System Description

Quidway S5600 Series Ethernet Switches Table of Contents

Table of Contents

Chapter 1 Product Overview ........................................................................................................ 1-1

1.1 Preface............................................................................................................................... 1-1
1.2 System Specifications........................................................................................................ 1-3
1.3 Service Features................................................................................................................ 1-5

Chapter 2 Hardware Description.................................................................................................. 2-1

2.1 S5624P/S5624P-PWR/S5624F Ethernet Switch............................................................... 2-1
2.1.1 Appearance ............................................................................................................. 2-1
2.1.2 Console Port and LEDs........................................................................................... 2-2
2.1.3 Attributes of the GE Ports ....................................................................................... 2-8
2.1.4 Attributes of GE SFP Combo Port .......................................................................... 2-8
2.1.5 Power Subsystem ................................................................................................... 2-9
2.1.6 Cooling Subsystem ............................................................................................... 2-10
2.2 S5648P/S5648P-PWR Ethernet Switch .......................................................................... 2-10
2.2.1 Appearance ........................................................................................................... 2-10
2.2.2 Console Port and LEDs......................................................................................... 2-10
2.2.3 Attributes of the GE Ports ..................................................................................... 2-11
2.2.4 Attributes of Combo SFP Port............................................................................... 2-11
2.2.5 Power Subsystem ................................................................................................. 2-11
2.2.6 Cooling Subsystem ............................................................................................... 2-12

Chapter 3 Software Features........................................................................................................ 3-1

3.1 Basic Features ................................................................................................................... 3-1
3.1.1 Link Aggregation ..................................................................................................... 3-1
3.1.2 Broadcast Storm Suppression ................................................................................ 3-1
3.1.3 VLAN ....................................................................................................................... 3-2
3.1.4 STP/RSTP/MSTP.................................................................................................... 3-2
3.2 Network Protocol Features ................................................................................................ 3-3
3.2.1 DHCP Relay ............................................................................................................ 3-3
3.3 Routing Features .............................................................................................................. 3-3
3.3.1 Static Routing and Default Routing ......................................................................... 3-4
3.3.2 RIP .......................................................................................................................... 3-4
3.3.3 OSPF....................................................................................................................... 3-4
3.4 Multicast Features ............................................................................................................. 3-5
3.4.1 IGMP Snooping ....................................................................................................... 3-5
3.4.2 IGMP ....................................................................................................................... 3-6
3.4.3 PIM-DM ................................................................................................................... 3-6
3.4.4 PIM-SM ................................................................................................................... 3-6
3.5 IRF ..................................................................................................................................... 3-6

i
System Description
Quidway S5600 Series Ethernet Switches Table of Contents

3.5.1 IRF........................................................................................................................... 3-6

3.6 QoS.................................................................................................................................... 3-7
3.6.1 Traffic Classification ................................................................................................ 3-7
3.6.2 Traffic Policing/Bandwidth Guarantee..................................................................... 3-7
3.6.3 Port Flow Control .................................................................................................... 3-7
3.6.4 Port Mirroring........................................................................................................... 3-8
3.6.5 Traffic Mirroring ....................................................................................................... 3-8
3.6.6 Queue Scheduling................................................................................................... 3-8
3.6.7 Traffic Shaping ........................................................................................................ 3-9
3.6.8 Priority Replacing .................................................................................................... 3-9
3.7 NTP.................................................................................................................................. 3-10
3.8 Security ............................................................................................................................ 3-10
3.8.1 Terminal Access User Classification..................................................................... 3-10
3.8.2 SSH ....................................................................................................................... 3-11
3.8.3 Port Isolation ......................................................................................................... 3-11
3.8.4 Packet Filtering ..................................................................................................... 3-11
3.8.5 IEEE 802.1X Authentication.................................................................................. 3-11
3.8.6 MAC Address Authentication ................................................................................ 3-12
3.8.7 DUD Authentication............................................................................................... 3-12

Chapter 4 System Maintenance and Management..................................................................... 4-1

4.1 Simple and Flexible System Maintenance......................................................................... 4-1
4.1.1 System Configuration.............................................................................................. 4-1
4.1.2 System Maintenance............................................................................................... 4-1
4.1.3 System Test and Diagnosis .................................................................................... 4-1
4.1.4 Software Upgrade ................................................................................................... 4-2
4.2 Quidview NMS ................................................................................................................... 4-2
4.2.1 Topology Management ........................................................................................... 4-2
4.2.2 Configuration Management..................................................................................... 4-2
4.2.3 Fault Management .................................................................................................. 4-2
4.2.4 Performance Management...................................................................................... 4-3
4.2.5 Security Management ............................................................................................. 4-3
4.3 Web-Based Network Management.................................................................................... 4-3

Chapter 5 Networking Applications............................................................................................. 5-1

5.1 Application in Networks of Branches or Small and Midsize Enterprises ........................... 5-1
5.2 Application in Large Enterprise and Campus Networks .................................................... 5-1

Chapter 6 Guide to Purchase ....................................................................................................... 6-1

6.1 Purchasing the Switch ....................................................................................................... 6-1

ii
System Description Chapter 1 Product OverviewError! Reference source
Quidway S5600 Series Ethernet Switches not found.

Chapter 1 Product Overview

1.1 Preface

Huawei Quidway S5600 Series Ethernet Switches (the S5600 series) are wire speed
L2/L3 Ethernet switches. The S5600 series supply the Ethernet interfaces of 10 Mbps,
100 Mbps, 1000Mbps and 10GE. They can downlink with S3026, S3526, S3050 or
S3900 switches and so on, and uplink with IP device or high-capacity L3 switches
through GE, 10GE or aggregation links. The S5600 series support 1000Mbps to
desktop access in the enterprise network, or can serve as convergence layer devices,
as well as core devices for small or midsize enterprises, to offer highly dense 1000
Mbps ports and 10GE uplink ports. They are intelligent network management switches
intended for the use in a network environment where high performance, dense port
distribution, and ease of installation are required.

Currently, Quidway S5600 series include the following models:

S5624P: Adopts AC/DC dual input power module (PSL130-AD). Its rear panel
provides two fixed fabric ports and one expansion module slot that is compatible
with 8-port 1000 Mbps SFP, 1-port 10 Gbps XENPAK, and 2-port 10 Gbps XFP
modules. Its front panel provides 24 x 10/100/1000Base-T auto-negotiation
Ethernet ports with RJ-45 connectors and four SFP Combo ports. Each Combo
port corresponds to an Ethernet port, so there are four port pairs; only one port in a
pair can be used at the same time. For the relationship between the Combo ports
and the Ethernet ports, refer to Table 1-1.

S5624P-PWR: Adopts PoE power module (PSL480-AD24P, with external AC/DC
input). Its rear panel provides two fixed fabric ports and one expansion module slot
that is compatible with 8-port 1000 Mbps SFP, 1-port 10 Gbps XENPAK, and
2-port 10 Gbps XFP modules. Its front panel provides 24 x 10/100/1000Base-T
auto-negotiation Ethernet ports with RJ-45 connectors and four SFP Combo ports.
Each Combo port corresponds to an Ethernet port, so there are four port pairs;
only one port in a pair can be used at the same time. For the relationship between
the Combo ports and the Ethernet ports, refer to Table 1-1.

