Download - Quidway S5300 Series Switches V100R003 Brochures (Eng)

Quidway® S5300 Series Gigabit Switches


1


Quidway S5300 series gigabit switches (hereinafter referred to as the S5300) are a new generation of Ethernet gigabit

switches developed by Huawei to meet the requirements for high-bandwidth access and Ethernet multi-service

convergence. The S5300 can provide powerful Ethernet functions. Based on a new generation of high-performance

hardware and Huawei uniform Versatile Routing Platform (VRP) software, the S5300 features large capacity and

gigabit interfaces of high density, provides 10G uplinks, and meets customers' requirements for the 1G and 10 G

uplink devices of high density. The S5300 can meet the requirements of multiple scenarios such as service convergence

in campus networks and enterprise networks, the access from the gigabit to the IDC, and the access from the gigabit

to the desktop on the enterprise network.

The S5300 is a case-shaped device with a chassis of 1 U high. The S5300 has a standard version (SI) and an enhanced

version (EI). The S5300 of the SI version supports Layer 2 and Layer 3 functions, and the S5300 of the EI version

supports complicated routing protocols and rich service features. The models of the S5300 are as follows:

Product Overview

S5324TP-SI/PWR-SI

S5328C-SI/EI

S5328C-PWR-SI/PWR-EI

S5328C-EI-24S

S5348TP-SI/PWR-SI

S5352C-SI/EI

S5352C-PWR-SI/PWR-EI

2

www.huawei.com

S5324TP-SI: provides twenty-four 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces, and

supports DC or AC power supply.

S5324TP-PWR-SI: provides twenty-four 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces,

and supports AC power supply and POE.

S5348TP-SI: provides forty-eight 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces, and

support DC or AC power supply.

S5348TP-PWR-SI: provides forty-eight 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces,


S5328C-SI: provides twenty-four 10/100/1000Base-T interfaces, four 1000Base-X Combo interfaces, and two 10GE

XFPs or four 1000Base-X SFPs. The S5328C-SI is installed with double hot-swappable power modules.

S5328C-PWR-SI: provides twenty-four 10/100/1000Base-T interfaces, four 1000Base-X Combo interfaces, and

two 10GE XFPs or four 1000Base-X SFPs. The S5328C-PWR-ST is installed with double hot-swappable power modules,


S5352C-SI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The

S5352C-SI is installed with double hot-swappable power modules.

S5352C-PWR-SI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X

SFPs. The S5352C-PWR-SI is installed with double hot-swappable power modules, and supports AC power supply and

POE.

Appearance of the S5300

S5352C-SI/PWR-SI

S5324TP-SI

S5324TP-PWR-SI

S5348TP-SI/PWR-SI

S5328C-SI/PWR-SI

3


S5328C-EI: provides twenty-four 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The

S5328C-EI is installed with double hot-swappable power modules.

S5328C-PWR-EI: provides twenty-four 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X

SFPs. The S5328C-PWR-EI is installed with double hot-swappable power modules, uses the AC power supply, and

supports POE.

S5328C-EI-24S: provides twenty-four 100/1000Base-X SFP interfaces, four 10/100/1000Base-T Combo

interfaces, and two 10GE XFPs or four 1000Base-X SFPs. The S5328C-EI-24S is installed with double hot-swappable

power modules.

S5352C-EI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X SFPs. The

S5352C-EI is installed with double hot-swappable power modules.

S5352C-PWR-EI: provides forty-eight 10/100/1000Base-T interfaces and two 10GE XFPs or four 1000Base-X

SFPs. The S5352C-PWR-EI is installed with double hot-swappable power modules, and supports AC power supply and

POE.

