H3C S5590-EI Series Converged Hybrid Multigiga Switches

SmartMC (Smart Management Center)

As the network scale increases, a large number of access devices are required at the network edge, which makes the management of these devices very cumbersome. The main purpose of SmartMC is to solve the problem of centralized management of a large number of scattered network devices. It is designed to solve the switch-based operation and maintenance tasks of small enterprises. SmartMC realizes unified operation, maintenance and management of the network by means of built-in equipment and graphical operation.

SmartMC simplify the operation, maintenance and management of small and medium-sized parks:

Smart management: It mainly includes device role selection, FTP server configuration, global configuration and network management port configuration, etc.

Intelligent operation and maintenance: Mainly include group management, equipment or group upgrade backup, monitoring and equipment failure replacement, etc.

Visualization: Includes networking topology visualization and management, device list display, device ports display, etc.

Smart business: Mainly includes user management, etc.: After network access users are created and successfully activated, these users can access the SmartMC network through the port of one- key arming.

H3C S5590-EI series switches can be used as the management device of SmartMC. You can log in to the SmartMC network through the S5590 - EI to manage the entire network in a unified manner.

Multi-Service Integration

Based on H3C's Open Service Architecture (OAA), H3C S5590-EI series switches can not only provide the functions of traditional switches, but also integrate security module cards including FW, IPS, and load balancing, mini-iMC cards, and Eagle Vision cards. etc., making the S5590-EI series switches a converged multi-service bearing platform.

High-Performance IPv4/IPv6 Service Capability

H3C S5590-EI series switches implement a hardware-based IPv4/IPv6 dual-stack platform, support multiple tunnel technologies, rich IPv4 and IPv6 Layer 3 routing protocols, multicast technologies and policy routing mechanisms, providing users with complete IPv4/IPv6 solution.

IRF2 (Second Generation Intelligent Resilience Architecture)

H3C S5590-EI series switches support IRF2 (Second Generation Intelligent Resilient Architecture) technology, which is to connect multiple physical devices to each other to make it virtual as a logical device, that is to say, users can regard these multiple devices as one Manage and use a single device. IRF can bring the following benefits to users:

Simplified management: IRF architecture is formed, it can be connected to any port of any device to log in to a unified logical device. By configuring a single device, it can manage the entire intelligent elastic system and all member devices in the system. There is no need to physically connect to each member device to configure and manage them individually.

Simplified service: IRF are also run as a single device. For example, the routing protocol will be calculated as a single device. With the application of the cross-device link aggregation technology, it can replace the original generation tree protocol, which saves the interaction of a large number of protocol packets between devices, simplifies network operation, and shortens the convergence time when the network is turbulent.

Elastic expansion: can realize elastic expansion according to user needs and ensure user investment. And new devices can be "hot-swapped" when they join or leave the IRF architecture, without affecting the normal operation of other devices.

High reliability: high reliability IRF is reflected in three aspects: link, equipment and protocol. The physical ports between member devices support the aggregation function, and the physical connection between the IRF system and the upper and lower-layer devices also supports the aggregation function, which improves the reliability of the link through multi-link backup; the IRF system consists of multiple member devices. Once the master device fails, the system will quickly and automatically elect a new master to ensure uninterrupted services through the system, thus realizing device-level 1: N backup; the IRF system will have a real-time protocol hot backup function responsible for the configuration information of the protocol. Backup to all other member devices to achieve 1: N protocol reliability.

High performance: For high-end switches, the increase in performance and port density is limited by the hardware structure. The performance and port density of an IRF system is the sum of the performance and port numbers of all devices inside the IRF. Therefore, the IRF technology can easily expand the switching capability of the device and the density of user ports several times, thereby greatly improving the performance of the device.

Complete Security Control Strategy

H3C S5590-EI series switches support the EAD ( terminal access control ) function, and cooperate with the background system to integrate terminal security measures such as terminal antivirus and patch repair with network security measures such as network access control and access authority control into a linked security The system, through the inspection, isolation, repair, management and monitoring of network access terminals, makes the entire network change from passive defense to active defense, from single-point defense to comprehensive defense, and from decentralized management to centralized policy management. , worms and other emerging security threats overall defense capabilities.

