Huawei S5700LI User Manual

Download

S5700 Series Ethernet Switches

Product Description

Issue 18

Date 2016-11-09

HUAWEI TECHNOLOGIES CO., LTD.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.

Trademarks and Permissions

and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd. All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice

The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and recommendations in this document are provided "AS IS" without warranties, guarantees or representations of any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute a warranty of any kind, express or implied.

Huawei Technologies Co., Ltd.

Address: Huawei Industrial Base

Bantian, Longgang Shenzhen 518129 People's Republic of China

Website: http://e.huawei.com

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

Intended Audience

This document describes the positioning, characteristics, architecture, link features, service features, application scenarios, operation and maintenance functions, and technical specifications of the switch.

This document helps you understand the characteristics and features of the switch.

This document is intended for:

About This Document

Statement

l Network planning engineers

l Hardware installation engineers

l Commissioning engineers

l Data configuration engineers

l On-site maintenance engineers

l Network monitoring engineers

l System maintenance engineers

The device provides the mirroring function for network monitoring and fault management, during which communication data may be collected. Huawei alone is unable to collect or save the content of users' communications. It is suggested that you activate the functions based on the applicable laws and regulations in terms of purpose and scope of usage. You are obligated to take considerable measures to ensure that the content of users' communications is fully protected when the content is being used and saved.

The device provides the NetStream function for network traffic statistics collection and advertisement, during which data of users may be used. You are obligated to take considerable measures, in compliance with the laws of the countries concerned and the user privacy policies of your company, to ensure that the data of users is fully protected.

Disclaimer

This document is designed as a reference for you to configure your devices. Its contents, including web pages, command line input and output, are based on laboratory conditions. It provides instructions for general scenarios, but does not cover all use cases of all product

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

NOTE

S5700 Series Ethernet Switches Product Description

models. The examples given may differ from your use case due to differences in software versions, models, and configuration files. When configuring your device, alter the configuration depending on your use case.

The specifications provided in this document are tested in lab environment (for example, the tested device has been installed with a certain type of boards or only one protocol is run on the device). Results may differ from the listed specifications when you attempt to obtain the maximum values with multiple functions enabled on the device.

Symbol Conventions

The symbols that may be found in this document are defined as follows.

About This Document

Symbol

Description

Indicates an imminently hazardous situation which, if not avoided, will result in death or serious injury.

Indicates a potentially hazardous situation which, if not avoided, could result in death or serious injury.

Indicates a potentially hazardous situation which, if not avoided, may result in minor or moderate injury.

Indicates a potentially hazardous situation which, if not avoided, could result in equipment damage, data loss, performance deterioration, or unanticipated results.

NOTICE is used to address practices not related to personal injury.

Calls attention to important information, best practices and tips.

NOTE is used to address information not related to personal injury, equipment damage, and environment deterioration.

Change History

Updates between document issues are cumulative. Therefore, the latest document version contains all updates made to previous versions.

Changes in Issue 18 (2016-11-09)

The eighteenth commercial release has the following updates:

The documentation is modified according to updates in product features.

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

iii

S5700 Series Ethernet Switches Product Description

Changes in Issue 17 (2016-08-12)

The seventeenth commercial release has the following updates:

The S5720LI/S5720S-LI product description is added.

Changes in Issue 16 (2016-07-22)

The sixteenth commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 15 (2016-03-31)

The fifteenth commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 14 (2015-10-23)

The fourteenth commercial release has the following updates:

About This Document

The documentation is modified according to updates in product features.

Changes in Issue 13 (2015-07-31)

The thirteenth commercial release has the following updates:

The S5720SI/S5720S-SI product description is added.

Changes in Issue 12 (2015-07-17)

The twelfth commercial release has the following updates:

The content in chapter 3 Product Performance is optimized.

Changes in Issue 11 (2014-10-25)

The eleventh commercial release has the following updates:

The S5720EI product description is added.

Changes in Issue 10 (2014-08-25)

The tenth commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 09 (2014-07-20)

The ninth commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 08 (2014-05-25)

The eighth commercial release has the following updates:

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

The documentation is modified according to updates in product features.

