3C S5590-EI series switches are a new generation of high-performance, high-port density, high-security Layer 3 Ethernet switches developed by H3C Technology Co., Ltd. (hereinafter referred to as H3C) using industry-leading ASIC technology, supporting IPv4/IPV6 Dual-stack management and forwarding, support static routing protocols and routing protocols such as RIP, OSPF, BGP, ISIS, etc., and support rich management and security features. It is a Gigabit Layer 3 Ethernet switch product for converged service networks.
H3C S5590-EI switches series includes the following models:
S5590-28T8XC-EI: 28 x 10/100/1000BASE-T ports, 4 x 100/1000BASE-X SFP Combo ports, 8 x 10G/1G BASE-X SFP+ ports, 1 x expansion slot, 2 x fan tray slots, 2 x power supply slots;
S5590-48T4XC-EI: 48 x 10/100/1000BASE-T ports, 4 x 10G/1G BASE-X SFP+ ports, 1 x expansion slot, 2 x fan tray slots, 2 x power supply slots;
S5590-28S8XC-EI: 28 x 100/1000BASE-X SFP ports, 4 x 10/100/1000BASE-T Combo ports, 8 x 10G/1G BASE-X SFP+ ports, 1 x expansion slot, 2 x fan tray slots, 2 x power supply slots;
S5590-48S4XC-EI: 48 x 100/1000BASE-X SFP ports, 4 x 10G/1G BASE-X SFP+ ports, 1 x expansion slot, 2 x fan tray slots, 2 x power supply slots;
S5590-28P8XC-EI: 28 x 10/100/1000BASE-T ports (PoE+), 4 x 100/1000BASE-X SFP Combo ports, 8 x 10G/1G BASE-X SFP+ ports, 1 x expansion slot, 2 x fan tray slots, 2 x power supply slots;
S5590-48P6XC-EI: 48*10/100/1000BASE-T ports (PoE+), 6*10G/1G BASE-X SFP+ ports, 1 × expansion slot, 2 × fan tray slots, 2 × power supply slots;
As the network scale increases, a large number of access devices are required at the network edge, which makes the management of these devices very cumbersome. The main purpose of SmartMC is to solve the problem of centralized management of a large number of scattered network devices. It is designed to solve the switch-based operation and maintenance tasks of small enterprises. SmartMC provides unified operation, maintenance, and management of the network by built-in graphical operation platform.
SmartMC simplifies the operation, maintenance, and management of Small and Medium-sized network:
Smart management: includes device role selection, FTP server configuration, global configuration, and network management port configuration, etc.
Intelligent operation and maintenance: include group management, equipment, or group upgrade backup, monitoring and equipment failure replacement, etc.
Visualization: includes networking topology visualization and management, device list display, device ports display, etc.
Smart business: includes user management, etc. After network access users are created and successfully activated, these users can access the SmartMC network through the one-key-armed port.
The H3C S5590-EI series switches can be used as the management device of SmartMC. You can log in to the SmartMC network through the S5590-EI to manage the entire network in a unified manner.
Based on H3C's Open Service Architecture (OAA), H3C S5590-EI series switches can not only provide the functions of traditional switches, but also integrate security module cards including FW, IPS, and load balancing, mini-iMC cards, and Eagle Vision cards. etc., making the S5590-EI series switches a converged multi-service bearing platform.
H3C S5590-EI series switches implement a hardware-based IPv4/IPv6 dual-stack platform, support multiple tunnel technologies, rich IPv4 and IPv6 Layer 3 routing protocols, multicast technologies and policy routing mechanisms, providing users with complete IPv4/IPv6 solution.
H3C S5590-EI series switches support IRF2 (Second Generation Intelligent Resilient Architecture) technology, which is to connect multiple physical devices to each other to make it virtual as a logical device, users can regard these multiple devices as one Manage and use a single device. IRF can bring the following benefits to users:
Simplified management: IRF architecture is formed, it can be connected to any port of any device to log in to a unified logical device. By configuring a single device, it can manage the entire intelligent elastic system and all member devices in the system. There is no need to physically connect to each member device to configure and manage them individually.
Simplified service: IRF are also run as a single device. For example, the routing protocol will be calculated as a single device. With the application of the cross-device link aggregation technology, it can replace the original generation tree protocol, which saves the interaction of a large number of protocol packets between devices, simplifies network operation, and shortens the convergence time when the network is turbulent.
Elastic expansion: can realize elastic expansion according to user needs and ensure user investment. And new devices can be "hot-swapped" when they join or leave the IRF architecture, without affecting the normal operation of other devices.