H3C S5590-EI series switches support centralized MAC address authentication, 802.1x authentication, support dynamic or static binding of user identification elements such as user account, IP, MAC, VLAN, and port, and implement user policies (VLAN, QoS, ACL) dynamic distribution; support with H3C's iMC system for real-time management of online users, timely diagnosis and disintegration of illegal network behavior.

H3C S5590-EI series switches provide enhanced ACL control logic, support large-capacity ingress and egress port ACLs, and support VLAN-based ACL delivery, which simplifies the user configuration process and avoids waste of ACL resources. In addition, H3C S5590-EI series switches will also support unicast reverse path finding technology (uRPF). The route between the interface and the source address specified in the packet is to verify its authenticity. If it does not exist, the packet is deleted, so that we can effectively prevent the source address spoofing that is increasingly flooding in the network.

MACsec Hardware Encryption

MACsec (Media Access Control Security, MAC security) defines the method of data security communication based on IEEE 802 local area network. MACsec can provide users with secure MAC layer data transmission and reception services, including user data encryption, data frame integrity check and data source authenticity verification.

MACsec is usually used in conjunction with the 802.1X authentication framework. After the 802.1X authentication process is successful, it identifies the message sent by the authenticated device and uses the MKA (MACsec Key Agreement, MACsec Key Agreement) protocol to negotiate the generated key pair Authenticated user data is encrypted and integrity checked to prevent the port from processing packets from unauthenticated devices or tampered with unauthenticated devices.

H3C S 5590-EI series switches support upgraded MACsec encryption technology and use 256-bit encryption algorithm to further improve data security; All ports of the device provide 256-bit MACsec encryption to ensure data security.

Precision Time Protocol (PTP)

H3C S5590-EI series switches support the 1588V2 function to meet the high-precision time synchronization requirements between network devices. Compared with GPS time synchronization with the same precision, it improves security and lowers deployment costs.

Intelligent Network Quality Analyzer (iNQA)

H3C S5590-EI series switches support iNQA. iNQA provides the following benefits:

True measurement results—iNQA measures the service packets directly to calculate packet loss results, thus reflecting the real network quality.

Wide application range—Applicable to Layer 2 network and Layer 3 IP network. iNQA supports the network-level and direct link measurement flexibly.

Fast fault location—iNQA obtains the packet loss time, packet loss location, and number of lost packets in real time.

Applicable to different applications—You can apply iNQA to multiple scenarios, such as point-to-point, point-to-multipoint, and multipoint-to-multipoint.

Multichassis Link Aggregation Group (M-LAG) (Original DRNI)

H3C S5590-EI series switches support M-LAG, which enables links of multiple switches to aggregate into one to implement device-level link backup. M-LAG is applicable to servers dual-homed to a pair of access devices for node redundancy.

Streamlined topology: M-LAG simplifies the network topology and spanning tree configuration by virtualizing two physical devices into one logical device.

Independent upgrading: The DR member devices can be upgraded independently one by one to minimize the impact on traffic forwarding.

High availability: The DR system uses a keepalive link to detect multi-active collision to ensure that only one member device forwards traffic after a DR system splits.

Visualization Ability

H3C S5590-EI series switches support Telemetry technology, which can send the switch's real-time resource information and alarm information to the O&M platform through the gRPC protocol.

The platform can realize network quality backtracking, troubleshooting, risk early warning, architecture optimization and other functions to accurately guarantee user experience by analyzing real-time data.

Al-driven PoE

Fast PoE: Typically, PIs does not deliver power to PDs the moment the PSE is powered on but wait until the PSE completes startup. Fast PoE enables PIs to deliver power to PDs within few seconds after power is supplied to the PSE.

Perpetual PoE: Perpetual PoE continuously monitors the PD states and ensures continued power supply to PDs even when the PSE device is hot rebooting.

AI-driven PoE: Innovatively integrating AI technologies into PoE switches, H3C AI-driven PoE enables completely automated, intelligently managed, healed, and optimized PoE, bringing convenient and outstanding PoE experience to users.