Changes in Issue 07 (2014-04-30)

The seventh commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 06 (2014-03-20)

The sixth commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 05 (2014-03-12)

The fifth commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 04 (2013-11-06)

About This Document

The fourth commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 03 (2013-09-30)

The third commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 02 (2013-07-25)

The second commercial release has the following updates:

The documentation is modified according to updates in product features.

Changes in Issue 01 (2013-05-30)

Initial commercial release.

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description Contents

About This Document.....................................................................................................................ii

1 Product Overview..........................................................................................................................1

1.1 Product Positioning.........................................................................................................................................................2

1.2 Product Characteristics................................................................................................................................................... 2

2 Application Scenarios...................................................................................................................6

2.1 Application of the S5700 on a Large-scale Enterprise Campus Network......................................................................7

2.2 Application of the S5700 on a Small- or Medium-scale Enterprise Campus Network..................................................8

2.3 Application of the S5700 on a Small-scale Enterprise Campus Network......................................................................9

2.4 Application in Public Cloud........................................................................................................................................... 9

3 Product Performance...................................................................................................................11

3.1 Product Features Supported by V200R010C00............................................................................................................12

3.2 Product Features Supported by V200R009C00............................................................................................................23

3.3 Product Features Supported by V200R008C00............................................................................................................33

3.4 Product Features Supported by V200R007C00............................................................................................................44

3.5 Product Features Supported by V200R006C00............................................................................................................54

3.6 Product Features Supported by V200R005C00............................................................................................................63

3.7 Product Features Supported by V200R003C00............................................................................................................74

3.8 Performance Specifications.......................................................................................................................................... 84

4 Hardware Information................................................................................................................85

5 References..................................................................................................................................... 87

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

About This Chapter

1 Product Overview

1.1 Product Positioning

1.2 Product Characteristics

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

1.1 Product Positioning

The S5700 series Ethernet switches (S5700 for short) are next-generation energy-saving switches developed by Huawei to meet the demand for high-bandwidth access and Ethernet multi-service aggregation. Based on cutting-edge hardware and Huawei Versatile Routing Platform (VRP) software, the S5700 provides a large switching capacity, high reliability (double power slots and hardware Ethernet OAM), and high-density GE ports to accommodate 10 Gbit/s upstream transmissions. It also supports Energy Efficient Ethernet (EEE) and iStack. The S5700 can be used in various enterprise network scenarios. For example, it can function as an access or aggregation switch on a campus network, a gigabit access switch in an Internet data center (IDC), or a desktop switch to provide 1000 Mbit/s access for terminals.

The S5700 is available in a lite (LI) series, a standard (SI) series, an enhanced (EI) series, and a hyper (HI) series.

1.2 Product Characteristics

1 Product Overview

Various Port Combinations

The S5700-EI, S5710-EI and S5720-EI support various extended subcards that provide highdensity GE/10GE uplink ports. The flexible port combinations meet bandwidth expansion requirements, protecting customers' investment.

Intelligent Stack

The S5700 supports intelligent stack (iStack). This technology combines multiple switches into a logical switch.

Member switches in a stack implement redundancy backup to improve device reliability and use inter-device link aggregation to improve link reliability. iStack provides high network scalability. You can increase ports, bandwidth, and processing capacity of a stack by simply adding member switches to the stack. iStack also simplifies device configuration and management. After a stack is set up, multiple physical switches are virtualized into one logical device. You can log in to any member switch in the stack to manage all the member switches in the stack.

The S5720-SI/S5720S-SI/S5720-EI/S5720-LI/S5720S-LI support stacking through electrical ports.

Innovative AHM Energy Saving Technologies

The S5700-LI series (except S5700-52X-LI-48CS-AC, S5700-28P-LI-BAT and S5700-28PLI-24S-BAT) and S5720-LI/S5720S-LI series smart energy-saving switches reduce power consumption without degrading system performance and user experience. The S5700-LI series uses innovative energy-saving technologies including energy efficient Ethernet (EEE), port power detection, dynamic CPU frequency adjustment, and device sleeping. These technologies help reduce power consumption by adjusting power depending on the Up/Down states of links, presence/absence of optical modules, shutdown and undo shutdown operations on ports, and peak and off-peak hours. The S5700-LI series is the industry's first switch series

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

that supports entire device sleeping, and it provides three energy saving modes to adapt to different usage scenarios: standard mode, basic mode, and deep mode.

