H3C S5170-28S-EI L2 Ethernet Switch with 24*10/100/1000BASE-T Ports and 4*1G/10G BASE-X SFP Plus Ports,(AC)

H3C Intelligent Resilient Framework 2 (IRF2)

H3C Intelligent Resilient Framework 2 (IRF 2) virtualizes multiple S5170-EI switches into one virtual switch and provides the following benefits:

• Scalability: IRF 2 allows you to add devices to the IRF 2 system easily. It provides a single point of management, enables switch plug-and-play, and supports software auto-update for software synchronization from the master to the new member devices. It brings business agility with lower total cost of ownership by allowing new switches to be added to the fabric without network topology change as business grows.
• High availability: The H3C proprietary routing hot backup technology ensures redundancy and backup of all information on the control and data planes and non-stop Layer 3 data forwarding in an IRF 2 fabric. It also eliminates single point of failure and ensures service continuity.
• Redundancy and load balancing: The distributed link aggregation technology supports load sharing and mutual backup among multiple uplinks, which enhances the network redundancy and improves link resources usage.
• Flexibility and resiliency: The switch use standard GE ports instead of specialized ports for IRF links between IRF member devices. This allows customers to assign bandwidth as needed between uplink, downlink, and IRF system connections. In addition, an S5170-EI IRF fabric can span a rack, multiple racks, or multiple campuses.

Comprehensive Security Control Policies

Endpoint Admission Defense (EAD), in conjunction with the backend system, integrates endpoint security (including anti-virus and patching) and network security (including network access control and access right control) into an interactive security system. By checking, isolating, repairing, managing, and monitoring the endpoints, this system turns reactive single-point defense to proactive, all-round defense, and dispersed management to centralized policy management. This system enhances the overall network protection against numerous security threats and improves the responsiveness to new threats.

The switch supports unified MAC address authentication, 802.1x authentication, and portal authentication; dynamic or static binding of user identifiers such as user account, IP address, MAC address, VLAN, and port number; and dynamic application of user profiles or policies (such as VLAN, QoS, and ACL) on users. Using the switch in conjunction with H3C IMC, you can manage and monitor online users in real time and take prompt action on illegitimate behaviors.

The switch offers a large number of inbound and outbound ACLs and VLAN-based ACL assignment.

The switch supports Unicast Reverse Path Forwarding (uRPF), which protects a network against source spoofing attacks, preventing DoS and DDoS attacks.

High Availability

• The S5170-EI switch series features multiple redundancy measures at the device and link levels, support current and voltage surge control, overheat protection, power and fan troubleshooting and alert, as well as fan speed adjustment when the temperature changes.
• Apart from device level redundancy, The S5170-EI series switch also provides diverse link redundancy support such as LACP/STP/RSTP/MSTP/Smart Link protocols. It supports IRF2 and 1: N redundancy backup as well as cross-device link aggregation which substantially increases network reliability.

Abundant QoS Features

The S5170-EI series switches offer abundant QoS features, including:

• Packet filtering based on packet header fields from Layer 2 through Layer 4, including source MAC, destination MAC, source IP, destination IP, TCP/UDP port number, protocol type, and VLAN.
• Flexible queuing and scheduling algorithms configured on a per-port or per-queue basis, including strict priority (SP), weighted round robin (WRR), and SP+WRR.
• Committed access rate (CAR) with the minimum granularity at 16 kbps.
• Port mirroring in both outbound and inbound directions for network monitoring and trouble shooting.

Professional Surge Protection Function

H3C S5170-EI series switches use professional built-in surge protection technology and support the industry-leading 10KV service port surge protection capability, which greatly reduces the damage rate of surge strikes to equipment even in harsh working environments.

Excellent Manageability

H3C S5170-EI switch series makes switch management with ease with the support of SNMPv1/v2c/v3, which can be managed by NM platforms, such as Open View and iMC. With CLI and Telnet switch management is made easier. And with SSH 2.0 encryption, switch management security is enhanced.

H3C S5170 EI switch supports BIMS protocol and can automatically download configuration files and applications from the server to achieve zero configuration startup, greatly reducing the initial configuration workload of large networks and complex networks.

Application-Driven Campus

H3C S5170S-EI series switches support H3C Application-Driven Campus (AD-Campus) Solution. AD-Campus is innovative campus network solution which aims to achieve great integration and convergence to easily reflect intent to network operation. With full lifecycle, open architecture and deep intelligence, AD-Campus is along with partner to be committed to solve existing challenges and assist customers to accelerate digital innovation and transformation.

Cloud Empowerment, Simplified Network

H3C S5170S-EI series switches support H3C Cloudnet solution. Cloudnet empowers the network through unified operation and maintenance cloud, enabling minimal network deployment, achieving minute-level deployment, zero on-site operation and maintenance, and shortening the time for customer business to go online; AI empowerment enables minimal network operation and maintenance, intelligent network optimization, fault prediction, and provides customers with an excellent user experience; Cloudnet can also empower business, and provide customers with business innovation through strong data operation capabilities. Improve the effectiveness of corporate operations.

Green Design

H3C S5170-EI series switches use the latest energy-saving chips and innovative architecture design solutions to achieve the lowest power consumption of gigabit switches, bringing users green, environmentally friendly and energy-saving new network access products and reducing user maintenance costs.

At the same time, H3C S5170-EI series switches adopt various green energy-saving designs, including auto-power-down (port automatic energy-saving). If the interface status is always down for a period, the system will automatically stop power supply to the interface and automatically enter the energy-saving mode. Support EEE energy-saving function, if the port is idle for a period, the system will set the port to the energy-saving mode, and when there is a packet to be sent and received, it will wake up the port to resume services through the monitoring code stream sent regularly to achieve the effect of energy saving. Meet the EU RoHS standard for material environmental protection and safety.

Enabling Energy Saving Features on an Ethernet Interface, which contains auto power-down and Energy Efficient Ethernet (EEE) on an Ethernet interface on the RJ-45 ports and low-power operations for industry.