Ethernet
Switches
Quidway S5100-EI
Series Intelligent and Resilient Switches
Overview
Quidway S5100-EI Series
Ethernet Switches (hereinafter referred to as
S5100 series) are a new Gigabit Ethernet switching
products that entirely fulfills the enterprise
customers' requirement of designing and implementing
a unified, highly resilient networks. S5100 Series
Ethernet Switches represent the next generation
desktop switches, they provide high-density GE
ports, 10GE uplink, a variety of service features
and powerful QACL functions and can be used in
convergence and access devices for intranets and
metropolitan area networks (MANs), and can also
be used for connecting data center server clusters
with high availability as well as scalability.
The Quidway S5100-EI Series Switches are available,
offering a cost-effective path for meeting current
and future service requirements from enterprises
and commercial businesses. The abundant features
include advanced quality of service (QoS), LACP,
STP/RSTP/MSTP, port rate-limiting, access control
lists (ACLs), DHCP Snooping, remote switched port
analyzer ( RSPAN ), Protocol-Based VLAN, VLAN-VPN,
policy-based VLAN and Voice VLAN, IGMP Snoopingv1/v2,
multicast VLAN, port-based broadcast storm suppression,
VLAN-based mirroring, MAC address–based mirroring,
multicast VLAN register (MVR), SSH v2 (Secure
Shell v2), Virtual Cable Test ( VCT ), device
link detection protocol (DLDP ) and Huawei group
management protocol v2 ( HGMP v2), etc.
The Quidway S5100-EI Series Ethernet Switches
include the following models: S5124P-EI, S5148P-EI,
S5126C-EI and S5150C-EI. S5124P-EI has 24 Ethernet
10/100/1000 Base-T ports, 4 1000BASE-X SFP (combo).
S5148P-EI has 48 Ethernet 10/100/1000Base-T ports,
4 1000BASE-X SFP (combo). S5126C-EI has 24 10/100/1000
Base-T ports, 4 1000BASE-X SFP Combo ports, 2
10-Gbps expansion slots (for XFP interface cards
/stack cards /XENPAK optical modules). S5150C-EI
has 48 10/100/1000 Base-T ports, 4 1000BASE-X
SFP Combo ports, 2 10-Gbps expansion slots (for
XFP interface cards /stack cards /XENPAK optical
modules). The combo ports in S5100-EI are combo
of 10/100/1000BASE-T and 1000BASE-X.

Features
Full wire-speed, multi-layer switching
* S5100-EI series switches offer L2 wire-speed
switching capacity. The product series offers
10GE uplink speed, satisfies the most demanding.
* The hardware supports L2 wire-speed switching,
and is able to identify and process the traffic
flows from L4-L7.
* With independent packet filters, all ports
distinguish different flows and forward them with
corresponding priority.
High Availability
* S5100-EI series switches support STP/RSTP/MSTP
(Spanning Tree Protocol/Rapid Spanning Tree Protocol/Multiple
Spanning Tree Protocol). The STP/RSTP features
also support BPDU guard and Root guard, thus the
redundancy back-up and error tolerance capability
of the link can be greatly improved to guarantee
network stability.
* S5100-EI series switches support link-aggregation
(include manual link aggregation and LACP), and
it is a simple and cost efficient way to expand
the bandwidth of a switch port and balance the
traffic among all the ports in a link aggregation.
In addition, connection availability is enhanced.
Flexible security control policies
* Based on the longest match routing policy,
the S5100-EI Series forward packets one by one
ensuring equal forwarding performance. This function
can guard the network against the attack by Code
Red and Worm Blaster, thereby guaranteeing equipment
security.
* The S5100-EI Series support 802.1x authentication
to identify users who attempt to access the network.
With the 802.1x client version checking function
enabled on a switch, the switch checks the version
and validity of the 802.1x client running on supplicant
systems to prevent those that use earlier versions
of 802.1x client or illegal clients from logging
in.
* The S5100-EI Series support 802.1x PEAP, With
PEAP employed, a security channel is created which
is encrypted and is protected using transport
level security (TLS) to ensure integrity. And
authentication is carried out through a new type
of extensible authentication protocol ( EAP )
negotiation between supplicant systems and authentication
servers.
