Advanced service capabilities

H3C’s S5120V2-LI series switches support broadband Internet access, providing small and medium-sized businesses with Gigabit access network connections and a 10G backbone interface. They support a wide range of features such as Jumbo frames, 802.1X and MAC authentication, port security, Link Aggregation Control Protocol (LACP), 4K VLANs, 16K MAC table addresses, Blackhole MAC addresses, etc., and offer additional functionality such as Layer 2 and Layer 3 port priority mapping, port mirroring and forwarding, port isolation, access control and port rate limiting, as well as a wide range of IPV6 functions, and other capabilities.

IRF2 intelligent fault-tolerant architecture technology

In S5120V2-LI series switches from H3C the technology of intelligent fault-tolerant architecture Intelligent Resilient Framework 2 (IRF2) is implemented. IRF2 provides the following benefits:

Excellent scalability: With IRF2, device aggregation can be plug-and-play by simply adding one or more switches to the stack IRF2 and enabling IRF2 stacking mode on the new device. New devices can be managed through a single shared IP address, allowing software updates to be carried out simultaneously on all devices to reduce network expansion costs.

High reliability: patented IRF2’s 1:N redundancy technology allows each of the slaves in the IRF2 stack to serve as a backup for the master, providing control plane redundancy and data link redundancy, as well as uninterrupted Layer 3 forwarding. This improves reliability and helps avoid interruptions at work and generally improve productivity. If the primary device fails, traffic does not stop.

Load balancing: IRF2 supports aggregation of connections across multiple devices. Connections to upstream and downstream systems can be made through multiple physical links, creating another layer of redundancy and increasing network resource utilization.

Availability: IRF2 technology implemented H3C uses standard Gigabit Ethernet (1GE) or 10 Gigabit Ethernet (10GE) ports and provides bandwidth allocation for service traffic and application access, with intelligent separation of local traffic from traffic to upstream systems. IRF2 rules can be applied not only at the scale of one rack or adjacent racks, but also at the scale of the entire local network.

Comprehensive security policies

H3C’s S5120V2-LI series switches feature an innovative multi-authentication feature on a single port, meaning the authentication modes for access can differ for different clients. For example, some clients are only capable of MAC address authentication (such as printers), some user nodes use 802.1X authentication, and some user nodes can only authenticate access using a web portal. To flexibly adapt to varying network authentication requirements, the S5120V2-LI series switches support multiple authentication on a single port for a unified deployment.

Top threats to network security are ARP attacks and ARP virus hijacking, the S5120V2-LI series switches provide a variety of ARP protection mechanisms, such as ARP discovery to verify client eligibility, ARP packet authentication, and rate limit setting for ARP to prevent ARP flood attacks targeting device processors.

H3C’s S5120V2-LI series switches support End User Authentication (EAD) Admission Domination). When used in conjunction with the iMC (intelligent Management Center) management system, EAD allows you to combine endpoint security policies, such as antivirus and latest updates, with network access control mechanisms and network access rights policies into a single, consistent security system . By validating, isolating, updating, managing, and monitoring endpoint access, EAD enables you to move your network from passive, targeted security to active, end-to-end security, and from isolated to centralized management, enhancing your network’s ability to counter viruses, worms, and other threats. new threats.

Comprehensive quality of service (QoS) management policies

S5120V2-LI series switches support packet filtering on layers 2 through 4, as well as traffic classification based on source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP port numbers, protocol type, and VLAN. They provide flexible port- and queue-based queuing algorithms, including Strict Priority (SP), Weighted Round Robin (WRR), and SP+WRR. The S5120V2-LI series switches allow you to control the guaranteed access rate (CAR) with a minimum step of 8 kbps. The devices support port mirroring for incoming and outgoing traffic to monitor packets on specific ports, as well as packet mirroring per monitoring port for network troubleshooting.

Excellent management capabilities< /h3>

H3C’s S5120V2-LI series switches provide simplified management with SNMPv1/v2/v3 support, allowing management across platforms such as Open View and iMC. Support for switch management via CLI and Telnet further simplifies tasks. The use of SSH 2.0 encryption provides additional security for the switch’s management channel.

Extensive Layer 3 routing capabilities

On the S5120V2 Series switches -LI from H3C supports static routing, as well as RIP, RIPng, OSPF V1/V2/V3 protocols.