S5328C-EI-24S

S5328C-EI/PWR-EI

S5352C-EI/PWR-EI

4

www.huawei.com

Features of the S5300

Powerful service supportThe S5300 supports the enhanced selective QinQ function. The start of this function does not consume ACL resources. The S5300 can map the CoS value in an inner VLAN tag to an outer VLAN tag or modify the CoS value in an outer VLAN tag. In addition, the S5300 can flexibly mark the QoS classes based on services to meet the requirement for multi-service bearing.

The S5300 supports IGMP snooping, IGMPv3 snooping, IGMP filter, IGMP fast leave, and IGMP proxy. The S5300 supports replication of multicast packets across VLANs at line speed, multicast load balancing among aggregated interfaces, and controllable multicast. Therefore, the S5300 can meet the requirements for IPTV services and other multicast services.

The S5300 supports MCE. It can isolate users of different VPNs, thus ensuring the security of user data and reducing the investment costs of users.

High reliabilityBesides traditional STP, RSTP, and MSTP, the S5300 supports enhanced Ethernet technologies such as Smart Link and RRPP, implements millisecond-level protection switchover for links, and ensures the network quality. In addition, the S5300 provides multi-instance for Smart Link and RRPP and implements load balancing among links, further improving bandwidth utilization.

The S5300 supports BFD and provides millisecond-level detection for protocols such as OSPF, IS-IS, VRRP, and PIM, which improves high reliability of networks.

The S5300 supports dual power supplies for backup, and the AC power and DC power can be input at the same time. Users can select the operation mode of the power supply module, that is, single power supply or dual power supplies, which improves the reliability of devices.

The S5300 supports VRRP, and can set up VRRP backup groups with other Layer 3 switches. The S5300 can set up the backup topology structure in the case of a fault and keeps the continuity and reliability of communications, which effectively ensures the stability of networks. Multiple equal-cost routes can be configured on the S5300 to implement the route redundancy. When the active uplink route is faulty, traffic is automatically switched to a standby route. Thus, multi-level backup is implemented for the uplink routes.

Perfect QoS policies and security mechanismTThe S5300 can implement complex traffic classification based on the information such as the quintuple information, IP preference, ToS, DSCP, IP protocol type, ICMP type, TCP source interface, VLAN ID, the protocol type of an Ethernet frame, and CoS. The S5300 supports the flow-based two rate and three color CAR. Each interface supports eight priority queues and multiple queue scheduling algorithms such as WRR, DRR, SP, WRR+SP, and DRR+SP, which effectively ensures the quality of network services such as voice, video and data services.The S5300 series switches provide multiple security measures to protect user security.The S5300 listens to information about the MAC or IP address of an access user, lease, VLAN ID, and interface by establishing and maintaining a DHCP snooping binding table. In this manner, the problem of locating the IP address and interface of a DHCP user is solved. The S5300 directly discards illegal packets such as ARP spoofing packets and packets with tampered IP addresses that do not match binding entries. In this manner, the S5300 prevents common middleman attacks on campus networks initiated by hackers or attackers by using ARP packets. The trusted interface feature of DHCP snooping is used to ensure the validity of the DHCP server.The S5300 supports strict learning of ARP entries to prevent ARP entries of the S5300 being fully occupied caused by ARP spoofing attacks. In this manner, normal users can access the Internet. The S5300 supports IP source check and

5


prevents DoS attacks caused by bogus illegal addresses for MAC address spoofing and IP address spoofing.The S5300 supports centralized MAC address authentication, 802.1X authentication, and NAC functions; supports dynamic or static binding of user identity elements including the user account, IP address, MAC address, VLAN ID, interface number, and client for antivirus protection; implements dynamic delivery of user policies including VLAN, QoS, and ACL policies.The S5300 supports the source MAC address learning limit based on an interface. In this manner, source MAC address spoofing of users on MAC address entries of the S5300 is prevented and the flooding caused by normal users failing to learn MAC addresses in the MAC address table is prevented.

