华为交换机产品介绍
华为,S5300,交换机 产品文档 PDF
多样的安全机制和QoS策略
• S5300提供多种安全保护功能。支持DOS（Denial of Service）类防攻击、网络的防攻击、用户的防攻击等 功能。其中DOS类防攻击主要包括SYN Flood、Land、Smurf、ICMP Flood。网络的防攻击主要是指STP的 BPDU/Root攻击。用户的防攻击涉及DHCP仿冒攻击、中间人攻击、IP/MAC Spoofing 攻击、DHCP request flood、改变CHADDR值的DOS攻击等等。
单个设备故障需要替换时可实现“新增设备”的热插拔，从而减少了业务中断对客户的影响；相对于框 式交换机来说，智能堆叠在性能和端口密度方面突破了硬件架构的限制。而对管理来说，堆叠后的数台 设备在逻辑上可认为是一台，减轻了网络管理和配置的工作量。
强大的多业务支持能力
• S5300支持增强型灵活QinQ功能，确保灵活的外层VLAN标签功能，同时不占用ACL资源,充分满足多业务 承载的要求。
Product Brochure S5300系列全千兆交换机
• S53HI系列支持基本的MPLS和VLL功能，可作为高质量企业专线接入设备，也可助力运营商打造高品质 MPLS到边缘的网络，是业界为数不多的高性价比盒式MPLS交换机。
• S5300有多款设备支持POE功能，遵循IEEE802.3af及802.3at (POE+)标准。可通过以太网对所连接的标准PD 设备（如IP Phone、WLAN AP、Bluetooth AP等终端）供电，单端口供电能力可高达30w。有效地简化了终 端设备的电源布线和管理成本；同时还可通过配置实现按时、按需进行供电。
华为主流路由器交换机简介和规格
华为网络产品一、路由器1、AR G3系列企业路由器i.AR3200 系列企业路由器产品简介：AR3200系列企业路由器是华为公司推出的新一代网络产品,其秉承了华为在数据通信、无线通信、PON接入及软交换领域的深厚积累,并依托于自主知识产权的VRP 平台,提供包括有线和无线的Internet接入、专线接入,PBX、融合通信及安全等功能,广泛部署于大中型园区网出口、大中型企业总部或分支等场景;产品规格;ii.AR2200 系列企业路由器产品简介：AR2200系列企业路由器是华为公司推出的面向中型企业总部或大中型企业分支等以宽带、专线接入、语音和安全场景为主的路由器产品,采用多核CPU、独立分布式交换网可满足不同企业用户的的业务需求;产品规格：2、AR系列工业路由器：i.AR530系列工业路由交换一体机产品简介：AR530系列工业路由交换一体机是专为工业环境设计的网关设备,可以满足在恶劣的温度、湿度、电磁干扰等环境下的网络通信需求;AR530系列是集路由、交换、安全和采集功能于一体的新一代工业网关路由设备,具有强大的行业应用扩展能力;产品规格：3、NE系列高端路由器：i. Huawei NetEngine5000E 集群路由器产品简介：NetEngine 5000E集群路由器以下简称NE5000E是华为公司面向互联网骨干节点、城域网核心节点、数据互联中心节点以及Internet承载节点推出的超级核心路由器产品; NE5000E采用自研的Solar系列芯片,先进的光背板设计和分布式可扩展软件平台,可提供海量交换容量和超高转发性能,全面满足新一代互联网对带宽性能、服务质量、业务能力的需要;NE5000E 硬件上包括两部分,集群中央框CCCCluster Central Chassis和转发线卡框CLCCluster Line Chassis;CLC应用于用户和业务的高速接入,可工作在单框模式和多框集群模式,CCC应用于集群系统,主要用于连接各线卡框的控制平面和数据平面,使多台CLC在逻辑上连接,实现系统的统一管理和控制;产品规格：ii.华为NetEngine 16EX 路由器产品简介：NetEngine16EX路由器以下简称NE16EX是华为公司推出的多业务网络产品,主要应用在各行业骨干网汇聚和接入节点、大中型园区网出口、大中型企业总部或分支等场景;与NE5000E、ME60、NE40E、NE20E产品配合组网,形成结构完整、层次清晰的IP网络解决方案;NE16EX多业务企业路由器基于华为公司自主研发的通用路由平台VRPVersatile Routing Platform,采用多核CPU和无阻塞交换架构,具有良好的线速转发性能、完善的QoS机制、优异的扩展性和丰富的业务处理能力;NE16EX具有强大的汇聚接入能力,凭借丰富的特性支持,可以灵活部署L2VPN、L3VPN、组播、MPLS TE、QoS 等,实现用户业务的可靠承载；此外,NE16EX的NAT、IPSec、BRAS、Firewall等多业务处理功能能满足客户多种业务需求,同时,NE16EX全面支持IPv6,可以实现IPv4到IPv6的平滑过渡;因此,NE16EX可以灵活应用在IP/MPLS网络的接入、汇聚,可以简化网络结构,提供丰富的业务类型和可靠的服务质量,是IP/MPLS承载网向宽带化、安全化、业务化、智能化发展的重要源动力;产品规格：Engine20E-S系列多业务路由器产品简介：NetEngine20E-S系列多业务路由器以下简称 NE20E-S是华为公司推出的高端网络产品,主要应用在IP骨干网汇聚,中小企业网核心,园区网边缘,中小校园网接入等;NE20E-S系列路由器基于硬件的转发机制和无阻塞交换技术,采用华为公司自主研发的通用路由平台VRPVersatile Routing Platform,具有电信级的可靠性、全线速的转发能力、完善的QoS管理机制、丰富的业务处理能力和良好的扩展性等特点;NE20E-S基于最新的VRP平台,具有强大的汇聚接入能力,凭借丰富的特性支持,可以灵活部署L2VPN、L3VPN、组播、组播VPN、MPLS TE、QoS等,实现业务运营级的可靠承载；同时,NE20E-S全面支持IPv6,可以实现IPv4到IPv6的平滑过渡;因此,NE20E-S可以灵活应用在IP/MPLS网络的接入、汇聚,可以简化网络结构,提供丰富的业务类型和可靠的服务质量,是IP/MPLS承载网向宽带化、安全化、业务化、智能化发展的重要源动力;NE20E-S系列主要包括NE20E-S4,NE20E-S8和NE20E-S16,适应不同规模的网络组网需求;产品规格：iv. NetEngine40E系列全业务路由器产品简介：NetEngine40E系列全业务路由器以下简称 NE40E是华为公司推出的高端网络产品,主要应用在企业广域网核心节点、大型企业接入节点、园区互联&汇聚节点以及其他各种大型IDC网络的边缘位置,与NE5000E骨干路由器、NE20E汇聚路由器产品配合组网,形成结构完整、层次清晰的IP网络解决方案;NE40E基于CLOS分布式多级交换架构,采用分布式的硬件转发和无阻塞交换技术,具有良好的线速转发性能,优异的扩展能力,完善的QoS机制和强大的业务处理能力;NE40E基于最新的可扩展400G平台,实现到400G/slot的平滑扩展,且兼容现网所有线卡,最大限度保护客户的投资;NE40E具有支持虚拟化的能力,可将多台设备虚拟成一台;NE40E具有强大的汇聚接入能力,凭借丰富的特性支持,可以灵活部署L2VPN、L3VPN、组播、组播VPN、MPLS TE、QoS等,实现业务的可靠承载；同时,NE40E 全面支持IPv6,可以实现IPv4到IPv6的平滑过渡;因此,NE40E可以灵活应用在IP/MPLS网络的边缘、核心,可以简化网络结构,提供丰富的业务类型和可靠的服务质量,是IP/MPLS承载网向宽带化、安全化、业务化、智能化发展的重要源动力;产品规格：二、交换机：1、数据中心交换机：i. CloudEngine 12800系列高性能核心交换机产品简介:CloudEngine 12800以下简称CE12800系列交换机是华为公司面向数据中心和高端园区推出的新一代高性能核心交换机;软件平台基于华为新一代的 VRP8操作系统;在提供稳定、可靠、安全的高性能L2/L3层交换服务基础上,实现弹性、虚拟和高品质的网络; CloudEngine 12800系列采用先进的硬件架构设计,是目前全球最高配置的核心交换机;整机最大支持64Tbps交换容量,最高支持128个100GE、384个40GE或1536个10GE全线速接口;CloudEngine 12800系列具备业界领先的CLOS交换架构和工业级的可靠性,以及严格的前后风道设计,并支持全面的虚拟化能力和丰富的数据中心特性; 此外,CloudEngine 12800作为新一代核心交换机采用了多种绿色节能创新技术,大幅降低设备能源消耗;CloudEngine 12800系列提供CE12816、CE12812、CE12808、CE12804四种产品形态,整个系列秉承模块通用化、部件归一化的设计理念,最小化备件成本 ,在保证设备扩展性的同时最大限度地保护用户投资;产品规格：、ii. CloudEngine 6800产品简介：CloudEngine 6800以下简称CE6800系列是华为公司面向数据中心和高端园区推出的新一代高性能、高密度、低时延万兆以太网交换机;CE6800采用先进的硬件结构设计,提供业界最高密度的10GE端口接入,支持40GE上行端口,软件平台基于华为新一代的VRP8操作系统,支持丰富的数据中心特性和高性能的堆叠,风道方向可以灵活选择;CE6800可以与华为新一代核心交换机CloudEngine 12800配合构建弹性、虚拟和高品质的云时代数据中心网络,满足云时代数据中心对网络的需求; CloudEngine 6800系列支持电口、光口两种主机形态,整机48个万兆光或电接口、4个40GE QSFP+接口QSFP+可拆分成4个万兆端口,提供L2/L3线速转发;CE6800系列交换机定位于数据中心的高密万兆接入,帮助企业和运营商构建面向云计算时代的数据中心网络平台,也可以用于园区网的核心或汇聚;CE6800目前有两款主机形态10GE光和10GE电：产品规格：产品简介：S12700系列交换机是华为公司面向下一代园区网核心而专门设计开发的敏捷交换机;该产品采用全可编程架构,灵活快速满足客户定制需求,助力客户平滑演进至SDN网络;该产品基于华为公司首款以太网络处理器ENP,内置随板WLAN AC无线局域网接入控制器,实现有线无线真正融合；支持iPCA网络包守恒算法,可对任意业务流随时随地逐点检测,助力客户对业务的精准管理;该产品基于华为公司自主研发的通用路由平台VRP,在提供高性能的L2/L3层交换服务基础上,进一步融合了MPLS VPN、硬件IPv6、桌面云、视频会议等多种网络业务,提供不间断升级、不间断转发、CSS2交换网硬件集群主控1＋N备份、硬件Eth-OAM/BFD、环网保护等多种高可靠技术,在提高用户生产效率的同时,保证了网络最大正常运行时间,从而降低了客户的总拥有成本TCO;S12700系列目前提供S12708、S12712两种产品形态;产品规格：iii.S6700系列万兆交换机产品简介：S6700系列万兆交换机以下简称S6700,是华为公司自主开发的下一代全万兆盒式交换机,可用于数据中心万兆服务器接入及园区网的核心;S6700是业内最高性能的盒式交换机之一,同时提供最多24/48个全线速万兆接口,使万兆服务器高密度接入和园区网高密度万兆汇聚成为可能;同时,S6700支持丰富的业务特性、完善的安全控制策略、丰富的QoS等特性以满足数据中心扩展性、可靠性、可管理性、安全性等诸多挑战;产品规格：2、个人和中小企业交换机：i. S1700 系列企业交换机产品简介:S1700系列企业交换机以下简称S1700是华为公司推出的新一代绿色节能以太接入交换机;S1700提供简单便利的安装维护手段和丰富的业务特性,助力用户打造安全可靠的高性能网络,可广泛应用于中小企业、网吧、酒店、学校等以太接入场景;●无风扇静音设计●“一键操作”按钮,短按重启,长按恢复出厂配置●IEEE Energy Efficient Ethernet能效以太网根据管理的类型,S1700系列包含无网管型交换机、web管理型交换机和SNMP管理型交换机三类;产品规格：3、园区交换机：i.S12700系列敏捷交换机产品简介:S12700系列交换机是华为公司面向下一代园区网核心而专门设计开发的敏捷交换机;该产品采用全可编程架构,灵活快速满足客户定制需求,助力客户平滑演进至SDN网络;该产品基于华为公司首款以太网络处理器ENP,内置随板WLAN AC无线局域网接入控制器,实现有线无线真正融合；支持iPCA网络包守恒算法,可对任意业务流随时随地逐点检测,助力客户对业务的精准管理;该产品基于华为公司自主研发的通用路由平台VRP,在提供高性能的L2/L3层交换服务基础上,进一步融合了MPLS VPN、硬件IPv6、桌面云、视频会议等多种网络业务,提供不间断升级、不间断转发、CSS2交换网硬件集群主控1＋N备份、硬件Eth-OAM/BFD、环网保护等多种高可靠技术,在提高用户生产效率的同时,保证了网络最大正常运行时间,从而降低了客户的总拥有成本TCO;S12700系列目前提供S12708、S12712两种产品形态;产品规格：ii.S9700系列T比特核心交换机产品简介：S9700系列交换机是华为公司面向下一代园区网核心和数据中心业务汇聚而专门设计开发的高端智能T比特核心路由交换机;该产品基于华为公司自主研发的通用路由平台VRP开发,在提供高性能的L2/L3层交换服务基础上,进一步融合了MPLS VPN、硬件IPV6、桌面云、视频会议、无线等多种网络业务,提供不间断升级、不间断转发、硬件OAM/BFD、环网保护等多种高可靠技术,在提高用户生产效率的同时,保证了网络最大正常运行时间,从而降低了客户的总拥有成本TCO;●交换容量●480G槽位带宽,100 GE Ready●576个万兆端口,96个40GE端口●创新的CSS交换网集群●硬件级以太OAM/BFD●内置AC,有线无线一体化●紧凑机箱设计S9700系列提供S9703、S9706、S9712三种产品形态;产品规格：iii.S7700系列智能路由交换机产品简介：S7700系列是华为公司面向下一代企业网络架构而推出的新一代高端智能路由交换机;该产品基于华为公司智能多层交换的技术理念,在提供稳定、可靠、安全的高性能L2~L4层交换服务基础上,进一步提供MPLS VPN、业务流分析、完善的QOS 策略、可控组播、资源负载均衡、一体化安全等智能业务优化手段,同时具备超强扩展性和可靠性; S7700系列广泛适用于园区网络和数据中心网络,可对无线、话音、视频和数据融合网络进行先进的控制,帮助企业构建交换路由一体化的端到端融合网络;●单槽位带宽高达320G,100GE Ready●480个万兆端口,24个40GE端口●创新的CSS交换网集群●硬件级以太OAM/BFD●左后风道,高密布线S7700系列提供S7703、S7706、S7712三种产品形态;产品规格：iv.S5700系列全千兆企业交换机产品简介：S5700系列全千兆企业交换机以下简称S5700,是华为公司为满足大带宽接入和以太多业务汇聚而推出的新一代绿色节能的全千兆以太网交换机;它基于高性能硬件芯片和华为公司统一的VRP软件平台,具备大容量、高密度千兆端口,可提供万兆上行,充分满足企业用户的园区网接入、汇聚、IDC千兆接入以及千兆到桌面等多种应用场景;S5700提供精简版LI、标准版SI、增强版EI和高级版HI四种产品形态,具有下列这些特点;●创新AHM节能●智能iStack,支持9台设备堆叠●硬件级以太OAM/BFD●高性能Netstream●双电源可靠供电此外,根据不同客户和场景的需求,推出了可内置蓄电池的电池交换机、CSFP交换机、电源口前置的交换机;产品规格：。
华为企业级全系列交换机介绍
（可网管）这两种；
V100R007C00版本提供4款网管设备，包括S1700-28GFR-4P、S170052GFR-4P 、S1700-28FR-2T2P、 S1700-28FR-2T2P和一款非网管设备S1700-
8G；
V100R007C01版本提供3款非网管设备，包括S1700-52R-2T2P、S1700-24、 S1700-8。
核心层
GE
S57/S37
GE
汇聚层
S57/S37 S17/27/37 楼层 1 S1700 S57/S37 S17/27/37 S17/27/37
