background image

Feature

Description

MAC address authentication

Portal authentication

ARP security

Dynamic ARP Inspection (DAI) and Static ARP Inspection (SAI)

Egress ARP Inspection (EAI)

ARP packet suppression based on source IP addresses, interfaces,
and VLANs, and global ARP packet suppression

IP security

ICMP attack defense

IP source guard

Local attack
defense

CPU attack defense

MFF

MAC-Forced Forwarding (MFF)

DHCP
Snooping

DHCP Snooping

Option 82 and dynamic DHCP packet rate limiting

Attack
defense

Defense against flood attacks without IP payloads, attacks from
IGMP null payload packets, LAND attacks, Smurf attacks, and
attacks from packets with invalid TCP flag bits

Defense against attacks from many fragments, attacks from many
packets with offsets, attacks from repeated packet fragments,
Tear Drop attacks, Syndrop attacks, NewTear attacks, Bonk
attacks, Nesta attacks Rose attacks, Fawx attacks, Ping of Death
attacks, and Jolt attacks

Defense against TCP SYN flood attacks, UDP flood attacks
(including Fraggle attacks and UDP diagnosis port attacks), and
ICMP flood attacks

Network
manage
ment

-

Ping and traceroute

Network Time Protocol (NTP)

HTTP

Hypertext Transfer Protocol Secure (HTTPS)

SNMPv1/v2/v3

Standard MIB

Remote network monitoring (RMON)

 

S1720 Series Ethernet Switches
Product Description

4 Product Performance

Issue 01 (2014-07-20)

Huawei Proprietary and Confidential

Copyright © Huawei Technologies Co., Ltd.

24

Summary of Contents for S1720

Page 1: ...S1720 Series Ethernet Switches Product Description Issue 01 Date 2014 07 20 HUAWEI TECHNOLOGIES CO LTD ...

Page 2: ...t may not be within the purchase scope or the usage scope Unless otherwise specified in the contract all statements information and recommendations in this document are provided AS IS without warranties guarantees or representations of any kind either express or implied The information in this document is subject to change without notice Every effort has been made in the preparation of this docume...

Page 3: ...ollect or save the content of users communications It is suggested that you activate the functions based on the applicable laws and regulations in terms of purpose and scope of usage You are obligated to take considerable measures to ensure that the content of users communications is fully protected when the content is being used and saved The device provides the NetStream function for network tra...

Page 4: ...rioration or unanticipated results NOTICE is used to address practices not related to personal injury NOTE Calls attention to important information best practices and tips NOTE is used to address information not related to personal injury equipment damage and environment deterioration Change History Updates between document issues are cumulative Therefore the latest document version contains all u...

Page 5: ... 1 Appearance and Structure 8 3 2 Indicator Description 10 3 3 Hardware Modules 12 3 3 1 SCU 13 3 3 2 Power Supply 13 3 3 3 Heat Dissipation System 14 3 3 4 Optical Module Attributes 14 4 Product Performance 19 4 1 Product Features 20 4 2 Performance Specifications 25 5 Technical Specifications 26 5 1 Specifications 27 S1720 Series Ethernet Switches Product Description Contents Issue 01 2014 07 20...

Page 6: ...is Chapter 1 1 Product Positioning 1 2 Product Characteristics S1720 Series Ethernet Switches Product Description 1 Product Overview Issue 01 2014 07 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 1 ...

Page 7: ...tly and networks demanding high security The S1720 supports STP RSTP and MSTP to ensure network reliability Various Security Protection Measures The S1720 supports DHCP snooping which generates user binding entries based on MAC addresses IP addresses IP address leases VLAN IDs and interface numbers of users The DHCP snooping function protects networks against common attacks such as bogus IP packet...

Page 8: ...e protection technique greatly reduces the possibility of lightning damages on the equipment even in atrocious environments or in scenarios where grounding cannot be implemented Energy Saving Design The S1720 uses an energy saving integrated circuit design to ensure even heat dissipation Idle ports can enter the sleep mode to further reduce power consumption The S1720 generates no noises because i...

Page 9: ...se Campus Network 2 2 Application of the S1720 for Desktop Access This section describes the S1720 for desktop access S1720 Series Ethernet Switches Product Description 2 Application Scenarios Issue 01 2014 07 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 4 ...

Page 10: ...rk by bundling GE interfaces or using 10G interfaces The network provides 10 Gbit s rate for the backbone layer and 100 Mbit s access rate for terminals meeting requirements for high bandwidth and multi service Figure 2 1 Position of the S1720 on an enterprise campus network Aggregation Layer Access Layer S1720 Application PC Camera RF Card Reader AP NMS Aggregation switch SPU VASP firewall SPU AC...