S5624F: Adopts AC/DC dual input power module (PSL130-AD). Its rear panel
provides two fixed fabric ports and one expansion module slot that is compatible
with 8-port 1000 Mbps SFP, 1-port 10 Gbps XENPAK, and 2-port 10 Gbps XFP
modules. Its front panel provides 24 x 1000 Mbps SFP optical ports and four RJ-45
Combo ports. Each Combo port corresponds to an Ethernet port, so there are four
port pairs; only one port in a pair can be used at the same time. For the
relationship between the Combo ports and the Ethernet ports, refer to Table 1-1.

1-1
System Description Chapter 1 Product OverviewError! Reference source
Quidway S5600 Series Ethernet Switches not found.

S5648P: Adopts AC/DC dual input power module (PSL180-AD). Its rear panel
provides two fixed fabric ports and one expansion module slot that is compatible
with 8-port 1000 Mbps SFP, 1-port 10 Gbps XENPAK, and 2-port 10 Gbps XFP
modules. Its front panel provides 48 x 10/100/1000Base-T auto-negotiation
Ethernet ports with RJ-45 connectors and four SFP Combo ports. Each Combo
port corresponds to an Ethernet port, so there are four port pairs; only one port in a
pair can be used at the same time. For the relationship between the Combo ports
and the Ethernet ports, refer to Table 1-1.

S5648P-PWR: Adopts PoE power module (PSL480-AD48P, with external AC/DC
input). Its rear panel provides two fixed fabric ports and one expansion module slot
that is compatible with 8-port 1000 Mbps SFP, 1-port 10 Gbps XENPAK, and
2-port 10 Gbps XFP modules. Its front panel provides 48 x 10/100/1000Base-T
auto-negotiation Ethernet ports with RJ-45 connectors and four SFP Combo ports.
Each Combo port corresponds to an Ethernet port, so there are four port pairs;
only one port in a pair can be used at the same time. For the relationship between
the Combo ports and the Ethernet ports, refer to Table 1-1.

Table 1-1 Combo port list

Switch model Combo Port Corresponding port

25 22
26 24
S5624P/S5624P-PWR/S5624F
27 21
28 23

49 46
50 48
S5648P/S5648P-PWR
51 45

52 47

 Note:

The electrical ports of S5624P-PWR/S5648P-PWR are capable of supplying -48
VDC power to remote PDs (powered devices, such as S2016C, S2008B, S2016B,
S2016-EI, and so on).

The S5624P-PWR/S5648P-PWR adopts PoE power module, which provides
AC/DC power to PD devices. When delivering the AC input, the module can supply
up to 300 W power. If more power is needed, use the DC input or both AC and DC
inputs to ensure the operation of all the connected devices.

1-2
System Description Chapter 1 Product OverviewError! Reference source
Quidway S5600 Series Ethernet Switches not found.

The S5600 series support the Intelligent Resilient Framework (IRF) feature. The
IRF-supported switches of the same type (called units) are connected to form a “device
union” or a fabric (4 switches recommended). With the IRF feature, you can

Manage multiple devices but with one connection and one IP address, thus
decreasing the overheads,

Expand the network by adding devices as desired, thus protecting the existing
investment, and

Have high reliability of N + 1 redundancy, thus avoiding single point failures which
can result in service interruption.

1.2 System Specifications

Table 1-2 System specifications of the S5600 series

Item S5624P/ S5624P-PWR/S5624F S5648P/ S5648P-PWR

Dimensions (W x H x D) 440 mm × 43.6 mm × 420mm (17.32 × 1.72 × 16.54 in.)

Weight < 7.5 kg (16.5 lb) < 8 kg (17.6 lb)

Management port One console port

S5624P/S5624P-PWR: 24 x
10/100/1000 Mbps electrical ports
and four SFP combo ports 48 x 10/100/1000 Mbps electrical
Fixed port
S5624F: 24 x 1000 Mbps SFP ports and four SFP combo ports
ports and four electrical combo
Service port ports

8-port SFP module

Expansion
1-port 10GE module
slot
2-port 10GE module
10/100/1000BASE-TX

1000Base-SX-SFP

1000Base-LX-SFP

1000Base-LH-SFP

1000Base-T-SFP
Port type
10GBase-LR-XENPAK

10GBase-ER-XENPAK

10GBase-CX4-XENPAK

10GBase-LR-XFP

10GBase-ER-XFP

1-3
System Description Chapter 1 Product OverviewError! Reference source
Quidway S5600 Series Ethernet Switches not found.

Item S5624P/ S5624P-PWR/S5624F S5648P/ S5648P-PWR

PSL130-AD: 130 W system output, AC/DC input

PSL480-AD24P: 180 W system output + 300 W PoE output with 24
Power ports, AC/DC input
module PSL180-AD: 180 W system output, AC/DC input
PSL480-AD48P: 180 W system output + 300 PoE output with 48 ports,
AC/DC input

AC:
Rated voltage: 100V to 240V, 50 Hz to 60Hz

Maximum tolerance:90V to 264V, ；50 Hz to 60Hz

Input voltage
DC:
Power supply Rated voltage: -48V to -60V
Maximum tolerance: -36V to -72V

The S5624P-PWR/S5648P-PWR must use the external PoE PSU

recommended by Huawei-3Com as its DC input, but not the -48VDC
power supply generally available in the equipment room. Otherwise,
Input DC the device may be damaged.
voltage of
PoE power DC input of the PoE power module:
module
Rated voltage: –53.5 V

Max voltage range: –52 to–55 V

RPS power Supported

S5624P: 170 W
S5648P: 230 W
S5624F: 170 W
S5624P-PWR: 540 W
Power consumption (full load)
S5648P-PWR: 600 W
When with PoE power supply:
S5624P-PWR: 540 W (DC input), 540 W (AC input)
S5648P-PWR: 970 W (DC input), 600 W (AC input)

Operating temperature 0 to 45oC

Operating humidity
10% to 90%
(non-condensing)

1-4
System Description Chapter 1 Product OverviewError! Reference source
Quidway S5600 Series Ethernet Switches not found.

1.3 Service Features

The software of the S5600 series is designed on Huawei versatile routing platform
(VRP). Table 1-3 summaries the available software features.

Table 1-3 Software features of the S5600 series

Feature S5600 series supports

Wire speed forwarding on all ports

Wire speed L2
Port capacity (24/48 ports):88/136 Gbps
switching
Packet forwarding speed (24/48 ports): 65.47/101.19 Mpps

Switching mode Store and forward

Virtual local area 4K IEEE 802.1Q-compliant VLANs

network (VLAN) Port-based VLAN

The port forwarding IP telephony traffic added to voice VLAN according to the MAC
Voice VLAN
address

Broadcast storm
Port rate ratio and PPS based suppression
suppression

Support 100 static routing entries

Routing information protocol-1/2 (RIP-1/2), support 2K RIP entries
IP routing Open shortest path first (OSPF), the capacity of link state database is 12K

Support 3 Equal cost multipaths (ECMPs)

Internet group management protocol v1/ v2 (IGMPv1/v2)

IGMP snooping
Multicast PIM-SM
PIM-DM
Support 256 layer-2 multicast groups and 256 layer-3 multicast groups

The device supports 8K ARP entries

ARP Each interface supports 1k ARP entries
The device supports 1k static ARP entries

HTTPD Supported

STP Support Multiple Spanning Tree Protocol (MSTP)

VLAN virtual 128

interface 4 secondary IP addresses on each virtual interface

1-5
System Description Chapter 1 Product OverviewError! Reference source
Quidway S5600 Series Ethernet Switches not found.

