H3C S7500X-G series is a family of high-end multiservice routing switches intended for multiservice networks. It runs an operating system that boasts virtualization technologies such as Intelligent Resilient Framework 2 (IRF 2) and is fully compatible with 40G/100G Ethernet standards. It uses MPUs in redundancy and delivers a variety of high-availability features such as NSF, ISSU, graceful restart, and RRPP. Along with improved performance and efficiency, it maximizes the system uptime, significantly reducing the TCO for customers.
H3C S7500X-G series includes the S7510X-G, S7506X-G, S7503X-G, and S7503X-M-G models. These models can be used in various network environments such as metropolitan area networks and campus network core and aggregation layers, to deliver customers a wide range of solutions, including the security and switching integrated solution and wired and wireless unified solution.
With the IRF 2 technology embedded in the operating system, H3C S7500X-G keeps pace with the continually evolving data center technologies. IRF 2 virtualizes multiple physical devices at the same layer into one virtual fabric to provide data center class availability and scalability. IRF virtualization technology offers processing power, interaction, unified management, and uninterrupted maintenance of multiple devices.
IRF 2 has not only become the main technology to improve performance and enable virtualization for data center switching devices but also increases the profit margins of customers thanks to the high service availability and uninterrupted upgrade and scaling it brings to traditional network applications.
IRF2 can be implemented over a distance of 80 km (49.71 miles) by using ordinary 10-GE optical fibers.
H3C S7500X-G supports IPv4/IPv6 dual stack, multiple IPv6 transition tunneling technologies, and IPv4/IPv6 multicast technologies, and can provides users with complete IPv4/IPv6 solutions.
With a distributed architecture, H3C S7500X-G can achieve wire-speed non-blocking forwarding of IPv4/IPv6 services, with slot bandwidth up to 960Gbps on S7503X-G and S7510X-G/S7510X-G-PoE, 640Gbps on S7506X-G/S7506X-G-PoE.
H3C S7500X-G has passed the IPv6 network access certification and is a mature commercial IPv6 product.
H3C S7500X-G is integrated with a wireless control module to delivers rich services, including refined user control and management, complete RF management and security control, fast roaming, outstanding QoS capability, and IPv6. The module can collaborate with a security policy server to control endpoint access, which enhances entire network security.
H3C S7500X-G adopts a chip design that supports access controller functions, providing customers with more options for building wired and wireless integrated networks.
With a great portal authentication capacity, H3C S7500X-G can be used as an EAD gateway to provide EAD security authentication on a LAN with thousands of users. It can also provide portal authentication for authentication and accounting in the dormitory area in a medium- to large-sized campus network while delivering aggregation and core device services simultaneously.
H3C S7500X-G supports a variety of access authentication methods, and can be used as an authentication gateway to provide security authentication on a LAN with thousands of users. It provides basic network architecture for BYOD mobile office solution, convenient for you to expand BYOD applications such as mobile ERP, OA, and UC&C.
H3C S7500X-G provides security assurance on all the three planes: control, management, and forwarding planes.
Control plane—The embedded protocol packet attack recognition module prevents attacks from Topology Change Notification (TCN), Address Resolution Protocol (ARP), and other protocol packets. Use of the MD5 algorithm for the OSPF/BGP/IS-IS routing protocols prevents network breakdown caused by illegitimate route update packets.
Management plane—Use of SNMPv3, SSHv2, 802.1X and AAA/RADIUS user authentication, role-based user permission management ensures device access and management security.
Forwarding plane—By binding IP address, VLAN ID, MAC address, port number, and any combinations of them and using uRPF that prevents illegitimate traffic from accessing the network and longest matching packet-by-packet forwarding, the forwarding plane can effectively defend against virus attacks.
The switch offers strong ACL power. It supports:
Standard and extended ACLs.
VLAN-based ACLs, which facilities user configuration and saves ACL resources.
ACLs in both the inbound and outbound directions, well-suited for industries such as finance that have strict access control requirements.
The design of H3C S7500X-G eliminates single point of failures.
All critical parts, including the MPUs, power supplies, and fan trays, are used in redundancy.
The passive backplane eliminates single point of failures in the chassis.
All modules and power supplies are hot swappable.
H3C S7500X-G series can operate in extreme environment reliably for a long time, with a carrier-grade reliability of 99.999%.
H3C S7500X-G provides the following features to enable multiple services to run reliably and simultaneously without stop:
NSF and graceful restart, enabling millisecond-level service switching.
ECMP load balancing to load balance and provide redundancy for services over equal cost routes.
Rapid Ring Protection Protocol (RRPP) for Ethernet rings.
Smart Link to ensure millisecond service switchover between dual uplinks.
IRF 2 can virtualize multiple S7500X-G switches into one virtual fabric that can be used and configured as one device but offers the combined port quantity and switching capacity of the virtualized devices. The devices on the IRF fabric back up each other, which enhances the system availability and enables millisecond-level link convergence.
IRF 2 simplifies the management process, reduces management costs, and allows smooth network scaling as needed. Employing rich hardware-based OAM fault detection features, it can detect link faults within milliseconds.
Multi-chassis link aggregation (MLAG, originated from DRNI) virtualizes two physical devices into a logical device at the forwarding plane while keeping separation of the device control planes, taking the benefits of link aggregation from the card level to the device level.