Comprehensive VPN Technologies

The S5700 supports the multi-VPN-instance CE (MCE) function, which allows users in different VPNs to connect to the same switch and isolates users through multi-instance routing. Users in multiple VPNs connect to a PE device through the same physical uplink port on the switch, which reduces the investment on network deployment. The S5710-EI and S5700-HI support Multiprotocol Label Switching (MPLS) QoS, MPLS traffic engineering (TE), virtual leased line (VLL), virtual private LAN service (VPLS), and Layer 3 virtual private network (L3VPN). They can provide high-quality private line access services for enterprises and are cost-effective case-shaped MPLS switches.

Easy Operation and Maintenance

The S5700 supports EasyDeploy, USB-based deployment, batch remote upgrade and is a plug-and-play product. These functions facilitate device deployment, upgrade, service provisioning, and other management and maintenance operations, and also greatly reduce costs of operation and maintenance. The S5700 can be managed and maintained using Simple Network Management Protocol (SNMP) V1, V2c, and V3, command line interface (CLI), web-based network management system, Telnet, or Secure Shell (SSH) V2.0. Additionally, it supports remote network monitoring (RMON), multiple log hosts, port traffic statistics collection, and network quality analysis that help in network consolidation and reconstruction.

1 Product Overview

The S5700 can use the GARP VLAN Registration Protocol (GVRP) to implement dynamic distribution, registration, and propagation of VLAN attributes. GVRP reduces manual configuration workload and ensures correct configuration. Besides, the S5700 supports the MUX VLAN function, which involves a principal VLAN and multiple subordinate VLANs. Subordinate VLANs are classified into group VLANs and separate VLANs. Ports in the principal VLAN can communicate with ports in subordinate VLANs. Ports in a subordinate group VLAN can communicate with each other, whereas ports in a subordinate separate VLAN can communicate only with ports in the principal VLAN.

Excellent Network Traffic Analysis

The S5700 provides the NetStream function and can function as a NetStream data exporter. It periodically collects data traffic statistics, encapsulates the statistics in standard V5, V8, or V9 packets, and sends the packets to the NetStream data collector according to NetStream configuration. The collected statistics are then processed to dynamically generate reports, analyze traffic attributes, and generate alarms on abnormal traffic. The NetStream function helps you optimize network structure and adjust resource deployment in a timely manner.

The S5700 supports the sFlow function. It uses a method defined in the sFlow standard to sample traffic passing through it and sends sampled traffic to the collector in real time. The collected traffic statistics are used to generate statistical reports, helping enterprises maintain their networks.

Flexible Ethernet Networking

In addition to traditional Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP), the S5700 supports Huaweideveloped Smart Ethernet Protection (SEP) technology and the latest Ethernet Ring Protection Switching (ERPS) standard. SEP is a ring protection protocol specific to the

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

Ethernet link layer, and applies to various ring network topologies, such as open ring topology, closed ring topology, and cascading ring topology. This protocol is reliable, easy to maintain. ERPS is defined in ITU-T G.8032. It implements millisecond-level protection switching based on traditional Ethernet MAC and bridging functions.

The S5700 supports Smart Link and Virtual Router Redundancy Protocol (VRRP), which implement backup of uplinks. One S5700 switch can connect to multiple aggregation switches through multiple links, significantly improving reliability of access devices. In addition, the S5700 provides multiple connection fault detection mechanisms, including Ethernet OAM (IEEE 802.3ah/802.1ag /ITU Y.1731) and Bidirectional Forwarding Detection (BFD).

Diversified Security Control

The S5700 supports MAC address authentication and 802.1X authentication and implements dynamic delivery of policies (VLAN, QoS, and ACL) to users.

The S5700 provides a series of mechanisms to defend against DoS attacks and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks. User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and change of the DHCP CHADDR value. The S5700 collects and maintains information about access users, such as IP addresses, MAC addresses, IP address leases, VLAN IDs, and access interfaces in a DHCP snooping binding table. In this way, it can defend against DHCP attacks on the network. You can specify DHCP snooping trusted and untrusted ports to ensure that users connect only to the authorized DHCP server.

1 Product Overview

The S5700 supports strict ARP learning. This feature prevents ARP spoofing attackers from exhausting ARP entries so that users can connect to the Internet normally.