Feature S5600 series supports

Manual link aggregation through command lines

Dynamic link aggregation through LACP
Link aggregation Aggregation of GE/10GE ports
Up to eight ports in each aggregation group
Up to 32 aggregation groups, each aggregation port must be of the same type

Many-to-one port mirroring (multiple observed ports to one monitor port)

Mirroring
Traffic mirroring

Address self-learning
IEEE 802.1D standard
MAC address
table Up to 16K MAC address entries
Up to 1088 static MAC address entries, in which 1k entries is authenticated entries,
64 entries is manually configured ones.

IEEE 802.3x (full duplex)

Flow control
Back-pressure based flow control (half duplex)

Supported, up to 8 units, convergence time is 10s

IRF Stacking bandwidth is 96 Gbit/s
Stacking forwarding capacity is 71.42 Mpps

Loading and XModem

upgrade File transfer protocol (FTP), trivial file transfer protocol (TFTP)

Configuration through the command line interface (CLI)

Configuration through Telnet
Configuration through the console port
Simple network management protocol (SNMP)
Management Remote monitoring ( RMON) 1/2/3/9 groups of MIBs
Huawei Quidview NMS
Web-based network management
System logging
Hierarchical alarming

Debug information output

Maintenance Remote maintenance through Telnet
Ping, traceroute, multicast traceroute

1-6
System Description Chapter 1 Product OverviewError! Reference source
Quidway S5600 Series Ethernet Switches not found.

Feature S5600 series supports

Each port supports 100 activated rules

Each port supports 100 traffic statistics actions
Limitation on packet receiving/sending rate on ports
Packet redirection
Committed access rate (CAR), GE port with the granularity of 64 Kbps. 10GE port
with the granularity of 1 Mbps, each port supports 100 CAR actions
Quality of service
(QoS)/ Eight output queues on each port

Access control Three scheduling algorithms on per port and queue basis: strict priority (SP),
list (ACL) weighted round robin (WRR), SP + WRR
Replacing the of 802.1p or DSCP preference values of packets
Packet filter at the layers 2 through 4, providing filtering based on source/destination
MAC address, source/destination IP address, port, protocol, VLAN, VLAN range,
MAC address range, or invalid frame
Time range setting
QoS profile management, allowing QoS service scheme customization

Hierarchical user management and password protection

IEEE 802.1x authentication
Disconnect unauthorized device (DUD) authentication
Security SSH
MAC address authentication
Packet filtering
Port isolation

Max on-line user connections is 1024

RADIUS
New User authenticated per second is 200

DHCP(dynamic
host
Supported
configuration
protocol) Relay

NTP (network
Supported (client/server/master)
time protocol)

1-7
System Description
Quidway S5600 Series Ethernet Switches

Chapter 2 Hardware Description

2.1 S5624P/S5624P-PWR/S5624F Ethernet Switch

2.1.1 Appearance

The S5624P/S5624P-PWR has 24 x 10Base-T/100Base-TX Ethernet ports, four SFP

combo interfaces and one console port on its front panel, and on its rear panel one
power socket, two fixed Fabric ports and one expansion slot.

Figure 2-1 illustrates the S5624P/S5624P-PWR:

Figure 2-1 The S5624P/S5624P-PWR

The S5624F provides 24 x 1000 Mbps SFP optical ports, one Console port, and four
1000 Mbps RJ-45 Combo ports on its front panel, as shown in Figure 2-2.

(1) (2) (3) (4) (5) (6)

(8) (7)

(1) SFP optical port status LED

(2) 1000 Mbps RJ-45 Combo port LEDs: left one for speed, right one for duplex mode
(3) Console port (4) 7-segment digitron display
(5) Power LED (6) RPS LED
(7) Fabric LED (8) Module LED
Figure 2-2 Front panel of the S5624F

2-1
System Description
Quidway S5600 Series Ethernet Switches

 Note:
The combo SFP ports support multiplexing with the corresponding 10/100/1000Base-T Ethernet electrical
ports, that is, you can use either these optical ports or the electrical ports, but not concurrently.

2.1.2 Console Port and LEDs

I. Console port

The S5624P/S5624P-PWR provides one asynchronous EIA/TIA-232 compliant

console port for local or remote switch configuration.

Table 2-1 Console port attributes

Attribute Description

Connector RJ-45

Standard Asynchronous EIA/TIA-232

Baud rate 19200 bps (default)

Connection to the ASCII terminal

Function Connection to the serial interface of a local terminal (a PC for example) or to a

remote terminal through a pair of modems), where terminal emulation program
is run

II. LEDs

You can learn the operating state of the S5624P/S5624P-PWR by reading the LEDs on
its front panel. Note that at a time a port LED can indicate only the state of speed,
duplex, or data transmission. You can toggle between them by pressing the Mode
button.

Table 2-2 LEDs on the front panel of the S5624P/S5624P-PWR

LED Mark Color Indicates

The system passes the
Power-On Self-Test
Power LED PWR Solid green
(POST) and is operating
normally.
Flashing green (1 The system POST is
Hz) running.
The POST of the system
Solid red
fails or a fault is detected.

Flashing yellow (1 The POST of some ports

2-2
System Description
Quidway S5600 Series Ethernet Switches

LED Mark Color Indicates

Hz) fails or the POST function
fails.

The power is
OFF
disconnected.
Both the internal AC input
Solid green and the DC input are
normal.
The internal AC power
DC-input LED DC
Solid yellow supply fails or the DC input
is disconnected.

The DC input is not

OFF
connected.
10/100/1000BASE-T port Solid A 1000 Mbps link is
mode LED green present.
Flashing A 1000 Mbps link is
green (3 present and the port is
Hz) disabled.

Solid A 10/100 Mbps link is

Speed
yellow present.
A 10/100 Mbps link is
Flashing
present and the port is
yellow (3
disabled, or initialization
Hz)
fails.

OFF No link is present.

The port is operating in full
Solid duplex mode, and on it
green data is being
received/transmitted.
The port is operating in
Duplex Solid half duplex mode, and on it
and yellow data is being
data received/transmitted.
transmi
ssion Flashing
The POST on the port
yellow (3
fails.
Hz)
No data is being
OFF received/transmitted on
the port.
The port is in over-voltage
Flashing
status, or the switch is
PoE green (1
over–loading and cannot
Hz)
deliver voltage.

Solid PoE fails. No voltage is

yellow delivered on port.

2-3
System Description
Quidway S5600 Series Ethernet Switches

LED Mark Color Indicates

Flashing
POST on the port fails.
yellow

No voltage is delivered on
OFF
the port.

Solid A 1000 Mbps link is

green present.
Flashing A 1000 Mbps link is
green (3 present and the port is
Speed Hz) disabled.

Flashing
The POST on the port
yellow (3
fails..
Hz)

OFF No link is present.

