2013年4月3日星期三

Huawei S3700 Swich

Quidway ® S3700 series of enterprise network swtich (hereinafter referred to as S3700), is the Huawei Company launched a new generation of green energy-saving three layer Ethernet switch. It is based on a new generation of high performance hardware and Huawei VRP ® (Versatile Routing Platform) software platform, for business users to park together, access and other application scenarios, providing a simple and convenient installation and maintenance, flexible means of VLAN deployment and capability, POE power supply rich routing function and IPv6 smooth upgrade, and through the integration of the stack virtual router redundancy, network protection, rapid ring advanced technology effectively enhance the network robustness, can help enterprises to build for the future IT network. S3700 series switch box products for the equipment, chassis height is 1U, including S3700-28TP and S3700-52P two kinds big, provides the standard type (SI) and enhanced (EI) two version of a product, standard support two layer and three layer of basic function, enhanced support routing protocol is complex and rich business characteristics, including models are as follows: S3700-28TP-SI-AC/DC, S3700-28TP-EI-AC/DC, S3700-28TPEI-MC-AC, S3700-28TP-PWR-EI, S3700-28TP-EI-24S-AC, S3700-52P-SI-AC, S3700-52P-EI-AC/DC, S, 3700-52P-PWR-EI, S3700-52P-EI-24S-AC/DC, S3700-52P-EI-48S-AC/DC.

Product features
Service control flexible S3700 support Multi-VPN-Instance CE (MCE) function, the realization of different VPN user isolation in the same device, effectively solve the security problem of user data, while reducing the user cost of investment. S3700 support 1K multicast group, support IGMP Snooping/Filter/Fast Leave/Proxy protocol. S3700 supports wire-speed across VLAN multicast copy function, multicast support binding port load sharing, support for controllable multicast, fully meet the requirements of IPTV and other multicast business needs plenty of QoS strategy and security mechanism of S3700 to five tuples, IP priority, TOS, DSCP, IP protocol type, ICMP type, TCP source port, VLAN, Ethernet frame protocol type, CoS based on the information, realize the complex flow classification function. S3700 supports two rate three color flow speed based on the function of each port, to support the 8 priority queues, support WRR, DRR, SP, WRR + SP, DRR+SP variety of queue scheduling algorithm, effectively ensure the voice, video and data network service quality. S3700 series switches provide multiple security protection function. Support DoS (Denial of Service) class attack, network attack, user's anti-attack function. The Dos class attack mainly includes SYN Flood, Land, Smurf, ICMP Flood. Main attack against network if refers to the STP bpdu/root attack. Attacks against DHCP users to phishing attacks, man-in-the-middle attack, IP/MAC attack, Spoofing DHCP request flood, change the CHADDR value of DoS attack etc.. Through the support of the establishment and maintenance of DHCP Snooping binding table, listening to access the user's MAC/IP address, the lease period, VLAN-ID, interface and other information, to solve the problem of DHCP user IP and port tracking. At the same time, does not meet the illegal message binding table entry (ARP spoofing packets, unilaterally modify IP address) discarded directly, effectively prevent hackers or attacker by ARP message implementation of campus network common "man in the middle" attack. Use DHCP Snooping trust port characteristics can also guarantee the DH

没有评论:

发表评论