Mature IPv6 Technologies

The S5700 uses the mature, stable Versatile Routing Platform (VRP) and supports IPv4/IPv6 dual stacks, IPv6 routing protocols (RIPng, OSPFv3, BGP4+, and IS-IS for IPv6), and IPv6 over IPv4 tunnels including manual, 6-to-4, and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) tunnels. With these IPv6 features, the S5700 can be deployed on a pure IPv4 network, a pure IPv6 network, or a shared IPv4/IPv6 network, helping realize IPv4-toIPv6 transition.

Innovative Built-in Battery

The S5700-LI-BAT(S5700-28P-LI-BAT and S5700-28P-LI-24S-BAT) is the industry's first switch model that supports internal lithium batteries as a backup power supply. It ensures uninterrupted services in situations where power failures frequently occur at the access layer. The S5700-LI-BAT has the following advantages:

l In the event of a mains power failure the battery can power the switch, so services will

not be interrupted.

l Compared with switches using external power supply units, the S5700-LI-BAT occupies

less space and is easier to install.

l Intelligent power management, long standby time.

l Battery LAN switches on the entire network can be managed centrally using a web

system, facilitating network operation and maintenance. As the battery lifetime is predictable, you do not need to replace batteries periodically, reducing hardware costs.

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

l The internal battery provides alarm and voltage/current protection functions as well as

overtemperature protection, enhancing reliability.

Ground-Free Design

The non-PoE models of S5720-LI/S5720S-LI adopt the ground-free design. Only the 220 V power module needs to be grounded. This design facilitates switch deployment in the places where grounding is difficult, such as corridor.

CSFP Providing High-Density Access and Increased Bandwidth

CSFP switches support downlink CSFP ports. Each downlink CSFP port equipped with a CSFP GE optical module and one pair of fibers can provide 2 Gbit/s bandwidth bidirectionally, which is two times the bandwidth of standard SFP optical modules. The 24 downlink CSFP ports can provide 48 Gbit/s bandwidth bidirectionally, implementing highdensity access (equal to access of 48 standard SFP ports) and saving the cost of deploying fibers and adding optical modules.

Cloud-based Management

1 Product Overview

Huawei provides the Agile Cloud Network solution based on public cloud. Since V200R010C00, the S5720SI/S5720S-SI can be managed by a cloud management platform as a cloud box. In the Agile Cloud Network solution, the cloud box is plug-and-play. It automatically connects to the cloud management platform and uses bidirectional certificate authentication to ensure management channel security. The cloud box provides the Netconf&YANG interface for the cloud management platform to deliver configurations remotely. In addition, remote maintenance and fault diagnosis can be performed on the cloud box through the cloud management platform.

2 Application Scenarios

2.1 Application of the S5700 on a Large-scale Enterprise Campus Network

This section describes the application of the S5700 on a large-scale enterprise campus network.

2.2 Application of the S5700 on a Small- or Medium-scale Enterprise Campus Network

This section describes the application of the S5700 on a small- or medium-scale enterprise campus network.

2.3 Application of the S5700 on a Small-scale Enterprise Campus Network

This section describes the application of the S5700 on a small-scale enterprise campus network.

2.4 Application in Public Cloud

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

A gg reg ati

on La yer

A cc ess

Lay er

(S 57 00)

A pp lication

N M S

W eb

S er ve r

E -m ail S er ve r

D NS

S er ve r

D M Z

O ffice b uilding E le ctric ity M an ufactu rin g En te rp rise

C SS link

A gg re ga tio n switch

F ire w allC or e sw itch

A cc es s s w itc h (S 57 00 )

R ou ter

W A N In ter net

B ra n ch

M obile

S ta ff

P artne r

S5700 Series Ethernet Switches Product Description

2 Application Scenarios

2.1 Application of the S5700 on a Large-scale Enterprise Campus Network

This section describes the application of the S5700 on a large-scale enterprise campus network.

As shown in Figure 2-1, the S5700 is deployed at the access layer of a campus network to provide high performance, multi-service, and highly reliable enterprise network.

Figure 2-1 Position of the S5700 on a Large-scale enterprise campus network

The S5700 provides various terminal security management features, and supports functions such as PoE, voice VLAN, and QoS. The S5700 can be used for desktop access and provides GE access.

