H3C S3600-28F-EI, S3600-28P-SI, S3600-28P-PWR-EI, S3600-28P-PWR-SI, S3600-52P-SI Datasheet

SWITCHING

H3C S3600

Overview

H3C S3600 Series Ethernet Switches are a new generation of premier
multi-layer switches that entirely fulfill the enterprise requirement for
design and implementation of a unified, highly resilient network. One of
the most important and innovative highlights of the S3600 Series
Ethernet Switches is the IRF (Intelligent Resilient Framework)
technology which offers the highly efficient advantage of stackable
technology. IRF enables network managers to build adaptable
networks with high reliability, scalability and easy management. “Pay as
you go” is the slogan of the S3600 Series Ethernet Switches.

H3C S3600 Series Ethernet Switches include the following models:
S3600-28P-SI, S3600-28TP-SI, S3600-28P-EI, S3600-28F-EI,
S3600-28P-PWR-EI, S3600-28P-PWR-SI, S3600-52P-SI,
S3600-52P-EI, S3600-52P-PWR-SI and S3600-52P-PWR-EI.

Features

Full wire-speed, multi-layer switching

u The S3600 Series offer L2/L3 wire-speed switching capability for

all ports. The system offers 4 GE ports to meet the requirement of
a single piece of equipment for multiple Gigabit uplinks and for
access to the Gigabit server, thereby greatly increasing savings
on equipment investment.

u The hardware supports L3 wire-speed switching, and is able to

identify and process the application traffic flows from L2~L4.

u All ports have an independent data packet filter, and distinguish

specific application flows for different management and control.

IRF Technology

Intelligent Resilient Framework (IRF) is an innovative resilient network
technology that allows enterprise customers to design and implement
Fast Ethernet core and aggregation that are adaptable, providing
exceptional reliability, scalability and easy management. With IRF
technology, the S3600 Series switches can be interconnected together
to behave as a single logical switching entity called a Distributed Fabric.

From management and configuration perspectives, the Fabric appears
as a single device, while from a performance perspective, each switch
in the Distributed Fabric can make its own forwarding decisions, both at
Layer 2 and Layer 3 for traffic that appears on its ports.

The IRF technology provides: DDM (Distributed Device Management),
DRR (Distributed Resilient Routing) and DLA (Distributed Link
Aggregation).

u Distributed Device Management (DDM)

Distributed Device Management is the control system for IRF
technology, responsible for distributing management and control
information across the IRF Distributed Fabric.

u Distributed Resilient Routing (DRR)

Distributed Resilient Routing, provided by Enhanced Image, is an
advanced routing implementation that allows multiple
interconnected switches in an IRF Distributed Fabric to behave as
a single active routing entity.

u Distributed Link Aggregation (DLA)

Distributed Link Aggregation, provided by Enhanced Image,
allows networks and IRF Distributed Fabrics to be coordinated

SWITCHING

2

with switches at the edge of the network. DLA guarantees high
levels of resilience since failure in one of the members of the
Aggregated Link results in automatic redistribution of traffic across
the remaining links.

Excellent PoE (Power over Ethernet) Supply Function

The S3600 Series Switches support PoE function for the LAN switching
infrastructure, which provides power over a copper Ethernet cable to an
endpoint (Powered Device).

H3C S3600

based on source MAC address、destination MAC address、VLAN、
source IP address、destination IP address, ports and protocols.

u The S3600 Series supports flexible queue scheduling algorithms,

which can be set on the basis of port and queue at the same time.
They support Strict Priority (SP), Weighted Round Robin(WRR),
Weighted Fair Queuing (WFQ), SP+WRR, and SP+WFQ; 8
priority queues and 2 drop precedence; WRED congestion
avoidance algorithm and port traffic shaping.

u The S3600 Series switches provide up to 48 simultaneous

full-powered PoE ports at 15.4W for maximum powered-device
support, such as IP telephony and wireless LAN deployments. As
PSE (Power Sourcing Equipment) devices, all S3600 series
Switches are 802.3af compliant PoE switches.

u With PoE and Voice VLAN technology, these innovative switches

can provide the perfect solution for a converged voice and data
network.