The port is operating in full
Solid duplex mode, and on it
1000BASE SFP port green data is being
mode LED Duplex received/transmitted.
and
Flashing
data The POST on the port
yellow (3
transmi fails.
Hz)
ssion
No data is being
OFF received/transmitted on
the port.

PoE

OFF ––

The LED is showing the

speed (for the
Solid
Speed 10/100/1000 Mbps ports),
green
port state (for the Fabric
ports and SFP interfaces).
Duplex
Mode LED Mode
and
Solid The LED is showing the
data
yellow duplex mode.
transmi
ssion

PoE The LED is showing the

Solid red
mode PoE information of ports.
Solid The module is in position
Module LED Module (MOD)
green and work normally.
Speed

Flashing The module type is not

yellow supported on the port or

2-4
System Description
Quidway S5600 Series Ethernet Switches

LED Mark Color Indicates

the module is faulty.

Duplex
and
data OFF ––
transmi
ssion

PoE OFF ––

POST Flashing The POST test ID (in the

running green range 1 to 9).

POST Flashing
Failed POST test ID
failed red
Softwar
Flashing A bar rotates clockwise
e
green around the LED.
loading

Fan "F", meaning the FAN

Red
failure fails.

Tempe
“t”, meaning the switch is
rature Solid red
over-temperature.
7-number LED Unit alarm
Speed,
duplex
Unit ID in the Fabric; and
and Solid
for a standalone unit, it is
data green
1.
transmi
ssion
The total number of ports
in PoE status. All bars are
flashing when the
Solid
PoE threshold of PoE ports is
green
exceeded. The LEDs for
the problem ports are in
flashing green.

Table 2-3 LEDs on the S5624F

LED Mark Status Description

Power LED PWR Solid green The switch is started normally.

The system is running power-on
Blinking green (at 1 Hz)
self-test (POST).

2-5
System Description
Quidway S5600 Series Ethernet Switches

LED Mark Status Description

The system fails the POST, or there is
Solid red
another fault.
Some ports fail the POST and do not
Blinking yellow (at 1 Hz)
function.

OFF The switch is power-off.

Both the AC power supply and the DC
Solid green
input operate normally.

The AC power supply fails or the AC

DC LED RPS
Solid yellow input is disconnected, while the DC
input operates normally.

OFF DC input is disconnected.

The device is in the ring fabric status;
Green the LED blinks quickly when the fabric
port is receiving or sending data.
The device is in the daisy chain fabric
Yellow status; the LED blinks quickly when the
Fabric LED STK fabric port is receiving or sending data.

This device is isolated from the whole

Blinking green (at 3 Hz) set of fabric devices (effective when this
device is in the fabric status).
Neither of the two fabric ports is
OFF
connected.

The module is seated and operates

Solid green
normally.
Module
Module LED
(MOD) Blinking yellow The module fails or is not supported.

OFF No module is installed.

The POST ID of the in-process test is
7-segment displayed:
Blinking
digitron Unit POST running
green
display

The POST ID of the failed test blinks.

Blinking
POST failed
red

A light bar rotates clockwise around the

display during the downloading
Software Blinking procedure.
downloading green

2-6
System Description
Quidway S5600 Series Ethernet Switches

LED Mark Status Description

An “F” is displayed.
Fan failed Solid red

A “t” is displayed.
Over
temperature Solid red
alarm

UNIT ID in the fabric; or “1” for a

Speed and Solid standalone unit is displayed.
duplex mode green

The utilization of the power supply is

displayed.
Solid
PoE mode
green
81 - 100%
61 - 80%

41 - 60%
21 - 40%
0 - 20%

The port is operating at 1000 Mbps. The

Green LED blinks quickly when the port is
receiving or sending data.
The port is operating at 10/100 Mbps.
Yellow The LED blinks quickly when the port is
Speed mode receiving or sending data.

Blinking
yellow (at The port fails the POST.
3 Hz)
RJ-45 OFF The port is not connected.
Combo port
mode LED The port is operating in full duplex
Green mode. The LED blinks quickly when the
port is receiving or sending data.
The port is operating in half duplex
Yellow mode. The LED blinks quickly when the
Duplex mode port is receiving or sending data.
Blinking
Yellow (3 The port fails the POST.
Hz)

OFF The port is not connected.

The port is operating at 1000 Mbps. The
Green LED blinks quickly when the port is
1000Base receiving or sending data.
SFP optical
Blinking
port status
yellow (3 The port fails the POST.
LED
Hz)

OFF The port is not connected.

2-7
System Description
Quidway S5600 Series Ethernet Switches

2.1.3 Attributes of the GE Ports

Table 2-4 Attributes of the FE ports on the S5624P/S5624P-PWR

Attribute Description

Connector RJ-45

Number of ports 24

10 Mbps, half duplex/full duplex

100 Mbps, half-duplex/full duplex
Rate
1000 Mbps,full duplex
MDI/MDI-X auto-sensing

Standard IEEE 802.3u

Transmission segment over the 100 m (328.08 ft) over the category-5 unshielded twisted pair
selected medium (UTP) cable

2.1.4 Attributes of GE SFP Combo Port

The S5624P/S5624P-PWR provides four SFP combo ports (optical or electrical) on its
front panel.

SFP modules allow you great flexibility in networking because they are hot-swappable
and user-configurable.

Table2-4 lists the available SFP module types:

Table 2-5 1000 Mbps SFP modules and cable specifications

Central Transmission
SFP module Connector Fiber specifications
wavelength segment

50/125 µm multi-mode 550 m (1804.46

LC
1000BASE-SX-SF optical fiber ft.)
850 nm
P 62.5/125 µm multi-mode 275 m (902.23
fiber ft.)

1000BASE-LX-SF
Single mode fiber 10 km (6.21 mi)
P
1310 nm
1000BASE-LH-SF 30 km (18.64
P mi)

1000BASE-ZX-LR 40 km (24.86
1550 nm
-SFP mi)

2-8
System Description
Quidway S5600 Series Ethernet Switches

1000BASE-ZX-VR 70 km (43.50
-SFP mi)

100 m (328.08
1000BASE-TX –– RJ-45 ––
ft.)

 Note:
The available 1000 Mbps SFP module types are subject to changes without notice. For information on the
latest module options, contact Huawei marketing or technical support personnel.

2.1.5 Power Subsystem

I. Dual input power module (PSL130-AD) for S5624P/S5624P-PWR:

You can choose AC-DC dual input mode (mutual backup) and only AC or DC input
mode.

AC input
Rated voltage: 100VAC to 240VAC, 50 Hz to 60 Hz

Max. tolerance: 90VAC to 264VAC, 50 Hz to 60 Hz

DC input
Rated voltage: -60V to -48V

Max. tolerance: -72V to -36V

II. PoE power module (PSL480-AD24P) for S5624P:

The PSL480-AD24P is with AC-DC dual input

AC input
Rated voltage: 100VAC to 240VAC, 50 Hz to 60 Hz

Max. tolerance: 90VAC to 264VAC, 50 Hz to 60 Hz

DC input
The S5624P-PWR/S5648P-PWR must use the external PoE PSU recommended by
Huawei-3Com as its DC input, but not the -48VDC power supply generally available in
the equipment room. Otherwise, the device may be damaged.