Page 11: ... the small dimensions the S1720 can be used for desktop access and provides various access functions Figure 2 2 Desktop access Internet Core Aggregation Switch Access Switch S1720 PC IP Phone Note Book Printer Application S1720 Series Ethernet Switches Product Description 2 Application Scenarios Issue 01 2014 07 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 6 ...

Page 12: ... 1 Appearance and Structure 3 2 Indicator Description 3 3 Hardware Modules S1720 Series Ethernet Switches Product Description 3 Hardware Architecture Issue 01 2014 07 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 7 ...

Page 13: ...cal module l GE DWDM optical module l GE copper module 3 Two combo ports 10 100 1000BASE T 100 1000BASE X Modules applicable to combo optical ports l FE optical module l GE optical module l GE CWDM optical module l GE DWDM optical module 4 One console port NOTE It is used with a console cable The console cable is not delivered with the switch and needs to be separately purchased if needed S1720 Se...

Page 14: ... the service port indicators restore to the default mode In this case the SPED indicator is off 7 Ground screw NOTE It is used with a ground cable 8 Jack reserved for AC terminal locking latch NOTE The AC terminal locking latch is not delivered with the switch 9 AC power socket NOTE It is used with an AC power cable S1720 28GFR 4TP Figure 3 2 Appearance of the S1720 28GFR 4TP 1 2 3 4 5 6 7 8 9 10 ...

Page 15: ... this button a second time the service port indicators restore to the default mode the service port indicator shows the port link or activity state If you do not press the MODE button within 45 seconds the service port indicators restore to the default mode In this case the SPED indicator is off 7 Ground screw NOTE It is used with a ground cable 8 Jack reserved for AC terminal locking latch NOTE T...

Page 16: ... Off The system is not running Green l Fast blinking The system is starting l Slow blinking The system is running properly Red Steady on After registering the system does not operate properly or a temperature alarm has been generated 3 SPED speed indicator Off Off The speed mode is not selected Green Steady on The speed mode is selected If the speed mode is selected the service port indicator show...

Page 17: ...le 3 3 Table 3 3 Description of service port indicators in different modes Display Mode Color Description default mode Off No link has been established to the port or the port has been shut down Green l Steady on A link is established on the port l Blinking The port is sending or receiving data Speed mode Green l Off The port is not connected or has been shut down l Steady on The port is operating...

Page 18: ... report the running status of the device to the user l Monitoring and maintaining the interface module and switching module on the SCU Switching Module The switching module also called the switching fabric is responsible for packet exchange multicast replication QoS scheduling and access control on the interface module of the SCU The switching module adopts high performance ASIC chips to implement...

Page 19: ...ansmis sion Distance km Standar d Fiber Type SFP FE SX MM1310 SFP optical module 2 100base FX l Fiber mode multimode l Core diameter 50 μm or 62 5 μm l Connector type LC eSFP FE LX SM1310 15 100base LX l Fiber mode single mode l Connector type LC S SFP FE LH40 SM1310 40 100base LX S SFP FE LH80 SM1550 80 100base LX SFP FE LX SM1310 BIDI Bidirectional optical module 15 100base BX SFP FE LX SM1550 B...

Page 20: ...e multimode OM2 l Connector type LC 1 1000base SX l Fiber mode multimode OM3 l Connector type LC SFP GE LX SM1310 10 1000base LX LH l Fiber mode single mode l Connector type LC S SFP GE LH40 SM1310 40 1000base LX LH S SFP GE LH40 SM1550 40 1000base LX LH S SFP GE LH80 SM1550 80 1000base ZX eSFP GE ZX100 SM1550 100 1000base ZX SFP GE LX SM1310 BIDI Bidirectional optical module 10 1000base BX SFP GE...

Page 21: ... SFPGE 1591 1611 CWDM SFPGE 1611 Specificati ons Encapsulation type eSFP Transmission distance 80 km Fiber type single mode LC Standard CWDM Operating temperature 0 C to 70 C l Transmit power 0 dBm to 5 0 dBm l Receiver sensitivity 28 0 dBm l Overload optical power 9 0 dBm l Extinction ratio 8 5 dB Table 3 8 Attributes of DWDM optical modules Center Wavel ength nm Model 1529 55 DWDM SFPGE 1529 55 ...

Page 22: ... 12 1550 92 DWDM SFPGE 1550 92 1551 72 DWDM SFPGE 155 1 72 1552 52 DWDM SFPGE 1552 52 1553 33 DWDM SFPGE 1553 33 1554 13 DWDM SFPGE 1554 13 1554 94 DWDM SFPGE 1554 94 1555 75 DWDM SFPGE 155 5 75 1556 55 DWDM SFPGE 1556 55 1557 36 DWDM SFPGE 1557 36 1558 17 DWDM SFPGE 1558 17 1558 98 DWDM SFPGE 1558 98 1559 79 DWDM SFPGE 155 9 79 1560 61 DWDM SFPGE 1560 61 Specifi cations Encapsulation type eSFP Tr...