High reliability

u The S3600 Series supports STP/RSTP/ MSTP, greatly improving

redundant back-up for links and fault tolerance capability, so the
network can run with high levels of stability.

u The S3600 Series supports the optional RPS (Redundant Power

Supply, provided by Enhanced Image), thus improving the fault
tolerance capability and normal network operation duration.

u The S3600 Series supports VRRP (provided by Enhanced Image),

and can build a VRRP back-up group with other L3 switches. In
this way, a redundant route topological structure can be built so
that when a fault occurs in guaranteeing communication
continuity and reliability, network stability is maintained.

u The S3600 Series supports the VRRP backup group port tracking

function. As long as this function is enabled, customers can elect
to track the link state of the master’s uplink port and decrease the
priority of the switch when the port fails. This in turn triggers the
new master to be determined in the backup group.

u The S3600 Series supports ECMP (Equal Cost Multi-path

Protocol, provided by Enhanced Image) routing, which can be
used for load balance and routing redundancy.

Abundant QoS policies

u The S3600 Series supports Committed Access Rate (CAR) and

limits the traffic speed at 64Kbit/s granularity.

u The S3600 Series can configure the Priority for Protocol Packets.

Each protocol packet has its own priority. Customers can modify
the priority of the protocol packet with the help of relevant QoS
commands.

Flexible security control policies

u The S3600 Series supports ARP detection to guard against ARP

spoofing launching by hackers or attackers. According to the ARP
detection function, the switches check the validity of the ARP
packets using the DHCP-Snooping table or the manually
configured IP bonding table. You can also set trusted ports. ARP
packets coming from the trusted ports will not be checked, while
those from other ports will be checked through the
DHCP-Snooping table or the manually configured IP binding
table.

u The S3600 Series supports 802.1x authentication to identify users

who attempt to access the network. With the 802.1x client version
checking function enabled on a switch, the switch checks the
version and validity of the 802.1x client running on supplicant
systems to prevent those using earlier versions of the 802.1x
client or illegal clients from logging in.

u The S3600 Series supports Centralized MAC address

authentication. It controls accesses to a network through ports
and MAC addresses. This kind of authentication requires no client
software. When operating in centralized MAC address
authentication mode, a switch begins to authenticate the user if it
detects a new user MAC address. Additionally, the S3600 Series
can perform 802.1x authentication and MAC address-based
authentication simultaneously.

u The S3600 Series supports L2~L4 complex flow classification

u The S3600 Series supports the Guest VLAN function. This

SWITCHING

3

S3600-28P-SI / S3600

-

28P-EI /

S3600-52P-SI / S3600

-

52P-EI /

function enables supplicant systems that are not authenticated to
access specific resources and thus perform the corresponding
operations, such as obtaining the 802.1x client, upgrading the
client, or obtaining other upgrading programs.

u The S3600 Series can also prevent unauthorized access to the

network by binding any combination of MAC, IP and PORT.

Diversified System Configuration and management modes

u The S3600 Series supports Simple Network Management

Protocol (SNMP) v1/v2/v3 and RMON (Remote Monitoring) v1,
1/2/3/9 groups of MIBs. These can be managed by a general
network management platform such as OpenView, and H3C iMC
network management system.

u The S3600 Series supports Command Line Interface (CLI), Web

based network management, modem dial-up and TELNET, all of
which make the equipment management more convenient.

u The S3600 Series supports HGMP V2 cluster management. After

enabling HGMP V2, the network administrator can manage
several member switches through one command switch and only
the command switch needs a public network IP address. This can
add up to large public IP address savings and also contributes
significantly to more effective network management.