Max. voltage range: –52 to –55 V

2-9
System Description
Quidway S5600 Series Ethernet Switches

2.1.6 Cooling Subsystem

The S5624P/S5624P-PWR is cooled by two ∅40mm fans. They are located in right of
the switch.

The S5624F is cooled by four ∅40mm fans. They are located in right of the switch.

The fan in the power module can cool the power module, as well as the mainboard and
expansion module of the switch.

2.2 S5648P/S5648P-PWR Ethernet Switch

2.2.1 Appearance

The S5648P/S5648P-PWR has 48 x 10/100/1000Base-T ports, four SFP combo ports

and one console port on its front panel. The rear panel provides one power socket, two
fixed Fabric ports and one expansion slot.

Figure 2-3 illustrates the S5648P/S5648P-PWR:

Figure 2-3 S5648P/S5648P-PWR appearance

2.2.2 Console Port and LEDs

I. Console port

The S5648P/S5648P-PWR provides one asynchronous EIA/TIA-232 compliant

console port for local or remote switch configuration. Please see Table 2-1 for their
specifications.

II. LEDs

You can learn the operating state of the S5648P/S5648P-PWR by reading the LEDs on
its front panel (see Table 2-2). Note that at a time a port LED can indicate only the state
of speed, duplex, or data transmission. You can toggle between them by pressing the
Mode button.

2-10
System Description
Quidway S5600 Series Ethernet Switches

2.2.3 Attributes of the GE Ports

Table 2-6 Attributes of the FE ports on the S5648P/S5648P-PWR

Attribute Description

Connector RJ-45

Number of ports 48

10 Mbps, half duplex/full duplex

100 Mbps, half-duplex/full duplex
Rate
1000 Mbps,full duplex
MDI/MDI-X auto-sensing

Standard IEEE 802.3u

Transmission segment over the 100 m (328.08 ft) over the category-5 unshielded twisted pair
selected medium (UTP) cable

2.2.4 Attributes of Combo SFP Port

Please see 2.1.4 Attributes of GE SFP Combo Port.

2.2.5 Power Subsystem

I. Dual input power module (PSL180-AD) for S5648P:

You can choose AC-DC dual input mode (mutual backup) and only AC or DC input
mode.

AC input
Rated voltage: 100VAC to 240 VAC, 50 Hz to 60 Hz

Max. tolerance: 90VAC to 264 VAC, 50 Hz to 60 Hz

DC input
Rated voltage: -60V to -48V

Max. tolerance: -72V to -36V

II. PoE power module (PSL480-AD48P) for S5648P:

The PSL480-AD48P is with AC-DC dual input

AC input
Rated voltage: 100VAC to 240VAC, 50 Hz to 60 Hz

Max. tolerance: 90VAC to 264VAC, 50 Hz to 60 Hz

2-11
System Description
Quidway S5600 Series Ethernet Switches

DC input
The S5624P-PWR/S5648P-PWR must use the external PoE PSU recommended by
Huawei-3Com as its DC input, but not the -48VDC power supply generally available in
the equipment room. Otherwise, the device may be damaged.

Max. voltage range: –52 to –55 V

2.2.6 Cooling Subsystem

The S5648P/S5648P-PWR is cooled by three ∅40mm fans. They are located in right of
the switch.

The fan in the power module can cool the power module, as well as the mainboard and
expansion module of the switch.

2-12
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

Chapter 3 Software Features

3.1 Basic Features

3.1.1 Link Aggregation

The link aggregation function is used for the connection between Ethernet switches or
between the switches and high-speed servers. It is a simple and cheap way to expand
the bandwidth of a switch port and balance the traffic among all the ports in a link
aggregation. Moreover, it enhances the connection reliability.

With link aggregation, several Ethernet ports on a switch are bundled together and are
considered one logical port inside the switch. The switch automatically balances the
traffic among the ports and increases the bandwidth in this aggregation, while ensuring
the right order of packets for the sake of service compatibility. If the link on a port in the
aggregation fails, the traffic on it is distributed among other ports without interrupting
the normal service. After the port recovers, the traffic is automatically distributed again
so that the port can share the load together with others. The S5600 series support
manual link aggregation and dynamic link aggregation through the link aggregation
control protocol (LACP).

IEEE802.3ad-based LACP dynamically aggregates and de-aggregates links. A

LACP-enabled port notifies the remote end of information on system priority, system
MAC, port priority, port number and operation key by sending link aggregation control
protocol data units (LACPDUs). The remote end receives the information, and then
compares it with that of other ports for determining the ports to be aggregated, so that
an agreement can be achieved on port aggregation or leaving a dynamic aggregation.

3.1.2 Broadcast Storm Suppression

The broadcast storm suppression function suppresses the propagation of a large

amount of unknown unicast, multicast or broadcast packets in a network, thus limiting
their impact on the operating efficiency of the network.

For the S5600 series, the broadcast storm suppression is configured on port. After
configuring a broadcast suppression ratio on a port, you can monitor the broadcast
traffic of unknown unicast, multicast and broadcast packets on it. When the traffic
exceeds the specified bandwidth limit, the switch drops the excessive traffic and

3-1
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

reduces the traffic ratio to a rational amount to guarantee the normal operation of
network services. The S5600 series can implement broadcast storm suppression not
only based on port rate ratio but also on pps.

3.1.3 VLAN

Virtual local area network (VLAN) is a technology that implements virtual workgroups
by assigning devices of the same category (such as PC) on a LAN into network
segments logically rather than physically. IEEE 802.1Q is the standard protocol for the
VLAN technology.

As devices are divided logically rather than physically, they do not necessarily reside on
the same physical network segment. After the division, the broadcast and unicast traffic
is confined inside the VLAN to which it belongs.

The VLAN technology helps network flow control, network management, and network
security.

3.1.4 STP/RSTP/MSTP

I. STP/RSTP

The spanning tree protocol (STP)/rapid spanning tree protocol (RSTP) prunes a loop
L2 switching network into a loop-free tree (all data on the L2 switching network must
travel along the spanning tree), thereby avoiding network broadcast storms caused by
network loops and providing redundant links for data forwarding.

Basically, STP/RSTP is to generate a “tree” whose root is a switch called root bridge.
Which switch is to be selected as the root bridge is based on their settings (such as
switch priority and MAC address), but there should be only one root bridge at any time.
Setting out from the root, a tree stretches through the switches. A non-root switch
forwards data to the root from its root port and to the connected network segment from
its designated port. A root periodically transmits configuration BPDUs, while a non-root
switch receives and forwards them. If a switch receives configuration BPDUs from two
or more ports, it assumes that there is a loop in the network. To eliminate the loop, the
switch selects one of the ports as the root port and blocks others. When a port receives
no configuration BPDUs for a long time, the switch considers that the configuration of
this port has timed out and the network topology may have changed. Then it
recalculates the network topology and generates a new tree.

RSTP is an STP enhancement that significantly shortens the time for the network
topology to stabilize.

RSTP is a single spanning tree protocol, that is, only one tree is generated within a
switching network. To ensure the interior communications of VLANs, each VLAN of a

3-2
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

network must be consecutively distributed along the spanning tree; otherwise, some
VLANs are parted because of the blocking of interior link, and the inside VLAN
communications fail. In the event of special requirements or failure to distribute VLANs
along the path of the spanning tree, you can configure the STP-ignore attribute of
VLAN on the specific switch to solve this problem.

