ProductsFeatures
Comprehensive security control policies
l The S3100-EI series switches support EAD(Endpoint Admission Defense).It enhances the proactive defense capacity of network terminals, and restrains the spread of viruses and worms in a network. Additionally, it disables the access authorities of terminals that fail to meet the security requirements, preventing insecure terminals from endangering the entire network.
l The S3100-EI series switches support ARP detection to guard ARP spoofing launching by hackers or attackers. According the ARP detection function, the switches check the validity of the ARP packets by using the DHCP-Snooping table or the manually configured IP bonding table. You can also set trusted ports. ARP packets coming from the trusted ports will not be checked, while those from other ports will be checked through the DHCP-Snooping table or the manually configured IP binding table.
l The S3100-EI series switches offer powerful hardware ACL capability and can identify packets precisely, facilitating subsequent handling of the packets. The match rules may be based on the CoS field of the layer 2 header. They can also be classified based on the information about the data link layer, the network layer and the transport layer such as the source/destination MAC address, VLAN tag, IP protocol type, source (host/network) address, and destination (host/network) address or even based on the information about the application port number, etc.
l MAC-IP-port binding allows a device to filter packets and thus enhance security. With MAC-IP-port binding configured, a port checks whether the source MAC and IP addresses of an inbound packet is identical to the configured MAC-to-IP binding on the port. If so, it forwards the packet; otherwise, it discards the packet.
l The S3100-EI series switches support Centralized MAC address authentication and user authentication at the local or with RADIUS servers that are based on 802.1x or its extension. 802.1x-based user authentications can be extended to dynamically assign a VLAN based on a specific user, regardless of where they connect on the network. With 802.1x with Guest VLAN, guests are allowed access the customer’s internal network but cannot access to the Internet via the Guest VLAN.
High reliability
l The S3100 series switches support STP/RSTP/MSTP (Spanning Tree Protocol/Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol). The STP/RSTP features also support BPDU guard、Root guard、Loop guard、Edge-port and STP ignored per VLAN Thus the redundancy back-up and error tolerance capability of the link can be greatly improved to guarantee the network stability.
l The S3100 series switches support link-aggregation, it is a simple and cheap way to expand the bandwidth of a switch port and balance the traffic among all the ports in a link aggregation. Moreover, it enhances the connection reliability.
QoS
l The S3100 series switches support bidirectional port rate-limiting with the granularity of 64 Kbps, supporting finer bandwidth allocation. Port Mirroring is supported, when this function is applied, data packets on a mirroring port are copied to its monitor port for network test and troubleshooting.
l The S3100 series switches support the queue scheduling algorithms of Weighted Round Robin (WRR) and High-priority Queuing + WRR (HQ+WRR).On a switch of the S3100 series, each port supports four output queues. The port flow control is used by the S3100 series switches to reduce congestion on the network.
l The S3100 series switches support 3 priority criteria: IP-precedence priority, differentiated services code point priority (DSCP), and 802.1p priority. Customers can add packets to the output queue according to a priority criterion as needed.
Diversified management modes and maintenance
l The S3100 series switches can support SNMP v1/v2/v3 and can be managed by H3C iMC NMS. They also support CLI, Web network management, Telnet to facilitate the equipment management.
l VCT (Virtual Cable Test) is supported, which is convenient for troubleshooting. Customers can start the VCT function to make the system test the cable connected to the current electrical Ethernet port. The test items include: whether short or open circuit exists in the Rx/Tx direction of the cable, and what is the length of the cable in normal status or the length from the port to the fault point of the cable.
l After enabling HGMP V2, the network administrator can manage several member switches through one command switch and only the command switch need a public network IP address, it can save public IP address greatly and manage the network more efficiently.
Easy to use and deployment
l The S3100-EI series switches are stackable, allowing network managers to build networks with high expansibility, high reliability and easy management.
l S3100-EI’s non-PoE switches adopt fan free design to reduce the noise and power consumption effectively, which makes them very suitable for quiet working environment.
l S3100-8TP-PWR-EI,S3100-16TP-PWR-EI,S3100-26TP-PWR-EI can be a standard POE powered device, there is no need to do creative power budgeting or adding an external power shelf, reducing the cost and complexity of IP Communications.
l “Pay as you go” is the slogan of the S3100-EI series switches, offering a cost-effective path for meeting current and future service requirements of customers.