接入层
楼层 3
S1700
楼层 2
S1700
桌面
S77&93&9700 ：核心层，大容量、高密度、高可靠性， SPU 单板可以支持F W / N A T / L o ad Balance/IPSEC/ Netstream 功能。 S6700 ：服务器接入及数据中心场景，万兆接入、高 密度。 S27&37&5700 ：接入汇聚层，大容量、高密度、高性价比，可构建高可靠的环网拓扑。 S1700 ： SMB 市场，机架型、桌面型， D u m p 型、Smart 型。
S1700 SNMP全网管系列交换机概览
百兆SNMP全网管 硬件规格
• 24*10/100Base-T，2*千兆RJ45 上行口和2*千兆
定位
•企业网接入层 •可为中小型企业灵活的组网； •具有出色的扩展性，可为中小
S1700-28FR-2T2P-AC
SFP上行口 • 交换容量/转发速率：12.8Gbps/9.6Mpps • 尺寸：442*220*43.6mm
S1700-28FR-2T2P S1700-52R-2T2P S1700-28FR-2T2P
华为 CloudEngine S6730系列交换机 产品手册
华为 CloudEngine S6730系列交换机 技术主打胶片部门：园区网络营销支持组作者：王宙00255706日期：2020年12月28日CloudEngine S6730系列交换机产品学习参考一线数通产品经理、机关、MO、渠道CloudEngine S6730全系列交换机产品定位、命名规则、款型全景及亮点特性交换机V200R020C00V1.22020-12-28王宙基于LSW V2R20C00版本刷新，新增10G/25G款型软硬件功能。
刷新各款型功能对比表。
刷新各款型规格对比表。
优化产品亮点特性。
V1.12020-1-15王宙老的S系列产品已逐步EOM，材料不再进行刷新，将CloudEngine S系列新品独立出来开展刷新。
V1.02019-11-22王宙基于R19C00版本整理刷新CloudEngine S6730&S67系列交换机文档，聚焦产品硬件、及亮点特性介绍。
文档信息、修订记录目录1园区LAN网络趋势2CloudEngine S6730系列产品概览3CloudEngine S6730系列产品硬件介绍4CloudEngine S6730全系列产品亮点特性 5CloudEngine S6730 25GE系列亮点介绍数字化转型2.0时代，园区承载网络面临全新挑战Wi-Fi 6高清视频会议4K/8K 视频/流媒体AR/VRWi-Fi 6单用户带宽>80Mbps单用户带宽>30Mbps单用户带宽>50Mbps单AP带宽>3000MbpsGE/10GE是园区网络当前主流带宽，25GE/100GE正加速商用IDC：随着企业带宽需求的增长和关键业务对延迟的要求越来越低，网络对更高速度的需求将在未来几年刺激市场的增长。
以太网交换机市场的增长继续由更高速度的交换平台驱动。
高速端口正逐步替代低速端口， 25GE端口涨幅惊人，产品正加速进入市场。
2018Q12018Q22018Q32018Q42019Q12019Q22019Q32019Q42020Q12020Q2120%100%80%60%40%20%0%-20%-40%-60%-80%-100%150%端口数量同比增幅IDC全球以太网交换机市场份额报告_端口维度统计出货量同比变更收入同比变更100GE 51.2%32.8%40GE 8.1%27.2%25GE 62.2%39.0%10GE 23.1% 6.1%GE3.9%7.4%接入带宽正从GE向10GE演进汇聚及带宽正从10GE/40GE向25GE/100GE演进业务驱动大中小型园区升级，承载网络带宽进一步提升•接入+汇聚+核心三层组网，可选VxLAN •有线及Wi-Fi用户接入和管控•接入+核心 两层组网•有线及Wi-Fi用户接入和管控有线GE/10GE/25GE10GE/40GE/100GE核心接入Wi-Fi有线GE/10/25GEWi-Fi核心汇聚接入CSSiStackVxLAN （可选）WACWAC10GE/40GE/100GE目录1园区LAN网络趋势2CloudEngine S6730系列产品概览3CloudEngine S6730系列产品硬件介绍4CloudEngine S6730全系列产品亮点特性5CloudEngine S6730 25GE系列亮点介绍S67到CloudEngine S67系列交换机演进路径S6720-SIS6720-SI(MultiGE)CloudEngine S5732-H24UM2CCS6720-HICloudEngine S6730-HS6720-LI CloudEngine S6730-SS6720-EI•上行支持40GE/100GE，可以通过软件License控制上行端口类型•采用可编程网络处理器，硬件能力提升，交换容量及转发性能提升•表项规格(ARP/FIBv4/MAC/Multicast IPv4/Netstream)普遍增大•新增高密25G端口系列产品CloudEngineS5732-H48UM2CC•上行支持6*40GE，上行带宽提升3倍•采用可编程网络处理器，硬件能力提升，交换容量及转发性能提升•表项规格(ARP/FIBv4/MAC/Multicast IPv4/ACL)普遍增大•支持VXLAN和Netstream等敏捷功能•支持硬件OAM/BFD功能•上行支持2*100GE，支持8*25GE/2*40GE插卡•采用可编程网络处理器，硬件能力提升，转发性能提升1倍•表项规格(MAC/FIB/ACL)普遍增大•支持随板AC、VXLAN、Netstream等敏捷功能功能•支持安全启动及MACSec等安全功能CloudEngine S系列交换机全景图CloudEngine S5735-S/L CloudEngineS5730-H/SCloudEngineS12700E-4CloudEngineS12700E-12CloudEngineS12700E-8CloudEngineS7700CloudEngineS6730-H/SCloudEngine S系列盒式交换机命名规则A 品牌名称（1位）固定SB 网络定位（1位）8：核心交换机； 6：汇聚交换机 ；5：接入交换机C 市场定位（1位）7：企业网市场；3：运营商市场D 交换机系列（2位）十位表示更新换代，如10/20/50；个位表示个别规格升级，如01/02/03E 行业标识位（1，2位）默认无；有EC表示电商专用型号；有S表示分销专用型号；F 系列型号（1位）H：高级版本 S：标准版本 L：精简版G 下行端口数（2位）表示下行端口数量H 下行端口类型（2位）D：400G C：100G Q：40G Y：25G X：10G光 M：10G电 N:2.5G/5G电 S：千兆光 T：千兆电；F：百兆电 P：千兆电支持POE；U：千兆电支持POE++; UM:MultiGE支持POE++ I 上行端口数量（1位）上行端口数量J 上行端口类型（2位）D：400G C:100G Q:40G Y:25G X:万兆光 S：千兆光 T：千兆电 TP：Combo口 K 插卡位（1位）空：不支持插卡； C：支持上行插卡L 专用位（1位）默认无，专用系列 如 M表示 监控，I表示 宽温一体机M电源指示位A：AC电源 D：-48V电源 ; 可插卡电源此位为空C l o u d E n g i n e S 6700E C -H 48T 4Y C -M A产品系列端口组合关键特征AG B F I H J MC D E KLCloudEngine S6730系列产品概览产品定位：l 大中企业园区网络汇聚层交换机，支持10GE/25GE接入，40GE/100GE上行，有效降低网络收敛比；l 中小企业园区网络核心层交换机，协助企业构建接入+核心两层极简组网，接入通过25G到核心；常用组网：l 无线园区：Wi-Fi 6 AP+ S5732-H MultiGE交换机+ S6730-Hl弹性承载： S5732-H MultiGE交换机(RTU升级) + S6730-H (RTU升级*) + S12700E (RTU升级)CloudEngine S6730-H25GE系列CloudEngine S6730-H10GE系列CloudEngine S6730-S系列CloudEngine S6730系列产品主要功能差异概览功能项CloudEngine S6730-H 10GE系列CloudEngine S6730-HCloudEngine S6730-S25GE系列S6730-H24X6C S6730-H48X6C S6730-H24X4Y4C S6730-H28Y4C S6730-S24X6Q 硬件架构紧凑型，220mm深可编程硬件可靠堆叠可拔插风扇冗余可拔插电源冗余运维Netconf/YANGTelemetryNetstreamiPCAPTP：1588v2安全ECAMACSecAP管理WAC用户管理NAC业务随行虚拟化VXLANSVFMPLSCloudEngine S6730系列产品主要规格差异备注：*斜杠前为设备交换容量，斜杠后为芯片交换容量规格仅供参考，具体产品款型的规格以官网彩页及规格查询工具为准。
华为交换机产品系列整理版(DOC30页)
华为交换机产品系列在交换机领域，华为历经多年的耕耘和开展，积累了大量业界领先的知识产权和专利，可提供从核心到接入十多个系列上百款交换机产品。
根据所需交换机的用途，可大致分为数据中心交换机，园区交换机，个人和中小企业交换机三大类。
数据中心交换机CloudEngine 12800数据中心交换机CloudEngine 12800〔简称CE12800〕系列交换机是华为公司面向数据中心和高端园区网络推出的新一代高性能核心交换机。
在提供稳定、可靠、平安的高性能L2/L3层交换效劳根底上，实现弹性、虚拟、敏捷和高品质的网络。
CE12800系列支持工业级可靠性，以及严格前后风道设计，并支持全面的虚拟化能力和丰富的数据中心特性。
此外，CE12800系列采用了多种绿色节能创新技术，大幅降低设备能源消耗。
关键特性弹性、虚拟、敏捷、高品质数据中心核心交换机弹性：64Tbps交换容量，可平滑升级到320Tbps；单设备支持192个100GE，384个40GE，或1536个10GE；虚拟：1:16核心虚拟化，512节点TRILL组网，EVN支持跨数据中心资源共享；敏捷：作为Overlay虚拟化网络〔VXLAN/NVGRE〕的高性能硬件网关，支撑高达16M 多租户的数据中心运营，OPS和ENP实现双平面可编程，网络按需定制；品质：专利的严格前后风道设计，线卡网板风道独立，提高散热效率；多种绿色节能创新技术，降低机房能耗。
技术规格CloudEngine 7800数据中心交换机CloudEngine 7800数据中心交换机关键特性40GE会聚交换机全40GE交换机，1U高设备支持32个40GE接口，可灵活拆分为10GE接口；支持iStack堆叠技术，实现机架内、机架间以及跨区域超长距的高性能堆叠，构建可扩展、易管理的数据中心网络平台；支持IETF标准协议TRILL，构建512节点的大二层网络，实现虚拟机大范围在线迁移。
支持nCenter虚拟机感知，通过高速Radius接口快速下发网络策略，实现策略随行；作为Overlay虚拟化网络〔VXLAN/NVGRE〕的高性能硬件网关，支撑高达16M多租户的数据中心运营；OPS提供丰富的Open API编程接口，用户可通过Open API开发和部署专用网络管理策略，实现网络按需定制。
华为交换机产品介绍
华为交换机产品介绍首先是华为云引擎S系列交换机，该系列交换机是华为推出的一款面向高性能数据中心网络的产品。
它采用了业界领先的智能化硬件平台与软件管理机制，能够实现高性能、高可靠性和高可扩展性。
该系列交换机还具备智能风扇控制、智能降噪、智能保护等功能，使其在数据中心应用中具备了更好的性能和可靠性。
其次是华为CE系列交换机，该系列交换机是华为针对企业网络的产品线。
它提供了高密度、高可靠性和灵活的接口配置，为企业提供了更好的网络服务。
该系列交换机还支持IPv6、MPLS和多协议交换等功能，满足企业网络的需求。
此外，它还支持智能堆叠技术，能够实现交换机的灵活扩展和管理，提高企业网络的可靠性和可管理性。
华为S系列交换机是面向校园网络的产品线，具备卓越的性能和灵活性，适合用于大规模校园网络的部署。
该系列交换机还支持智能虚拟化技术，实现多个物理设备的虚拟化，提高网络资源的利用率。
此外，该系列交换机还具备高密度端口、高速转发和智能QoS等特点，能够为校园网络提供卓越的性能和可靠性。
华为华为NE系列交换机是一种面向能源行业的产品线，主要应用于能源自动化、电力通信等场景。
该系列交换机具备高可靠性、高可持续性和高安全性的特点，满足能源行业对网络可靠性和安全性的需求。
此外，它还具备强大的数据转发能力和数据处理能力，能够满足能源行业对大容量数据传输和处理的需求。
在产品功能方面，华为交换机具备丰富的特性，如多协议转发、多VLAN支持、QoS、安全认证等。
它还支持智能堆叠技术、智能负载均衡和智能链路聚合等功能，提高网络的性能和可靠性。
同时，华为交换机提供了丰富的接口配置，支持多种网络接口，满足不同场景和应用的需求。
总结起来，华为交换机凭借其卓越的性能、稳定性和可靠性，在数据中心、企业、校园网络等场景中广泛应用。
它具备丰富的产品线和功能，能够满足不同场景和应用的需求。
未来，随着网络技术的不断发展，华为交换机有望带来更多创新和突破，为用户提供更优质的网络服务。
华为系列交换机产品
S6506
12
S6506R路由交换机
产品定位: 产品定位:
中型网络LAN 中型网络LAN骨干路由交换机 LAN骨干路由交换机 大型网络的汇聚层交换机 高密度LAN LAN的用户接入交换机 高密度LAN的用户接入交换机
模块化、分布式处理 模块化、 8个槽位， 6个通用I/O槽 I/O槽 个槽位， 个通用I/O 最大支持 48GE 或 288FE 提供2 提供2＋1个电源冗余备份 支持所有单板在线热插拔 支持Salience 支持Salience™ 系列 路由引擎 Salience™ 支持华为VRP 3.x网络操作系统 支持华为VRP™ 3.x网络操作系统 VRP™
S8016
Data Server
S8016
Email, FTP, Proxy Cache Servers
Radius Servers
10
S6500系列千兆核心多层交换机
S6503 S6506 S6506R
64G备板容量 备板容量 32G 交换容量 4个槽位 个槽位 144FE/28GE iSalience™ I路由引擎 路由引擎
8
S8016丰富的业务特性
129.9.188.2
S8016
N A T
4S8016内置 内置NAT业务板以 业务板以NAPT方式支持公网和 内置 业务板以 方式支持公网和 私网地址的转换，有效解决 地址紧缺的问题 私网地址的转换，有效解决IP地址紧缺的问题 4NAT策略可以支持城域网公网 私网地址混合规划， 策略可以支持城域网公网/私网地址混合规划 策略可以支持城域网公网 私网地址混合规划， 解决外置式NAT无法支持的混合策略 无法支持的混合策略 解决外置式
5
S8016丰富的业务特性
华为主流路由器交换机简介和规格修订稿
华为主流路由器交换机简介和规格WEIHUA system office room 【WEIHUA 16H-WEIHUA WEIHUA8Q8-华为网络产品一、路由器1、AR G3系列企业路由器i.AR3200 系列企业路由器产品简介：AR3200系列企业路由器是华为公司推出的新一代网络产品，其秉承了华为在数据通信、无线通信、PON接入及软交换领域的深厚积累，并依托于自主知识产权的VRP平台，提供包括有线和无线的Internet接入、专线接入，PBX、融合通信及安全等功能，广泛部署于大中型园区网出口、大中型企业总部或分支等场景。
产品规格;ii.AR2200 系列企业路由器产品简介：AR2200系列企业路由器是华为公司推出的面向中型企业总部或大中型企业分支等以宽带、专线接入、语音和安全场景为主的路由器产品，采用多核CPU、独立分布式交换网可满足不同企业用户的的业务需求。
