Huawei S5700 Series Gigabit Enterprise Switches

Product Overview
Huawei S5700 series gigabit enterprise switches (S5700 for short) are next-generation energy-
saving switches developed by Huawei to meet the demand for high-bandwidth access and thernet
multi-service aggregation! "ased on the cutting-edge hardware and Huawei #ersatile $outing
%latform (#$%) software& the S5700 provides a large switching capacity and high-density '
ports to implement (0 'bit)s upstream transmissions! *he S5700 is for use in various enterprise
networ+ scenarios! ,or example& it can function as an access or aggregation switch on a campus
networ+& a gigabit access switch in an -nternet data center (-./)& or a des+top switch to provide
(000 0bit)s access for terminals! *he S5700 is easy to install and maintain& reducing wor+loads
for networ+ planning& construction& and maintenance! *he S5700 uses advanced reliability&
security& and energy conservation technologies& helping enterprise customers build a next
generation -* networ+!
*he S5700 is a ( 1 high case-shaped device and comes in a standard version (S-) or an enhanced
version (-)! *he S- version provides 2ayer 3 functions and basic 2ayer 4 functions! *he -
version supports complex routing protocols and provides more functions than the S- version!
(
3
Product Features
Powerful support for services

*he S5700 supports -'0% v()v3)v4 snooping& -'0% filter& -'0% fast leave& and -'0% proxy! -t
supports line-speed replication of multicast pac+ets between #256s& multicast load balancing
among member interfaces of a trun+& and controllable multicast& meeting re7uirements for -%*#
services and other multicast services!

*he S5700 provides the 0ulti-#%6--nstance / (0/) function to isolate users in different
#256s on a device& ensuring data security and reducing costs!
Coprehensive reliabilit! echaniss

"esides S*%& $S*%& and 0S*%& the S5700 supports enhanced thernet reliability technologies
such as Smart 2in+ and $$%%& which implement millisecond-level protection switchover and
ensure networ+ reliability! -t also provides Smart 2in+ multi-instance and $$%% multi-instance to
implement load balancing among lin+s& optimi8ing bandwidth usage!

*he S5700 supports enhanced trun+ (-*run+) that enables a / to be dual-homed to two %s
(S5700s)! -*run+ greatly enhances lin+ reliability between devices and implements lin+
aggregation and load balancing between devices! *his improves reliability of access devices!

*he S5700 supports the Smart thernet %rotection (S%) protocol& a ring networ+ protocol
applied to the lin+ layer on an thernet networ+! S% can be used on open ring networ+s and can
be deployed on upper-layer aggregation devices to provide fast switchover (within 50 ms)&
ensuring non-stop transmission of services! S% features simplicity& high reliability& fast
switchover& easy maintenance& and flexible topology& facilitating networ+ planning and
management!

*he S5700 supports redundant power supplies& and can use an 5/ power supply and a ./ power
simultaneously!
1sers can choose a single power supply or use two power supplies to ensure device reliability!
4

*he S5700- supports #$$%& and can set up #$$% groups with other 2ayer 4 switches! #$$%
provides redundant routes to ensure stable and reliable communication! 0ultiple e7ual-cost routes
to an uplin+ device can be configured
on the S5700 to provide route redundancy! 9hen an active route is unreachable& traffic is switched
to a bac+up route!

*he S5700 supports ",.& which provides millisecond-level fault detection for protocols such as
:S%,& -S--S& #$$%& and
%-0 to improve networ+ reliability! /omplying with - ;03!4ah and ;03!(ag& the S5700
supports point-to-point
thernet fault management and can detect faults in the last mile of an thernet lin+ to users!
"ell#designed $oS policies and securit! echaniss

*he S5700 implements complex traffic classification based on pac+et information such as the 5-
tuple& -% preference& *oS& .S/%& -% protocol type& -/0% type& */% source port& #256 -.&
thernet protocol type& and /oS! 5/2s can be applied to inbound or outbound direction on an
interface! *he S5700 supports a flow-based two-rate three-color /5$! ach port supports eight
priority 7ueues and multiple 7ueue scheduling algorithms such as 9$$& .$$& S%& 9$$<S%& and
.$$<S%! 5ll of these ensure the 7uality of voice& video& and data services!