* The S5100-EI Series support Centralized MAC
address authentication, it controls accesses to
a network through ports and MAC addresses. This
kind of authentication requires no client software.
When operating in centralized MAC address authentication
mode, a switch begins to authenticate the user
if it detects a new user MAC address.
* The S5100-EI Series support The Guest VLAN
function, this function enables supplicant systems
that are not authenticated to access specific
resources and thus perform the corresponding operations,
such as obtaining 802.1x client, upgrading client,
or obtaining other upgrading programs.
* The S5100-EI Series can also prevent unauthorized
access to the network by binding MAC and port.
* The S5100-EI Series support secure shell V2
(SSH V2), which offers security information protection
and powerful authentication function to safeguard
the Ethernet switch from attacks such as IP address
spoofing and plain text cipher interception.
* The S5100-EI Series support abundant mirroring
modes, include traffic mirroring, VLAN-based mirroring,
MAC address–based mirroring, port mirroring, and
multi-source port mirroring.
* The S5100-EI Series support other security
functions, such as hierarchical management and
password protection of users, AAA authentication,
RADIUS authentication, port isolation and port
security.
Abundant QoS policies
* The S5100-EI Series support L2~L4 complex
flow classification based on source MAC address/destination
MAC address/source IP address/destination IP address/ports/protocols.
* The S5100-EI Series support flexible queue
scheduling algorithms, which can be set on the
basis of port and queue at the same time. They
support Strict Priority (SP), Shaped Deficit Weighted
Round Robin (SDWRR) and SP+SDWRR, and 8 priority
queues.
* The S5100-EI Series support Committed Access
Rate (CAR) and limit the traffic speed with the
minimum granularity of 1 kbps.
* The S5100-EI Series can support priority mapping,
priority marking, traffic shaping for ports and
queues, port-based/flow-based rate limiting, S5100-EI
Series also support real-time update of ACL rules
based on time range changes.
* The S5100-EI Series support remote switched
port analyzer (RSPAN), It breaks through the limitation
that the mirrored port and the mirroring port
have to be located in the same switch, and makes
it possible that the mirrored and mirroring ports
be located across several devices in the network,
and greatly enhances the way that the network
administrator can manage the switch.
Diversified System Configuration and
management modes
* The S5100-EI Series support Simple Network
Management Protocol (SNMP) v1/v2/v3 and RMON (Remote
Monitoring) v1, 1/2/3/9 groups of MIBs, they be
managed by NMS. They can be managed by general
network management platform such as OpenView,
and Quidway network management system.
* The S5100-EI Series support Command Line Interface
(CLI), Web based network management, modem dial-up
and TELNET which make the equipment management
more convenient.
* The S5100-EI Series support HGMP V2 cluster
management, After enabling HGMP V2, the network
administrator can manage several member switches
through one command switch and only the command
switch need a public network IP address, it can
save public IP address greatly and manage the
network more efficiently.
Abundant System Maintenance and debugging
methods
* The S5100-EI Series support System log, Hierarchical
alarm management and alarm filtering, Detailed
alarm/debug information output, Ping and Tracer,
they also support remote maintenance via Telnet
Modems and SSH.
* The S5100-EI Series support Ping, Traceroute
and NQA. NQA is a new network diagnostic tool
used to test the performance of protocols operating
on network and it is an enhanced alternative to
the Ping command.
* The S5100-EI Series support device link detection
protocol (DLDP), DLDP can detect the link status
of the optical fiber cable or copper twisted pair.
If DLDP finds a unidirectional link, it disables
the related port automatically or informs users
to disable it manually depending on specific configuration,
to avoid potential network problems.
* The S5100-EI Series support Loopback detection
on ports. After users enable loopback detection
for Ethernet ports, the switch will monitor whether
the ports have loopback on a regular basis; if
the switch detects loopback for a particular port,
and it will put that port under control.
* The S5100-EI Series support virtual cable
test (VCT) which is convenient for troubleshooting.
Customers can start the virtual cable test (VCT)
to make the system test the cable connected to
the current electrical Ethernet port. The test
items include: whether short or open circuit exists
in the Rx/Tx direction of the cable, and what
is the length of the cable in normal status or
the length from the port to the fault point of
the cable. |