产品规格：2、AR系列工业路由器：i.AR530系列工业路由交换一体机产品简介：AR530系列工业路由交换一体机是专为工业环境设计的网关设备，可以满足在恶劣的温度、湿度、电磁干扰等环境下的网络通信需求。
AR530系列是集路由、交换、安全和采集功能于一体的新一代工业网关路由设备，具有强大的行业应用扩展能力。
产品规格：3、NE系列高端路由器：i.Huawei NetEngine5000E 集群路由器产品简介：NetEngine 5000E集群路由器(以下简称NE5000E)是华为公司面向互联网骨干节点、城域网核心节点、数据互联中心节点以及Internet承载节点推出的超级核心路由器产品。
NE5000E采用自研的Solar系列芯片，先进的光背板设计和分布式可扩展软件平台，可提供海量交换容量和超高转发性能，全面满足新一代互联网对带宽性能、服务质量、业务能力的需要。
NE5000E 硬件上包括两部分，集群中央框CCC（Cluster Central Chassis）和转发线卡框CLC（Cluster Line Chassis）。
ce12800技术规格
ce12800技术规格
CE12800是华为推出的数据中心交换机产品系列之一，具有高
密度、高性能和高可靠性的特点。
以下是CE12800系列交换机的一
般技术规格：
1. 高密度，CE12800系列交换机具有高密度的端口设计，支持
大量的服务器接入和高密度的交换容量，满足大规模数据中心的需求。
2. 高性能，CE12800系列交换机采用了先进的交换芯片和高速
接口，具有卓越的转发性能和吞吐能力，能够满足大规模数据中心
的高性能需求。
3. 高可靠性，CE12800系列交换机支持热插拔的交换模块设计，具有冗余的硬件设计和智能的故障隔离机制，保证了设备的高可靠
性和稳定性。
4. 多层次的安全防护，CE12800系列交换机支持多种安全特性，包括用户认证、访问控制、流量过滤等，保障数据中心网络的安全性。
5. 灵活的扩展性，CE12800系列交换机支持灵活的模块化设计，可以根据实际需求进行灵活的扩展和升级，满足不同规模数据中心
的需求。
总的来说，CE12800系列交换机是一款适用于大规模数据中心
的高性能、高可靠性的交换机产品，能够满足数据中心网络的高密
度接入、高性能传输和高可靠性要求。
华为S6720-LI系列交换机产品简介说明书
Huawei S6720-LI Series SwitchesProduct BrochureHuawei Enterprise Sx700 Series Switch ProductS6720-LI Series SwitchesProduct Overview1Product Features and HighlightsHigh-Density 10GE Access and 40GE Uplink• To provide sufficient bandwidth for users, more and more servers use 10G network adapters. The S6720-LI has the highest density of 10GE ports and largest switching capacity among counterpart switches.Each S6720-LI provides up to 32 line-rate 10GE ports and two line-rate QSFP+ ports.• Ports of the S6720-LI support GE access and 10GE access and can identify optical module types,maximizing the return on investment and allowing users to flexibly deploy services.Comprehensive Security Control Policies• The S6720-LI provides multiple security measures to defend against Denial of Service (DoS) attacks, as well as attacks against networks or users. DoS attacks include SYN flood, Land, Smurf, and ICMP floodattacks. Attacks to networks refer to STP BPDU/root attacks. Attacks to users include bogus DHCP serverattacks, man-in-the-middle attacks, IP/MAC spoofing attacks, and DHCP request flood attacks. DoSattacks that change the CHADDR field in DHCP packets are also attacks against users.• The S6720-LI supports DHCP snooping, which generates user binding entries. DHCP snooping discards invalid packets that do not match any binding entries, such as ARP spoofing packets and IP spoofingpackets. This prevents hackers from using ARP packets to initiate attacks on campus networks. DHCPsnooping trusted ports can be specified to ensure that users connect only to the authorized DHCP server.• The S6720-LI supports strict ARP learning. This feature prevents ARP spoofing attackers from exhausting ARP entries so that users can connect to the Internet normally. The S6720-LI supports IP source check toprevent DoS attacks caused by MAC address spoofing, IP address spoofing, and MAC/IP spoofing.• The S6720-LI supports centralized MAC address authentication and 802.1X authentication. Itauthenticates users based on statically or dynamically bound user information such as the user name, IPaddress, MAC address, VLAN ID, port number, and flag indicating whether antivirus software is installed.VLANs, QoS policies, and ACLs can be applied to users dynamically.• The S6720-LI can limit the number of MAC addresses learned on a port to prevent attackers fromexhausting MAC address entries by using bogus source MAC addresses. This function minimizes packetflooding that occurs when MAC addresses of users cannot be found in the MAC address table.Comprehensive Reliability Mechanisms• The S6720-LI supports MSTP multi-process that enhances the existing STP, RSTP, and MSTPimplementation. This function increases the number of MSTIs supported on a network. It also supportsenhanced Ethernet reliability technologies such as Smart Link and RRPP, which implement millisecond-level protection switchover and ensure network reliability. Smart Link and RRPP both support multi-instance to implement load balancing among links, improving bandwidth use efficiency.• The S6720-LI supports enhanced trunk (E-trunk). A CE can be dual-homed to two PEs through Eth-Trunk links. This implements inter-device link aggregation and link load balancing, and greatly improvesreliability of access devices.• The S6720-LI supports the Smart Ethernet Protection (SEP) protocol, a ring network protocol applied to the link layer of an Ethernet network. SEP can be used on open ring networks and provides millisecond-level switchover to ensure nonstop services. SEP features simplicity, high reliability, fast switchover, easymaintenance, and flexible topology, facilitating network planning and management.• The S6720-LI supports G.8032, also called Ethernet Ring Protection Switching (ERPS). ERPS is based on traditional Ethernet MAC and bridging functions. It uses the mature Ethernet OAM and Ring AutomaticProtection Switching (Ring APS or R-APS) technologies to implement millisecond-level protectionswitchover on Ethernet. ERPS supports multiple services and provides flexible networking, reducing theOPEX and CAPEX.• The S6720-LI supports VRRP. Two S6720-LIs can form a VRRP group to ensure nonstop and reliablecommunication. Multiple equal-cost routes to an upstream device can be configured on the S6720-LI toprovide route redundancy. When an active route is unreachable, traffic is switched to a backup route.Various QoS Control Mechanisms• The S6720-LI implements complex traffic classification based on packet information such as the 5-tuple, IP preference, ToS, DSCP, IP protocol type, ICMP type, TCP source port, VLAN ID, Ethernet protocol type,and CoS. ACLs can be applied to inbound or outbound direction to filter packets. The S6720-LI supportsa flow-based two-rate three-color CAR. Each port supports eight priority queues and multiple queuescheduling algorithms such as WRR, DRR, PQ, WRR+PQ, and DRR+PQ. All of these ensure the quality ofvoice, video, and data services.Huawei Enterprise Sx700 Series Switch Product2Huawei Enterprise Sx700 Series Switch Product Product SpecificationsHigh Scalability• The S6720-LI supports intelligent stack (iStack) and virtualizes multiple switches into one logical switch.A port of the S6720-LI can be configured as a stack port using a command for flexible stack deployment. The distance between stacked switches is further increased when the switches are connected with optical fibers. Compared with a single device, iStack has advantages on scalability, reliability, performance, and overall architecture. A new switch can join a stack to increase the system capacity or replace a faultymember switch without interrupting services. Compared with stacking of modular switches, the iStackfunction can increase system capacity and port density with no restriction of the hardware architecture.Multiple devices in a stack can be considered as one logical device. These switches can be managedusing a single IP address, which greatly reduces system expansion and O&M costs.Convenient Management• The S6720-LI supports automatic configuration, plug-and-play, deployment using a USB flash drive, and batch remote upgrade. These capabilities simplify device management and maintenance, and greatly reduce maintenance costs.