Carrier-Level Aggregation Layer-3 Ethernet Switch Innovative

Virtualize multiple physical devices into one. The performance, reliability and management capabili- ties of the virtual system combine to outperform that of individual physical devices;

Improved Performance: BVSS system makes full use of each link in the physical device cluster, which avoids STP blocking on links and protects the original link to the maximum;

High Reliability: Based on the advanced distribution mechanism and effi cient cross-physical link aggrega- tion function, the logic control plane, service control plane and service data plane are separated. Thus, the device can support continuous layer3 routing forwarding, avoiding service interruption as a result of a single point of failure; 

Easy Management: BVSS system realizessingle IP management, greatly improving the networking effi ciency and lowering operating costs.

Rich Data Center Services

S5800 Series supports BVSS, which can virtualize multiple physical devices into a single logical element. The virtualized system is superior to the independent physical device in performance, reliability, flexibility and management.

Doubled Performance: The virtualized system makes the best use of each link in the device and avoids blocking of STP to the links.

High-reliability: Based on the advanced distributed processing technique and the effi cient function of cross-physical device link aggregation, , the S5800 Series provides non-stop layer-3 routing forwarding and avoids single points of failure.

Data Center Level High-reliability

Flexibility: The virtual cluster function of the S5800 allows the distance of a cluster system to expand over up to 80KM, breaking the geographic restric- tions of traditional cluster techniques.

Easy Management: The whole virtual system realizes single IP unified management and simplifies the management of network device and network topology.

Security+

Equipment-level security: The advanced hardware infrastructure design realizes the level-based packet schedule and packet protection, prevents DoS-/TCP- related SYN Flood, UDP Flood, Broadcast Storm or large traffic attacks, and supports level-based command line protection, endowing different levels of users with different management permissions.

Perfect security authentication mechanisms: IEEE 802.1x, Radius.

S5800 series supports perfect ring detection mecha- nisms, ensuringlong-termnetworkperformancesta- bility.

S5800 series supports port isolation within the same VLAN, DHCP-Snooping, and IP + MAC + Port binding.

Versatile IPv6 Solution

S5800 Series supports the IPv6 protocol suite, IPv6 neighbor discovery, ICMPv6, path MTU discovery, DHCPv6, etc.;

S5800 Series supports Ping, Traceroute, Telnet, SSH, ACL based on IPv6;

S5800 Series supports MLD, MLD Snooping, IPv6 static routing, RIPng, OSPFv3 and BGP4+, etc.; Supports IPv6 tunnel: manual tunnel, automatic tunnel, GRE tunnel, 6to4 tunnel, ISATAP;

S5800 Series supports IPv4 transiting to IPv6: IPv6 manual tunnel, automatic tunnel, 6 to 4 tunnel, ISATAP tunnel.

Data Center Level High-reliability

S5800 Series adopts HPS (Hitless Protection System). The key components of he S5800 Series such as the power system and the fan system supports redundan- cy in design. All system modules support hot-swap and seamless switching without need of manual intervention.

S5800 Series supports redundancy protection mechanisms such as STP/RSTP/MSTP protocol, VRRP protocol, ring network protection, dual uplink active/- standby link protection and LACP link aggregation.

S5800 Series supports ISSU (In-Service Software Upgrade), guaranteeing non-stop forwarding of service data while the system is upgrading.

S5800 Series supports BFD and realizes fault detection and service recovery in seconds through linking with layer-2 or layer-3 protocol.

S5800 Series has perfect Ethernet OAM, 802.3ah, 802.1ag and ITU-Y.1731 which can monitor the network operating state in real time and rapidly detect and locate the malfunction.

High Reliability (99.999%): The MTTR of the S5800 Series is 50ms, satisfying the requirement for reliable delivery of carrier-level service.

Product Specifications

VLAN

• 4K Active VLAN, QinQ & Selective QinQ, GVRP, Private VLAN

Spanning Tree

• 802.1D (STP)

• 802.1W (RSTP) and 802.1S (MSTP)

• BPDU guard, root guard and loopback guard

Multicast

• PIM-SM, PIM-DM,

• IGMP v1/v2/v3,

• IGMP Snooping,

• IGMP Fast Leave,

• MVR, IGMP filter

IPv4

• Static routing, RIP v1/v2,

• OSPF, BGP, PBR, ECMP

• BFD for OSPF, BGP

Certification

CE, FCC, ROHS

IPv6

• ICMPv6, DHCPv6, ACLv6 and IPv6 Telnet

• IPv6 neighbor discovery, Path MTU discovery

• MLD snooping

• IPv6 Static Routing, RIPng, OSPFv3, BGP4+

• Manual tunnel, ISATAP tunnel, 6 to 4 tunnel

MPLS

• Multi-VRF

QoS

• CAR, HQoS, MAC/IP/TCP/UDP/ VLAN/COS/DSCP/TOS based QoS,

• 802.1P/DSCP priority re-label- ing, SP, WRR, and “SP+WRR”, Tail-Drop,

• WRED, flow monitoring and traffi c shaping

Security

• Port isolation, Port security, and“IP+MAC+port” binding, MAC sticky,

• DHCP Snooping and option 82, DAI & IP source guard, PPPoE+,

• IEEE 802 .1x , Radius and Tacacs+L2/L3/L4 ACL flow identification and filtration Anti-attack from.

• DDoS, TCP’s SYN Flood, UDP Flood, etc.

• Broadcast/multicast/unknown unicast storm-control

• MD5, SHA-256, RSA-1024, AES256, etc.

Management

• Console, Telnet, SSH v1/2, HTTP/HTTPS

• SNMP v1/v2/v3, RMON

• TFTP, FTP, SFTP NTP, SPAN, RSPAN

Ordering Information