Adopts advanced CLOS multi-level and multi-plane switching architecture to provide continuous bandwidth upgrade capabilities.
Supports 40GE and 100GE Ethernet standards, fully meeting the application and future development needs of non-blocking campus networks.
Independent switching network board, control engine and switching network board hardware are independent of each other, maximizing equipment reliability and ensuring continuous bandwidth upgrades for subsequent products. Adopting innovative hardware design, it provides the system with powerful control capabilities and 50ms high reliability guarantee through fully distributed independent control engines, detection engines, and maintenance engines;
Distributed control engine, all services Each board provides a powerful control and processing system, which can easily process various protocol messages and control messages, and supports fine control of protocol messages, providing the system with a complete ability to resist protocol message attacks;
Distribution Based on the detection engine, all service boards can perform distributed BFD, OAM and other fast fault detection, and are linked with the control plane protocol to support fast protection switching and fast convergence, and can achieve 50ms fault detection to ensure uninterrupted services;
The distributed maintenance engine and intelligent CPU system support intelligent power management and can support sequential power on and off of single boards (reduce the power impact caused by simultaneous power on of single boards, increase equipment life, reduce electromagnetic radiation, Reduce system power consumption), check device online status. To meet the needs of horizontal business integration in campus networks, S10500 supports IRF2 (second generation Intelligent Flexible Architecture) technology, which virtualizes multiple high-end devices into one logical device. It has strong advantages in reliability, distribution and ease of management. , mainly reflected in three aspects:
1. Reliability: Through the patented routing hot backup technology, redundant backup and uninterrupted three-dimensional backup of all information on the control plane and data plane are realized within the entire virtual architecture. Layer forwarding greatly enhances the reliability and high performance of the virtual architecture, while eliminating single points of failure and avoiding business interruption;
2. Distribution: through distributed cross-device link aggregation technology , to achieve load sharing and mutual backup of multiple uplinks, thereby improving the redundancy of the entire network architecture and the utilization of link resources;
3. Ease of management: the entire elastic architecture** * Use one IP management to simplify network device management and network topology management, improve operational efficiency and reduce maintenance costs. The S10500 series adheres to H3C's open architecture design concept - Open Application Architecture (OAA) supports security control modules such as firewall modules, IPS modules, load balancing, etc., which can extend security protection functions to each port of the switch; supports virtual firewall functions, Network firewall rental services can be provided for VPN users. Achieving seamless integration of network services and security services.
Supports user hierarchical management and password protection, authenticates logged-in users, and users of different levels have different configuration permissions. User authentication methods include: AAA authentication, RADIUS authentication and other authentication methods; supports SSHv2. 0, provides a secure encrypted channel for user login; supports standard and extended ACL, which can filter packets to prevent network attacks; supports multi-level protection mechanisms on the control plane to prevent DoS/DDoS attacks; supports uRPF technology to prevent source address-based attacks Deceptive cyber attacks. As the basic protocol of next-generation networks, IPv6 has been widely recognized for its unique technical advantages. The S10500 series fully supports the IPv6 protocol family, supports IPv6 static routing, RIPng, OSPFv3, IS-ISv6, BGP4 and other IPV6 routing protocols, and supports rich IPv4 Transition technologies to IPv6 include: IPv6 manual tunnels, 6to4 tunnels, ISATAP tunnels, GRE tunnels, IPv4-compatible automatic configuration tunnels and other tunnel technologies to ensure a smooth transition from IPv4 to IPv6.