If a VLAN is specified as the VLAN of STP-Ignored, packets of this VLAN are in

forwarding mode at all ports on the switch, receiving no limitation from the spanning
tree path which is calculated by the protocol.

II. MSTP

MSTP stands for Multiple Spanning Tree Protocol, which is compatible with STP and
RSTP.

STP cannot transit fast. Even on the point-to-point link or the edge port, it has to take an
interval as long as twice forward delay before the network converges.

RSTP can converge fast, but still has the drawback, that is, all the network bridges in a
VLAN share a spanning tree and the redundant links cannot be blocked by VLAN.

MSTP makes up for the drawback of STP and RSTP. It makes the network converge
fast and the traffic of different VLAN distributed along their respective paths, which
provides a better load-balance mechanism for the redundant links.

MSTP associates VLAN and the spanning tree and divides a switching network into
several regions, each of which has a spanning tree independent of one another. MSTP
prunes the network into a loopfree tree to avoid proliferation, it also provides multiple
redundant paths for data forwarding to implement the VLAN data forwarding
load-balance.

3.2 Network Protocol Features

3.2.1 DHCP Relay

An Ethernet switch with DHCP Relay enabled relays the messages between a DHCP
server and a client. It can have a DHCP server in a subnet serves another subnet that
has no DHCP server. With DHCP Relay, a network administrator needs not to deploy a
DHCP server for every subnet, thereby reducing the investment cost. The DHCP
security function checks the validity of user addresses under VLAN interfaces.

3.3 Routing Features

3-3
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

 Note:
When a switch runs a routing protocol, it can perform router functions. In this chapter, a router represents
a physical router or a L3 routing switch that runs routing protocols.

3.3.1 Static Routing and Default Routing

I. Static Routing

A static route is a route that is manually configured by a network administrator. For a

routing switch on a simple network, static routes are adequate for the switch to operate
normally.

The proper configuration and use of static routes can effectively guarantee network
security and guarantee bandwidth resources to crucial applications as well. However, if
the network topology changes, as the result of a network device failure for example, the
static routes cannot change automatically to accommodate to the change without the
help of an administrator.

II. Default routing

A default route is used only when no route match is found. In default routing, the mask
and destination addresses are both 0.0.0.0 in the routing table. When there are a large
number of users in communications, default routing is useful because it uses less time
and fewer bandwidth resources to route and forward packets, in comparison to other
routing methods.

3.3.2 RIP

Routing information protocol (RIP) is a widely used interior gateway protocol (IGP) and
is D-V distance-vector (D-V) algorithm-based. It is suitable for small-sized and simple
networks.

RIP switches routing information with user datagram protocol (UDP) datagrams and
sends updates regularly. It uses hop count as the routing metric and allows up to 15
hops. RIP has two versions: RIPv1 and RIPv2. RIPv2 supports plain text authentication
and MD5 authentication and variable-length subnet masks as well. Both of them can
work with the S5600 series.

3.3.3 OSPF

Open shortest path first (OSPF) is an IGP protocol based on link-state (L-S), which is
suitable for large-sized and complex networks.

3-4
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

A router uses OSPF to maintain the routing table information in an autonomous system
(AS). In an AS, every OSPF router collects and broadcasts its link state information
throughout the AS with the flooding algorithm to synchronize the link state databases
(LSDBs) of other OSPF routers. With its LSDB, the router calculates a shortest-path
tree with itself as the root and other network nodes as leaves, thus getting its optimal
reachable routes inside the system.

3.4 Multicast Features

 Note:
When a switch runs a routing protocol, it can perform router functions. In this chapter, a router represents
a physical router or a L3 routing switch that runs routing protocols.

3.4.1 IGMP Snooping

Internet group management protocol snooping (IGMP snooping) is a multicast

monitoring mechanism that runs on L2 Ethernet switches to manage and control
multicast groups.

The IGMP snooping runs at the link layer. When a L2 Ethernet switch receives an IGMP
message that is sent from a host to a router, it uses the IGMP snooping to analyze the
information carried by the IGMP message. When the switch hears an IGMP Host
Report message from the host, it adds the host to the appropriate multicast table. When
hearing an IGMP Leave message, it removes the host from the multicast table. By
continuously listening to IGMP packets, the switch creates and maintains a L2 MAC
multicast address table and based on which forwards the multicast packets sent from
the upstream router.

Caution:

IGMP Snooping and IGMP cannot run on the same VLAN at the same time.

3-5
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

3.4.2 IGMP

The Internet group management protocol (IGMP) runs between hosts and multicast
routers for tracing and learning the membership of the hosts. A multicast router learns
whether there is a multicast member on a subnet connected to it by periodically
sending IGMP Host-Query messages. A host sends IGMP Report messages for joining
a multicast group. The S5600 series support both IGMPv1 and IGMPv2.

3.4.3 PIM-DM

The protocol-independent multicast (PIM) runs between multicast routers. Using PIM, a
multicast router traces and learns which multicast packets are to be forwarded to other
routers, and then transmits them to the LANs connected to the multicast routers.

The protocol independent multicast-dense mode (PIM-DM) is applied to a multicast

environment where multicast group members are dense. In PIM-DM, a router assumes
that all other routers agree to forward multicast packets for multicast groups. If the
router receives a multicast packet but has no directly connected multicast group
member or PIM neighbor, it sends a Prune message back to the multicast source. The
subsequent multicast packets are not to be transmitted to this router. By using this
flood-prune mechanism, IM-DM creates a multicast distribution tree with the multicast
source as the root.

3.4.4 PIM-SM

Different from PIM-DM, the protocol independent multicast-sparse mode (PIM-SM)

applies to a multicast environment where multicast group members are sparse. In
PIM-SM, a router assumes that none of other routers agree to forward multicast
packets for multicast groups, unless they declare so. If a host wants to join a multicast
group, the multicast router that is directly connected to it sends a PIM Join message to
the rendezvous point (RP) where the host is registered. The RP then forwards the Join
message to the multicast source. In PIM-SM, the multicast packet is forwarded along a
shared distribution tree.

3.5 IRF

3.5.1 IRF

IRF (Intelligent Resilient Framework) is a technology to construct intelligent resilient

framework. With IRF, you can connect multiple IRF-supported switches that are of the
same type (called units) to form a “device union” or a fabric. You are allowed to:

Manage multiple devices in a centralized manner, thus decreasing the overheads.

3-6
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

Expand the number of ports and switching capacity by adding devices as desired,
thus protecting the existing investment when scaling up the network.

Achieve high reliability of N + 1 redundancy, thus avoiding single point failures
which can result in service interruption.

3.6 QoS

Quality of service (QoS) provides differentiated network services to accommodate to

various demands.

3.6.1 Traffic Classification

Traffic classification is to classify packets to facilitate the subsequent packet processing

conducted by a switch.

In traffic classification, a rule is specified for discriminating packets compliant with some
characteristics. Classification rules can be very simple; for example, packets can be
sorted by the priority defined in the type of service (ToS) field in the IP header. They can
also be very complex; for example, packets can be sorted by any combination of MAC
address, IP protocol type, source (host or network) address, destination (host or
network) address, and even application port number, which involve the layers of data
link, network, and transport.