Page 23: ... Transmission Distance km Connector Type Standard SFP 1000BaseT 0 1 RJ45 1000Base T S1720 Series Ethernet Switches Product Description 3 Hardware Architecture Issue 01 2014 07 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 18 ...

Page 24: ...is Chapter 4 1 Product Features 4 2 Performance Specifications S1720 Series Ethernet Switches Product Description 4 Product Performance Issue 01 2014 07 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 19 ...

Page 25: ...DP Link Layer Discovery Protocol LLDP Link Layer Discovery Protocol Media Endpoint Discovery LLDP MED Interface isolation and forwarding restriction Broadcast storm suppression VLAN Link type negotiation protocol LNP and multiple access methods such as Access Trunk Hybrid and QinQ Default VLAN VLAN assignment based on interfaces MAC addresses protocols and IP subnets VLAN assignment based on the f...

Page 26: ...g detection ARP Static and dynamic ARP entries RARP ARP in a VLAN Aging of ARP entries Ethernet loop protectio n MSTP STP RSTP MSTP VBST BPDU protection root protection and loop protection TC BPDU attack defense STP loop detection Loopback detect Loop detection on an interface IPv4 IPv6 forwardi ng IPv4 and unicast routes Static IPv4 routes VRF DHCP client DHCP server DHCP relay IPv6 features IPv6...

Page 27: ...Re marking based on traffic classifiers Associating traffic classifiers with traffic behaviors Traffic policing Rate limiting on inbound and outbound interfaces Traffic shaping Traffic shaping based on interfaces and queues Congestion avoidance Tail drop Congestion management Queue mapping Priority Queuing PQ Deficit Round Robin DDR PQ DRR scheduling Weighted Round Robin WRR PQ WRR scheduling Conf...

Page 28: ... and debugging information Electronic labels and command line query and backup Virtual cable test VCT User operation logs Detailed debugging information for network fault diagnosis Network test tools such as traceroute and ping commands Port mirroring flow mirroring and remote mirroring Energy saving Version upgrade Device software loading and online software loading BootROM online upgrade Remote ...

Page 29: ...acks and attacks from packets with invalid TCP flag bits Defense against attacks from many fragments attacks from many packets with offsets attacks from repeated packet fragments Tear Drop attacks Syndrop attacks NewTear attacks Bonk attacks Nesta attacks Rose attacks Fawx attacks Ping of Death attacks and Jolt attacks Defense against TCP SYN flood attacks UDP flood attacks including Fraggle attac...

Page 30: ...es on an interface 8 CAR 8 Kbit s ACL ACLv4 Supports a maximum of 900 inbound and outbound ACLv4 entries ACLv6 Supports a maximum of 900 inbound and outbound ACLv6 entries IP unicast IPv4 Route capacity 32 IPv6 Route capacity 16 Multicast Number of multicast groups on the switch 1K Reliability MSTP Maximum number of MSTIs 64 VBST Number of protected VLANs 128 S1720 Series Ethernet Switches Product...

Page 31: ...cations About This Chapter 5 1 Specifications S1720 Series Ethernet Switches Product Description 5 Technical Specifications Issue 01 2014 07 20 Huawei Proprietary and Confidential Copyright Huawei Technologies Co Ltd 26 ...

Page 32: ... common mode Dimensions W x D x H 442 0 mm x 220 0 mm x 43 6 mm Weight 5 kg AC input voltage Rated voltage range 100 V AC to 240 V AC 50 60 Hz Maximu m voltage range 90 V AC to 264 V AC 47 Hz to 63 Hz Maximum power consumption l S1720 20GFR 4TP 20 7 W l S1720 28GFR 4TP 24 3 W Temper ature Operatin g temperat ure 0 C 45 C at altitude of 0 1800 m NOTE When the altitude is between 1800 m and 5000 m t...

Page 33: ...FR 47 FCC Part 15 Class A l ICES 003 Class A l AS NZS CISPR22 Class A l IEC61000 4 2 l ITU T K 20 l ITU T K 44 Environmental standards l RoHS l REACH l WEEE Safety l IEC 60950 1 l EN 60950 1 A11 A12 l UL 60950 1 l CSA C22 2 No 60950 1 l AS NZS 60950 1 Laser safety l IEC60825 1 l IEC60825 2 l EN60825 1 l EN60825 2 S1720 Series Ethernet Switches Product Description 5 Technical Specifications Issue 0...

Reviews: