Huawei: Quidway Full Series Ethernet Routing Switches

HUAWEI
T e c h n o l o g i e s
Quidway Full Series Ethernet

Routing Switches
HUAWEI
•
q~ÄäÉ=çÑ=ÅçåíÉåíë=N
Quidway S2000-EI Series Intelligent Layer 2
Ethernet Switches ........................................... 1
Quidway S3026G/T/C Intelligent Layer 2 Ethernet
Switches .......................................................... 9
Quidway S3026C-PWR Intelligent PoE Switch
...................................................................... 17
Quidway S3050C Intelligent Layer2 Ethernet
Switch ............................................................ 25
Quidway S3528G/P S3552G/P S3552F Intelligent
Routing Switches .......................................... 33
Quidway S3526C Intelligent Routing Switch
...................................................................... 41
•
q~ÄäÉ=çÑ=ÅçåíÉåíë=O
Quidway S3900 Series Intelligent Routing
Switches .................................................. 49
Quidway S5000 Series Gigabit Intelligent
Switches .................................................. 53
Quidway S5516 Gigabit Routing Switch
................................................................ 57
Quidway S6500 Series Gigabit Routing
Switches .................................................. 61
Quidway S8016 Multi-service Backbone
Routing Ethernet Switch.......................... 65
Quidway S8500 Series 10G Core Routing
Switches .................................................. 73
Quidway S2000-EI Series Intelligent
Layer 2 Ethernet Switches
Introduction
Quidway S2000-EI Series Ethernet Switches are Layer 2 (L2) wire speed products intended for the use in a network
environment where high performance, high port density, and ease of installation are required. They are intelligent and can
accept network management. The series include S2008-EI,S2016-EI and S2403H-EI.The S2000-EI series can be used in
broadband Internet access, enterprise or campus network and multicast services, such as multicast audio/video and
H U A W E I
VoD.
T E C H N O L O G I E S
Quidway S2008-EI
Quidway S2016-EI
1
Quidway S2403H-EI
Product Features
Abundant Interface Modules: Flexible Network Connectivity, with simple adaptation to network changes;
Link Aggregation: The S2000-EI series support link aggregation to meet increased traffic needs without the need to
purchase new equipment saving on CAPEX costs, Maintains service quality; and this series products support up to four
aggregation groups, each comprising up to eight fixed ports;
Packet Storm Suppression: All ports support unicast, multicast, and broadcast storm suppression based on
bandwidth ratio, easy to control the storm, preventing disruption of network;
High reliability: The S2000-EI series intelligent L2 switch supports STP/RSTP (Spanning Tree Protocol/Rapid
Spanning Tree Protocol). Thus the redundancy backup and error tolerance capability of the link can be greatly improved to
guarantee the network stability;
Multiple Management Tools: Local and remote control like: CLI, Telnet, SNMP, RMON, Huawei Quidview NMS
WEB network management, system log, and hierarchical alarms, Easy to manage, maintain and use reducing OAM cost
overheads;
Multiple QOS functions: Bandwidth Control (based on port, MAC address), Priority (based on VLAN port, 802.1p,
and COS settings according to traffic classification), 802.1P and DSCP preference, 4 priority queues on each port , Queue
2
scheduling: WRR (Weighted Round Robin), HQ-WRR (High Queue-WRR), Guarantee's for SLA's, provides increased
customer/user satisfaction, enables differentiation of service;
High Security Features: Hierarchical user management and password protection, 802.1 X authentications and
packet filtering, prevents unauthorized accessing the network, keeping customer information safe;
Extensive Remote Test and Diagnostic features: Simple troubleshooting provides quick and efficient
resolution to problems reducing OPEXs;
H U A W E I
HGMP Huawei Cluster management: you can use the Huawei Group Management Protocol (HGMP), a L2
protocol of Huawei, to manage and configure your switches and transfer configuration responses.
3
Specifications
Software Specifications
Wire speed L2 switching Wire speed forwarding on all ports
Switching capacity:
S2008-EI: 6.4 Gbps
S2016-EI: 6.4Gbps
S2403H-EI: 9.6 Gbps
Packet forwarding rate:
S2008-EI: 1.19 Mpps
S2016-EI: 2.53 Mpps
S2403H-EI: 3.87 Mpps
Switching mode Store and Forward
VLAN Supports up to 512 VLANs (Virtual Local Area Networks) based on IEEE
802.1Q standard
Supports port-based VLAN
Supports GVRP (GARP VLAN Registration Protocol)
Support Isolate-user-vlan
Multicast GMRP (GARP Multicast Registration Protocol)
IGMP(Internet Group Management Protocol) Snooping
STP /RSTP Support the spanning tree protocol and the rapid tree spanning tree protocol
Compliant with IEEE 802.1D and IEEE 802.1w
Link aggregation Up to 4 aggregation groups, each containing up to 8 ports
Broadcast storm suppression Bandwidth ratio-based suppression on all ports
Port mirroring One-to-many port mirroring, that is, one monitoring port to multiple mirrored
ports (no restriction)
MAC address table Address self-learning
IEEE 802.1D standard
Up to 4 K MAC addresses
Flow control IEEE 802.3x flow control (full duplex)
Back-pressure based flow control (half duplex)
Download and upgrade Supports X-Modem protocol to implement upgrade
4
Supports FTP and TFTP to implement upgrade
Management Command Line Interface (CLI) configuration
Remote configuration through Telnet
Configuration through the Console port
Simple Network Management Protocol (SNMP)
Remote Monitor (RMON) 1, 2, 3 and 9 groups of MIB
Huawei Quidview Network Management System (NMS)
HGMPv2
H U A W E I
System log
Alarms of hierarchy
Maintenance Supports debugging output
Supports PING and Tracert
Supports remote maintenance through Telnet
QoS Supports bandwidth control (based on port, MAC address, etc)
Supports 802.1p priority (based on port or MAC address) and DSCP
(Differentiated Services Code Point) priority
Bi-directional (outbound and inbound) port rate limitation, with a packet
rate-limiting level in the range 1 to 127: The rate-limiting granularity is 64 kbps
in the range 1 to 28 and 1 Mbps in the range 29 to 127
Provides 4 priority queues on each port
Queue scheduling: Supports PQ (Priority Queuing), WRR (Weighted Round
Robin)
Security features Hierarchical user management and password protection
Port-based and MAC-based 802.1X authentication
Supports RADIUS (Remote Authentication Dial-In User Service)
Remote power supply DC-powered S2016-EI can be the PD device of PoE
5
Hardware Specifications
Description S2008-EI S2016-EI S2403H-EI
Fixed ports 8 x 10/100 Mbps Ethernet 16 x 10/100 Mbps Ethernet 25 x 10/100 Mbps Ethernet
electrical ports electrical ports electrical ports
1 Console port 1 Console port 1 Console port
Quantity of expansion slot(s) 0 1 1
Interface module options None 100Base-FX single 100Base-FX single
mode/multi-mode module, mode/multi-mode module,
100Base-FX single 100Base-FX single
medium-haul optical medium-haul module
interface module,
100Base-T PoE interface
module
Switching capacity(bps) 6.4G 6.4G 9.6G
Forwarding capability (PPS) 1.19M 2.53M 3.87M
SDRAM 32M 32M 32M
FLASH 4M 4M 4M
Dimensions (W X H X D) 216mm X 40mm X 117mm 436mm X 42mm X 200mm 436mm X 42mm X 240mm
weight <3kg 3kg 3kg
Power supply The external power supply AC:
compliant with the following Rated voltage:100 - 240V AC.; 50/60 Hz
specifications: Max. tolerance:90 - 264 V AC.; 50/60 Hz
Input rated voltage: DC:
100 - 240 V AC.; 50/60 Hz Rated voltage:-48 to -60 V DC
Max. input tolerance: Max. Tolerance: -36 to -72 V DC
90 - 264 V AC.; 50/60 Hz
Output voltage: 12 V d.c S2008-EI only AC
Output current: 1A
Power 8W 12W 15W
Operating Temperature 0°C to 45°C
Humidity 10% - 90%, non-condensing
6
Modules
S2008-EI:
8 fixed 10/100Base-TX auto-negotiation electrical ports and 1 Console port.
S2016-EI:
16 fixed 10/100Base-TX auto-negotiation electrical ports, 1 expansion slot, and 1 Console port.
supports the following interface modules:
• 1-port 100Base-FX single mode module;
H U A W E I
• 1-port 100Base-FX single mode medium-haul module;
• 1-port 100Base-FX multi-mode module;
• 1-port 100Base-T PoE electrical interface module.
S2403H-EI:
25 fixed 10/100Base-TX auto-negotiation electrical ports, 1 expansion slot, and 1 Console port.
supports the following interface modules:
• 1-port 100Base-FX single mode module;
• 1-port 100Base-FX single mode medium-haul module;
• 1-port 100Base-FX multi-mode module.
7
Applications
S2000-EI series support the following services:
• Internet broadband access;
• Networking of enterprise network and campus network;
• Deliver multicast service, multicast audio/video services.
8
Quidway S3026G/T/C Intelligent
Layer 2 Ethernet Switches
Introduction
Quidway S3026G/T/C Ethernet Switches are box-type intelligent layer 2 wire-speed products with 10/100M aggregation
in service provider data centers, metropolitan area networks and wiring closets. Quidway S3026G/T/C Intelligent Layer 2
series Ethernet switches contain three types: S3026G, S3026T and S3026C which provide small frame, additional
H U A W E I
features and redundant power supply (RPS) interface.
Quidway S3026G
Quidway S3026C
9
Quidway S3026T
Product Features
Link Aggregation: Support link aggregation to meet increased traffic needs without the need to purchase new
equipment saving on CAPEX costs, Maintains service quality;
Multiple Management Tools: Local and remote control like: CLI, Telnet, SNMP, RMON, WEB network management,
system log, and hierarchical alarms, Easy to manage, maintain and use reducing OAM cost overheads;
Multiple QOS functions: Bandwidth Control (based on port, MAC address), Priority (based on port or MAC address),
802.1P and DSCP preference, 4 priority queues on each port , Queue scheduling: PQ (Priority Queuing), WRR (Weighted
Round Robin), Delay bounded WRR, Guarantee's for SLA's, provides increased customer/user satisfaction, enables
differentiation of service and ensures that delay sensitive traffic is prioritized;
Extensive Security Features: Such as L2-L7 Access Control Lists, VLANs, Prevents unauthorized accessing the
network, keeping customer information safe;
10
802.1x Server Support: Cost Savings as additional equipment not required;
HGMP Huawei Cluster management: Saves IP address, simplifying OAM, Cost savings in the reduction of
high-end or convergence products.
H U A W E I
11
Specifications
Wire speed L2 switching All the ports support wire speed forwarding
12.8Gbps switching capacity
Forwarding packets rate 6.55Mpps
802.1Q standard
STP /RSTP/MSTP Supports STP and RSTP and MSTP
Link aggregation Supports up to 6 groups of FE port aggregation at most and each group can
contain up to eight FE ports
Supports the aggregation of up to two GE ports
Packet storm suppression All the ports support the unicast, multicast, and broadcast storm suppression
based on bandwidth ratio
Supports up to 8K MAC address
Management Supports the Command Line Interface (CLI) configuration
Supports remote configuration through Telnet
Supports configuration via the Console port
Supports SNMP (Simple Network Management Protocol)
Supports RMON (Remote monitor) 1, 2, 3 and 9 groups of MIB
Supports Huawei Quidview Network Management System
Supports WEB network management
Supports system log
Supports hierarchical alarm
12
Supports HGMP V2
Supports HGMP V1 Server
Supports remote dial through Modem
Supports SSH
Supports HGMP V2
H U A W E I
Supports priority (based on port or MAC address), supports 802.1P and DSCP
preference
Queue scheduling: Supports PQ (Priority Queueing), WRR (Weighted Round
Robin), Delay bounded WRR
IEEE 802.1X authentication
Supports packet filtering
13
Description S3026G/T/C
Processor MIPS 150MHz
SDRAM 64M
FLASH 8M
Buffer RAM 32M
Switching Capacity 12.8Gbps
Forwarding Capacity 6.55Mpps
Dimension(W X H X D) 436mm X 42mm X 245mm
Input voltage DC: -40V ~ -60V
AC: 100 ~ 240V
RPS
Power 30 W
Max attitude 4000m
14
Modules
S3026G:
24 10/100Base-T ports; 1 RS232 local management interface(RJ45); 2 GBIC slots, supports:
• GBIC 1000Base-T module(100m,RJ45);
• GBIC 1000Base-T module(100m,RJ45);
• GBIC multi mode optical module (850nm, 550m, SC) ;
• GBIC single mode optical module (1310nm, 10km, SC) ;
H U A W E I
• GBIC single mode optical module (1550nm, 40km,SC) ;
• GBIC single mode optical module (1550nm, 100km, SC);
• 1000Base-T stack module.
S3026T:
24 10/100Base-T ports; 1 RS232 local management interface(RJ45); 2 10/100/1000BASE-T ports.
S3026C:
24 10/100Base-T ports; 1 RS232 local management interface(RJ45); 2 module slots, supports:
• 1-port 1000Base-T module;
• 1-port 1000Base-SX(500m)/LX(10km)/LH(40km)/ZX(70km) interface module;
• 1-port 100Base-FX SM interface module;
• 1-port 100Base-FX MM interface module ;
• 1-port stack module.
15
Applications
S3026G/T/C support the following services:
• Broadband Residential Area Ethernet Switch;
• Networking for Campus and Enterprise Network.
16
Quidway S3026C-PWR
Intelligent PoE Switch
Introduction
Quidway S3026C-PWR PoE Switch a stackable, L2 wire-speed and 24-ports 10/100 PoE Ethernet switch in service
provider data centers, metropolitan area networks and wiring closets. The S3026C-PWR can supply -48V DC power via
the Ethernet twisted pair cable to the remotely-attached powered device (PD).
H U A W E I
Quidway S3026C-PWR
Product Features
Link Aggregation: Supports link aggregation to meet increased traffic needs without the need to purchase new
equipment saving on CAPEX costs, Maintains service quality;
Round Robin), Delay bounded WRR, Guarantee's for SLA's, provides increased customer/user satisfaction, enables dif-
ferentiation of service and ensures that delay sensitive traffic is prioritized;
17
Extensive Security Features: Such as L2-L7 Access Control Lists, VLANs, Prevents unauthorized accessing the
Specifications
Forwarding packets rate 6.55Mpps
VLAN Supports up to 256 VLANs (Virtual Local Area Networks) based on IEEE 802.1Q
standard
Supports 4K VLAN Transparent Transfer
Supports Isolate-user-vlan
STP /RSTP/MSTP Supports STP and RSTP and MSTP
Supports the aggregation of up to two GE ports.
based on bandwidth ratio.
18
H U A W E I
Supports system log
Supports HGMP V2
Supports SSH
Supports HGMP V2
preference
Queue scheduling: Supports PQ (Priority Queueing), WRR (Weighted Round
IEEE 802.1X authentication
19
Description S3026C-PWR
SDRAM 64M
FLASH 8M
Buffer RAM 32M
Input voltage DC: -40V ~ -60V
AC: 100 ~ 240V
RPS
PoE -48V output voltage and 15.4W per port of 10/100M
160W of Maximum output power, or 280W of Maximum
output power with RPS
compliant with IEEE802.3af
supply Maximum 24 device with the maximum distance 100m
Power 30 W
Max attitude 4000m
Modules
24 10/100Base-T ports; 1 RS232 local management interface(RJ45); 2 module slots, each
supports:
• 1-port 1000Base-T module;
• 1-port stack module
Applications
• S3026C-PWR supports the following services:
• Broadband Residential Area Ethernet Switch;
• Networking for Campus and Enterprise Network.
20
Quidway S3050C Intelligent
Layer2 Ethernet Switch
Introduction
Quidway S3050C Ethernet Switch is box-type layer 2 wire speed products which can be managed over the network. It
provided 48 10/100M auto-sensing ports and two optional slots which support versatile uplinks and is specifically
designed for network environments requiring cost effective, high port density, high performance, and easy installation
solutions.
H U A W E I
Quidway S3050C
Product Features
High Density: Up to 48 10/100 Base-T ports saving on space and power;
Link Aggregation: Support link aggregation to meet increased traffic needs without the need to purchase new equipment
saving on CAPEX costs, Maintains service quality;
21
High Security Features: Hierarchical user management and password protection 802.1X authentication and
packet filtering, Prevents unauthorized accessing the network, keeping customer information safe;
Huawei Primary VLAN: PVLAN (Primary VLAN) saves VLAN resources and provides User isolation;
Specifications
The switching capacity reaches 18.5Gbps
Forward packets at the speed of 10.13Mpps
802.1Q standard
STP/RSTP Supports STP and RSTP and conforming to IEEE802.1D and IEEE 802.1w
Supports the aggregation of up to 2 GE ports
based on bandwidth ratio
22
Supports system log
Supports HGMP V2
Supports SSH
H U A W E I
Supports HGMP V2
preference
Queue scheduling: Supports PQ (Priority Queuing), WRR (Weighted Round
802.1X authentication
23
Description S3050C
SDRAM 64M
FLASH 8M
Buffer RAM 32M
Input voltage DC : -40V ~ -60V
AC : 100 ~ 240V
RPS
Power 55W
Max attitude 4000m
Modules
S3050C:
48 10/100Base-T ports; 1 RS232 local management interface(RJ45); 2 module slots, support:
• 1-port 1000Base-T interface module;
• 1-port stack module.
Applications
S3050C supports the following services:
• Small and Medium sized Enterprise Networks;
• Residential Area with Broadband Access;
• Large Scale Enterprises and Campus Networks.
24
Quidway S3528G/P S3552G/P S3552F
Intelligent Routing Switches
Introduction
Quidway S3552G / S3552P/ S3552F /S3528G and S3528P Ethernet Switches are layer 3 wire-speed products. This
intelligent switch series, which can be managed over the network, is designed specially for the network environment
requiring high performance, high port density and easy installation and adapts for MAN, enterprise network, campus
network and broadcast access. Both switches have 48 10/100M Ethernet ports providing high port density saving on
H U A W E I
space and power with the difference between them being that the S3552G and S3528G has 4 GBIC ports, and the
S3552P and S3528P has 4 SFP interfaces.
Quidway S3552 series switches Front View
Quidway S3552G Rear View
25
Quidway S3552P Rear View
Quidway S3552F
Quidway S3528G
Quidway S3528P
26
Product Features
Abundant Interfaces Types: Flexible Network Connectivity, with simple adaptation to network changes;
Link Aggregation: Support link aggregation to meet increased traffic needs without the need to purchase new equip-
ment saving on CAPEX costs, Maintains service quality;
H U A W E I
Extensive QOS functions: 8 priority queues and 3 discard priorities, CAR function (granularity of traffic limit
8kbps), Broadcast speed limit, Flexible queue dispatch algorithm, (SP, WRR and SP+WRR), WRED (Weighted Random
Early Detection) , Port traffic shaping, 802.1P and DSCP)/TOS priority, DSCP remarking, L2 to L4 packet filtering based on
source MAC address, destination MAC address, source IP address, destination IP address, port, protocol, VLAN, VLAN
range, VLAN address range and illegal frame. Supports Time Range. Guarantee's for SLA's, provides increased cus-
tomer/user satisfaction, enables differentiation of service and ensures that delay sensitive traffic is prioritized;
Multiple Security Features: Such as L2-L7 Access Control Lists, VLAN,s, Prevents unauthorized accessing the
Extensive Remote Test and Diagnostic features: Simple troubleshooting provides quick and efficient reso-
lution to problems reducing OPEXs;
Huawei Primary VLAN: PVLAN (Primary VLAN) saves VLAN resource;
HGMP Huawei Cluster management: Saves IP address, simplifying OAM.
Specifications
Wire speed switching All the ports support wire speed forwarding
Backplane switching capacity is 32 Gbps
S3552F and S3552GP Switching capacity is 17.6Gbps
S3528GP Switching capacity is 12.8Gbps
S3552F and S3552GP Packet forward speed is 13.1Mpps
S3528GP Packet forward speed 9.53Mpps
27
VLAN Supports up to 4k VLANs (Virtual Local Area Networks) based on IEEE 802.1Q standard
QinQ
Support LAN protocol Ethernet_II
Ethernet_SNAP (Subnetwork Access Protocol)
IP route Static route
RIP (Routing Information Protocol) v1/v2
OSPF (Open Shortest Path First)
BGP(Border Gateway Protocol)
Policy routing
Equivalent route
Capacity of IP routing table: 4k
Route interface number:512
DHCP Relay Support DHCP Relay
Reliability Supports VRRP (Virtual Redundancy Routing Protocol)
IGMP (Internet Group Management Protocol) Snooping
PIM-DM (Protocol Independent Multicast-Dense Mode)
PIM-SM (Protocol Independent Multicast-Sparse Mode)
STP/RSTP/MSTP Supports STP/RSTP/MSTP and observe standards including IEEE 802.1D, IEEE
802.1w and IEEE 802.1s
Link aggregation Supports FE link aggregation
Supports GE link aggregation.
Supports up to 7 aggregations (with each group containing up to 8 ports)
Broadcast storm suppression All the ports support the multicast and broadcast storm suppression based on
bandwidth ratio.
Mirroring Support mirroring based on traffic classification
Supports port mirroring
MAC address table Address learning
Supports up to 12k MAC addresses
Flow control Supports IEEE 802.3x flow control (full duplex)
Supports Back-pressure based flow control (half duplex)
Download and upgrade Supports X-Modem protocol to implement download and upgrade
Supports download and upgrade of FTP (File Transfer Protocol) and TFTP (Trivial
File Transfer Protocol)
28
Supports SNMP(Simple Network Management Protocol)
Supports group 1, 2, 3 and 9 MIBs of RMON (Remote Monitoring)
Supports system logging
Supports user level alarm
Supports HGMP (Huawei Group Management Protocol) V2
Supports HGMP V1 (function as Server)
H U A W E I
Supports NTP
Supports SSH
Supports PING (Packet Internet Groper) and Tracert
Supports HGMP V1 (function as Server end)
QoS Supports 1K flow rules
Supports CAR (Committed Access Rate) function, with the granularity of traffic
limit being 8kbps
Supports broadcast speed limit
Supports 8 priority queues and 3 discard priorities
Supports flexible queue dispatch algorithm, which can be simultaneously set
based on both port and queue, support three modes: SP (Strict Priority), WRR
(Weighted Round Robin) and SP+WRR
Supports WRED (Weighted Random Early Detection) congestion avoidance al
gorithm
Supports port traffic shaping
Supports 802.1P and DSCP (Differentiated Services Code Point)/TOS (Type Of
Service) priority
Supports DSCP remarking
Supports L2 (Layer 2) to L4 (Layer 4) packet filtering function that is based on
source MAC address, destination MAC address, source IP address, destination
IP address, port, protocol, VLAN, VLAN range, VLAN address range and illegal
frame.
Supports Time Range
Security Features User level management and password protection
IEEE 802.1X Authentication
Support Portal authentication
29
Description S3552G S3552P S3552F S3528G S3528P
Fixed ports 48 10/100Mbps Ethernet ports 24 10/100Mbps Ethernet ports
4 GBIC ports 4 GBIC ports
SDRAM 64M
FLASH 16M
Buffer RAM 32M
Switching capacity 17.6Gbps 12.8Gbps
Forwarding capability 13.1Mpps 9.53Mpps
Dimensions 436mm X 42mm X 360mm 436mm X 86mm X 390mm 436mm X 42mm X 245mm
(W X H X D)
Input voltage AC: 100V to 240V
DC: -48 to -60V
RPS
Power 45W 54W 40W
Max attitude 4000m
Modules
S3552G:
48 10Base-T/100Base-TX auto-negotiation Ethernet ports (RJ-45 connector), 4 GBIC module interfaces.
GBIC Module includes :
• GBIC single mode optical module (1550nm, 70km, SC) .
30
S3552P:
48 10Base-T/100Base-TX auto-negotiation Ethernet ports (RJ-45 connector), 4 SFP module interfaces.
SFP Module includes:
• SFP multi mode optical module (850nm, 550m, LC) ;
• SFP single mode optical module (1310nm, 10km, LC);
• SFP single mode optical module (1550nm, 70km, LC).
H U A W E I
S3552F:
6 expansion slots and 4 GBIC, and each slots support:
• 8-port 100M single-mode/multi-mode modules ;
• 8-port 10Base-T/100Base-TX modules ;
• 8-port SFP 100M optical modules.
• GBIC single mode optical module (1550nm, 100km, SC).
S3528G:
24 10Base-T/100Base-TX auto-negotiation Ethernet ports (RJ-45 connector), 4 GBIC module interfaces.
31
S3528P:
24 10Base-T/100Base-TX auto-negotiation Ethernet ports (RJ-45 connector), 4 SFP module interfaces.
Applications
S3552G/P support the following services:
• Application in Metro Ethernet Network;
• Application in Medium and Small Enterprises and Branches of Large Enterprises Network;
• Application in Large-Scale Enterprise and Campus Network.
S3552F supports the following services:

S3552F supports the following services:

32
Abundant Routing Protocol: Static routing, RIP V1/V2, OSPF V2, BGP V4, Strong Routing capability for large
scale internetworking;
Multiple Multicast Protocols: GARP Multicast Registration Protocol (GMRP), IGMP Snooping, PIM-DM/SM,
Deliver L3 Multicast Services;
High Security Features: Hierarchical user management and password protection 802.1X authentication and packet
filtering, Prevents unauthorized accessing the network, keeping customer information safe.
Specifications
Wire speed layer 2 switching All ports support wire speed forwarding
Packet forwarding rate 6.55Mpps
VLAN Supports 256 VLANs in compliance with IEEE 802.1Q
Port-based VLAN
GARP VLAN Registration Protocol (GVRP)
Supports isolate-user-vlan
IP routing Static route
Routing Information Protocol (RIP) v1/2
Open Shortest Path First (OSPF)
Border Gateway Protocol (BGP)
Supports 2K IP addresses forwarding table entries
Reliability Virtual Redundancy Routing Protocol (VRRP)
NTP (Network Time Protocol) Supports NTP
IGMP (Internet Group Management Protocol)
STP /RSTP Supports STP and RSTP, in compliance with IEEE 802.1D and IEEE 802.1w
Port aggregation Supports aggregation of up to 6 groups of FE ports and each group contains
up to 8 aggregated ports
Supports aggregation of up to 2 GE ports
34
Abundant Routing Protocol: Static routing, RIP V1/V2, OSPF V2, BGP V4, Strong Routing capability for large
scale internetworking;
Multiple Multicast Protocols: GARP Multicast Registration Protocol (GMRP), IGMP Snooping, PIM-DM/SM,
High Security Features: Hierarchical user management and password protection 802.1X authentication and packet
Specifications
Wire speed layer 2 switching All ports support wire speed forwarding
Packet forwarding rate 6.55Mpps
VLAN Supports 256 VLANs in compliance with IEEE 802.1Q
Port-based VLAN
GARP VLAN Registration Protocol (GVRP)
Supports isolate-user-vlan
IP routing Static route
Routing Information Protocol (RIP) v1/2
Border Gateway Protocol (BGP)
Supports 2K IP addresses forwarding table entries
Reliability Virtual Redundancy Routing Protocol (VRRP)
NTP (Network Time Protocol) Supports NTP
IGMP (Internet Group Management Protocol)
STP /RSTP Supports STP and RSTP, in compliance with IEEE 802.1D and IEEE 802.1w
Port aggregation Supports aggregation of up to 6 groups of FE ports and each group contains
up to 8 aggregated ports
Supports aggregation of up to 2 GE ports
34
Broadcast storm suppression All ports support unicast/multicast/broadcast storm suppression based on band
width percentage
Port mirroring Supports mirroring based on traffic classification
In compliance with IEEE 802.1D
Maximum 8K MAC addresses
Flow control IEEE 802.3x-compliant flow control (full duplex)
Loading and upgrade Loading and upgrading with X-modem
Loading and upgrading with FTP and TFTP
H U A W E I
Management Command line interface(CLI) configuration
Telnet remote configuration
Console port configuration
SNMP(Simple Network Management Protocol)
RMON (Remote Monitoring) function and 1, 2, 3, or 9 MIB groups
Supports QuidView NMS
Supports CAMS (Comprehensive Access Management Server)
Web management
System log
Hierarchical alarming
HGMP v2
HGMP v1 (as server)
Supports Modem dialup
Supports SSH
Maintenance Debugging information output
Ping and Tracert
Telnet remote maintenance
HGMP v2
HGMP v1 (as server)
QoS Bandwidth control (based on port and MAC address)
802.1P and DSCP priority (based on port and MAC address)
Four priority queues at each port
Queue scheduling algorithm: PQ (Priority Queuing), WRR (Weighted Round
Robin) and Delay bounded WRR
802.1X authentication
Portal authentication
Packet filtering
35
Description S3526C
SDRAM 64M
FLASH 8M
Buffer RAM 32M
Expandable Slots 2 slots
Input voltage DC : -40V ~ -60V
AC : 100 ~ 240V
RPS
Power 35W
Max attitude 4000m
Modules
S3526C:
24 fixed 10/100Base-T + 2 expandable slots, each slot supports:
• 1-port 1000Base-T interface module;
• 1-port GE SX(500m)/LX(10km)/LH(40km)/ZX(70km) optical interface module;
• 1-port FE SM/FM optical interface module;
• 1 port GE stack module.
Applications
S3526C supports the following services:
• Residential Area with Broadband Access;
• Small to Medium size Enterprise Network;
• Large enterprise and campus Network.
36
Quidway S3900 Series Intelligent
Routing Switches
Introduction
Quidway S3900 Series Ethernet Switches are wire speed L2/L3 products. This intelligent switch series, which can be
managed over the network, is designed specially for the network environment requiring high performance, high port
density and easy installation. The series include S3924-SI, S3928P-SI, S3952P-SI, S3928P-EI and S3952P-EI. The
S3900-SI series provide basic routing functions and service features and the S3900-EI series provide complex routing
H U A W E I
protocols and abundant service features.
Quidway S3924-SI
Quidway S3928P-SI
37
S3952P-SI
S3928P-EI
S3952P-EI
38
Product Features
Abundant Interfaces Types: Flexible Network Connectivity, with simple adaptation to network changes;
Link Aggregation: Support link aggregation to meet increased traffic needs without the need to purchase new equip-
ment saving on CAPEX costs, Maintains service quality;
H U A W E I
Extensive QOS functions: 8 priority queues and 3 discard priorities, CAR function (granularity of traffic limit
8kbps), Broadcast speed limit, Flexible queue dispatch algorithm, (SP, WRR and SP+WRR), WRED (Weighted Random
Early Detection) , Port traffic shaping, 802.1P and DSCP/TOS priority, DSCP remarking, L2 to L4 packet filtering based on
source MAC address, destination MAC address, source IP address, destination IP address, port, protocol, VLAN, VLAN
range, VLAN address range and illegal frame. Support Time Range. Guarantee's for SLA's, provide increased customer/
user satisfaction, enables differentiation of service and ensures that delay sensitive traffic is prioritized;
Multiple Security Features: Such as L2-L7 Access Control Lists, VLANs, Port Isolation, MAC Address Learning
Limit, MAC Address and Port Binding, DUD authentication, AAA/RADIUS, IEEE 802.1X Authentication, Prevents unautho-
rized accessing the network, keeping customer information safe;
Extensive Remote Test and Diagnostic features: Simple troubleshooting provides quick and efficient reso-
lution to problems reducing OPEXs;
Routing & Multicast Features: Support Static Routing, RIP, OSFP, IGMP snooping, IGMP, PIM-DM, PIM-SM;
Stack features: IRF constructs expandable resilient networks, manage multiple devices in a centralized manner,
expand the number of ports and switching capacity, achieve high reliability of N + 1 redundancy;
39
Specifications
Switching capacity is 12.9 Gbps
Packet forward speed (24/28/52 ports): 3.57/9.52/13.09 Mpps
VLAN The S3900-SI series support up to 256 VLANs (Virtual Local Area Networks)
based on IEEE 802.1Q standard
The S3900-EI series support up to 4K VLANs based on IEEE 802.1Q standard
Support port-based VLAN
Voice VLAN To discriminate and add IP telephony traffic to voice VLAN by MAC address
IP route Static route
RIP (Routing Information Protocol) v1/v2
The S3900-EI series support OSPF (Open Shortest Path First)
The S3900-EI series support Equal Cost Multi Paths (ECMPs)
Capacity of IP routing table: S3900-SI 1K, S3900-EI 6K
VLAN virtual interface The S3900 series support up to 64
DHCP Relay Support
The S3900-EI series support in addition to the DHCP security features
Reliability Support VRRP (Virtual Redundancy Routing Protocol)
Multicast All support:
IGMP (Internet Group Management Protocol) Snooping
The S3900-EI series support as follows:
Internet Group Management Protocol v1/ v2 (IGMPv1/v2)
STP/RSTP/MSTP Support STP/RSTP and observe standards including IEEE 802.1D IEEE 802.1w
and IEEE 802.1s
Link aggregation Support FE/GE link aggregation
Up to 8 FE or 4 GE ports in each aggregation
Number of aggregations:
S3924-SI: up to 14
40
S3928P-SI: up to 14
S3952P-SI: up to 26
S3900-EI series: up to 32
Broadcast storm suppression Port rate ratio and PPS based suppression
Mirroring Many-to-one port mirroring (multiple observed ports to one monitor port)
Traffic mirroring
H U A W E I
Support up to 16K MAC addresses
Flow control Support IEEE 802.3x flow control (full duplex)
Support Back-pressure based flow control (half duplex)
Loopback detection on ports
To detect and alarm short circuit that occurs to the data receiving and sending
wires on ports
Download and upgrade Support X-Modem protocol to implement download and upgrade
Support download and upgrade of FTP (File Transfer Protocol) and TFTP (Trivial
File Transfer Protocol)
Stack The S3900-SI series support VRP stack, up to 8 units
The S3900-EI series support XRN, up to 8 units
Management Configuration through the command line interface (CLI)
Configuration through Telnet
Configuration through the console port
Simple Network Management Protocol (SNMP)
Remote Monitoring ( RMON) 1/2/3/9 groups of MIBs
Huawei Quidview NMS
Web-based network management
System log
Hierarchical alarm
Support SSH
Maintenance Support debugging output
Support remote maintenance through Telnet
Support PING (Packet Internet Groper) and Tracert
41
In addition the S3900-EI series support multicast traceroute
QoS / ACL Limitation on packet receiving/sending rate on ports
Packet redirection
Committed Access Rate (CAR), with the granularity of 64 kbps
8 output queues on each port
Five scheduling algorithms that can be set based on port and queue at the same
time: Strict Priority (SP), Weighted Round Robin (WRR), Weighted Fair Queue
(WFQ), SP + WFQ, SP + WRR)
Packet tagging based on 802.1p or DSCP preference
Packet filter at the layers 2 through 4, providing filtering based on source/desti
nation MAC address, source/destination IP address, port, protocol, VLAN, VLAN
range, MAC address range, or invalid frame
Time range setting
QoS profile management, allowing QoS service scheme customization
WRED
Security Features Hierarchical user management and password protection
IEEE 802.1x authentication
AAA and RADIUS authentication
MAC address learning limit
Disconnect Unauthorized Device (DUD) authentication, implemented through
setting MAC address learning limits and binding MAC addresses with ports
Denial of Service (DoS) attack prevention
MAC address black hole
In addition the S3900-EI series support centralized MAC address authentication
Other Features BOOTP
NTP
DHCP Client
Web cache redirection
UDP helper
42
Description S3924-SI S3928P-SI S3952P-SI S3928P-EI S3952P-EI

Fixed ports 10/100Mbps Ethernet ports + SFP 1000Mbps ports
24+0 24+4 48+4 24+4 48+4
SDRAM 64M
FLASH 8/16M
Buffer RAM 32M
Switching capacity 12.9Gbps
Forwarding capability 3.57 Mpps 9.52 Mpps 13.09 Mpps 9.52 Mpps 13.09 Mpps
Dimensions (W X H X D) 440 x 43.6 x 260 mm (17.32 x 1.72 x 10.24 in.)
H U A W E I
Input voltage The S3900-SI series are AC-powered and the S3900-EI series can be AC-powered or DC-powered.
AC:
Rated voltage: 100 to 240 V AC; 50 to 60 Hz
Max. tolerance: 90 to 264 V AC; 50 to 60 Hz
DC:
Rated voltage: -48 to -60 V DC.
Maximum voltage: -36 to -72 V DC.
The S3900-EI series support RPS.
Power 30W 40W 50W 40W 50W
Weight 3kg 3.5kg 4Kg 3.5kg 4Kg
Max attitude 4000m
Modules
S3900-EI support the following service:
• Application in Residential Area with Broadband Ethernet Access;
43
IRF Fabric S3900
Link Aggregation
Internet
FrieWall
S5600M/A5600
IRF Stack Application in S3900 Series
Enhanced IRF (Intelligent Resilient Framework) is a technology to construct intelligent resilient framework. With IRF, you
can connect multiple IRF-supported switches that are of the same type (called units) to form a °∞device union°± or a fabric.
You are allowed to:
The Enhanced Intelligent Resilient Framework (IRF) feature, where the IRF-supported switches that are of the same type
(called units) are connected to form a °∞device union°± or a fabric. Trough a fabric, you can (1) manage multiple devices
but with one connection and one IP address, thus decreasing the overheads; (2) expand the network by adding devices as
desired, thus protecting the existing investment; and (3) have high reliability of N + 1 redundancy, thus avoiding single point
failures which can result in service interruption.
Support DDM (Distributed Device Management)
Support DDR (Distributed Resilient Routing)
Support DLA(Distributed Link Aggregation) through LACP and across devices
44
S5000 Series Gigabit
Intelligent Switch
Introduction
Quidway S5000 Series Ethernet Switches are Layer 2 wire speed Gigabit Ethernet (GE) switching products and designed
specially for high-speed interconnection between enterprise networks and providing gigabit bandwidth to desktop PCs
(Personal Computers) and workstations. For Wide Area Network (WAN) application, S5000 Series provide multi-channel
Gigabit Ethernet optical interfaces, which support WAN convergence and can address the problem of scarce GE ports on
high-end devices. Besides, S5000 Series also provide redundant backup protection of power supply on devices.
H U A W E I
Quidway S5012G
Quidway S5012T
Quidway S5024G
45
Product Features
Abundant Interfaces Types:Flexible Network Connectivity, with simple adaptation to network changes;
High Density:Up to 12/24 GE ports, saving on space and power;
Link Aggregation:Support link aggregation to meet increased traffic needs without the need to purchase new equipment
saving on CAPEX costs, Maintains service quality;
Packet Storm Suppression:All ports support unicast, multicast, and broadcast storm suppression based on
Multiple Management Tools:Local and remote control like: CLI, Telnet, SNMP, RMON, WEB network management,
Extensive QOS functions:Provides ACL function of layer2 to layer7 policy to filter traffic satisfying specified rules.
Flexibly configure policies according to such information as source IP address, destination IP address, source port number,
destination port number, inbound/outbound physical port and protocol type; Supports traffic-based bandwidth control, with
a granularity of 1Mbit/s; Supports 802.1p priority and DSCP (Differentiated Services Code Point) priority; Each port includes
8 priority queues; Supports SP (Strict Priority) and WFQ (Weighted Fair Queuing). Guarantee’s for SLA’s, provides increased
customer/user satisfaction, enables differentiation of service and ensures that delay sensitive traffic is prioritized;
High Security Features:Hierarchical user management and password protection 802.1X authentication and packet
Specifications
Switching capacity is 24Gbps (S5012G and S5012T) or 48Gbps (S5024G)
Packet forward speed is 17.8Mpps (S5012G and S5012T) or 35.6Mpps (S5024G)
Switching mode Store and forwarding
VLAN Supports up to 4K VLANs (Virtual Local Area Networks) based on IEEE 802.1Q
Multicast Supports GMRP (GARP Multicast Registration Protocol)
Supports IGMP Snooping (Internet Group Management Protocol Snooping)
STP/RSTP /MSTP Supports STP/RSTP/MSTP and observe standards including IEEE 802.1D, IEEE
802.1w and IEEE 802.1s
Port Aggregation Supports up to 6 (S5012G and S5012T) or 12 (S5024G) port aggregation groups,
with each aggregation group supporting 8 ports at most
46
Broadcast storm suppression All the ports support broadcast storm suppression based on bandwidth ratio
Mirroring Supports port mirroring
Supports IEEE 802.1D
Supports 16k MAC addresses at most
Supports back-pressure based flow control (half duplex)
Load and upgrade Supports X-Modem protocol to implement load and upgrade
Supports load and upgrade of FTP (File Transfer Protocol) and TFTP (Trivial File
Transfer Protocol)
H U A W E I
Supports RMON (Remote Monitoring)
Supports Huawei Quidview NM system and WEB network management
Supports system log
Supports HGMP (Huawei Group Management Protocol) v2
Supports remote dialing
Maintenance Supports debugging information output
Supports PING (Packet Internet Groper) and Tracert
Supports HGMP v2
QoS (Quality of Provides ACL function of layer2 to layer7 policy to filter traffic satisfying specified
Service)/ACL (Access rules. The user can flexibly configure policies according to such information as source
Control List) IP address, destination IP address, source port number, destination port number,
inbound/outbound physical port and protocol type
Supports traffic-based bandwidth
control, with a granularity of 1Mbit/s
Supports 802.1p priority and DSCP (Differentiated Services Code Point) priority
Each port includes 8 priority queues
Supports PQ (Priority Queuing) and WRR (Weighted Round Robin)
Security feature Hierarchical management over the users and password protection
Supports 802.1X authentication
Supports RADIUS (Remote Authentication Dial-In User Service)
47
Description S5012G S5012T S5024G
Fixed ports 12 10/100/1000Mbps 2 10/100/1000Mbps 20 10/100/1000Mbps
Ethernet ports Ethernet ports Ethernet ports
4 GE Combo GBIC 2 Combo RJ45 ports 4 GE GBIC ports
ports 10 GE GBIC ports
Switching capacity 24Gbps 24Gbps 48Gbps
Forwarding capability 17.8Mpps 17.8Mpps 35.6Mpps
Dimensions (W X H X D) 436mmX 44mmX 240mm
Input voltage AC: 100V to 240V; DC: -48 to -60V ; RPS
Power 60W 60W 60W
Max attitude 4000m
Modules
S5012G:12 10/100/1000BASE-T auto-negotiation Ethernet ports (RJ-45 connector) and 4 Combo GBIC (Gigabit Interface
Converter) ports.
S5012T: 10 GBIC ports, 2 10/100/1000BASE-T Ethernet ports and 2 Combo RJ45 ports.
S5024G: 20 10/100/1000BASE-T Ethernet ports (RJ-45 connector) and 4 GBIC ports.
GBIC Module includes:

• GBIC single mode optical module (ZX70);
• GBIC single mode optical module (STACK-HSSDC).
Applications
S5000 series support the following services:
• Internet broadband access;
• High-speed enterprise network internetworking;
• Multimedia application, big file transmission, broadband community application.
48
Quidway S5516 Gigabit
Routing Switch
Introduction
Quidway S5516 Ethernet Switch is a cost effective layer2/3 Gigabit Routing Switch, featured with modular design, wire-
speed performance and policy based QoS for bandwidth and traffic management. The S5516 comes with layer 2 and layer
3 wire speed switching using static routing, RIP or OSPF routing protocols. It can serve as the core device in small to
medium enterprise networks or be located at the distribution layer metropolitan area networks.
H U A W E I
Quidway S5516 Front View
49
Product Features
State-of-the-art non-blocking switch fabric:Cost effective, high performance throughput providing constant
information flows;
Flexible Module Configuration:Flexible Network Connectivity over wide distances provides extensive networking
options;
Link Aggregation:Up to 6 groups of FE port aggregation and each group can contain up to eight FE ports , Supports
the aggregation of up to two GE ports. Meets increased traffic needs without the need to purchase new equipment saving
on CAPEX costs.
Packet Strom Suppression:All ports support unicast, multicast and broadcast storm suppression based on
bandwidth ratio. Easy to control the storm, preventing disruption of network;
Multiple Management Tools:Local and remote control like: CLI, Telnet, SNMP, RMON, Huawei Quidview NMS
WEB network management, system log, and hierarchical alarms; Easy to manage, maintain and use reducing OAM cost
overheads;
Multiple Routing Options:Support RIP V1/V2, OSPF V2, BGP V4 and Policy Routing Management; Strong Routing
capability for large scale internetworking;
Multiple Multicast Protocols:GARP Multicast Registration Protocol (GMRP), IGMP Snooping, PIM-DM, PIM-SM,
High Security Features:Including Hierarchical user management and password protection, 802.1x authentication
and packet filtering, MD5 and plain text encryption; Prevents unauthorized accessing the network, keeping customer
information safe;
Extensive Bandwidth Management and QoS:Based on port, MAC address, IP address, TCP/UDP port No,
and ToS/Diffserv value (granularity of traffic control 64kbps), Priority Control (based on VLAN port, 802.1p, ToS/Diffserv,
and COS settings according to traffic classification) 8 sending queues on each port, Queue scheduling: Supports Strict
Priority (SP) and Weighted Round Robin (WRR); Guarantee’s for SLA’s, provides increased customer/user satisfaction,
enables differentiation of service and ensures that delay sensitive traffic is prioritized.
50
Specifications
Wire speed layer 2/3 switching All ports support wire speed forwarding
32Gbps switching capacity
Packet forwarding rate 24Mpps
Flow control IEEE 802.3x flow control (full duplex)
VLAN Supports up to 4K VLANs, in compliance with IEEE 802.1Q standard
H U A W E I
Supports VLAN Trunk
Supports Multi port
Supports GARP VLAN Registration Protocol (GVRP)
Multicast GARP Multicast Registration Protocol (GMRP)
Internet Group Management Protocol Snooping (IGMP Snooping)
Internet Group Management Protocol (IGMP)
Protocol Independent Multicast-Dense Mode (PIM-DM)
Protocol Independent Multicast-Sparse Mode (PIM-SM)
Spanning tree Spanning tree protocol and rapid spanning tree protocol, in compliance with IEEE
802.1D and IEEE 802.1w standards
Link Aggregation Supports up to 16 link aggregations
Supports the aggregation of up to 16 ports
MAC address table Address self-learning: compliant with the IEEE 802.1D standard
Address table size: Supports up to 16K MAC addresses
Broadcast Storm Suppression Bandwidth-percentage-based broadcast storm suppression on VLAN
IP address table Up to 32K IP address forwarding table entries
IP routing Static routing
Routing Information Protocol (RIP)
Border Gateway Protocol-4 (BGP-4)
DHCP Relay Supports DHCP Relay (Dynamic Host Configuration Protocol Relay)
Security Features Packet filtering of layers 2, 3, and 4 (filter based on port, source/destination MAC
address, source/destination IP address and illegal frame)
User level management and password protection
Supports 802.1X authentication
QoS Bandwidth management (based on port, MAC address, IP address, TCP/UDP port
No, and ToS/Diffserv value), the granularity of traffic control is 64kbps
Priority control (based on VLAN port, 802.1p, ToS/Diffserv, and COS settings
according to traffic classification)
There are eight sending queues on each port
51
Queue scheduling: Supports Strict Priority (SP) and Weighted Round Robin (WRR)
Supports traffic classification
Centralized Management Supports stack
Features Huawei Group Management Protocol (HGMP)
Reliability Virtual Router Redundancy Protocol (VRRP)
Software loading Supports loading and upgrade through Xmodem protocol
and Upgrading Supports loading and upgrading through FTP and TFTP
Management Supports Command line configuration (CLI)
Supports Telnet remote configuration
Supports Console port configuration
Supports remote dialing
Supports SNMP management (Supporting Huawei iManager QuidView NMS and
groups 1, 2, 3, and 9 of RMON MIB)
Supports system log
Supports alarm with different severities
Maintenance Supports debugging information output
Supports remote maintenance through Modem dialing and Telnet
Description S5516
Service Module Slots 4 slots
Switching Capacity 32Gbps
Forwarding Capacity 24Mpps
Dimension(W X H X D) 436mm X 86mm X 400 mm
Input voltage AC: 100 to 240V
DC: -48V to -60V
Power 120W
Max attitude 4000m
52
Modules
S5516:
4 expandable slots, each slot supports:
• 4-ports 1000M Base-SX(500m) interface module;
• 4-ports 1000M Base-LX(10km) interface module;
• 4-ports 10/100/1000M Base-T interface module ;
• 4-ports 1000M SFP optical interface module;
• 4-ports stack module.
H U A W E I
53
Applications
Networking of Broadband Ethernet Access in MAN
In the networking diagram of broadband MAN, S5516 Ethernet Switch is used as the convergence layer equipment of the
broadband MAN. It is connected to the backbone router or layer 3 switch via GE optical port and connected to the egress
layer 2/3 equipment of the residential area egress via GE optical port. Besides, the bandwidths of upstream and down-
stream can be increased via multiple GE aggregations.
4(5IHJRVUL
:.:9
.,.,;9<52
: :
.,
767
., ., .,
: 4( : :
9LZPKLU[PHS 9LZPKLU[PHS 9LZPKLU[PHS 9LZPKLU[PHS

HYLH HYLH HYLH HYLH
Broadband MAN networking with S5516
54
Networking of Medium and Small Enterprise/Large Enterprise Branch
In the medium and small enterprise or large enterprise’s branches, as backbone layer equipment, S5516 Ethernet switch
has the following connection modes with adjacent equipment: GE optical port/electrical port connecting the workgroup L2/
L3 Ethernet switch (3026/3526) in the downstream; GE optical port (long haul/short haul) connecting other building/floor;
GE/100M electrical port directly connecting the server, or GE/100M electrical port connecting server group via workgroup
L2/L3 Ethernet switch; 10/100M electrical port connecting the router.
H U A W E I
:LY]LY
:LY]LY*S\Z[LY
4.,
: 4LKP\T3V^LUKYV\[LY
9
6[OLY)\PSKPUNZ ., 4
-SVVYZ
>(5
., .,
>VLRNYV\W
::
Medium-/small-sized enterprises and the branches of the large-scale enterprise networking with S5516
55
Networking of Large-scale Enterprise and Campus Network
S5516 Ethernet Switch can serve as the convergence layer device of the large-scale enterprise network and campus
network. It is connected to the backbone router or layer 3 switch via GE optical interface or electrical interface, and
connected to layer 2/3 device of the convergence workgroup via GE optical interface or electrical interface.
:.:9
.,.,;9<52
:
., ., ., .,
>VLRNYV\W
::
7*
Large-scale enterprise and campus networking with S5516
56
Quidway S6500 Series Gigabit
Routing Switches
Introduction
Quidway S6500 Series Ethernet Switches are modularized L2/L3 wire-speed Ethernet Switches with medium to large
capacity. The switches come in three models, S6503 with 3 service slots, S6506 with 6 service slots, and S6506R with 6
service slots and redundant controllers. Running on Huawei’s Versatile Routing Platform (VRP) network Operating Sys-
tem (OS), the Quidway S6500 Ethernet Switch provides rich dynamic routing protocols, Virtual Local Area Network (VLAN)
control, and Quality of Service (QoS) assurance mechanisms. The switch has powerful service control and user manage-
ment capabilities and provides flexible networking solutions suitable for medium to large enterprise networks, IP Metro-
H U A W E I
politan Area Network (MAN) and Campus areas.
57
Quidway S6506R Front View
58
Product Features
High capacity and density:Switching Capacity from 48Gbps to 768Gbps in different Engine;SalienceTM III provides
maximum 768Gbps switching capacity and up to 288 GE interfaces;Flexible Network Connectivity to meet diverse network
requirements. High scalability saves on space and power costs and reduces CAPEX;
Perfect DiffServ/QoS:Support traffic classifications; Support Traffic Policing (CAR at 64Kbps); Different L2/L3/L4
Packet Services Types; Support WRR, RED, Congestion Avoidance, Output Traffic Shaping and Bandwidth Management;
Guarantee’s for SLA’s, provides increased customer/user satisfaction, enables differentiation of service and ensures that
delay sensitive traffic is prioritized;
Link Aggregation:Up to 6 groups of FE port aggregation and each group can contain up to eight FE ports; Supports
H U A W E I
aggregation of up to two GE ports; Meets increased traffic needs without the need to purchase new equipment saving on
CAPEX costs.;
Packet Strom Suppression:All ports support unicast, multicast, and broadcast storm suppression based on
bandwidth ratio; Easy to control the storm, preventing disruption of network;
Multiple Management Tools:Local and remote control like: CLI, Telnet, SNMP, RMON, Huawei Quidview NMS
WEB network management, system log, and hierarchical alarms; Easy to manage, maintain and use reducing OAM cost
overheads;
Multiple Routing Options:Support RIP V1/V2, OSPF V2, BGP V4 and Policy Routing Management; Strong Routing
capability for large scale internetwork;
High Security Features:Including Hierarchical user management and password protection, 802.1x authentication
and packet filtering, MD5 and plain text encryption; Prevents unauthorized accessing the network, keeping customer
information safe;
High Reliability:Support Redundant Backup STP/RSTP/MSTP and VRRP; Provides high resiliency and network
redundancy required for business critical applications.
59
Specifications
Wire speed switching All LPU ports support wire speed forwarding (forwarding delay less than 10 s)
Switching mode Store and Forward mode
Complies with IEEE 802.1D standard and supporting port locking
S6503:Maximum 16K MAC S6506/6506R:Maximum 32K MAC
addresses addresses
STP/RSTP/MSTP Supports STP/RSTPMSTP, complied with IEEE 802.1D/802.1w/802.1s Standard
Supports Back-pressure Based Flow Control (half-duplex)
Link Aggregation Supports the wire speed aggregation group
Supports link aggregation from switch to switch and from switch to server
VLAN Supports port-based VLAN
QINQ
Supports port-based VLAN Trunk
Packet storm suppression Supports packet storm suppression on VLAN
Network protocol Address Resolution Protocol (ARP)
Dynamic Host Configuration Protocol (DHCP) Relay
IP routing Static routing
Routing Information Protocol (RIP) V1/V2
Open Shortest Path First (OSPF) V2
Border Gateway Protocol (BGP) V4
S6503: 32K IP S6506/S6506R: 64K IP
addresses forwarding table entries addresses forwarding table entries
Internet Group Management Protocol (IGMP) Snooping
AAA and security Supports the supplicant authentication compliant with IEEE 802.1x protocol
Supports local authentication and RADIUS authentication
User level management and password protection
Supports Access Control List (ACL), Layer 2, 3, and 4 information filter (such
as frame filter based on port and source/destination MAC addresses, and packet
filter based on source/destination IP addresses and upper layer protocol type)
Supports plain text authentication and MD5 encrypted authentication of OSPF, RIP
V2 and BGP V4 packets
Supports Simple Network Management Protocol (SNMP)
Reliability Supports Virtual Router Redundancy Protocol (VRRP)
60
QoS Supports traffic classification
Supports bandwidth management based on port, MAC address, IP address,TCP/
UDP port number, Type of Service(ToS)/Diffserv value and Committed Access Rate
(CAR). The bandwidth management granularity is 64kbps
Supports the priority based on VLAN port, IEEE 802.1P and ToS/Diffserv.
Support traffic classification to set Class of Service (CoS)
8 sending queues for each port
Supports the queue dispatching algorithm First In First Out (FIFO), Strict Priority
(SP), and Weighted Round Robin (WRR)
Load and update system Supports to load and update software via Xmodem protocol
H U A W E I
software Supports to load and update software via File Transfer Protocol (FTP) and Trivial File
Transfer Protocol (TFTP)
System configuration/system Supports Command Line Interface (CLI) view
management Supports the configuration via Console port
Supports the local/remote configuration via Telnet
Supports the remote configuration through dial-up via Modem
Supports Huawei iManager QuidView based on SNMP Version 3
Supports the Group 1, 2, 3 and 9 MIB of RMON (Remote Monitoring)
Supports Huawei Group Management Protocol (HGMP) V2
Supports system log
System maintenance Supports filter, output and account of alarm/debugging information
Supports Ping and Tracert
Supports remote maintenance through Modem dial-up and Telnet login
Description S6503 S6506 S650R
Service Module Slots 3 slots 6 slots 6 slots
Main Control Module Slots 1 slot 1 slot 2 slots
Switching Capacity iSalience I : 32Gbps Salience I : 64Gbps Salience II : 64Gbps
Salience III 48Gbps Salience III 48Gbps Salience III 48Gbps
Forwarding Capacity iSalience I :24Mpps Salience I : 48Mpps Salience II :48Mpps
Salience III 48G:36 Mpps Salience III 48G:36 Mpps Salience III 48G : 36Mpps
Salience III 96G:42 Mpps Salience III 96G:72 Mpps Salience III 96G:72 Mpps
Salience III 384G : 90Mpps Salience III 384G : 126Mpps Salience III 384G : 126Mpps
(can be upgraded to 198Mpps)
61
Salience III 768G :216Mpps Salience III 768G :216Mpps Salience III 768G :216Mpps
(can be upgraded to 432Mpps)
Dimension(W X H X D) 436mm X 352.8mm X 480mm 436mm X 486.2mm X 480mm 436mm X 530.6mm X 480 mm
Input voltage AC: 100 to 240V
DC: -48V to -60V
Power 350W 650W 800W
Max attitude 4000m
Modules
S6503 supports 3 service slots, S6506 and S6506R support 6 service slots, each slot supports following module:
• 48-port 10BASE-T/100BASE-TX auto-sensing interface module;
• 24-port 100BASE-FX MMF/SMF FE interface module;
• 4-port 1000 GBIC interface module (S6503 only);
• 4-port 10/100/1000BASE-T interface module (S6503 only);
• 8-port 1000 GBIC interface module;
• 8-port 10/100/1000BASE-T interface module;
• 20-port 1000 SFP interface module;
• 1-port 10GBASE XENPAK interface module.


62
Applications
S6500 Series Applied in MAN
S6500 Ethernet Switch is located on convergence layer in MAN. Its uplink is connected to Layer 3 backbone switch (such
as Quidway S8016) or GSR through GE link with long haul/very-long haul dark fibers. Multiple GE Trunk can be used to
enlarge uplink broadband. Its downlink is connected to Layer 2/3 Ethernet switching devices (like Quidway S2000/3000/
S3500 series Ethernet Switches) at residential area exit through GE also with long distance/very-long distance dark fibers.
Multiple GE Trunk can also be used to enlarge downlink broadband.
H U A W E I
S6500 Series applied in MAN
63
S6500 Series Applied in Medium-/Small-scale Enterprise Network
In medium and small-scale enterprise network, S6500 Series Ethernet Switches generally serves as the backbone level
equipment. It can be connected to the adjacent equipment in the following ways: It can be connected to L2/3 Switches
(like Quidway S3000/S3500 Series) in the workgroup via GE/FE optical port or electrical interface on downlink or directly
to user’s workstation, to other floors/buildings via GE optical port (at long/short distance) or even GE Trunk, to server
cluster via GE/FE electrical interfaces and to routers via 10/100Mbps electrical interfaces.
S6500 Series applied in medium-/small-scale enterprise network
S6500 Series Applied in Large Campus Network

S6500 Series Ethernet Switch can serve as the convergence layer or backbone level equipment of the large-scale enter-
prise network and campus network. In this case, it is generally located in distribution room or central equipment room. It is
connected to workgroup level or Layer 2/3 switches (like Quidway S3000/S3500) via GE/FE optical interface or electrical
interface, and connected to backbone switches or routers on uplink via GE optical interface or electrical interface.
S6500 Series applied in large campus network
64
Quidway S8016 Multi-service
Backbone Routing Ethernet Switch
Introduction
Quidway S8016 backbone routing switch is a large capacity multi-service core switch that is applied in the carrier-class
network, broadband MAN and enterprise network. adopting large-capacity platform, the S8016 provides excellent Diff-
Serv/QoS guarantee's as well as service flow control mechanisms, integrates such service functionalities as hardware
NAT (Network Address Translation), DHCP (Dynamic Host Configuration Protocol), MPLS (Multi-Protocol Label Switching),
H U A W E I
layer2/ layer3 MPLS VPN, multicast and content switching. With carrier-class reliability, high density,large-capacity and
multi-layer security the S8016 is the footstone for IP MAN/Metro Ethernet backbone convergence and enterprise network
backbone construction, providing multiple network solutions.
Quidway S8016
Product Features
Multiple Services: Support VLAN aggregation, 802.1q VLAN trunk, QinQ, link aggregation, port mirror, 802.1p priority,
STP/RSTP; Support MPLS and MPLS VPN, and support MPLS fast-route; Support Metro Ethernet by MPLS VPLS and
provide Ethernet expand, Internet Access and L2VPN; Support multicast protocols such as IGMP, PIM-SM, PIM-DM,
MSDP and MBGP; Support content and application aware Layers 2-7 switching services by integrated web-switch module
and provide wire-speed content switch; Support NAT and MPLS NAT based on hardware; Support DHCP Relay and DHCP
Server; Support IPv6, and support IPv4 and IPv6 dual stack, transition mechanism, manual configuration tunnel, auto-
configuration tunnel, 6to4 tunnel, NAT-NP; Support IPv6 static route, BGP4/BGP4+, RIPng, OSPFv3, ISISv6, ICMPv6,
MIB, UDP6 MIB, TCP6 MIB and IPv6 MIB; Support V-switch;
65
Carrier-class reliability: Adapt distributed forwarding engine, and no single point of failure; Support a passive
backplane and fully hot-swappable interface modules with localized forwarding and routing information; Provides full
redundant system, include redundant CPU modules with sub-second route computation recovery failover, switching fabric,
NAT card, power supply and fans etc; VRRP supports Layer 3 redundancy while STP and RSTP support Layer 2 redun-
dancy networks, and link aggregation supports link redundancy; Support hot patch and online upgrading online. High
reliability
maintains Business Continuity in the event of system failures;
High performance: Based on NP, provides wire speed forwarding performance for all kinds of packets withnon-
blocking and distributed forwarding architecture; Support up to 64,000 MAC addresses per card, 256,000 IP routes and
128,000 LSPs stored in hardware for superior performance, capacity and scalability; Supports wire speed content switch-
ing for server load balance. Hardware-based performance even with multiple services enabled, improves business
processing, increases revenue generation and reduces time to market through efficient service provisioning;
Perfect Diff-Serv/QoS: Support multiple traffic classification rules based on the source port, source VLAN ID,
source MAC address, packet type, TCP/UDP port number, IP packet address prefix, application identification, content
identification, etc; Provides functions of flow mapping and classification, traffic policing (TP), congestion control methods
(RED, WRED and SA-RED), queuing and output traffic shaping when multiple rules are combined; Distinguish various
services, and can ensure that bandwidth; delay and jitter are restricted within the required ranges; Enables the operators
to provide their users with differentiated QoS and makes the IP MAN to become an integrated network that carries data,
voice and video services concurrently; Support MPLS QoS, and mapping between EXP and TOS or COS. Changes
ordinary network into a multi-service converged network providing guaranteed SLA's, increasing customer/user satisfaction,
and enabling differentiation of service;
Security Guarantee: Adopt distributed forwarding architecture different from Cache type, can effectively prevent
CPU from virus; Distributed forwarding architecture ensure interface cards working solely; Configuration security: the login
users have to undergo authentication, and users of different levels have different configuration authorities. There are two
modes of user authentication available: local authentication and RADIUS authentication; The range of IP address of Telnet
login users is restricted, and the password is required; Protocol message authentication: plain-text message authentica-
tion of OSPF, RIP2 and BGP4, and cipher-text authentication of MD5 are supported; Based on user-defined policies, the
S8016 supports 80,000 hardware wire-speed ACLs packet filtering. Security filtering aims to redirect the filtered packet to
a certain port. It helps packet capture for analysis by using devices; Invasion proof: realizes MD5 encryption for protocol
packets and user authority and provides packet filtering mechanism that can perform firewall function; Data protection
mechanism: regularly checks configuration information, and provides data standby mechanism of active/standby devices,
timely automatic backup and manual backup of program data and configuration data, and power-failure protection of
program data and configuration data; Support several kinds of protecting of DOS attack to protect against malicious users
by limiting TCP SYN and ICMP traffic and protects against broadcast storms by limiting broadcast traffic etc; Support
several kinds of binding with IP address, MAC address and port; Support the function of broadcast limiting; Support
content switch module to protect the server inside IDC;
Multiple Content Switching Functions: Including Layer4 to layer7 load balancing, Web cache redirection,
66
Makes contents accessed by the user directly obtained from the access point rather than via the backbone network,
improvingresponse times and reduces bandwidth cost of the backbone network accordingly. Improves Scalability;
Flexible Upgrading For Service: Advanced chipset NP (Network Processor), which is designed for next genera-
tion IP network, as forwarding engine, provides high scalability and abundant service offerings. High scalability reduces
CAPEX costs, saves on power and space and protects users investments in the network;
Distributed H/W-based wire-speed NAT features: One NAT board supports 150k session at the same
time, increase 16K session /second, Policy supports public/private address mix programming, According to NAT capacity
NAT board number flexible deploy, supports payload share and hot backup. This feature can save on IP addresses which
is usually insufficient in MAN, and simplifies configuration and maintenance saving on OAM costs;
H U A W E I
Innovative HoPE solution supported: HoPE is a Huawei patent innovation. The solution redefines the MPLS
VPN e to hierarchy (layered). This solution significantly reduces the cost of deploying a MPLS VPN, especially at the edge
of anetwork.
Specifications
Performance Support up to 64,000 MAC addresses per card, 256K IP routes and 128,000 LSPs
stored in hardware for superior performance, capacity and scalability
Supports wire speed content switching for server load balance
STP/RSTP Supports STP/RSTP, complied with IEEE 802.1D/802.1w Standard
Supports Back-pressure Based Flow Control (half-duplex)
Link Aggregation Supports the wire speed aggregation group
Supports link aggregation from switch to switch and from switch to server
VLAN Supports port-based VLAN
QinQ
Packet storm suppression Supports packet storm suppression on VLAN
Network protocol Address Resolution Protocol (ARP)
Dynamic Host Configuration Protocol (DHCP) Relay
IP routing Static routing, RIP V1/V2, OSPF V2, IS-IS, BGP V4
MPLS VPN Support MPLS L2VPN
Support MPLS L2VPN VPLS
Support MPLS L3VPN
67
Security Adopt distributed forwarding architecture different from Cache type, can effectively
prevent CPU from virus
Distributed forwarding architecture ensure interface cards working solely
Configuration security: the login users have to undergo authentication, and users of
different levels have different configuration authorities. There are two modes of user
authentication available: local authentication and RADIUS authentication
The range of IP address of Telnet login users is restricted, and the password is
required
Protocol message authentication: plain-text message authentication of OSPF,
RIP2 and BGP4, and cipher-text authentication of MD5 are supported
Based on user-defined policies, the S8016 supports 80,000 hardware wire-speed
ACLs packet filtering. Security filtering aims to redirect the filtered packet to a
certain port. It helps packet capture for analysis by using devices
Invasion proof: realizes MD5 encryption for protocol packets and user authority
and provides packet filtering mechanism that can perform firewall function
Data protection mechanism: regularly checks configuration information, and
provides data standby mechanism of active/standby devices, timely automatic
backup and manual backup of program data and configuration data, and
power-failure protection of program data and configuration data
Support several kinds of protecting of DOS attack to protect against malicious
users by limiting TCP SYN and ICMP traffic and protects against broadcast storms
by limiting broadcast traffic etc.
Support several kinds of binding with IP address, MAC address and port
Support the function of broadcast limiting
Support content switch module to protect the server inside IDC
QoS Support multiple traffic classification rules based on the source port, source VLAN
ID, source MAC address, packet type, TCP/UDP port number, IP packet address
prefix, application identification, content identification, etc.
Provides functions of flow mapping and classification, traffic policing (TP), conges
tion control methods (RED, WRED and SA-RED), queuing and output traffic
shaping when multiple rules are combined.
68
Distinguish various services, and can ensure that bandwidth; delay and jitter are
restricted within the required ranges
Enables the operators to provide their users with differentiated QoS and makes
the IP MAN to become an integrated network that carries data, voice and video
services concurrently
Support MPLS QoS, and mapping between EXP and TOS or COS
Load and update system Supports to load and update software via X-modem protocol
software Supports to load and update software via File Transfer Protocol (FTP) and Trivial
File Transfer Protocol (TFTP)
H U A W E I
System configuration/system Supports Command Line Interface (CLI) view
management Supports the configuration via Console port
Supports the local/remote configuration via Telnet
Supports the remote configuration through dial-up via Modem
Supports Huawei iManager QuidView based on SNMP Version 3
Supports the Group 1, 2, 3 and 9 MIB of RMON (Remote Monitoring)
Supports Huawei Group Management Protocol (HGMP) V2
Supports system log
System maintenance Supports filter, output and account of alarm/debugging information
Supports remote maintenance through Modem dial-up and Telnet login
Description S8016
Service slots 16 slots
Total slots 20 slots
Backplane capacity 256Gbps
Switching capacity 128Gbps
Forwarding capability 96Mpps
Dimensions (W X H X D) 482.6mm X 444.5mm X 933.45mm
Chassis Dimensions(W X H X D) 600mm X 2200mm X 800mm
Weight Max. weight during full configuration<400Kg
Power AC : 100V to 240V, 4250W
DC : -42 to -58V, 3500W
Max attitude 4000m
69
Modules
S8016 provides 16 service slots, each slot supports following module:
• 16/32 x 10/100Base-TX RJ45 interface module;
• 16 x 100Base-FX(SMF) 15km MTRJ optical interface module;
• 16 x 100Base-FX(MMF) 2km MTRJ optical interface module;
• 4 x 1000Base-Tx Ethernet interface module;
• 4 x 1000Base-SX(MMF) 500m MTRJ optical interface module;
• 12 x 1000Base-X SFP optical interface module;
• 4 x 1000Base-X GBIC optical interface module;
• 4 x 155M POS MMF 2km MTRJ optical interface module;
• 4 x 155M POS SMF 15km MTRJ optical interface module;
• 8 x 155M POS MMF 2km MTRJ optical interface module;
• 8 x 155M POS SMF 15km MTRJ optical interface module;
• 2 x 622M POS MMF 500m SC optical interface module;
• 2 x 622M POS SMF 15km SC optical interface module;
• 1 x 2.5G POS SMF 2km LC optical interface module;
• 1 x 2.5G POS SMF 15km LC optical interface module;
• 8 ports 155M STM-1 ATM MTRJ interface module;
• 2 ports 622M STM-4 ATM SFP interface module;
• 16-port 10/100Base-TX RJ-45 WebSwitch interface module;
• 4-Port 1000Base-T WebSwitch interface module;
• 4-Port 1000Base-FX GBIC WebSwitch board;
• NAT service module;
• 1 x OC48c RPR STM16c 15km interface module;
• 1 x OC48c RPR STM16c 40km interface module;
• 1x OC48c RPR STM1c 70km interface module.
GBIC Module includes:
• GBIC multi mode optical module (850nm, 550m, SC);
• GBIC single mode optical module (1550nm, 40km,SC);
• SFP multi mode optical module (850nm, 550m, LC);
70
Applications
Application in MAN Convergence Network
H U A W E I
S8016 applied in the MAN
The following details the networking application.