• The S6720-LI supports SNMPv1/v2/v3 and provides flexible methods for managing and maintainingdevices, such as CLI and Web NMS. The NQA function helps users with network planning and upgrades. In addition, the S6720-LI supports NTP , SSH v2, HWTACACS, RMON, log hosts, and port-based trafficstatistics.• The S6720-LI supports GVRP , which dynamically distributes, registers, and propagates VLAN attributes to reduce the manual configuration workloads of network administrators and ensure correct VLAN configuration.• The S6720-LI supports MUX VLAN that isolates Layer 2 traffic between ports in a VLAN. MUX VLANdefines principal VLANs and subordinate VLANs. Subordinate VLANs can communicate with the MUXVLAN but cannot communicate with each other. This function prevents communication betweennetwork devices connected to certain ports or port groups but allows the devices to communicate withthe default gateway. MUX VLAN is usually used on an enterprise intranet to isolate user ports from each other but allow them to communicate with server ports.• Complying with IEEE 802.3ah and 802.1ag, the S6720-LI supports point-to-point Ethernet faultmanagement and can detect faults in the last mile of an Ethernet link to users. Ethernet OAM improvesthe Ethernet network management and maintenance capabilities and ensures a stable network.Various IPv6 Features• The S6720-LI supports various IPv6 routing protocols including RIPng and OSPFv3. It uses the IPv6Neighbor Discovery Protocol (NDP) to manage packets exchanged between neighbors. It also providesthe Path MTU Discovery (PMTU) mechanism to select a proper MTU on the path from the source to the destination, optimizing network resources and obtaining the maximum throughput.3Huawei Enterprise Sx700 Series Switch Product 4Huawei Enterprise Sx700 Series Switch Product5Huawei Enterprise Sx700 Series Switch ProductNetworking and ApplicationsData Center NetworksAs shown in the following figure, the S12700 agile switches function as core switches in a data center and use firewall and load balancer cards to ensure security and perform load balancing. The S6720-LIs function as access switches and provide high-density 10GE ports to connect to 10G servers.Campus NetworksThe S6720-LI series switches can be used as access or aggregation switches on small- and medium-sized campus networks and provide high-density line-rate 10GE ports, rich service features, and comprehensivesecurity mechanism. All of those make the S6720-LI cost effective on campus networks.CarrierProductionArea Test Area Office Area ManagementArea InterconnectionArea S6720-LI6Ordering InformationProduct DescriptionS6720-16X-LI-16S-AC (16 10GE SFP+, AC power supply)S6720S-16X-LI-16S-AC (16 10GE SFP+, AC power supply)S6720-26Q-LI-24S-AC (24 10GE SFP+, 2 40GE QSFP+, A C power supply) S6720S-26Q-LI-24S-AC (24 10GE SFP+, 2 40GE QSFP+, A C power supply)Copyright © Huawei Technologies Co., Ltd. 2018. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.Trademark Notice, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.Other trademarks, product, service and company names mentioned are the property of their respective owners.General DisclaimerThe information in this document may contain predictive statements including,without limitation, statements regarding the future financial and operating results,future product portfolio, new technology, etc. There are a number of factors thatcould cause actual results and developments to differ materially from thoseexpressed or implied in the predictive statements. Therefore, such information isprovided for reference purpose only and constitutes neither an offer nor anacceptance. Huawei may change the information at any time without notice.。
华为CC08数字程控交换机产品资料
华为C&C08数字程控交换机产品资料华为C&C08数字程控交换机系统配置华为C&C08 数字程控交换系统由后管理模块（BAM）、管理/通讯模块（AM/CM）、交换模块（SM、ESM）组成，也可以根据需要选配远端交换模块RSM、SMII 或RSMII、RSA 以及RSP 远端用户模块。
华为C&C08 交换系统采用模块化结构。
系统由各个功能相对独立的模块组成，各模块之间采用光纤或中继电缆连接。
每台C&C08 交换机必需配置一个AM/CM 和一个BAM，其他如SM、ESM、RSM、SMII、RSMII、RSA、RSP 可根据需要配置。
C&C08 数字程控交换系统的总体配置华为C&C08数字程控交换机交换设备机柜交换设备机柜中放置机框和单板，是 C&C08 交换系统的主要机柜。
交换设备机柜的尺寸：宽 800mm（不带侧门）深 550mm高 2100mm（带顶盖）/1946.5mm（不带顶盖）侧门尺寸：高 2100mm，宽550mm，厚40mm华为C&C08数字程控交换机BAM 机柜BAM 机柜采用B68 服务器机柜。
B68 服务器机柜为标准19 英寸机柜，结构轻巧简单，通用性强。
B68 服务器机柜内放置配电盒和BAM 服务器组件（包括服务器、LAN Switch、KVMS 等）。
机柜外型尺寸（宽深高，单位为mm）：600mm 800mm 2100mm（带顶盖）/1946.5mm（不带顶盖）。
机柜的可用空间高度：40U（1U=44.45mm）。
B68 服务器机柜的组成包括机架、门板、侧门、顶盖、底盖、防尘网、告警灯等，其与交换设备的区别有：●B68 服务器机柜的上梁与顶盖连为一体。
●侧门为嵌入式，直接安装在机架两侧，安装侧门后机架宽度不变。
●底部需要安装防尘网。
机柜的门上也装有防尘网。
●B68 服务器机柜的过线孔为塑料盖板，线缆要穿过时用小刀在该板上划出所需●要的孔即可。
华为S5720I-SI系列交换机产品简介说明书
Huawei S5720I-SI SwitchesProduct BrochureHuawei S5720I-SI Series SwitchesModels and AppearancesThe following models are available in the S5720I-SI series.•Operating temperature: -40°C to +75°C1Huawei S5720I-SI Series SwitchesProduct Features and HighlightsSuitable for outdoor extreme environment•S5720I-SI supports broad operating temperature range. So the switch can be working in the outdoorcabinet in the very cold and very hot environments. The typical scenario is the access of the camera for outdoor video surveillance and ETTx.•Service ports support ±6kV lightning protection, suitable for outdoor extreme environment POE++ large power supply•S5720I-SI has PoE++ model, which supports multiple GE POE++ Ethernet electrical ports. The POE++model provides up to 60 W power supply per port.•S5720I-SI PoE++ model supports long-distance PoE++，works with Huawei M2220-I/M2221-FL/M2221-VL/M2260-I/M2220-I (8-32mm) series cameras to provide 200 m long-distance power supply through 100Mbps links, 250m through 10Mbps linksMaintenance-free through lifecycle•S5720I-28X-SI-AC and S5720I-28X-PWH-SI-AC provide built-in dual power supplies and redundancybackup of fans, maintenance-free through lifecyclePowerful service processing capability and multiple security control mechanisms•The S5720I-SI supports many Layer 2/Layer 3 multicast protocols such as PIM SM, PIM DM, PIM SSM,MLD, and IGMP snooping, to support multi-terminal high-definition video surveillance and videoconferencing services.•The S5720I-SI supports multiple Layer 3 features including OSPF, IS-IS, BGP , and VRRP , meetingenterprises' requirements on access and aggregation service bearing, and enabling a variety of voice,video, and data applications.•The S5720I-SI supports MAC address authentication, 802.1x authentication, and Portal authentication,and implements dynamic delivery of policies (VLAN, QoS, and ACL) to users.•Switching capacity: 336 Gbit/s•Operating temperature: -40°C to +65°C 2•The S5720I-SI provides a series of mechanisms to defend against DoS and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks. User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and change of the DHCP CHADDR value.