The S5700 provides various security features including ARP security, IP security, IP source guard, and user access control policies such as NAC and ACLs, to control access of user terminals.

The S5700 provides Easy-Operation and USB-based deployment, which facilitates deployment and management.

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

Web

Server

E-mail Server

DNS

Server

DMZ

NMS

Aggregation

Layer

S5700

Access

Layer

Aggregation switch

FirewallCore switch

Access switch

CSS/Stack link

Router

Internet

S5700 Series Ethernet Switches Product Description

2 Application Scenarios

2.2 Application of the S5700 on a Small- or Medium-scale Enterprise Campus Network

This section describes the application of the S5700 on a small- or medium-scale enterprise campus network.

As shown in Figure 2-2, the S5700 is deployed at the aggregation layer of a campus network to provide high performance, multi-service, and highly reliable enterprise network.

Figure 2-2 Position of the S5700 on a small- or medium-scale enterprise campus network

On an enterprise network or campus network shown in Figure 2-2, the S5700s connect to access switches through 100M/1000M interfaces, provide high performance and large switching capacity, and connect to core switches through 10GE optical interfaces. The network provides 10 Gbit/s rate for the backbone layer and 100 Mbit/s access rate for terminals, meeting requirements for high bandwidth and multi-service.

The S5700 provides SEP and RRPP to implement millisecond-level protection switchover. S5700s form a stack system by using iStack technology to implement the distributed forwarding structure and fast fault recovery. The stack system increases the number of user interfaces and improves packet processing capability. The iStack-enabled S5700s can be managed in a uniform manner to facilitate network management and maintenance.

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S 5 7 0 0

S ta ck

A cce s s

S w itc h

In te rn e t

S5700 Series Ethernet Switches Product Description

2 Application Scenarios

2.3 Application of the S5700 on a Small-scale Enterprise Campus Network

This section describes the application of the S5700 on a small-scale enterprise campus network.

As core switches of a small-scale enterprise network shown in Figure 2-3, the S5700s have powerful aggregation and routing capabilities. S5700s use iStack to implement backup among multiple devices and ensure high reliability. The S5700 provides various access control policies to achieve centralized management and simplify configuration.

Figure 2-3 Position of the S5700 on a small-scale enterprise network

2.4 Application in Public Cloud

Agile Cloud Network is a suite of network solution based on Huawei public cloud. The S5720SI/S5720S-SI can be located at the access layer of the agile cloud network as a cloud box, as shown in Figure 2-4.

The cloud box is plug-and-play. It goes online after being powered on and connected with a network cable, without complicated configurations. A cloud box can connect to the cloud management platform and bidirectional certificate authentication is used to ensure management channel security. The cloud box provides the Netconf&YANG interface for the cloud management platform to deliver configurations remotely. In addition, remote maintenance and fault diagnosis can be performed on the cloud box through the cloud management platform.

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

Local RADIUS

server

Cloud

box

Cloud management platform

ISP

network

Tenant network

(branch)

Headquarters

Traffic to the Internet

Cloud management & cloud platform authentication traffic

Traffic from branch to headquarters

Internet

Data center egress

CloudBased WLAN Planner

Cloud management platform

PKI

ESDP

SecCenter

Technical

support website

Cooperative systems

Local RADIUS authentication traffic

Cloud

box

VPN gateway

S5700 Series Ethernet Switches Product Description

Figure 2-4 Application of S5720SI/S5720S-SI in public cloud

2 Application Scenarios

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

About This Chapter

3.1 Product Features Supported by V200R010C00

3 Product Performance

3.2 Product Features Supported by V200R009C00

3.3 Product Features Supported by V200R008C00

3.4 Product Features Supported by V200R007C00

3.5 Product Features Supported by V200R006C00

3.6 Product Features Supported by V200R005C00

3.7 Product Features Supported by V200R003C00

3.8 Performance Specifications

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

3 Product Performance

3.1 Product Features Supported by V200R010C00

Table 3-1 lists features supported by the S5700.

Table 3-1 Features supported by the S5700

Feature

Ethernet features

Description Difference

Ethernet Operating modes of full-duplex,

half-duplex and auto-negotiation

Rates of an Ethernet interface: 10 Mbit/s, 100 Mbit/s, 1000 Mbit/s, 2500 Mbit/s, 10 Gbit/s, and autonegotiation

Flow control on interfaces None

Jumbo frames

Link aggregation

Load balancing among links of a trunk

Transparent transmission of Layer 2 protocol packets

Device Link Detection Protocol (DLDP)

Only the S5720HI and S5720EI do not support the operating mode of half-duplex.