*he S5700 provides multiple security measures to defend against .enial of Service (.oS)
attac+s& and attac+s against networ+s or users! .oS attac+ types include S=6 ,lood attac+s& 2and
attac+s& Smurf attac+s& and -/0% ,lood attac+s! 5ttac+s to networ+s refer to S*% "%.1)root
attac+s! 5ttac+s to users include bogus .H/% server attac+s& man-in-themiddle attac+s& -%)05/
spoofing attac+s& .H/% re7uest flood attac+s! .oS attac+s that change the /H5..$ field in
.H/% pac+ets are also attac+s against users!

*he S5700 supports .H/% snooping& which generates user binding entries based on 05/
addresses& -% addresses& -% address leases& #256 -.s& and access interfaces of users! .H/%
snooping discards invalid pac+ets that do not match any binding entries& such as 5$% spoofing
pac+ets and -% spoofing pac+ets! *his prevents man-in-the-middle attac+s
to campus networ+s that hac+ers initiate by using 5$% pac+ets! *he interface connected to a
.H/% server can be configured as a trusted interface to protect the system against bogus .H/%
server attac+s!

*he S5700 supports strict 5$% learning& which prevents 5$% spoofing attac+s that will exhaust
5$% entries! -t also provides -% source chec+ to prevent .oS attac+s caused by 05/ address
spoofing& -% address spoofing& and 05/)-% spoofing!

*he S5700 supports centrali8ed 05/ address authentication& ;03!(x authentication& and 65/! -t
authenticates users based on statically or dynamically bound user information such as the user
name& -% address& 05/ address& #256 -.& access interface& and flag indicating whether antivirus
software is installed! #256s& >oS policies& and 5/2s can be applied to users dynamically!

*he S5700 can limit the number of 05/ addresses learned on an interface to prevent attac+ers
from exhausting
05/ address entries by using bogus source 05/ addresses! *his function minimi8es pac+et
flooding that occurs when 05/ addresses of users cannot be found in the 05/ address table!
?
Eas! deplo!ent and aintenance free

*he S5700 supports automatic configuration& plug-and-play& deployment using a 1S" flash
drive& and batch remote upgrade! *hese capabilities simplify device management and maintenance
and reduce maintenance costs! *he S5700 supports S60% v()v3)v4 and provides flexible methods
for managing devices! 1sers can manage the S5700 using the /2-& 9eb 60S& *elnet& and H'0%!
*he 6>5 function helps users with networ+ planning and upgrades! -n addition& the S5700
supports 6*%& SSH v3& H9*5/5/S<& $0:6& log hosts& and port-based traffic statistics!

*he S5700 supports '#$%& which dynamically distributes& registers& and propagates #256
attributes to reduce manual configuration wor+loads of networ+ administrators and to ensure
correct #256 configuration! -n a complex networ+ topology& '#$% simplifies #256
configuration and reduces networ+ communication faults caused by incorrect #256
configuration!

*he S5700 supports 01@ #256! 01@ #256 isolates 2ayer 3 traffic between interfaces in a
#256! -nterfaces in a subordinate separate #256 can communicate with ports in the principal
#256 but cannot communicate with each other! 01@ #256 is usually used on an enterprise
intranet to isolate user interfaces from each other but allow them to communicate with server
interfaces! *his function prevents communication between networ+ devices connected to certain
interfaces or interface groups but allows the devices to communicate with the default gateway
PoE function

*he S5700 %9$ can use %o power supplies with different power levels to provide -?;# ./
power for powered devices (%.s) such as -% %hones& 9256 5%s& and "luetooth 5%s! -n its role
as power sourcing e7uipment (%S)& the S5700 %9$ complies with - ;03!4af and ;03!4at
(%o<) and can wor+ with %.s that are incompatible with ;03!4af or ;03!4at! ach port provides a
maximum of 40 9 power& complying with - ;03!4at! *he %o< function increases the
maximum power of each port and implements intelligent power management for high-power
consumption applications! *his facilitates the use of %.s! %o ports can wor+ in power-saving
mode! *he S5700 %9$ provides improved %o solutions! 1sers can configure whether and when
a %o port supplies power!
High scalabilit!