•The S5720I-SI sets up and maintains a DHCP snooping binding table, and discards the packets that do not match the table entries. You can specify DHCP snooping trusted and untrusted ports to ensure that users connect only to the authorized DHCP server.•The S5720I-SI supports strict ARP learning, which protects a network against ARP spoofing attacks to ensure normal network access.Cloud management•The Huawei cloud management platform allows users to configure, monitor, and inspect switches on the cloud, reducing on-site deployment and O&M manpower costs and decreasing network OPEX. Huawei switches support both cloud management and on-premise management modes. These twomanagement modes can be flexibly switched as required to achieve smooth evolution while maximizing return on investment (ROI).Easy O&M•The S5720I-SI supports Super Virtual Fabric (SVF), which virtualizes the "Core/aggregation + Access switch + AP" structure into a logical device. The S5720I-SI provides the simplest network management solution in the industry to simplify device management. It allows plug-and-play access switches and APs.In addition, the S5720I-SI supports service configuration templates. The templates are configured oncore devices and automatically delivered to access devices, enabling centralized control, simplified service configuration, and flexible configuration modification. The S5720I-SI functions as a client in an SVFsystem.•The S5720I-SI supports zero-touch deployment, replacement of faulty devices without additional configuration, USB-based deployment, batch configuration, and batch remote upgrade. The capabilities facilitate device deployment, upgrade, service provisioning, and other management and maintenance operations, and also greatly reduce O&M costs. The S5720I-SI can be managed using SNMP v1/v2c/v3, CLI, web-based network management system, or SSH v2.0. Additionally, it supports RMON, multiple log hosts, port traffic statistics collection, and network quality analysis, which facilitate network optimization and reconstruction.•The S5720I-SI supports the Sampled Flow (sFlow) function. It uses a method defined in the sFlow standard to sample traffic passing through it and sends sampled traffic to the collector in real time.The collected traffic statistics are used to generate statistical reports, helping enterprises maintain their networks.Multiple reliability mechanisms•The S5720I-SI supports iStack. This technology can virtualize up to nine physical switches into one logical switch. Downlink electrical ports support iStack. Member switches in a stack implement redundancybackup to improve device reliability and use inter-device link aggregation to improve link reliability. iStack provides high network scalability. You can increase a stack's ports, bandwidth, and processing capacity by simply adding member switches. iStack also simplifies device configuration and management. Aftera stack is set up, multiple physical switches are virtualized into one logical device. You can log in to anymember switch in the stack to manage all the member switches in the stack.•In addition to traditional STP, RSTP, and MSTP, the S5720I-SI supports Huawei-developed Smart Ethernet Protection (SEP) technology and the latest Ethernet Ring Protection Switching (ERPS) standard. SEP is a ring protection protocol specific to the Ethernet link layer, and applies to various ring network topologies, such as open ring topology, closed ring topology, and cascading ring topology. This protocol is reliable, easy to maintain, and implements fast protection switching within 50 ms. ERPS is defined in ITU-T G.8032.It implements millisecond-level protection switching based on traditional Ethernet MAC and bridgingfunctions.Huawei S5720I-SI Series Switches3Huawei S5720I-SI Series Switches•The S5720I-SI supports Smart Link. One S5720I-SI switch can connect to multiple aggregation switchesthrough multiple links, implementing backup of uplinks and significantly improving reliability of access devices.•The S5720I-SI supports Ethernet OAM (IEEE 802.3ah/802.1ag) to detect link faults quickly.Mature IPv6 technologies•The S5720I-SI uses the mature, stable VRP platform and supports IPv4/IPv6 dual stack, IPv6 RIPng, andIPv6 over IPv4 tunnels (including manual, 6-to-4, and ISATAP tunnels). With these IPv6 features, the S5720I-SI can be deployed on a pure IPv4 network, a pure IPv6 network, or a shared IPv4/IPv6 network,helping achieve IPv4-to-IPv6 transition.Product Specifications4Huawei S5720I-SI Series Switches Service Features5Huawei S5720I-SI Series Switches 6ApplicationsVideo surveillance application in safe city scenarioS5720I-SI supports extended operating temperature range, with professional lightning protection capabilities, suitable for outdoor cabinet environment. S5720I-SI can be used for safe city scenario to provide remote PoE access for the camera.ETTx scenarioThe S5720I-SI supports extended operating temperature and provides full gigabit access and multi-gigabit uplinks for ETTx access scenarios.Huawei S5720I-SI Series Switches7Huawei S5720I-SI Series SwitchesOrdering InformationFor more information, visit /enor contact your local Huawei sales office.8Huawei S5720I-SI Series Switches9Copyright © Huawei Technologies Co., Ltd. 2018. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.Trademark Notice, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.Other trademarks, product, service and company names mentioned are the property of their respective owners.General DisclaimerThe information in this document may contain predictive statements including,without limitation, statements regarding the future financial and operating results,future product portfolio, new technology, etc. There are a number of factors thatcould cause actual results and developments to differ materially from thoseexpressed or implied in the predictive statements. Therefore, such information isprovided for reference purpose only and constitutes neither an offer nor anacceptance. Huawei may change the information at any time without notice.。
华为S9300路由交换机产品概述说明书
