H3C S5590-EI Series Converged Hybrid Multigiga Switches

SmartMC (Smart Management Center)

As the network scale increases, a large number of access devices are required at the network edge, which makes the management of these devices very cumbersome. The main purpose of SmartMC is to solve the problem of centralized management of a large number of scattered network devices. It is designed to solve the switch-based operation and maintenance tasks of small enterprises. SmartMC realizes unified operation, maintenance and management of the network by means of built-in equipment and graphical operation.

SmartMC simplify the operation, maintenance and management of small and medium-sized parks:

Smart management: It mainly includes device role selection, FTP server configuration, global configuration and network management port configuration, etc.

Intelligent operation and maintenance: Mainly include group management, equipment or group upgrade backup, monitoring and equipment failure replacement, etc.

Visualize: It mainly includes networking topology visualization and management, device list display, etc.

Smart business: Mainly includes user management, etc.: After network access users are created and successfully activated, these users can access the SmartMC network through the port of one- key arming.

H3C S5590-EI series switches can be used as the management device of SmartMC. You can log in to the SmartMC network through the S5590 - EI to manage the entire network in a unified manner.

Based on DRNI architecture

H3C S5590-EI series switches support DRNI (Distributed Resilient Network Interconnect, Distributed Resilient Network Interconnect) cross-device link aggregation technology, by virtualizing two physical devices into one device at the forwarding layer to achieve cross-device link aggregation, maintaining the control planes are independent of each other, providing device-level redundancy protection and traffic load sharing to improve system reliability.

Multi-service integration

Based on H3C's Open Service Architecture (OAA), H3C S5590-EI series switches can not only provide the functions of traditional switches, but also integrate security module cards including FW , IPS , and load balancing , mini-iMC cards, and Eagle Vision cards. etc., making the S5590-EI series switches a converged multi-service bearing platform.

High-performance IPv4/IPv6 service capability

H3C S5590-EI series switches implement a hardware-based IPv4/IPv6 dual-stack platform, support multiple tunnel technologies, rich IPv4 and IPv6 Layer 3 routing protocols, multicast technologies and policy routing mechanisms, providing users with complete IPv4/IPv6 solution.

IRF2 (Second Generation Intelligent Resilience Architecture)

H3C S5590-EI series switches support IRF2 (Second Generation Intelligent Resilient Architecture) technology, which is to connect multiple physical devices to each other to make it virtual as a logical device, that is to say, users can regard these multiple devices as one Manage and use a single device. IRF can bring the following benefits to users:

Simplified management: IRF architecture is formed, it can be connected to any port of any device to log in to a unified logical device. By configuring a single device, it can manage the entire intelligent elastic system and all member devices in the system. There is no need to physically connect to each member device to configure and manage them individually.

Simplified service: IRF are also run as a single device. For example, the routing protocol will be calculated as a single device. With the application of the cross-device link aggregation technology, it can replace the original generation tree protocol, which saves the interaction of a large number of protocol packets between devices, simplifies network operation, and shortens the convergence time when the network is turbulent.

Elastic expansion: can realize elastic expansion according to user needs and ensure user investment. And new devices can be "hot-swapped" when they join or leave the IRF architecture, without affecting the normal operation of other devices.

High reliability: high reliability IRF is reflected in three aspects: link, equipment and protocol. The physical ports between member devices support the aggregation function, and the physical connection between the IRF system and the upper and lower-layer devices also supports the aggregation function, which improves the reliability of the link through multi-link backup; the IRF system consists of multiple member devices. Once the master device fails, the system will quickly and automatically elect a new master to ensure uninterrupted services through the system, thus realizing device-level 1:N backup; the IRF system will have a real-time protocol hot backup function responsible for the configuration information of the protocol. Backup to all other member devices to achieve 1:N protocol reliability.

High performance: For high-end switches, the increase in performance and port density is limited by the hardware structure. The performance and port density of an IRF system is the sum of the performance and port numbers of all devices inside the IRF. Therefore, the IRF technology can easily expand the switching capability of the device and the density of user ports several times, thereby greatly improving the performance of the device.

Complete security control strategy

H3C S5590-EI series switches support the EAD ( terminal access control ) function, and cooperate with the background system to integrate terminal security measures such as terminal antivirus and patch repair with network security measures such as network access control and access authority control into a linked security The system, through the inspection, isolation, repair, management and monitoring of network access terminals, makes the entire network change from passive defense to active defense, from single-point defense to comprehensive defense, and from decentralized management to centralized policy management. , worms and other emerging security threats overall defense capabilities.

H3C S5590-EI series switches support centralized MAC address authentication, 802.1x authentication, support dynamic or static binding of user identification elements such as user account, IP, MAC, VLAN, and port, and implement user policies (VLAN, QoS, ACL) dynamic distribution; support with H3C's iMC system for real-time management of online users, timely diagnosis and disintegration of illegal network behavior.

H3C S5590-EI series switches provide enhanced ACL control logic, support large-capacity ingress and egress port ACLs, and support VLAN-based ACL delivery, which simplifies the user configuration process and avoids waste of ACL resources. In addition, H3C S5590-EI series switches will also support unicast reverse path finding technology (uRPF). The route between the interface and the source address specified in the packet is to verify its authenticity. If it does not exist, the packet is deleted, so that we can effectively prevent the source address spoofing that is increasingly flooding in the network.

MACsec hardware encryption

MACsec (Media Access Control Security, MAC security) defines the method of data security communication based on IEEE 802 local area network. MACsec can provide users with secure MAC layer data transmission and reception services, including user data encryption, data frame integrity check and data source authenticity verification.

MACsec is usually used in conjunction with the 802.1X authentication framework. After the 802.1X authentication process is successful, it identifies the message sent by the authenticated device and uses the MKA (MACsec Key Agreement, MACsec Key Agreement) protocol to negotiate the generated key pair Authenticated user data is encrypted and integrity checked to prevent the port from processing packets from unauthenticated devices or tampered with unauthenticated devices.

H3C S 5590-EI series switches support upgraded MACsec encryption technology and use 256-bit encryption algorithm to further improve data security; All ports of the device provide 256-bit MACsec encryption to ensure data security.

Al-driven PoE

Fast PoE: Typically, PIs does not deliver power to PDs the moment the PSE is powered on but wait until the PSE completes startup. Fast PoE enables PIs to deliver power to PDs within few seconds after power is supplied to the PSE.

Perpetual PoE: Perpetual PoE continuously monitors the PD states and ensures continued power supply to PDs even when the PSE device is hot rebooting.

AI-driven PoE: Innovatively integrating AI technologies into PoE switches, H3C AI-driven PoE enables completely automated, intelligently managed, healed, and optimized PoE, bringing convenient and outstanding PoE experience to users.

Hardware Specifications

Software Specifications

Performance Specification

PoE Power Capacity

Standards And Protocols Compliance

Ordering Information