Easy deployment and no maintenanceThe S5300 is easy to apply and deploy. The S5300 supports automatic configuration, plug-and-play, automatic upgrade, batch upgrade, and remote upgrade, which greatly reduces maintenance costs. The S5300 supports diversified management and maintenance modes such as SNMPv1/v2/v3, CLI, Web network management, and HGMP, which makes device management more flexible. In addition, the S5300 supports NTP, SSHv2.0, TACACS+, RMON, multi-log host, interface-based traffic statistics, and NQA, which helps to better plan and adjust networks.

Rich IPv6 featuresThe S5300 supports the IPv6/IPv6 dual stack, IPv6 over IPv4 tunnels (including manual tunnels, 6to4 tunnels, and ISATAP tunnels), and Layer 3 line-speed forwarding. Therefore, the S5300 can be deployed in IPv4 networks, IPv6 networks, and networks that run IPv4 and IPv6 simultaneously. This makes the networking flexible and meets the requirements for the network transit from IPv4 to IPv6.

The S5300 supports rich IPv6 routing protocols including RIPng and OSPFv3. The S5300 supports the Neighbor Discovery Protocol (NDP) of IPv6, and manages packets exchanged between neighbors. The S5300 supports the Path MTU Discovery (PMTU) mechanism. The S5300 selects a proper MTU on the path from the source to the destination to optimize network resources and obtain maximum throughput.

POEThe S5300 PWR series switches support PoE by configuring the PoE power supply of different power levels. That is, the S5300 provides -48 V DC power supply for remotely connected Powered Devices (PDs) such as the IP phone, VLAN AP, security, and Bluetooth AP through twisted pair cables. In this manner, the S5300 provides the power supply for the remote PDs. As the Power Sourcing Equipment (PSE), the S5300 supports IEEE 802.3af and is compatible with PDs that do not comply with IEEE 802.3af. When the S5300 supplies power to remote PDs, each Ethernet interface of the S5300 provides the power supply with a maximum power supply of 15.4 W for the devices connected to the interfaces. With the PoE and voice VLAN technologies, the S5300 provides a perfect solution to the integration of data and voice.

Good expansibilityThe S5300 series switches support intelligent stacking and plug-and-play. The system starts to construct the stack virtual structure automatically after the stack cables are connected. Stack members are classified into master, slave, and standby devices. After the standby switch is configured, the period of service interruption caused by the failure of the master switch is reduced. The S5300 supports intelligent upgrade. Therefore, the software version of the switch does not need to be changed during stack expansion.The S5300 supports the stack of up to nine devices and the maximum stack bandwidth of 48 Gbit/s.

6

www.huawei.com

Product Specifications

Forwarding

performance36Mpps 36Mpps 66Mpps 66Mpps 72Mpps 72Mpps 102Mpps 102Mpps 66Mpps 66Mpps 66Mpps 102Mpps 102Mpps

Switching

capacity of

interfaces

48Gbps 48Gbps 88Gbps 88Gbps 96Gbps 96Gbps 136Gbps 136Gbps 88Gbps 88Gbps 88Gbps 136Gbps 136Gbps

Switching

capacity of

the backplane

256G

Interface description

The S5324TP-SI/PWR-SI provides twenty-four 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces

The S5348TP-SI/PWR-SI provides forty-eight 10/100/1000Base-T interfaces and four 1000Base-X Combo interfaces

The S5328C-SI/PWR-SI provides twenty-four 10/100/1000Base-T interfaces, four 1000Base-X Combo interfaces, and two 10GE XFPs or four 1000Base-X SFPs

The S5352C-SI/PWR-SI provides forty-eight 10/100/1000Base-T interfaces, and two 10GE XFPs or four 1000Base-X SFPs

The S5328C-EI/PWR-EI provides twenty-four 10/100/1000Base-T interfaces, and two 10GE XFPs or four 1000Base-X SFPs

The S5328C-EI-24S provides twenty-four 100/1000Base-X interfaces, four 10/100/1000Base-T Combo interfaces, and two 10GE XFPs or four 1000Base-X SFPs

