I. Rich Services for Integrated Service Networks

All-round MPLS services

H3C S7500E series has the following MPLS related features:

- Supporting the virtual routing and forwarding-lite (VRF-Lite), which allows the S7500E working as a Multi Custom Edge (MCE)

- Supporting L3 and L2(Martini, Kompella) MPLS VPN, which can be extended to support Virtual Private LAN Service (VPLS)

- Supporting the MPLS Operation, Administration and Maintenance (OAM) to facilitate operation and maintenance

- Working with H3C MPLS VPN Manager to provide graphical MPLS deployment and maintenance 

Wire-speed IPv4/IPv6 services

H3C S7500E series has the following IPv4/IPv6 related features:

- Supporting the IPv4/IPv6 protocol stack and numerous 6to4 tunneling technologies

- Supporting IPv4/IPv6 multicast, which builds a perfect IPv4/IPv6 solution

- Distributed architecture, which supports wire-speed IPv4/IPv6 services

- A series of mature IPv6 products, which has obtained the IPv6 Ready Phase II Golden Certificate

Wired & wireless integrated, active & passive integrated, Network & security integrated

The wireless control module of H3C S7500E provides rich services, including:

- Granular user control

- All-round radio frequency (RF) management and security mechanism

- Fast roaming

- High QoS

- Support IPv6

By working with the security policy server, the wireless control module can implement Endpoint Admission Defense (EAD) for wireless access users, thus improving the security of the entire network.

H3C S7500E is a kind of Ethernet passive optical network (EPON) equipment, which is of the highest density in the industry. One single unit can host 10,240 FTTH users. H3C S7500E is an EPON system that provides carrier-class reliability:

- Distributed architecture

- Modular design

- Redundant main control unit (MCU) for hot backup

- Passive backplane

- Redundant power supply for dual input

H3C S7500E series base on OAA (Open Application Architecture ) Architecture, H3C S7500E can provide Multi-Service function, include Wireless controller service module, Firewall Board Module, Anomaly Flow Cleaner Module, Anomaly Flow Detector Board Module, Load Balancing Module, Application Control Gateway Module, NetStream Board Module, SSL VPN Service Board Module, Intrusion Prevention System Module.

Supporting Portal authentication

H3C S7500E supports Portal authentication of large capacity.

- It can be used as an EAD gateway for EAD security authentication in a LAN that has thousands of users.

- It can also provide Portal authentication for authentication and accounting, as well as being used as a convergence/core device in medium to large size campus networks.

II. Flexible Configuration and Excellent Adaptability

Optimal choice for wiring closets & integrated service networks

H3C S7500E has developed the SA module to meet the needs of wiring closets. One unit can maximum provide 480GE and 4 10GE wire-speed ports. H3C S7500E supports EAD solution to enhance the terminal security. With embedded 2800W power supply, H3C S7500E can support PoE, Which make VoIP and wireless access very well.

Optimal choice for edge and convergence in government and power MANs

H3C S7500E has the following features to work in the edge and convergence in MANs:

- Supporting VRF-Lite, which allows the S7500E working as a MCE

- Providing centralized MPLS services when configured with a Salience VI-Turbo engine, which is cost effective when the S7500E works as a PE on the edges of a MAN

- Providing distributed wire-speed MPLS services when configured with the EA module, which is effective when the S7500E works as a PE in the convergence layer of a MAN

Optimal choice for IPv6 networks

All Salience VI engines in an H3C S7500E can provide centralized IPv6 services. To meet the high performance of IPv4/IPv6, H3C has developed the SC module for distributed IPv4/IPv6 forwarding. When fully configured, the unit can achieve wire speed without convergence. Routers of this series features high performance and low cost, and can be used as dual-stack convergence core equipment in universities, or used to meet the IPv6 Ready requirement of users in other industries.

III. All-round Security Measures against Various Kinds of Network Threats

Three security mechanisms

H3C S7500E ensures the system security from three planes:

 On the controlling plane:

- Embedded protocol packet attack recognition module, preventing attacks from topology change notification (TCN), address resolution protocol (ARP) and other protocol packets

- Using the MD5 algorithm for the OSPF/BGP/IS-IS routing protocols, preventing network breakdown caused by illegal route update packets

 On the management plane:

- SNMPv3 network protocol

- SSH V2

- 802.1x based AAA/Radius user authentication

- Hierarchical permission management

 On the forwarding plane:

- Binding of IP addresses, VLAN, MAC addresses and ports

- Supporting Unicast Reverse Path Forwarding (uRPF) to prevent illegal traffic from accessing the network

- Using longest matching packet by packet forwarding mechanism to prevent attacks from viruses

EAD for wired and wireless services

H3C S7500E is a critical component of the EAD solution. The S7500E can dynamically receive control policies from the security policy server, and grant access rights according to endpoint security status.H3C S7500E supports EAD of both wired and wireless end users.

Enhanced ACL feature

H3C S7500E series provides strong ACL features:

- Standard and extended ACL

- VLAN-based ACL to save ACL resources and to facilitating configuration

- Ingress and egress ACL

One 48GE module can support up to 9000 ACLs, fulfilling the strict access control requirements of industries such as finance.

IV. Carrier-class Reliability for Long-term Smooth Operation

Design of carrier-class reliability

The design of H3C S7500E eliminates single point of failures. All critical parts (such as the MCU, switching network, power supply ) feature redundancy design. The passive backplane eliminates single point of failures in the cabinet. All modules and power supply support hot swap. H3C S7500E series can operate in extreme environment reliably and for a long time, with a carrier-class reliability of 99.999%.

Multi-service‘s reliable operation

H3C S7500E supports:

- NSF and graceful restart, with a switching time of milliseconds

- Equal cost route to help users create equal cost multi-paths to balance the load and realize redundancy backup

- Rapid Ring Protection Protocol (RRPP) to provide a ring network protection with error time less than 200 ms

- Smart-link protocol to ensure millisecond fast switch between dual uplink network topology

Using these technologies, H3C S7500E can operate without stop while processing multiple services.

Supporting hot fix

Bugs in the software of H3C S7500E can be hot fixed and new service features can be added without restarting the equipment.H3C S7500E provides user commands to switch the status of hot fixes. Using such commands, users can conveniently load, activate, deactivate, execute or delete a hot fix.Hot fix technology reduces equipment restart times and enables the network to operate normally for a longer time.