Huawei S9300 SwitchProduct BrochuresRealize Your Potential01 Huawei S9300 Switch Product S9303 S9306S9312 Product OverviewProduct FeaturesAgile Switch, Enabling Networks to Be More Agile for Services• The high-speed ENP is tailored for Ethernet networks. The ENP's flexible packet processing and traffic control capabilities can meet current and future service requirements and help build a highly scalable network. The ENP has a fully programmable architecture, in which customers can define their own forwarding models, forwarding behaviors, and lookup algorithms. Microcode programmability enables new services to be provisioned within six months, without the need of replacing the hardware. In contrast, with traditional ASIC chips, new services cannot be provisioned until new hardware is developed to support the services, which may take 1 to 3 years, because ASIC chips use a fixed forwarding architecture and follow a fixed forwarding process.• By using an ENP board, the S9300 supports the unified user management function to authenticate both wired and wireless users, ensuring a consistent user experience regardless of whether they use wired or wireless access devices to connect to the network. The unified user management function supports various authentication methods, including 802.1x, MA C, and Portal authentications, and is capable of managing users based on user groups, domains, and time ranges. This function visualizes user and service management and enables the transformation from device-centric management to user-centric management.• The ENP board supports the Packet Conservation Algorithm for Internet (iPCA) function, which changes the traditional method of using simulated traffic for fault location. iPCA technology can monitor network quality for any service flow at any network node, at any time, and without extra costs. It can detect temporary service interruptions in a very short time and precisely identify faulty ports. This cutting-edge fault detection technology turns "extensive management" to "fine granular management."• Huawei's IEEE 1588v2 and Synchronous Ethernet (SyncE) solutions enable high-precision time synchronization between network devices. Compared with the Global Positioning System (GPS) time synchronization solution, Huawei's solutions enhance security while reducing costs. Innovative CSS Technology• S9300 switches can set up a clustering switch system (CSS) through cluster cards or service ports. The CSS providesindustry-leading 320 Gbps inter-chassis bandwidth dueto Huawei's novel approach of using the switching fabric clustering technology in CSS. Member switches can be connected through the service ports on LPUs. Theseservice ports can be configured as stack member portsand added to a logical stack port to enable connectionthrough SFP+ optical modules and fibers, or direct connection through SFP+ stack cables. Virtualization technology improves link use efficiency and preventssingle-point failures through inter-chassis link aggregation.• The S9300 uses route hot backup technology to backup and uninterruptedly forward all data of the controland data planes at Layer 3. This technology significantly improves reliability and performance of the S9300. Theinter-chassis links in a CSS can be bundled to improve linkuse efficiency and eliminate single-point failures.• The S9300 can use common service ports as cluster ports,and member switches can be connected through opticalfibers. This increases the permitted distance between switches in the CSS.• All member switches in a CSS are managed through asingle IP address, which simplifies network device and topology management, improves network operationefficiency, and reduces maintenance costs.Carrier-Class Reliability• The S9300's key components, such as MPUs, power supplies, and fans trays, use a redundant design, and all modules are hot swappable to ensure stable network running.• The S9300 supports 3.3 ms hardware-based BFD for staticroutes and routing protocols such as RIP, OSPF, BGP, IS-IS, VRRP, PIM, and MPLS. Hardware-based BFD significantly improves network reliability.• The S9300 supports High-speed Self Recovery (HSR) technology. Using Huawei's ENP cards, the S9300 is the industry's only switch that implements end-to-end IPMPLS bearer network protection switchover within 50 ms, improving network reliability.• The S9300 supports hardware-based Ethernet OA Min compliance with IEEE 802.3ah, 802.1ag, and ITU-Y.1731. Hardware-based Ethernet OAM can collect precise network parameters, such as transmission latency andjitter, to help customers monitor network operating statusin real time and to realize fast fault detection, location,and failover.• The S9300 supports Graceful Restart (GR) technology to implement nonstop forwarding (NSF) and ensure reliableand high-speed operation of the entire network.02Powerful Service Processing Capabilities• The S9300 provides high-density 10GE ports and provide 4 x 100GE line card, Each S9312 chassis can provide a maximum of 576 x 10GE ports and 48 x 100GE ports, meeting the requirements of bandwidth-consuming applications, such as multimedia conferencing and data access.• Based on a multi-service routing and switching platform, the S9300 provides wireless access, voice, video, and data services for network access, aggregation, and core layers, helping customers build a highly reliable, low-latency, and multi-service network.• The S9300 supports distributed MPLS L2/L3VPN functions including MPLS, virtual private LA N service (VPLS), hierarchical VPLS (HVPLS), and virtual leased line (VLL), to provide secure access for VPN users.• The S9300 supports comprehensive Layer 2 and Layer 3 multicast protocols, including Protocol Independent Multicast Sparse Mode (PIM SM), PIM Dense Mode (DM), PIM Source-Specific Multicast (SSM), Multicast Listener Discovery (MLD), and Internet Group Management Protocol (IGMP) snooping, to ensure high-quality HD video surveillance and video conferencing services.• The Service Chain feature virtualizes the value-added service processing capabilities, such as firewall, so that campus networks can utilize these capabilities in an undifferentiated manner. That is, these capabilities can be used without location constraint.• The software platform where the S9300 runs supports various routing protocols (including IPv6) to meet carriers' network requirements and allows carriers to smoothly upgrade their networks to IPv6.Various Network Traffic Analysis Functions• The S9300 supports NetStream, including V5/V8/V9 versions. The NetStream features involve aggregation traffic template, real-time traffic sampling, dynamic report generation, traffic attribute analysis, and traffic exception alarms. The S9300 sends traffic statistics logs to master and backup servers simultaneously to avoid data loss. NetStream helps monitor the operating status and traffic model on the entire network. It also provides fault pre-detection, effective fault rectification, fast problem handling, and security monitoring capabilities to help customers optimize network structure and adjust service deployment.Comprehensive Security Measures• The S9300 supports MAC security (MACSec) that enables hop-by-hop secure data transmission. The S9300 can beapplied to scenarios that pose high requirements on data confidentiality, such as government and finance sectors.• NGFW is a next-generation firewall card installed on an S9300. In addition to the traditional defense functions, such as identity authentication and Anti-DDoS, the NGFW supports IPS, anti-spam, web security, and application control functions.