*he S5700 supports intelligent stac+ing (iStac+)! 0ultiple S5700s can be connected with stac+
cables to set up a stac+& which functions as a virtual switch! 5 stac+ consists of a master switch& a
bac+up switch& and several slave switches! *he bac+up switch ta+es over services when the master
switch fails& reducing service interruption time! Stac+s support intelligent upgrade so that users do
not need to change the software version of a switch when adding it to a stac+! *he iStac+ function
allows users to connect multiple switches with stac+ cables to expand system capacity! *hese
switches can be managed using a single -% address& which greatly reduces the costs of system
expansion& operation& and maintenance! /ompared with traditional networ+ing technologies&
5
iStac+ has advantages in scalability& reliability& and system architecture!
%arious &Pv' features

*he S5700 supports -%v?)-%vA dual stac+ and can migrate from an -%v? networ+ to an -%vA
networ+! S5700 hardware supports -%v?)-%vA dual stac+& -%vA over -%v? tunnels (including
manual tunnels& Ato? tunnels& and -S5*5% tunnels)& and 2ayer 4 line-speed forwarding! *he
S5700 can be deployed on -%v? networ+s& -%vA networ+s& or networ+s that run both -%v? and
-%vA! *his ma+es networ+ing flexible and enables a networ+ to migrate from -%v? to -%vA!
(pplications
On )arge#si*ed Enterprise +etwor,s
*he S5700 can function as an access device on a large-si8ed enterprise networ+ or an aggregation
device on a small- or
medium-si8ed campus networ+! -t supports lin+ aggregation and dual-homing to improve networ+
reliability!
A
&n -ata Centers
*he S5700 can be used in a data center! -t connects to gigabit servers and aggregates traffic from
the servers to uplin+ devices through trun+ lin+s! -f multiple servers are available& an S5700 stac+
can be used to facilitate networ+ maintenance and improve networ+ reliability!
.000 /bit0s (ccess 1ate for 2erinals
Several S5700s can constitute a stac+ to provide (000 0bit)s access rate for terminals! :nly four
pairs of optical fibers are re7uired to connect the stac+ to uplin+ devices! *his reduces the number
of optical fibers and ports needed on uplin+ devices and enhances networ+ reliability!
7
-t refers fromB
httpB))www!datainter!c8)doc)>uidwayCS5700CSeriesC'igabitCnterpriseCSwitches!pdf
More topics for Huawei S5700:
THE BASIC KNOWLEDGE OF SWITCHES
HUAWEI S5700 BASIC CONFIGURATION COMMAND
HUAWEI QUIDWAY S5700 SWITCH CONFIGURATION
POWERFUL FUNCTION HUAWEI SWITCH S5700-24TP-SI-AC
HOW TO RESTORE FACTORY DEFAULT S5700-24TP-PWR-SI VIA BOOTMODE
;
-t is referred from
/ore related3
The Reviews of Huawei OSN 500
Huawei OPTIX OSN 3500 Intellgent Optical Transmission Sstem
!ata "enter Switches#Huawei $n%#To#$n% !ate "enter Networ& Solution
More Huawei products and Reviews you can visit: httpB))www!huanetwor+!com)blog
Huanetwor+!com is a world leading Huawei networ+ing products distributor& we wholesale
original new Huawei networ+ing e7uipments& including Huawei switches& Huawei routers&
Huaweisymantec security products& Huawei -5.& Huawei S,% and other Huawei networ+ing
products! :ur customers include telecom operators& Huawei resellers& -S% and system integrators!
$ight now most of our sales are contributed by regular customers!
-n Huanetwor+ 2ab& also we have Huawei :2*& 0.1& .S250 and switch for customer do
remote testing& any potential customer are welcome to login to our lab! -f you need a total Huawei
,**x solution or Huawei 5.S2 solution for your networ+& also you may feel free to contact us!
:ur websiteB httpB))www!huanetwor+!com
*elephoneB <;53-4050(D?0
mailB salesEhuanetwor+!com
5ddressB 34), 2uc+y %la8a& 4(5-43( 2oc+hart $oad& 9anchai& Hong+ong
D