• In accordance with the requirement of backbone layer for high reliability and high scalability, the core devices in the
network consist of NE80 core routers and S8016 routing switches. The S8016 provides 16 slots for service use, and is
configured with master/slave control units and switch units. Its redundant power-supply backup design helps to avoid
networking breakdown due to some error. Access routing backup of high reliability is provided for important users. The
core devices are interconnected via GE interface and POS interfaces.
• As for the Ethernet access network, the community services and subscribers must be classified to ensure the security.
The MA5200 can be used as the egress device for the community; Ethernet switch S3526 and S2403 can be directly
used as access devices. They are interconnected via FE and GE interfaces. For group users, FE access mode or FR/
DDN dedicated-line access mode are supported.
• The S8016 can network with BAS (MA5200G). BAS enables access control, authentication and accounting for users,
therefore realizing flexible user management.
• The entire broadband MAN can provide services such as MPLS, VPN and multicast and realize such value-added
services as remote multimedia teaching, multimedia conferencing, audio on demand, VOD, financial data transportation,
high-efficiency file transportation, game and emulation.
71
Metro Ethernet
S8016 applied in the metro Ethernet network

• According to the requirement of backbone layer for high reliability and high scalability, the core devices in the network
consist of several S8016 routing switches. The S8016 provides 16 slots for service use, and is configured with master/
slave control units and switch units. Its redundant power-supply backup design helps to avoid networking breakdown
due to some error. Access routing backup of high reliability is provided for important users. The core devices are
interconnected via GE interface and POS interfaces.
• The S8016 can support point-to-point, point-to-multipoint and multipoint-to-multipoint services for Metro Ethernet Net
work based on MPLS VLL MPLS VPLS and QinQ.
72
Application in the Enterprise Backbone Network
H U A W E I
S8016 applied in the enterprise backbone network

• Due to the demand of the enterprise backbone network for high reliability and scalability, the core devices of the network
consist of S8016 routing switches, whose strong switching capability can ensure a high-speed LAN within the enterprise
network. The network core exchanges data with edge devices without any blocking. The core devices are interconnected
via GE interface.
• The Layer 3 characteristics and high-speed routing function of the S8016 can ensure secure and fast connection with
backbone networks.
• By running GVRP, the S8016 can exchange VLAN configuration information on 802.1Q Trunk ports, dynamically create
and manage VLAN, prune unnecessary broadcast packets as well as unicast packets with uncertain destinations and
maintain VLAN interworking between neighboring switches.
• The S8016 realizes Web cache redirection, redirecting user's Web request to local Cache. At the same time, the S8016
implements load balancing of internal servers in the enterprise network such as mail server, Web server,accounting/
authentification server and VPN gateway.
• The S8016 routing switch provides sufficient security management function and QoS guarantee for backbone layer of
enterprise network, and is able to flexibly control access right and bandwidth of internal users. The S8016 supports
standard VLAN and multiple VLAN-based extended functions. Its Layer2 VLAN characteristic is applied to isolate data
servers, so as to avoid inter-access between the servers.
73
Application in the Campus Core Network
S8016 applied in the campus core network

• Multiple services and ports are uniformly convergent to the S8016, integrating data, video, voice, and combination of
broadband and narrowband. The network can provide multiple authentication/accounting modes, with high performance-price
ratio, operable and manageable.
• The S8016 internetworks with BAS (MA5200G) for BAS to provide user access control, authentification and accounting
functions.
• For Ethernet access networks that needs authentification such as faculty dormitory network and students' dormitory
network, division of community services and users is necessary and security should be ensured. In this case, MA5200
can serve as egress authentification device and VLAN+WEB authentification can be adopted.
• Such Ethernet switches as S3026 and S2403 can be adopted in teaching area to directly function as access devices,
interconnecting with each other via FE/GE interfaces.
• The A8010, as a narrowband access device, realizes the dial-up and authentification of faculty and students dormitories.
• The MPLS L2VPN/L3VPN inside the campus network and spanning AS (Autonomous System) domains can be realized.
• The S8016 serves for campus server center via its content switching function.
• Through NAT policy, the S8016 supports mixed networking of public network addresses and private network addresses.
• The whole constructed campus network can provide high-speed Internet access service. The ideal support of the S8016
to Diffserv/QoS and multicast enables campus network to realize such value-added services as video conferencing,
on-line teaching, on-line query and on-line test.
• The S2403 and S3026 at user side of the S8016 are managed via HGMP, which simplifies the management of MAN
devices.
74
Application as the Large-capacity NAT Device
Ipv4 limited IP address resource no longer agrees with the rapid development of the Internet. Limited IP address resource
is becoming an important factor restricting the development of the Internet. Although IPv6 is an ideal solution, there is still
a long way to go for the development and application of Ipv6 on account of various reasons. Currently, NAT technology is
the only feasible solution to alleviate the problem of limited IP address resource.
The application of the S8016 as the large-capacity NAT device is shown in the following Figure.
H U A W E I
S8016 applied as a large-capacity NAT device
The following describes this networking application in detail.

• The S8016 is mainly deployed at the edge convergence layer of MAN. It supports mixed access of both private network
users and public network users, and can solve the problem of tight IP address resource via NAT function, namely, the
S8016 supports NAT function in mixed networking with both public network addresses and private network addresses.
• The user is assigned with a private network IP address in VLAN access mode, and then can access the public network
after the private network address is translated into public network address by NAT card of the S8016.
• Distributed NAT solution is applied to enable user access through the private network address in an enterprise network.
However, in mixed networking with both private network addresses and public addresses, centralized NAT networking
solution should be applied in the overall large-capacity NAT transforming in the MAN egress.
• Large-capacity NAT. One NAT card supports concurrently 150k sessions, and the session establishing rate is 5k
session/second. The S8016 supports static load sharing between NATs, and mutual backup of NAT in case of fault.
75
Application in the IDC Network
The S8016 can be used as the core or edge device of the IDC (Internet Data Center), as shown in the following Figure.
Application in the IDC network
The following details this networking application.

• The application of the S8016 can ensure a high-speed LAN in the IDC to implement non-blocking data exchange
between the core and the edge in the network.
• In the S8016 internetworks with BAS (MA5200G),BAS provides user access control, authentification and accounting
functions.
• The data servers are isolated with the S8016's Layer 2 VLAN features so as to avoid the inter-access between servers.
• The content switching function enables the S8016 to provide layer4 load balancing, layer5 to layer7 load balancing and
Web cache redirection for the Web server and FTP server in data center, so as to avoid congestion occurring during
large traffic data access and provide more reliable service for the Internet.
• The S3026 switches can be used on the access layer to connect all real servers (including servers of daemon service
management).
76
Quidway S8500 Series
Introduction
Quidway S8500 series switches are new-generation high-performance 10G core routing switches. The switches are
designed to serve as the core layer devices used in backbone networks, enterprise networks, campus networks,
e-government networks, and education MANs, etc., as well as the convergence/core layer devices for carriers' IP MANs,
featuring large switching capacity, high port-density, L2/L3 wire speed forward, easy manageability, comprehensive security
mechanism, carrier-class reliability, QoS guarantee, abundant service support, and low cost.
H U A W E I
Quidway S8505
Quidway S8512
Quidway S8508
77
Product Features
Advanced system structure: Distributed structure is adopted for the S8500 series switch, powerful ASIC chips
are used for high-speed routing, and the Crossbar technologies are adopted for high-speed packet switching, all of which
greatly improve the forwarding performance and scalability of the routing switch. Integrated with the main control module
without taking up extra slots, the Crossbars provide a switching capacity up to 720G and can be set to work in the active/
standby or load-sharing mode via software configuration. The interface module is connected to the Crossbars on the two
main control modules via two 150G buses, thus realizing the hot backup of dual main controls and dual switching networks
in the real sense and greatly improving the system reliability.
Large capacity, high-density wire-speed switching: Quidway S8500 series provides 1.8T backplane
bandwidth, 720Gbps switching capacity, and 432Mpps forwarding capacity. By appropriate combination of interface mod-
ules with different port-densities and port-attributes, flexible port configuration can be easily obtained with guaranteed wire
speed operation.
For maximum protection of customer investment, as well as ease of hardware platform upgrade, plenty of bus interfaces
are reserved on the backplane, enabling the system switching capacity to smoothly transition to terabit-level.
Support of new-generation 10G interfaces

The new-generation 10G Ethernet interface provides richer bandwidths and powerful processing capabilities while pre-
serving the compatibility and simple usage of Ethernet for easy upgrade. Meanwhile, the 10G Ethernet provides pertinent
solutions for MAN and WAN applications to simplify the network architecture and reduce the network construction costs.
The new-generation 10G Ethernet provided by the S8500 series switch overcomes a number of limitations of the earlier
10G Ethernet, provides powerful QoS guarantee based on wire-speed forwarding, and supports rich features such as
ACL, Policy Based Routing (PBR), and security. It can support wire-speed MPLS forwarding, provide better IP VPN
services and transparent LAN services.
In addition to standard LAN interfaces, the S8500 series switch provides POS and 10GBASE WAN interfaces that can be
connected to the exist SDH/SONET networks seamlessly.
MPLS/IPv6 distributed wire-speed support

The S8500 series switch complies with the design concept that attaches importance to both services and performance. On
the one hand, the bandwidth and network scale increase push the performance improvement and capacity increase of
core routing switch. On the other hand, the service development requires the core switch be more intelligent and have
more powerful service provision capabilities. The S8500 series switch adopts the powerful ASIC chip to realize the MPLS
distributed wire-speed forwarding and IPv6 ready. It also realizes high-performance services like wire-speed NAT and
Web-switch. While providing comprehensive services for users, it tailors services flexibly as actually required. The S8500
series switch provides MPLS VPN services, including L2/L3 MPLS VPN and VPLS (Virtual Private LAN Service).
78
Carrier-class reliability design
Distributed structure is adopted for the S8500 series switch to support dual main control and switch fabric modules. The
switch supports passive backplane design and all the modules support hot-swapping. The 1+1 redundant load-sharing
mechanism is adopted for the power supply system and dual power inputs are supported. The switch supports the STP/
RSTP/MSTP and VRRP protocols and can meet strict requirements for carrier-class network reliability (up to 99.999%).
Complete security mechanism

