
RFC 3580 IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines | |
RFC 3623 Graceful OSPF Restart | |
RFC 3768 Virtual Router Redundancy Protocol (VRRP) | |
RFC 4022 MIB for TCP | |
RFC 4113 MIB for UDP | |
RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Routers | |
RFC 4251 The Secure Shell (SSH) Protocol | |
RFC 4252 SSHv6 Authentication | |
RFC 4253 SSHv6 Transport Layer | |
RFC 4254 SSHv6 Connection | |
RFC 4291 IP Version 6 Addressing Architecture | |
RFC 4292 IP Forwarding Table MIB | |
RFC 4293 Management Information Base for the Internet Protocol (IP) | |
RFC 4419 Key Exchange for SSH | |
RFC 4443 ICMPv6 | |
RFC 4541 IGMP & MLD Snooping Switch | |
RFC 4552 Authentication/Confidentiality for OSPFv3 | |
RFC 4750 OSPFv2 MIB partial support no SetMIB | |
RFC 4861 IPv6 Neighbor Discovery | |
RFC 4862 IPv6 Stateless Address Auto-configuration | |
RFC 4940 IANA Considerations for OSPF | |
RFC 5095 Deprecation of Type 0 Routing Headers in IPv6 | |
RFC 5187 OSPFv3 Graceful Restart | |
RFC 5340 OSPFv3 for IPv6 | |
RFC 5424 Syslog Protocol | |
RFC 5798 VRRP (exclude Accept Mode and sub-sec timer) | |
RFC 5880 Bidirectional Forwarding Detection | |
RFC 5905 Network Time Protocol Version 4: Protocol and Algorithms Specification | |
RFC 6620 FCFS SAVI | |
RFC 6987 OSPF Stub Router Advertisement | |
RFC 5280 Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile | |
RFC 5381 Experience of Implementing NETCONF over SOAP | |
ITU | ITU-T Y.1731 |
ITU-T Rec G.8032/Y.1344 Mar. 2010 |