3.6.2 Traffic Policing/Bandwidth Guarantee

Traffic policing polices the traffic matching a traffic classification rule on the port where
the packets are received, so that the traffic can effectively use the assigned network
resources such as bandwidth.

Traffic policing mainly functions to limit the speed of an input port and thereby monitor
the traffic that enters its connected network. When packets arrive at the port at a speed
exceeds the assigned bandwidth, they are either dropped or assigned a new
preference.

Bandwidth guarantee refers to assuring the minimum bandwidth for a special traffic so
that it can satisfy such QoS requirements as packet loss rate, delay, jitter even when
network congestion occurs.

3.6.3 Port Flow Control

Port flow control is used for congestion management. Congestion occurs when the
network cannot reach the committed or negotiated performance specifications (such as
speed).

3-7
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

When congestion occurs, the switch transmits a pause frame to the corresponding
connection and notifies the peer to pause for a period of time before transmitting data
again, so as to reduce the incoming traffic on the network. The port control takes effect
on all traffic.

3.6.4 Port Mirroring

Port mirroring monitors packets on a specific port.

When this function is applied, data packets on a mirroring port are copied to its monitor
port for network test and troubleshooting.

3.6.5 Traffic Mirroring

Traffic mirroring monitors the traffic that matches the traffic classification rule.

This function is to copy the data packets that match the traffic classification rule to the
monitor port for network detection and trouble shooting.

3.6.6 Queue Scheduling

Queue scheduling applies to the situation where several packets to be forwarded

compete for the resources. The S5600 series support three queue scheduling
algorithms: strict priority (SP), weighted round robin (WRR), and SP + WRR.
1) SP

Queues
High
Outgoing packets
Medium
Classifiy
Incoming Normal Queue
packets scheduling
Low

Figure 3-1 SP mechanism

The SP mechanism applies to key services that are delay-sensitive and must have
priority when congestion occurs. In SP, packets are assigned to four queues, namely,
high-priority queue, medium-priority queue, normal-priority queue, and low-priority
queue (numbered as 3, 2, 1, and 0 respectively) with priority in descending order.

SP schedules the packets in a strict priority order. It sends the packets in a queue only
when the queue with a higher priority is empty. By putting the key service packets in the
high priority queues, you can ensure that they can always be served first. At the same

3-8
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

time the common service packets can be put in the low priority queues and transmitted
when there are no key service packets waiting for transmission.

If congestion occurs and the high priority queues are occupied for a long time, however,
the packets in the lower-priority queues are “starved” before obtaining services.
2) WRR
In WRR, there are four or eight outgoing queues on each port. The packets in different
queues are processed in turn, so that every queue is assigned some time of service. If
there are four queues on a port, they are each assigned a weight for obtaining
resources: w3, w2, w1, and w0 respectively. On a 100 Mbps port, for example, you can
assign the weights 50, 30, 10, 10 to the four queues with w3, w2, w1 and w0. Thus the
lowest-priority queue can be guaranteed of a minimum bandwidth of 10 Mbps. This
avoids the case that the packets in the low priority queues cannot be served, as in SP.
More than that, WRR assigns service time slices flexibly to every queue. When a queue
is empty, the next one is processed immediately. Thus it makes a full use of the
bandwidth resources.
3) SP+WRR
SP+WRR schedules some of the queues on the port with SP mechanism, and some
with WRR mechanism. Thus can make rather full use of the bandwidth.

The S5600 series offer 8 queues on each port, and support SP, WRR and SP+WRR
mechanisms.

3.6.7 Traffic Shaping

Traffic shaping is to control traffic output rate as such that packets can be output at an
even rate. Normally, traffic shaping is applied on a device to adapt its output rate to the
input rate of its connected downstream device so as to avoid unnecessary packet drop
and congestion. It is different from traffic policing in the sense that it buffers the packets
that exceed the specified rate limit so that packets are sent out at an even speed,
whereas traffic policing is to discard the packets. Besides, traffic shaping can result in
the additional delay that can be avoided in traffic policing.

3.6.8 Priority Replacing

The priority tag feature is used for setting packet a new priority.

The S5600 series provide some specific packets with a new priority service. The
contents include ToS priority, differentiated services codepoint priority (DSCP), and
802.1p priority.

3-9
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

3.7 NTP

Clock synchronization among devices is important for a complex network. The network
time protocol (NTP) is a TCP/IP protocol that releases accurate time on a network.

NTP provides consistency guarantee for the following applications:

When increment backup is performed between a backup server and a client, it
ensures the clock between the two system be synchronous.

When multiple systems are used to deal with complex events, it ensures the
correct order of these events.

It ensures the RPC between systems be normally performed.

It provides time information about such operations as system login of users, file
modification for application program.

3.8 Security

The popularity of network applications, especially in some sensitive occasions

(e-commerce for example), highlights the issue of network security. The S5600 series
provide these network security features:

Hierarchical user management and password protection

SSH

802.1X authentication

MAC address authentication

DUD authentication

Packet filtering

Port isolation
With respect to filtering and authenticating Ethernet frames and packets from the upper
layers, the S5600 series support:

ACL, with which information is filtered at layers 2 through 4 (such as based on port,
by source/destination MAC address, by source/destination IP address, or by the
type of upper layer protocol).

RIPv2/OSPFv2 packet authentication with the clear text and MD5 approaches

Encryption and authentication using SNMPv3

3.8.1 Terminal Access User Classification

The S5600 series protect command lines in a hierarchical way by dividing the
command lines into four levels: visitor, monitor, operator, and administrator.
Commensurate with the command division, login users are classified into four levels. A
login user can use only the commands equal to or lower than its level.

3-10
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

3.8.2 SSH

When users log onto the Ethernet switch from an insecure network, secure shell (SSH)
offers security information protection and powerful authentication function to safeguard
the Ethernet switch from attacks such as IP address spoofing and plain text cipher
interception. The Ethernet switch can accept multiple SSH customer connections at the
same time. The SSH client allows users to connect to the Ethernet switches and UNIX
mainframes that support SSH servers.

3.8.3 Port Isolation

Port isolation means layer 2 isolation of the ports in the same VLAN so that layer 2 relay
cannot be done between a port and another port (or another group of ports), but it can
communicate with the port in the upper layer. It prevents visiting between the ports,
effectively controls unnecessary broadcasting and increases the network throughput.

3.8.4 Packet Filtering

Packet filtering filters invalid or non-interesting data packets. The switch filters each
packet based on the defined rules, by comparing the source or destination address for
example. With packet filter, session state is ignored and data is not analyzed. You can
define which packets are permitted and which are denied.

3.8.5 IEEE 802.1X Authentication

IEEE 802.1x is actually a port based network access control protocol. As the name
implies, the NAS on a LAN authenticates and controls the connected customer
premises equipment (CPE) at the port level. If the CPE connected to a port passes
authentication, it is allowed to access the LAN resources. Otherwise, it is rejected just
like its physical link is disconnected.

In implementing 802.1x, the Ethernet switches not only support the port-based access
authentication, but also extends and optimizes it by:

Allowing a physical port to be connected to several terminals.

Supporting access control (that is user authentication) based on MAC address in
addition to port.
The system thus becomes securer and more operational and manageable.