• The S9300 provides comprehensive network admission control (NAC) solutions, involving MAC, 802.1x, and Portal authentications as well as authentication triggered by DHCP snooping. These authentication methods ensure the security of various access users, such as dumb terminals, mobile users, and users allocated dynamic IP addresses. Comprehensive IPv6 Solution• The S9300 software and hardware platforms support IPv6. The Ministry of Industry and Information Technology (MIIT) has certified the S9300 as IPv6 network-access compliant and has awarded IPv6 Ready Logo Phase 2 certification.• The S9300 supports IPv6 routing protocols such as RIPng, OSPFv3, IS-ISv6, as well as IPv6 static routes, and supports BGP4+, MLD v1/v2, MLD snooping, PIM-SM/DMv6, and PIM-SSMv6.• The S9300 supports various IPv4-to-IPv6 technologies to ensure seamless network migration. The technologies include IPv6 manual tunnel, 6to4 tunnel, Intra-site Automatic Tunnel Addressing Protocol (ISATAP) tunnel, Generic Routing Encapsulation (GRE) tunnel, and IPv4-compatible automatic tunnel.Innovative Energy Saving Design• The S9300 uses a rotating ventilation channel to improve heat dissipation efficiency and a variable-current chip to dynamically adjust power according to traffic volume. These technologies reduce power consumption of the entire chassis by 11%. The S9300 supports port sleeping. Idle ports enter the sleeping state to reduce power consumption.• The S9300 supports intelligent fan-speed adjustment, in which fans are grouped into multiple zones and fan speed in each zone is adjusted individually based on service loads. This technology lowers power consumption, reduces noise, and extends the service life of fans.• The S9300 supports Energy Efficient Ethernet (EEE) in compliance with IEEE 802.3az. Transceivers on line cards can quickly transition to the lower power idle state to reduce power consumption when no traffic is being transmitted.03VXLAN• VXLAN is used to construct a Unified Virtual Fabric (UVF). As such, multiple service networks or tenant networks can be deployed on the same physical network, and service and tenant networks are isolated from each other. This capability truly achieves 'one network for multiple purposes'. The resulting benefits include enabling data transmission of different servicesor customers, reducing the network construction costs, and improving network resource utilization. The S9300 series switches are VXLAN-capable and allow centralized and distributed VXLAN gateway deployment modes. These switches alsosupport the BGP EVPN protocol for dynamically establishing VXLAN tunnels and can be configured using NETCONF/YANG.OPS• Open Programmability System (OPS) is an open programmable system based on the Python language. IT administratorscan program the O&M functions of a switch through Python scripts to quickly innovate functions and implement intelligentO&M.Big Data Security Collaboration• Agile switches use NetStream to collect campus network data and then report such data to the Huawei Cybersecurity Intelligence System (CIS). The purposes of doing so are to detect network security threats, display the security posture acrossthe entire network, and enable automated or manual response to security threats. The CIS delivers the security policies to theAgile Controller. The Agile Controller then delivers such policies to agile switches that will handle security events accordingly.All these ensure campus network security.Intelligent Diagnosis• Open Intelligent Diagnosis System (OIDS) integrates the device health monitoring and fault diagnosis functions – that are typically deployed on a Network Management System (NMS) – into the switch software to implement intelligent diagnosison a single switch. After OIDS is deployed on a switch, the switch periodically collects and records the running informationand automatically determines whether a fault occurs. If a fault occurs, the switch automatically locates the fault or helpslocate the fault. All these merits increase fault locating efficiency of O&M staff while improving device maintainability.04Product Specifications0506Product List07080910111213 Applications Applications in Carriers' MANs Applications in Large-Scale Data Centers The S9300 provides carrier-class reliability, security, and manageability. By converging DSLAM, LAN, and enterprise access services, the S9300 provides large-capacity switching and high-density 10G interfaces. At the convergence layer, the interface rate can be smoothly upgraded from 10GE to 40GE/100GE, meeting the increasing bandwidth requirements of ISP networks. The S9300 supports features such as RRPP , Ethernet OAM, VRRP , and MPLS L2/L3VPN, and satisfies the requirements for IPTV, high speed Internet (HSI), and enterprise leased lines.The S9300 switches function as high-density 10G core and aggregation nodes in large-scale data centers, helping enterprises build highly reliable, non-blocking, and virtualized data center networks. The S9300 switches use various technologies, including IP FRR, hardware-level BFD, NSF, VRRP , and E-Trunk, to ensure uninterrupted services. In addition, the S9300 switches support the CSS function to improve network IT efficiency and reduce network maintenance costs.For more information, visit / or contact your local Huawei sales office.Web & Email Application Application Database S2300Copyright © Huawei Technologies Co., Ltd. 2018. All rights reserved.Trademark NoticeGeneral Disclaimer, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.Other trademarks, product, service and company names mentioned are the property of their respective owners.The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei maychange the information at any time without notice. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.HUAWEI TECHNOLOGIES CO.,LTD.Huawei Industrial Base Bantian Longgang Shenzhen 518129,P.R.China Tel: +86 755 。
华为 CloudEngine S6730-H 系列交换机 产品手册
彩页产品概述CloudEngine S6730-H系列交换机，是新一代企业级核心和汇聚层交换机，具备高性能、高可靠、云管理和智能运维能力。
采用华为领先的VRP平台，专为安全性，物联网和云而构建。
可广泛用于企业园区、高校、数据中心等应用场景。
CloudEngine S6730-H系列交换机，是华为面向园区网络推出的10G、25G、40G和100G以太网交换机，丰富的端口类型满足多样化的网络带宽需求。
产品支持云管理，实现包括规划、部署、监控、体验可视化、故障修复与网络优化的全生命周期云管理网络服务，让网络管理化繁为简。
产品支持随板AC能力，集成AC功能，可管理大规模的AP，有效简化了客户网络架构和设备数量，降低组网成本。
产品具备业务随行能力，实现了身份信息的全网统一，不管用户从哪里接入，都可以享受一致的权限和用户体验，充分满足企业移动办公的要求。
产品支持VXLAN技术，通过网络虚拟化实现业务隔离，一网多用，极大提升了网络容量和利用率。
本系列交换机在成本、灵活性、可扩展性等方面都是新一代物联融合网络的最优选择。
全系列产品内置安全探针，支持异常流量检测、加密流量的威胁分析，以及全网威胁诱捕等功能，从传统的被动防御转变为主动防御，有效保障园区网络安全。
产品型号和外观CloudEngine S6730-H48X6CCloudEngine S6730-H24X4Y4C产品特性和优势让网络更敏捷地为业务服务●该系列交换机内置高速灵活的处理器芯片，针对以太网专属设计，凭借其灵活的报文处理及流量控制能力，深入贴近业务，满足现在及未来的各种挑战，助力客户构建弹性扩展的网络。
●该系列交换机支持完全自定义流量的转发模式、转发行为和查找算法。
通过微码编程实现新业务，客户无需更换新的硬件，快速灵活，6个月即可上线。
●该系列交换机在完全覆盖传统交换机能力基础上，通过开放接口和自定义转发流程，满足企业定制化业务诉求。
企业既可以直接利用多层次的开放接口自主开发新的协议、功能，也可以将诉求交由厂商，与厂商共同开发完成，打造企业专属园区网络。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
S系列交换机系统介绍
版本：V3.0(20130630) HUAWEI TECHNOLOGIES CO., LTD.