The S5352C-EI/PWR-EI provides forty-eight 10/100/1000Base-T interfaces, and two 10GE XFPs or four 1000Base-X SFPs

MAC address table

Complies with IEE P802.17 standards

Supports up to 32K MAC address entries

Supports the automatic learning and aging of MAC addresses

Supports static, dynamic, and blackhole MAC entries

Supports the packet filtering based on source MAC addresses

VLAN

Supports up to 4K VLANs

Supports guest VLANs and voice VLANs

Supports VLANs based on MAC addresses, protocols, IP subnets and policies

Supports 1:1 and N:1 VLAN switching

Supports basic QinQ

Supports selective QinQ

Reliability

Supports the RRPP topology and RRPP multi-instance

Supports the Smart Link tree topology and Smart Link multi-instance and provides the millisecond-level protection

Support BFD for OSPF, BFD for IS-IS, BFD for VRRP, and BFD for PIM

Supports STP, RSTP, and MSTP

Supports BPDU protection, root protection, and loopback protection

IP Routing Supports static route, RIP-1, RIP-2, and ECMPSupports static route, RIP-1, RIP-2, OSPF, IS-IS, BGP, and ECMP

Item S5324TP-SI

S5324TP-PWR-SI

S5328C-SI

S5328C-PWR-SI

S5348TP-SI

S5348TP-PWR-SI

S5352C-SI

S5352C-PWR-SI

S5328C-EI

S5328C-PWR-EI

S5328C-EI-24S

S5352C-EI

S5352C-PWR-EI

S5300-SI S5300-EI

7


S5324TP-SI

S5324TP-PWR-SI

S5328C-SI

S5328C-PWR-SI

S5348TP-SI

S5348TP-PWR-SI

S5352C-SI

S5352C-PWR-SI

S5328C-EI

S5328C-PWR-EI

S5328C-EI-24S

S5352C-EI

S5352C-PWR-EI

S5300-SI S5300-EI

IPv6

Supports Neighbor Discovery (ND)

Supports PMTU

Supports IPv6 Ping, IPv6 Tracert, and IP v6 Telnet

Supports manually configured tunnels

Supports 6to4 tunnels

Supports ISATAP tunnels

Supports ACLs based on the source IPv6 address, destination IPv6 address, Layer 4 interface, or protocol type

Multicast

Supports IGMPv1/v2/v3 snooping and the fast leave mechanism

Supports multicast forwarding within a VLAN and replication of multicast packets across VLANs

Supports multicast load balancing among aggregated interfaces

Supports controllable multicast

Supports interface-based multicast traffic statistics

Supports IGMPv1/v2/v3

Supports IGMPv1/v2/v3 snooping and the fast leave mechanism

Supports multicast forwarding within a VLAN and replication of multicast packets across VLANs

Supports multicast load balancing among aggregated interfaces

Supports controllable multicast

Supports interface-based multicast traffic statistics

Supports IGMPv1/v2/v3, PIM-SM, and PIM-DM

QoS/ACL

Supports the limit on the rate of received and sent packets on interfaces

Supports packet redirection

Supports interface-based traffic policing and two rate and three color CAR

Supports eight queues on each interface

Supports WRR, DRR, SP, WRR+SP, and DRR+SP queue scheduling algorithms

Supports the re-marking of the 802.1p priority and DSCP value of packets

Supports Layer 2 and Layer 4 packet filtering, and invalid frame filtering based on the source MAC address, destination MAC address, source IP address, destination IP address, interface, protocol, and VLAN

Support queue-based rate limit and interface shaping

Item

8

www.huawei.com

Security

Supports hierarchical user management and password protection

Supports defense against DoS and ARP attacks

Supports the binding of the IP address, MAC address, and interface

Supports interface isolation and interface security

Supports blackhole MAC addresses

Supports the limit on the number of MAC addresses to be learned

Supports IEEE 802.1X authentication and the limit on the maximum number of users on an interface