Note that, although 802.1x provides an implementation scheme for user authentication,
the protocol itself is not enough to implement the scheme. The NAS administrators,
however, can use RADIUS or local authentication to complete the user authentication
with 802.1x.

3-11
System Description
Quidway S5600 Series Ethernet Switches Chapter 3 Software Features

3.8.6 MAC Address Authentication

MAC address authentication: the server or the Ethernet switch stores the information
on user MAC addresses. Once a new user is detected, the switch authenticates the
user by taking its MAC address as its user name and password. It searches the MAC
addresses table in the server or the switch for the user’s MAC address. If found, the
user is authenticated and the MAC address will be automatically added to the
corresponding port; if not, the authentication fails and the packet will be discarded. This
authentication method does not involve the client, the client’s own MAC address is
taken as its user name and password.

3.8.7 DUD Authentication

With the disconnect unauthorized device (DUD) function enabled, the switch filters out
all the traffic of a connected device once it detects that the device is unauthorized. It is
implemented through limiting the number of learned MAC addresses and binding MAC
addresses with ports.

3-12
System Description
Quidway S5600 Series Ethernet Switches Chapter 4 System Maintenance and Management

Chapter 4 System Maintenance and Management

4.1 Simple and Flexible System Maintenance

4.1.1 System Configuration

The S5600 series can be configured through the command line interface (CLI), NMS,
HGMP, or Web.

In the CLI approach, you can configure the switch locally through the console port,
or configure it remotely through modem dialup or Telnet. The S5600 series
support both Telnet server and Telnet client.

In the NMS approach, you can configure the switch through an SNMP-based
NMS.

In the Web approach, you can configure the switch that supports the Web-based
network management.

4.1.2 System Maintenance

The S5600 series provide diverse management and maintenance functions:

LEDs are available on the switch and expansion modules, indicating the board
running status.

Telnet maintenance

Hierarchical management over user authorities and operation logs, as well as
online help function

Hierarchical alarm management and alarm filtering

System status query, version query, debugging and tracing functions, to monitor
system running status

4.1.3 System Test and Diagnosis

The S5600 series provide means for system software and hardware fault detection and
diagnosis. The ping and tracert commands are available for you to test network
connectivity and trace packet transmission paths online and therefore your later fault
locating.

4-1
System Description
Quidway S5600 Series Ethernet Switches Chapter 4 System Maintenance and Management

4.1.4 Software Upgrade

The S5600 series provide multiple approaches to software upgrade, and support
remote grade and rollback to the previous version after upgrade.

The S5600 series allow you to upgrade the software:

Through a serial port with the XModem protocol.

Through an Ethernet port with TFTP or FTP (at the local or remotely).

Through the Web-based NMS with HTTP.

4.2 Quidview NMS

The S5600 series support Huawei Quidview NMS for centralized management, which
is usually implemented in bingual graphic interfaces. The NMS provides management
in topology, configuration, fault, security, and performance.

4.2.1 Topology Management

The Quidview helps you learn your network in direct and convenient way by providing a
network-wide device topology view. The Quidview delivers powerful topology
management. It provides the physical topology view, logical topology view, and
customized views, offering a unified network-wide equipment view. It also provides the
user-friendly interface for network/equipment operation and maintenance. The system
supports automatic topology discovery, reflecting the real-time changes in network
topology and equipment status.

4.2.2 Configuration Management

With the Quidview, you can configure and manage the S5600 series, speccfically,
query/enable/disable ports, query/reset/load boards, and query port parameters/VLAN
configurations.

4.2.3 Fault Management

Fault management is the most important and common management approach during
the network operation and maintenance. In the graphic interfaces, you can implement
equipment running/fault status query, real-time monitoring, fault
filtering/locating/check/analysis. The system provides audio prompt and graphical
displays on the alarm card. Additionally, it can be connected to the alarm box and
therefore facilitates routine maintenance.

4-2
System Description
Quidway S5600 Series Ethernet Switches Chapter 4 System Maintenance and Management

4.2.4 Performance Management

The S5600 series can collect and analyze performance data, monitor performance,
and provide graphical performance reports in different forms. You can thus learn the
information on equipment load and access traffic, track network service quality, and
allocate network resources based on your network evaluation.

4.2.5 Security Management

The S5600 series provide several security measures to strictly authenticate the user’s
operations and ensure the system security. It offers detailed operation log for later
query and analysis.

4.3 Web-Based Network Management

Web-based network management allows you to manage and maintain a switch through
Web. It is implemented as follows:

The switch provides a built-in Web server and runs a Web-based network management
program on the homepage at the IP address of the management VLAN. The PC users
connected to the Ethernet ports on the switch can access and use, through a browser,
the program on the homepage to manage the switch. Figure 4-1 shows the Web-based
NM operating environment.

Switch

HTTP connection

PC

Figure 4-1 Web-based NM operating environment

4-3
System Description Chapter 5 Networking ApplicationsError! Reference s
Quidway S5600 Series Ethernet Switches ource not found.

Chapter 5 Networking Applications

You can deploy S5600 series on many types of networks, such as enterprise networks
and broadband access networks. Following are several typical networking applications.

5.1 Application in Networks of Branches or Small and

Midsize Enterprises

S5600 series can serve as backbone switches in small and midsize enterprise
networks. They are uplinked to the headquarters or other branches through routers.
They can smoothly enlarge capacity with the IRF technique.

Core/Aggregation
Access

5600

3900

Figure 5-1 Community Ethernet access networking with S5600 series

5.2 Application in Large Enterprise and Campus Networks

In a large enterprise or campus network, the S5600 series are located at the
convergence layer. They are downlinked to layer 2 switches (S3900 Series for
example), and uplinked to a layer 3 switch through the GE expansion module. These
switches together provide a network-wide intranet solution that covers
gigabit-to-backbone and 100 Mbps-to-desktop.

5-1
System Description Chapter 5 Networking ApplicationsError! Reference s
Quidway S5600 Series Ethernet Switches ource not found.

C ore
A ggregation
A ccess
G aribaldi

5600

3900

Figure 5-2 S5600 series application in large enterprise and campus network

5-2
System Description Chapter 6 Guide to PurchaseError! Reference sourc
Quidway S3900 Series Ethernet Switches e not found.

Chapter 6 Guide to Purchase

To meet varied customer needs, S5600 series can be delivered to your order. You can
purchase the switch and optional expansion modules as needed.

6.1 Purchasing the Switch

When purchasing a switch, consider the following:

I. Networking requirements

Location and function of the switch in your network

Desired processing and access capabilities in both directions

Desired scalability

Service reliability

Transmission segment

II. Power system

Make sure you want a dual input power module or PoE power module.

Table 6-1 Switch purchase list

Switch model Quantity Note

S5624P (PSL130-AD dual input power module, 220/110 VAC, -48VDC to

1 Optional
-60VDC)

S5624F (PSL130-AD dual input power module, 220/110 VAC, -48VDC to

1 Optional
-60VDC)

S5624P-PWR (PSL480-AD24P dual input PoE power module, 220/110 VAC,

1 Optional
–52VDC to –55VDC)

S5648P (PSL180-AD dual input power module, 220/110 VAC, -48VDC to

1 Optional
-60VDC)

S5648P-PWR (PSL480-AD48P dual input PoE power module, , 220/110 VAC,

1 Optional
–52VDC to –55VDC)

6-1