H3C S3600

Abundant System Maintenance and debugging methods

u The S3600 Series supports DLDP (Device Link Detection

Protocol). DLDP can detect the link status of the optical fiber cable
or copper twisted pair. If DLDP finds a unidirectional link, it
disables the related port automatically or informs users to disable
it manually depending on the specific configuration, to avoid
potential network problems.

u The S3600 Series supports Loopback detection on ports. After

users enable loopback detection for Ethernet ports, the switch will
monitor whether the ports have loopback on a regular basis. If the
switch detects loopback for a particular port, then it will put that
port under control.

u The S3600 Series supports VCT (Virtual Cable Test), convenient

for troubleshooting. Customers can start the virtual cable test
(VCT) to make the system test the cable connected to the current
electrical Ethernet port. The test items include: whether a short or
open circuit exists in the Rx/Tx direction of the cable, and the
length of the cable in normal status or the length from the port to
the fault point of the cable.

Specifications

Port Configuration

Fixed ports

Extended Ports

Extended Module

S3600-28P-PWR-SI/S3600-28P-

(1) 24 10/100 BASE-TX
Ethernet ports ;
(2) 1 console port

4 1000M SFP
extended ports

(1) SFP-GE-T
(2) SFP-GE-SX (850nm, 0.55km)
(3) SFP-GE-LX (1310nm, 10km)
(4) SFP-GE-LH40 (1310nm, 40km)
(5) SFP-GE-LH40 (1550nm, 40km)
(6) SFP-GE-LH70 (1550nm, 70km)
(7) SFP-GE-LH70 -CW (1470nm, 70km)
(8) SFP-GE-LH70 -CW (1490nm, 70km)
(9) SFP-GE-LH70 -CW (1510nm, 70km)
(10) SFP-GE-LH70 -CW (1530nm, 70km)
(11) SFP-GE-LH70 -CW (1550nm, 70km)
(12) SFP-GE-LH70 -CW (1570nm, 70km)
(13) SFP-GE-LH70 –CW (1590nm, 70km)
(14) SFP-GE-LH70 -CW (1610nm, 70km

PWR-EI

(1) 24 10/100
BASE-TX Ethernet ports;
(2) 2 10/100/1000 BASE-T
Ethernet ports ;
(3) 1 console port

2 1000M SFP extended ports 4 1000M SFP extended ports

S3600-28TP-SI

S3600-52P-PWR-SI/

S3600-52P-PWR-EI

(1) 48 10/100
BASE-TX
Ethernet ports;
(2) 1 console
port

(1) SFP-GE-T
(2) SFP-GE-SX (850nm, 0.55km)
(3) SFP-GE-LX (1310nm, 10km)
(4) SFP-GE-LH40 (1310nm, 40km)
(5) SFP-GE-LH40 (1550nm, 40km)
(6) SFP-GE-LH70 (1550nm, 70km)
(7) SFP-GE-LH70 -CW (1470nm, 70km)
(8) SFP-GE-LH70 -CW (1490nm, 70km)
(9) SFP-GE-LH70 -CW (1510nm, 70km)
(10) SFP-GE-LH70 -CW (1530nm, 70km)
(11) SFP-GE-LH70 -CW (1550nm, 70km)
(12) SFP-GE-LH70 -CW (1570nm, 70km)
(13) SFP-GE-LH70 -CW (1590nm, 70km)
(14) SFP-GE-LH70 -CW (1610nm, 70km)
(15) SFP-FE-SX (1310nm, 2km)
(16) SFP-FE-LX (1310nm, 15km)
(17) SFP-FE-LH40 (1310nm, 40km)
(18) SFP-FE-LH80 (1550nm, 80km)

(1) 24 100BASE-FX SFP ports;
(2) 2 10/100/1000 BASE-T
Ethernet ports ;
(3) 1 console port

2 1000M SFP
extended ports

S3600-28F-EI