High reliability: high reliability IRF is reflected in three aspects: link, equipment and protocol. The physical ports between member devices support the aggregation function, and the physical connection between the IRF system and the upper and lower-layer devices also supports the aggregation function, which improves the reliability of the link through multi-link backup; the IRF system consists of multiple member devices. Once the master device fails, the system will quickly and automatically elect a new master to ensure uninterrupted services through the system, thus realizing device-level 1:N backup; the IRF system will have a real-time protocol hot backup function responsible for the configuration information of the protocol. Backup to all other member devices to achieve 1:N protocol reliability.
High performance: For high-end switches, the increase in performance and port density is limited by the hardware structure. The performance and port density of an IRF system is the sum of the performance and port numbers of all devices inside the IRF. Therefore, the IRF technology can easily expand the switching capability of the device and the density of user ports several times, thereby greatly improving the performance of the device.
H3C S5590-EI series switches support the EAD ( terminal access control ) function, and cooperate with the background system to integrate terminal security measures such as terminal antivirus and patch repair with network security measures such as network access control and access authority control into a linked security The system, through the inspection, isolation, repair, management and monitoring of network access terminals, makes the entire network change from passive defense to active defense, from single-point defense to comprehensive defense, and from decentralized management to centralized policy management. , worms and other emerging security threats overall defense capabilities.
H3C S5590-EI series switches support centralized MAC address authentication, 802.1x authentication, support dynamic or static binding of user identification elements such as user account, IP, MAC, VLAN, and port, and implement user policies (VLAN, QoS, ACL) dynamic distribution; support with H3C's iMC system for real-time management of online users, timely diagnosis and disintegration of illegal network behavior.
H3C S5590-EI series switches provide enhanced ACL control logic, support large-capacity ingress and egress port ACLs, and support VLAN-based ACL delivery, which simplifies the user configuration process and avoids waste of ACL resources. In addition, H3C S5590-EI series switches will also support unicast reverse path finding technology (uRPF). The route between the interface and the source address specified in the packet is to verify its authenticity. If it does not exist, the packet is deleted, so that we can effectively prevent the source address spoofing that is increasingly flooding in the network.
MACsec is an ideal hop-by-hop link-layer security protocol for Ethernet networks, which are typically insecure. It provides the following services:
Data encryption: Encrypts data over the Ethernet link to protect data against security issues such as eavesdropping.
Antireplay: Prevents packets from being intercepted and modified en route to protect the network against unauthorized access.
Tampering protection: prevents packet tampering to protect data integrity.
MACsec supports the following deployments:
Client-oriented: Protects data transmission over the link between the client and its access device.
Device-oriented mode: Protects data transmission over the link between two peering devices.
H3C S5590-EI series switches support all ports upgraded MACsec encryption technology and use 256-bit encryption algorithm to further improve data security. All ports of the device provide 256-bit MACsec encryption to ensure data security.
H3C S5590-EI series switches support the 1588V2 function to meet the high-precision time synchronization requirements between network devices. Compared with GPS time synchronization with the same precision, it improves security and lowers deployment costs.
H3C S5590-EI series switches support iNQA. iNQA provides the following benefits:
True measurement results—iNQA measures the service packets directly to calculate packet loss results, thus reflecting the real network quality.
Wide application range—Applicable to Layer 2 network and Layer 3 IP network. iNQA supports the network-level and direct link measurement flexibly.
Fast fault location—iNQA obtains the packet loss time, packet loss location, and number of lost packets in real time.
Applicable to different applications—You can apply iNQA to multiple scenarios, such as point-to-point, point-to-multipoint, and multipoint-to-multipoint.
H3C S5590-EI series switches support M-LAG, which enables links of multiple switches to aggregate into one to implement device-level link backup. M-LAG is applicable to servers dual-homed to a pair of access devices for node redundancy.
Streamlined topology: M-LAG simplifies the network topology and spanning tree configuration by virtualizing two physical devices into one logical device.
Independent upgrading: The DR member devices can be upgraded independently one by one to minimize the impact on traffic forwarding.
High availability: The DR system uses a keepalive link to detect multi-active collision to ensure that only one member device forwards traffic after a DR system splits.
H3C S5590-EI series switches support Telemetry technology, which can send the switch's real-time resource information and alarm information to the O&M platform through the gRPC protocol.
The platform can realize network quality backtracking, troubleshooting, risk early warning, architecture optimization and other functions to accurately guarantee user experience by analyzing real-time data.