目录
概述 硬件介绍
软件调测
FAQ
华为保密信息，未经授权禁止扩散
HUAWEI TECHNOLOGIES CO., LTD.
S5700EI：堆叠卡堆叠 S5710EI：业务口堆叠
不支持
HUAWEI TECHNOLOGIES CO., LTD.
华为保密信息，未经授权禁止扩散
Page 10
S6700系列交换机
全 万 兆
S6700-24-EI S6700-48-EI
24端口
48端口
HUAWEI TECHNOLOGIES CO., LTD.
S3700-28TP-PWR-EI
S3700-52P-PWR-EI
S3700-26C-HI
C系列
TP系列 非POE
P系列
C系列
TP系列 POE
P系列
HUAWEI TECHNOLOGIES CO., LTD.
华为保密信息，未经授权禁止扩散
Page 8
S5700系列交换机
精 简 型 LI 标 准 型 SI 增 强 型 EI 高 级 型 HI
G H I J K
HUAWEI TECHNOLOGIES CO., LTD.
华为保密信息，未经授权禁止扩散
Page 12
盒式交换机－插卡
HUAWEI TECHNOLOGIES CO., LTD.
华为保密信息，未经授权禁止扩散
Page 13
盒式交换机－插卡
插卡类别 插卡名称 ES5D000X2S00 ES5D000X4S01 前插卡 ES5D000G4S01 ES5D00G4SA01 ES5D00X2SA00 ES5D00X4SA00 ES5D00G4SC00 ES5D21G08S00 ES5D21G08T00 ES5D21X02S00 ES5D00ETPC00 ES5D00ETPB00 插卡描述 2端口10GE SFP+光接口前插卡 4端口10GE SFP+光接口前插卡 4端口GE光接口前插卡 4端口GE光接口前插卡 2端口GE SFP/10GE SFP+光接口前插卡 4端口GE SFP/10GE SFP+光接口前插卡 4端口GE SFP光接口前插卡 8端口GE SFP光接口后插卡 8端口GE电接口后插卡 2端口GE SFP/10GE SFP+光接口后插卡 堆叠后插卡 扩展通道后插卡，与X4S01、G4S01和 G4SA01前插卡一起配套使用。注意：如 果未使用后插卡，则这三个前插卡仅部分 接口可正常使用。 热插拔 适用交换机 不支持 S5700-SI、S5700-EI 不支持 S5700-SI、S5700-EI 不支持 S5700-EI 不支持 S5700-SI 支持 S5700-HI 支持 支持 支持 支持 支持 不支持 不支持 S5700-HI S5700-HI S5710-EI S5710-EI S5710-EI S5700-SI、S5700-EI S5700-SI、S5700-EI
V100R006C00， V100R006C03， V100R006C05版本支持
S2710
V100R006C03， V100R006C05版本支持 V200R003C00版本支持
S2750
HUAWEI TECHNOLOGIES CO., LTD.
华为保密信息，未经授权禁止扩散
Page 18
S2700-9TP-SI-AC
S2710-52P-SI-AC
S2710-52P-PWR-SI
增 强 型 EI
S2700-9TP-EI-DC
S2700-52P-EI-AC
S2700-26TP-PWR-EI
S2700-52P-PWR-EI
TP系列 非POE
P系列
TP系列 POE
华为保密信息，未经授权禁止扩散
WAN
S6700
SPU inside 10GE S3700
核心层
汇聚层
楼层 1
S1700
S1700
S2700 楼层 2 S1700
S3700
楼层 3 S1700
桌面接入
HUAWEI TECHNOLOGIES CO., LTD.
华为保密信息，未经授权禁止扩散
Page 4
目录
概述 硬件介绍
软件调测
FAQ
华为保密信息，未经授权禁止扩散
HUAWEI TECHNOLOGIES CO., LTD.
Page 5
S1700系列交换机
全 千 兆
S1700-8G-AC S1724G-AC S1728GWR-4P-AC S1700-52GFR-4P-AC
S1700-28GFR-4P-AC
千 兆 上 行
S1700-52R-2T2P-AC
华为保密信息，未经授权禁止扩散
Page 11
盒式交换机命名规则及接口编号
字段 A 表示设备为S系列交换机。 B C D 含义 6：默认下行为万兆光口；5：默认下行为千兆电口；
3：三层交换机，默认下行为百兆电口；2：二层交换机，默认下行口为百兆电口。
7：企业网产品系列。 表示设备不同系列，如00、10等。
Page 2
S系列交换机全家福
VRP
inside
L3 Switch
10G
数据中心
S5700
S5700
S6700
S9300
S9300
S9700 S9700
汇聚&核心
S7700
园区接入
S1700 下行FE/GE口 L2 Switch
S2700
S3700
下行 FE口
S5700
下行GE口 L3 Switch
华为保密信息，未经授权禁止扩散
Page 16
盒式交换机－线缆
接地线
S5700 堆叠卡配套 PCI-E线缆
SFP+ 堆叠线缆
单模
多模
HUAWEI TECHNOLOGIES CO., LTD.
华为保密信息，未经授权禁止扩散
Page 17
盒式交换机软件版本支持情况(1)
S2700 S1700
非网管交换机 网管交换机
MPLS
OAM/BFD
流量分析
软件级
不支持
软件级
不支持
软件级
S5700EI：sFlow S5710EI：NetStream/sFlow
硬件级
NetStream/sFlow
iStack堆叠
业务口堆叠 堆叠卡堆叠 说明： S5700-10P-LI-AC、 说明： S5700-26X-SIS5700-10P-PWR-LI-AC和 12S-AC不支持堆叠 S5700S-LI不支持堆叠。
S1700-52FR-2T2P-AC
全 百 兆
S1700-8-AC S1700-24-AC
S1700-28FR-2T2P-AC
无管理
HUAWEI TECHNOLOGIES CO., LTD.
Web管理
华为保密信息，未经授权禁止扩散
全管理（Web+SNMP）
Page 6
S2700系列交换机
标 准 型 SI
接口编号示意：
E F
表示设备为分销型号。
表示设备最大可用端口数量。 C：表示设备支持灵活插卡，插卡接口可作为上行接口。 X：上行支持万兆接口。 TP：上行支持Combo口（光电复用）。 P：上行支持光口。 PWR：表示设备支持PoE供电。 LI：简化版本； SI：标准版； EI：增强版，包含某些高级特性。 HI：高级版，包含高性能OAM、内置RTC时钟等特性。 表示下行接口类型，24S表示支持24个下行光口，无此字段则为默认。 AC：表示设备为交流供电；DC：表示设备为直流供电。
模式 STAT SPED STCK 接口绿灯常亮 有连接 较低速率 非堆叠主 亮灯的接口ID为堆叠ID 1到9接口同时亮则堆叠ID为0 PoE 远程供电 PoE供电异常 *橙灯亮或者闪 接口绿灯闪烁 数据收发 最高速率 堆叠主
电源模块供电正常 －绿灯常亮
HUAWEI TECHNOLOGIES CO., LTD.
华为保密信息，未经授权禁止扩散
S5700系列特性差异
特性
IPv4路由 IPv6路由 组播
LI精简版
静态路由 静态路由
SI标准版
静态路由/RIP 静态路由/RIPng
EI增强版
静态路由/RIP/OSPF/BGP/ISIS 静态路由 /RIPng/OSPFv3/BGP+/ISISv6
HI高级版
静态路由 /RIP/OSPF/BGP/ISIS
P系列
HUAWEI TECHNOLOGIES CO., LTD.
Page 7
S3700系列交换机
标 准 型 SI 增 强 型 EI 高 级 型 HI
S3700-28TP-SI-AC S3700-52P-SI-AC S3700-28TP-PWR-SI S3700-52P-PWR-SI
S3700-28TP-EI-24S-AC S3700-52P-EI-48S-DC
IGMP Snooping/MLD Snooping 不支持
IGMP Snooping/MLD Snooping 不支持
静态路由 /RIPng/OSPFv3/BGP+/ISISv 6 IGMP Snooping/MLD IGMP Snooping/MLD Snooping/IGMP/MLD/MSDP/PIM(I Snooping/IGMP/MLD/MSDP Pv4)/PIM(IPv6) /PIM(IPv4)/PIM(IPv6) MPLS LDP/MPLS TE/MPLS VPN MPLS LDP/MPLS TE/MPLS （仅S5710-EI支持） VPN