Only the S5720-14XPWH-SI-AC supports the 2500 Mbit/s Ethernet interface.

Link Layer Discovery Protocol (LLDP)

Link Layer Discovery ProtocolMedia Endpoint Discovery (LLDPMED)

Interface isolation

Broadcast storm control

VLAN Access modes of access, trunk,

hybrid, and QinQ

Default VLAN

VLAN assignment based on interfaces, MAC addresses, protocols, and IP subnets

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

None

S5700 Series Ethernet Switches Product Description

Feature Description Difference

3 Product Performance

VLAN assignment based on the following policies:

l MAC address + IP address

l MAC address + IP address +

interface number

l DHCP policies

Adding double VLAN tags to packets based on interface

Super VLAN Only the S5700LI,

VLAN mapping None

Selective QinQ

MUX VLAN

Voice VLAN

Guest VLAN

GVRP Generic Attribute Registration

Protocol (GARP)

GARP VLAN Registration Protocol (GVRP)

VCMP VCMP (VLAN centralized

management protocol)

None

S5700S-LI, S5720LI, S5720S-LI, and S5710-XLI do not support this function.

None

MAC Automatic learning and aging of

MAC addresses

Static, dynamic, and blackhole MAC address entries

Packet filtering based on source MAC addresses

Interface-based MAC learning limiting

Sticky MAC address entries

MAC address flapping detection

Configuring MAC address learning priorities for interfaces

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

None

Only the S5720EI and S5720HI support this function.

S5700 Series Ethernet Switches Product Description

Feature Description Difference

3 Product Performance

MAC address spoofing defense Only the S5700LI,

S5700S-LI, S5720LI, S5720S-LI, S5710-X-LI, S5720SI, and S5720S-SI support this function.

Port bridge None

ARP Static and dynamic ARP entries None

ARP in a VLAN

Aging of ARP entries

Proxy ARP The S5700LI, S5700S-LI,

S5720LI, S5720S-LI, and S5710-X-LI do not support inter-VLAN proxy ARP.

Ethernet loop protection

Multi-port ARP for connecting to the NLB cluster server

Only the S5720EI and S5720HI support this function.

MSTP STP None

RSTP

MSTP

VBST

BPDU protection, root protection, and loop protection

TC-BPDU attack defense

STP loop detection

Loopback

Loop detection on an interface

detection

SEP Smart Ethernet Protection (SEP)

Smart Link Smart Link

Smart Link multi-instance

Monitor Link

RRPP RRPP protective switchover

Single RRPP ring, tangent RRPP ring, and intersecting RRPP ring

Hybrid networking of RRPP rings and other ring networks

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

Feature Description Difference

3 Product Performance

ERPS G.8032 v1/v2 Only the S5700S-LI does

not support this function.

Single closed ring

Subring

IPv4/IPv6 forwardin g

IPv4 and unicast routes

Static IPv4 routes None

VRF

DHCP client

DHCP server

DHCP relay

DHCP policy VLAN Only the S5700LI,

S5720LI, S5720S-LI, and S5700S-LI do not support this function.

URPF check Only the S5700LI,

S5700S-LI, S5720LI, S5720S-LI, and S5710-XLI do not support this function.

Routing policies None

RIPv1/RIPv2 None

OSPF Only the S5700LI,

S5700S-LI, and S5710-XLI do not support this function.

BGP Only the S5700LI,

MBGP

IS-IS

PBR (redirection in a traffic policy) Only the S5700LI,

Multicast

IGMPv1/v2/v3 Only the S5700LI, routing features

PIM-DM

PIM-SM

MSDP

Multicast routing policies

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700S-LI, S5720LI, S5720S-LI, and S5710-XLI do not support this function.

S5700S-LI, and S5710-XLI do not support this function.

S5700S-LI, S5720LI, S5720S-LI, and S5710-XLI do not support this function.

S5700 Series Ethernet Switches Product Description

Feature Description Difference

3 Product Performance

RPF

IPv6 features

IPv6 protocol stack None

ND and ND snooping

DHCPv6 snooping

RIPng None

DHCPv6 server Only the S5700LI,

S5700S-LI, and S5710-X-

DHCPv6 relay

LI do not support this function.