Supports multiple authentication methods including AAA authentication, RADIUS authentication, and TACACS+ authentication

Supports SSH v2.0

Supports CPU protection

Management and

maintenance

Supports MFF

Supports the virtual cable test

Supports Ethernet OAM (802.3ah and 802.1ag)

Supports interface mirroring and RSPAN

Supports remote configuration and maintenance through Telnet

Supports SNMPv1/v2/v3

Supports RMON

Supports iManager network management system

Supports HGMP

Supports the system log and hierarchical alarmEnvironmental requirements

Temperature: 0°C to 50°C; relative humidity: 10% to 90% (non-condensing)

Input voltage

AC:

Rated voltage: 100 V to 240 V AC; 50/60 Hz

Maximum voltage: 90 V to 264 V AC; 50/60 Hz

DC:

Rated voltage: –48 V to –60 V DC

Maximum voltage: –36 V to –72 V DC

Dimensions (W x D x H)

442×220×43.6 442×420×43.6

Power consumption

40W

Switch: 455W

PoE: 370W

65W

Switch: 466W

PoE: 370W

84.2W

Swithch: 907W

PoE: 740W

85.2W

Switch: 917W

PoE: 740W

63W

Switch: 472W

PoE: 370W

62W 91W

Switch: 930W

PoE：740W

S5324TP-SI

S5324TP-PWR-SI

S5328C-SI

S5328C-PWR-SI

S5348TP-SI

S5348TP-PWR-SI

S5352C-SI

S5352C-PWR-SI

S5328C-EI

S5328C-PWR-EI

S5328C-EI-24S

S5352C-EI

S5352C-PWR-EI

S5300-SI S5300-EIItem

9


Order InformationOrder information of S5300 series Ethernet switches

LS-5324TP-SI-AC For the S5324TP-SI-AC, the input voltage is 220 V AC.LS-5324TP-SI-DC For the S5324TP-SI-DC, the input voltage is –48 V DC.

LS-5324TP-PWR-SI For the S5324TP-PWR-SI, that supports PoE, the input voltage is 220 V AC.

LS-5328C-SIFor the S5328C-SI that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.

LS-5328C-EIFor the S5328C-EI that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.

LS-5328C-PWR-SI For the S5328C-PWR-SI that supports PoE, the input voltage is 220 V AC.

LS-5328C-PWR-EIFor the S5328C-PWR-EI that is installed with double power modules and supports PoE, the input voltage is 220 V AC.

LS-5328C-EI-24SFor the S5328C-EI-24S that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.

LS-5348TP-SI-AC For the S5348TP-SI-AC, the input voltage is 220 V AC.LS-5348TP-SI-DC For the S5348TP-SI-DC, the input voltage is –48 V DC.

LS-5348TP-PWR-SI For the S5348TP-PWR-SI that supports PoE, the input voltage is 220 V AC.

LS-5352C-SIFor the S5352C-SI that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.

LS-5352C-EIFor the S5352C-EI that is installed with double power modules, the input voltage is 220 V AC or –48 V DC.

LS-5352C-PWR-SI For the S5352C-PWR-SI that supports PoE, the input voltage is 220 V AC.

LS-5352C-PWR-EIFor the S5352C-PWR-EI that is installed with double power modules and supports PoE, the input voltage is 220 V AC.

For more information, visit www.huawei.com or contact the Huawei local sale office.

Model Description

10

Trademarks Notice , HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.

Other trademarks, product, service and company names mentioned are the property of their respective owners.

NO WARRANTYTHE CONTENTS OF THIS MANUAL ARE PROVIDED “AS IS”. EXCEPT AS REQUIRED BY APPLICABLE LAWS, NO WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE MADE IN RELATION TO THE ACCURACY, RELIABILITY OR CONTENTS OF THIS MANUAL.

2009

20090325