S8500 series switch supports plain text password or cryptographic MD5 authentication of OSPF, RIP v2 and BGP v4
packets. It adopts the 802.1x mode for access user authentication, and supports secure SNMPv3 protocol, configuration
security for user authentication. Users of different levels have different configuration rights and two user authentication
modes are provided: local authentication and RADIUS authentication.
H U A W E I
The S8500 series switch also supports the standard Radius protocol, provides the TACACS+ function, and supports the
HCBMTM (Huawei Constrained-based Multicast) function.
Specifications
Wire speed L2 switching All ports of interface modules support wire speed forwarding
Switching mode Store and forward
Supports binding MAC address table to the port
S8512 and S8508: 64k; S8505: 32k
STP/RSTP/MSTP Supports STP/RSTP/MSTP
Flow control Supports IEEE 802.3x-compliant flow control (full-duplex)
Supports back-pressure based flow control (half-duplex)
Port aggregation Supports wire speed aggregated group
Supports port aggregation between routing switches or from the routing switch to
server
VLAN Supports port-based VLAN, protocols-based VLAN, subnetworks-based VLAN
QinQ
Broadcast storm suppression Supports port-based broadcast suppression
Network protocol TCP/IP stack
Dynamic Host Configuration Protocol Relay
IP routing Static Routing
Routing Information Protocol (RIP) v1/v2
Open Shortest Path First (OSPF) v2
Border Gateway Protocol (BGP) v4
Integrated IS-IS
Policy Based Routing (PBR)
79
Supports Equal Cost Multi-path Routing (ECMP)
Multicast source discovery protocol (MSDP)
Multiprotocol BGP (MBGP)
IGMP snooping
Security Hierarchical user management and password protection
Supports Access Control List (ACL), Layer 2, 3, and 4 information filtering (such as
frame filtering based on port and source/destination MAC addresses, and packet
filtering based on source/destination IP addresses and upper layer protocol type).
Supports plain text authentication and MD5 authentication of OSPF, RIP v2 and
BGP v4 packets
Supports cipher text authentication using Simple Network Management Protocol (SNMP)
MPLS VPN Support MPLS forwarding
Support L2/L3 MPLS VPN and VPLS , can be deployed as provider (P) or provider edge (PE)
QoS Supports traffic classification based on port, MAC address, IP address, TCP/UDP
port number, Type of Service (ToS)/Diffserv value, etc.
Supports shaping and bandwidth management, and Committed Access Rate (CAR).
The bandwidth granularity is 1kbps
Supports priority based on VLAN port, IEEE 802.1P and ToS/Diffserv. Supports traffic
classification by Class of Service (CoS)
8 transmit queues for each port
Supports Strict Priority (SP) , WRR scheduling
Support TD, WRED congestion avoidance algorithm
System program loading and Supports program loading and upgrading using X-Modem protocol
upgrading Supports program loading and upgrading using FTP and TFTP
System configuration/system Supports both English and Chinese
management Supports CLI configuration mode
Supports Console port configuration mode
Supports local/remote configuration using Telnet
Supports remote configuration through Modem
Supports Huawei NMS based on SNMP v3
Supports MIB of RMON
Supports system logging
Supports alarm filtering
System Maintenance Supports filtering, output and counting of alarm/debugging information
Supports remote maintenance through Modem and using Telnet
80
Description S8505 S8508 S8512
Interface module slots 5 8 12
Total slots 7 10 14
Backplane capacity 750Gbps 1.2Tbps 1.8Tbps
Switching capacity 300Gbps 480Gbps 720Gbps
Forwarding capability 180Mpps 288Mpps 432Mpps
Dimensions (W X H X D) 436mm X 486mm X 450mm 436mm X 619mm X 450mm 436mm X 753mm X 450mm
Weight <65Kg <80Kg <100Kg
H U A W E I
Input voltage AC: 100V to 240V; DC: -42 to -58V
Power 1200W 2000W 2000W
Max attitude 4000m
Modules
S8505 supports 5 interface module slots, S8508 supports 8 interface module slots and S8512 supports 12 interface
module slots, each slot supports following module:
• 48-port 10/100BASE-TX RJ45 interface module;
• 20-port 100BASE-FX SFP interface module;
• 12-port 10/100/1000BASE-TX RJ45 interface module;
• 12-port 1000BASE-X SFP interface module;

• 24-port 1000BASE-X SFP interface module;
• 1-port 10GBASE-R XENPAK interface module;
• 2-port 10GBASE-R/W XFP interface module;
• 4-port 10GBASE-R/W XFP interface module;
• 4-port OC-3c POS SFP interface + 8-port 1000BASE-X SFP interface module;
• 32-port 10/100BASE-TX interface + 4-port 1000BASE-X interface module;
• 4-port 1000BASE-X-SFP interfce module + 8-port 10/100/1000BASE-TX RJ45 interfce module;
• 48-port 10/100/1000BASE-TX RJ45 w/POE interface module;
• 4-port OC-48c POS SFP interface module;
• 1-port OC-192c POS XFP interface module;

• 2-port OC-48c RPR SFP interface module;
• 2-port OC-192c RPR XFP interface module.
81
GE SFP Module includes:
SFP multi-mode optical module (850nm, 550m, LC) ;
SFP single-mode optical module (1310nm, 10km, LC);

XENPAK Module includes:

XENPAK multi-mode optical module (850nm, 300m, SC) ;
XENPAK single-mode optical module (1310nm, 10km, SC);
XENPAK single-mode optical module (1310nm, 40km, SC);
XFP Module includes:
XFP multi-mode optical module (850nm, 300m, LC) ;

XFP single-mode optical module (1310nm, 10km, LC);
XFP single-mode optical module (1550nm, 40km, LC).
82
Applications
Application in the convergence layer of MAN
Networking of the S8500 series switch serving as the convergence core equipment of an IP MAN is shown in the following
figure.
Intemet
NE80-40 NE80-40
H U A W E I
Core Layer
GE/10GE/POS
S8500
S8500
S8500
GE
ISN8850
GE/10GE GE
Convergence GE
Layer ATMOC-3
NE16
S3526C S6500
GE
MA5100 FR/CCN leased line
FE MA5200
S3026
S3025 Lecsel Line Qudway router
FE
Access Layer
Intelligent Residential
Intelligent Mansion building Area Incorporated
Users
Application in the convergence core of MAN
Aiming at the backbone network's requirements for high reliability and high expandability, the network core equipment
comprises the NE80/40 core router and the S8500 series switch. The S8500 series switch provides 5/8/12 interface
module slots, and is configured with dual main controls and dual switching units working as hot backups for each other,
and configured with multiple power supplies as redundant backups to avoid network interruption due to faults to the
utmost. The core equipment is interconnected via the GE, 10GE and POS interface.
For Ethernet access, it is necessary to subdivide the services and users to ensure the security. The MA5200 can serve as
the entry and Ethernet switches such as S3526 and S3026 can directly serve as the access equipment connected via the
FE and GE interfaces. For group users, they can be directly connected via the FE or FR/DDN dedicated lines.
The S8500 can be networked with the BAS (MA5200 series) that provides user access control, authentication and billing
functions to complete flexible user management.
The constructed broadband MAN can provide high-speed Internet access, and provide value-added services such as
VOD, video conference, IP voice, e-learning and telemedicine.
83
Application in the backbone layer of enterprise networks
Networking of the S8500 series switch serving as the backbone equipment of an enterprise network is shown in the
following figure.
Intemet
POS155/GE/FE
NMB S3526C
GE
10GE
WS S8500
Inband/outband NM
10GE 10GE DNS DHCP
10GE
VRRP
S8500
RS232 10GE
WB GE Email WEB/FTP
FE/FE trunk S8500
S6500 Enterprise Server
S3026C S3026C S3026C
Application in the enterprise backbone network
Aiming at the enterprise backbone networks' requirements for high reliability and high expandability, the network core
equipment comprises the S8500 series switch, whose powerful switching capabilities ensure a high-speed LAN environment
in the enterprise network and less congestion switching between the network core and the network border. The core
equipment is interconnected via 10G interfaces.
With its L3 features and high-speed routing functions, the S8500 is connected with the backbone network, ensuring the
secure and high-speed connection with the backbone network.
The S8500 series switch can provide full security management function and QoS guarantee for the enterprise backbone
network, and flexibly control the access authorities and bandwidths of internal users of the enterprise network. It supports
standard VLANs and multiple VLAN-based extended functions. With its L2 VLAN features, the switch can isolate data
servers and avoid access among the servers.
84
Huawei End-to-End Solutions
Router Series VoIP Products and Solution

Quidway NetEngine 5000E Terabit Switching Router Quidway A8010 Expert VoIP Gateway
Quidway NetEngine 80/80E Core Switching Router Quidway A8010 Mini-Expert VoIP Gateway
Quidway NetEngine 40/40E Series Universal Switching Quidway A8010 VoIP GateKeeper
Routers
Quidway NetEngine 20 Series High-Performance Edge
Routers BRAS
Quidway NetEngine 16E/08E/05 Series Multi-Service Edge Quidway MA5200G Broadband Intelligent Access Server
Routers Quidway MA5200F Compact Broadband Intelligent
Quidway AR 46 Series Enterprise Core Routers Access Server
Quidway AR 28 Series Modular Branch Routers

Quidway AR 18 Series Access Routers
Access Servers
LAN Switch Series Quidway A8010 Expert Remote Access Server
Quidway S8500 Series 10G Core Routing Switches Quidway A8010 Mini-Expert Remote Access Server
Quidway S8016 Multi-Service Backbone Routing Switch
Quidway S6500 Series Gigabit Routing Switches

Quidway S5516 Gigabit Routing Switch WLAN Products and Solution
Quidway S5000 Series Gigabit Intelligent Layer 2 Ethernet Huawei C9012 WLAN Authentication Server
Switches Quidway W1006E WLAN Access Point

Quidway S3900 Series Intelligent Routing Switches Quidway W1003A-RU WLAN Access Point
Quidway S3500 Series Intelligent Routing Switches Quidway WL100M WLAN Cardbus Adapter
Quidway S3000 Series Intelligent Layer 2 Ethernet Switches Huawei WG202 GPRS+WLAN Combo Card
Quidway S2000 Series Enterprise Desktop Switches
Network Management Solution

Security & VPN Products iManager N2000 Datacomm Management System
Quidway Eudemon 1000/500/200/100 Series Firewalls iManager NSM VPN Manager
Quidway Eudemon 2000 Series Session Border Conctrollers iManager NSM QoS Manager
Quidway SecPath Series Security Gateways iTellin AAA System
H U AW E I
T e c h n o l o g i e s
Huawei Technologies Co., Ltd.

(KKY!/<(>,0;,*/5636.0,:*63;+)(5?<,.(5.
05+<:;90(37(92)<10365..(5.:/,5A/,5 79*
;LS!
-H_!
O[[W!KH[HJVTTO\H^LPJVT
,THPS!PUMVYTH[PVU'O\H^LPJVT
=LYZPVU5V!4*

Huawei: Quidway Full Series Ethernet Routing Switches

Uploaded by

Document Informationclick to expand document information

Copyright:

Available Formats

Huawei: Quidway Full Series Ethernet Routing Switches

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Huawei: Quidway Full Series Ethernet Routing Switches

Uploaded by

Copyright:

Available Formats

HUAWEI

Quidway Full Series Ethernet

aggregation groups, each comprising up to eight fixed ports;

guarantee the network stability;

customer/user satisfaction, enables differentiation of service;

Wire speed L2 switching Wire speed forwarding on all ports

S2008-EI: 6.4 Gbps

S2403H-EI: 9.6 Gbps

Packet forwarding rate:

S2008-EI: 1.19 Mpps

S2016-EI: 2.53 Mpps

S2403H-EI: 3.87 Mpps

Switching mode Store and Forward

Supports port-based VLAN

Supports GVRP (GARP VLAN Registration Protocol)

Multicast GMRP (GARP Multicast Registration Protocol)

IGMP(Internet Group Management Protocol) Snooping

Compliant with IEEE 802.1D and IEEE 802.1w

Link aggregation Up to 4 aggregation groups, each containing up to 8 ports

Broadcast storm suppression Bandwidth ratio-based suppression on all ports

ports (no restriction)

MAC address table Address self-learning

IEEE 802.1D standard

Flow control IEEE 802.3x flow control (full duplex)

Back-pressure based flow control (half duplex)

Download and upgrade Supports X-Modem protocol to implement upgrade

Management Command Line Interface (CLI) configuration

Remote configuration through Telnet

Configuration through the Console port

Simple Network Management Protocol (SNMP)

Remote Monitor (RMON) 1, 2, 3 and 9 groups of MIB

Huawei Quidview Network Management System (NMS)

Maintenance Supports debugging output

Supports PING and Tracert

Supports remote maintenance through Telnet

Supports 802.1p priority (based on port or MAC address) and DSCP

(Differentiated Services Code Point) priority

Bi-directional (outbound and inbound) port rate limitation, with a packet

rate-limiting level in the range 1 to 127: The rate-limiting granularity is 64 kbps

in the range 1 to 28 and 1 Mbps in the range 29 to 127

Provides 4 priority queues on each port

Queue scheduling: Supports PQ (Priority Queuing), WRR (Weighted Round

Security features Hierarchical user management and password protection

Port-based and MAC-based 802.1X authentication

Supports RADIUS (Remote Authentication Dial-In User Service)

Remote power supply DC-powered S2016-EI can be the PD device of PoE

Description S2008-EI S2016-EI S2403H-EI

electrical ports electrical ports electrical ports

1 Console port 1 Console port 1 Console port

Quantity of expansion slot(s) 0 1 1

Interface module options None 100Base-FX single 100Base-FX single

mode/multi-mode module, mode/multi-mode module,

100Base-FX single 100Base-FX single

medium-haul optical medium-haul module

100Base-T PoE interface

Switching capacity(bps) 6.4G 6.4G 9.6G

Forwarding capability (PPS) 1.19M 2.53M 3.87M

SDRAM 32M 32M 32M