OSPFv3 Only the S5700LI,

S5700S-LI, S5720LI, S5720S-LI, and S5710-XLI do not support this function.

BGP4+ & ISIS for IPv6 Only the S5700LI,

S5700S-LI, S5720LI,

VRRP6

MLDv1 and MLDv2

S5720S-LI, and S5710-XLI do not support this function.

PIM-DM for IPv6

PIM-SM for IPv6

Layer 2

- IGMPv1/v2/v3 snooping None

multicast features

Fast leave

IGMP Snooping proxy

MLD snooping

Interface-based multicast traffic

suppression

Inter-VLAN multicast replication

Controllable multicast

VPN - Multi-VPN-Instance CE (MCE) Only the S5720SI,

S5720S-SI, S5720HI, and S5720EI support this function.

GRE Only the S5720HI and

S5720EI support this function.

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

Feature Description Difference

MPLS - MPLS QoS Only the S5720HI and

3 Product Performance

VLL Only the S5720HI and

S5720EI support this

PWE3

function.

VPLS

S5720EI support this

MPLS TE

function.

Device reliability

BFD Basic BFD functions Only the S5700LI,

S5700S-LI, S5720LI,

BFD for static route/IS-IS/

OSPF/BGP

BFD for PIM

S5720S-LI, and S5710-XLI do not support this function.

BFD for VRRP

Stacking Stack card supporting the stacking

function

Only some S5720EI models (S5720-C-EI, S5720-PC-EI,S5720-XEI, and S5720-P-EI) support this function.

Service interface supporting the

stacking function

Only S5700LI, S5700SLI, S5720LI, S5720S-LI, S5710-X-LI, some S5720EI models (S5720C-EI,S5720-X-EI,S5720PC-EI) , S5720SI, and S5720S-SI support this function.

Others VRRP Only the S5700LI,

S5700S-LI, S5720LI, S5720S-LI, and S5710-XLI do not support this function.

Ethernet OAM

EFM OAM (802.3ah)

Automatic discovery None

Link fault detection

Link fault troubleshooting

Remote loopback

CFM

Software-level CCM None OAM (802.1ag)

MAC ping

MAC trace

OAM association

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

Association between 802.1ag and

802.1ah

Only the S5700LI, S5700S-LI, S5720LI,

S5700 Series Ethernet Switches Product Description

Feature Description Difference

3 Product Performance

QoS features

Association between 802.1ah and

802.1ag

S5720S-LI, and S5710-XLI do not support this function.

Y.1731 Delay and variation measurement None

Traffic classifier

Traffic classification based on

ACLs

None

Traffic classification based on outer

802.1p priorities, outer VLAN IDs,

source MAC addresses, and

Ethernet types

Traffic classification based on inner

VLAN IDs

Only the S5700LI, S5700S-LI, S5720LI, S5720S-LI, and S5710-XLI do not support this function.

Traffic classification based on inner

802.1p priorities

Only the S5700LI, S5700S-LI, S5720LI, S5720S-LI, and S5710-XLI do not support this function.

Traffic behavior

Traffic policing

Traffic shaping

Congestio n avoidance

Congestio n manageme nt

Access control after traffic

None

classification

Traffic policing based on traffic

classification

Re-marking based on traffic

classification

Associating traffic classifiers with

traffic behaviors

Rate limit on inbound and

outbound interfaces

Traffic shaping on interfaces and

queues

Weighted Random Early Detection

(WRED)

Only the S5720EI, and S5720HI supports this function.

Tail drop None

Queue mapping None

Priority Queuing (PQ)

Deficit Round Robin (DRR)

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

Feature Description Difference

3 Product Performance

PQ+DRR

Weighted Round Robin (WRR) Only the S5720HI do not

support this function.

PQ+WRR

HQoS Hierarchical Quality of Service Only the S5720HI support

this function.

Configura tion and maintena nce

Command line configuration None

Error message and help information

in English

terminals

SSH1.5/SSH2

Send function and data

communication between terminal

users

Hierarchical user authority

management and commands

SNMP-based NMS management

(eSight)

Web page-based configuration and

management

EasyDeploy The S5700LI, S5700S-LI,

S5720LI, S5720S-LI, S5710-X-LI, S5720SI, and S5720S-SI only support as a client.

SVF

File

File system None system

Directory and file management

File upload and download through

FTP, TFTP, SFTP, SCP, and FTPS

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

l The S5720HI only

support as a parent.

l The S5720EI,

S5700LI, S5720LI, S5720S-LI, S5700SLI, S5710-X-LI, S5720SI and S5720SSI only support as an AS.

S5700 Series Ethernet Switches Product Description

Feature Description Difference

3 Product Performance

Monitorin g and maintenan ce

Hardware monitoring None

Reporting alarms on abnormal

device temperature

Second-time fault detection to

prevent detection errors caused by

instant interference

Version matching check

Dying gasp Only the S5700LI,

S5700S-LI, S5720LI, and S5720HI support this function.

Information center and unified

None management over logs, alarms, and debugging information

Electronic labels, and command line query and backup

Virtual cable test (VCT)

User operation logs

Detailed debugging information for network fault diagnosis

Network test tools such as traceroute and ping commands

Port mirroring, flow mirroring, and remote mirroring

Energy saving

Version upgrade

Device software loading and online software loading

BootROM online upgrade

In-service patching

Security AAA Local authentication and

authorization

RADIUS authentication, authorization, and accounting

HWTACACS authentication, authorization, and accounting

None

NAC 802.1x authentication None

MAC address authentication

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

Feature Description Difference

3 Product Performance

Portal authentication

Hybrid authentication None

ARP security

ARP packet rate limiting based on source MAC addresses

Only the S5720EI and

S5720HI support this

function.

ARP packet rate limiting based on

None source IP addresses, interfaces, and VLANs, and global ARP packet rate limiting

ARP anti-spoofing

Association between ARP and STP Only the S5700LI,

S5720LI, S5720S-LI, ARP gateway anti-collision

S5710-X-LI and S5700S-

LI do not support this

function.

Dynamic ARP Inspection (DAI)

None and Static ARP Inspection (SAI)

Egress ARP Inspection (EAI)

IP security ICMP attack defense None

IP source guard

Local

CPU attack defense

attack defense

MFF MAC-Forced Forwarding (MFF)

DHCP

DHCP snooping

snooping

Option 82 function and dynamic rate limiting for DHCP packets

Attack defense

Defense against flood attacks without IP payloads, attacks from IGMP null payload packets, LAND attacks, Smurf attacks, and attacks from packets with invalid TCP flag bits

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5700 Series Ethernet Switches Product Description

Feature Description Difference

3 Product Performance

Defense against attacks from many fragments, attacks from many packets with offsets, attacks from repeated packet fragments, Tear Drop attacks, Syndrop attacks, NewTear attacks, Bonk attacks, Nesta attacks Rose attacks, Fawx attacks, Ping of Death attacks, and Jolt attacks

Defense against TCP SYN flood attacks, UDP flood attacks (including Fraggle attacks and UDP diagnosis port attacks), and ICMP flood attacks

Network managem ent

- Ping and traceroute None

NQA

Network Time Protocol (NTP)

IPCA Only the S5720HI support

this function.

sFlow The S5720HI does not

support this function.

NetStream Only the S5720HI support

this function.

SNMP v1/v2c/v3 None

Standard MIB

HTTP

Hypertext Transfer Protocol Secure (HTTPS)

Remote network monitoring (RMON)

RMON2 Only theS5720EI and

WLAN - AP Management Specifications Only the S5720HI support

Radio Management Specifications

WLAN Service Management Specifications

QoS

Issue 18 (2016-11-09) Huawei Proprietary and Confidential

S5720HI support this

function.

this function.

+ 65 hidden pages

Huawei S5700LI User Manual

Specifications and Main Features

Frequently Asked Questions

User Manual

About This Document

Contents

1 Product Overview

1.1 Product Positioning

1.2 Product Characteristics

2 Application Scenarios

2.1 Application of the S5700 on a Large-scale Enterprise Campus Network

2.2 Application of the S5700 on a Small- or Medium-scale Enterprise Campus Network

2.3 Application of the S5700 on a Small-scale Enterprise Campus Network

2.4 Application in Public Cloud

3 Product Performance

3.1 Product Features Supported by V200R010C00