Ethernet features
|
Ethernet
|
- Operating modes of full-duplex and auto-negotiation
- Ethernet ports of GE and 10GE rates
NOTE: 10GE optical ports support passive direct attached cables (DACs), GE and 10GE multi-mode and single-mode optical modules, and SFP electrical modules.
- Port traffic control
- Jumbo frames
- Link aggregation
- Load balancing among links within a trunk
- Interface isolation and forwarding restrictions
- Broadcast storm suppression
|
Virtual Local Area Network (VLAN)
|
- Multiple interface types: Access, Trunk, Hybrid, and 802.1Q-in-802.1Q (QinQ)
- Default VLAN
|
Media Access Control (MAC)
|
- Automatic learning and aging of MAC addresses
- Static, dynamic, and blackhole MAC address entries
- Packet filtering based on source MAC addresses
- Interface-based MAC address learning limits
|
Link Layer Discovery Protocol (LLDP)
|
LLDP
|
Ethernet loop protection
|
Multiple Spanning Tree Protocol (MSTP)
|
- Spanning Tree Protocol (STP)
- Rapid Spanning Tree Protocol (RSTP)
- MSTP
- Bridge protocol data unit (BPDU) protection, root protection, and loop protection
- Partitioned STP and BPDU tunneling
|
IP features
|
Address Resolution Protocol (ARP)
|
- Static and dynamic ARP entries
- ARP in a VLAN
- Aging of ARP entries
|
Dynamic Host Configuration Protocol (DHCP)
|
|
IPv4 forwarding
|
Unicast routing features
|
- Static routing
- Routing Information Protocol version 1 (RIPv1) and RIPv2
- Open Shortest Path First (OSPF)
- Intermediate System to Intermediate System (IS-IS)
- Border Gateway Protocol version 4 (BGP4)
- Policy-based Routing (PBR) and routing policies
- Unicast Reverse Path Forwarding (URPF) check
|
Multicast routing features
|
- Internet Group Management Protocol version 1/2/3 (IGMPv1/v2/v3)
- Protocol Independent Multicast-Sparse Mode (PIM-SM)
- Protocol Independent Multicast Source-Specific Multicast (PIM-SSM)
- Multiprotocol BGP (MBGP)
- Multicast Source Discovery Protocol (MSDP)
- Multicast routing policies
- Reverse Path Forwarding (RPF)
|
Device reliability
|
Bidirectional Forwarding Detection (BFD)
|
- Basic BFD functions
- Association between BFD and OSPF
- Association between BFD and IS-IS
- Association between BFD and BGP
- Association between BFD and PIM
|
Others
|
- Virtual Router Redundancy Protocol (VRRP)
- Device Link Detection Protocol (DLDP)
|
Layer 2 multicast features
|
Layer 2 multicast features
|
- IGMP snooping
- IGMP proxy
- Fast leave
- Multicast traffic control
|
Quality of Service (QoS) features
|
Traffic classification
|
- Traffic classification based on combination of the L2 protocol header, IP 5-tuple, outbound interface, and 802.1p priority
- Traffic classification based on the C-VID and C-PRI of QinQ packets
|
Traffic behavior
|
- Access control after traffic classification
- Traffic policing based on traffic classifiers
- Packet re-marking based on the traffic classification result
- Class-based packet queuing
- Association between traffic classifiers and traffic behaviors (actions)
|
Queue scheduling
|
- Priority queuing (PQ) scheduling
- Deficit round robin (DRR) scheduling
- PQ+DRR scheduling
- Weighted round robin (WRR) scheduling
- PQ+WRR scheduling
|
Congestion avoidance
|
Weighted Random Early Detection (WRED)
|
Rate limiting on outbound interfaces
|
Rate limiting on outbound interfaces
|
Virtualization
|
Many-to-one virtualization
|
- Intelligent Stack (iStack)
- Stack split and merge
- Dual-active detection
- Version and configuration synchronization
- Network Time Protocol (NTP) clock synchronization
|
Data center features
|
Transparent Interconnection of Lots of Links (TRILL)
|
TRILL features
|
Data Center Bridging (DCB)
|
- Data Center Bridging Exchange Protocol (DCBX)
- Priority-based Flow Control (PFC)
- Enhanced Transmission Selection (ETS)
|
Fibre Channel over Ethernet (FCoE)
|
FCoE Initialization Protocol Snooping Bridge (FSB)
|
Virtual machine (VM) detection
|
- Virtualization detection
- Automatic policy deployment
- Automatic policy migration
|
Forwarding mode based on Virtual Ethernet Port Aggregator (VEPA)
|
Traffic forwarding mode based on VEPA
|
Configuration and maintenance
|
Terminal service
|
- Configuration using command lines
- Messages and help information in English
- Login through console and Telnet terminals
- Send function and data communications between terminal users
|
File system
|
- Directory and file management
- File upload and download using File Transfer Protocol (FTP), Trivial File Transfer Protocol (TFTP), and Secure File Transfer Protocol (SFTP)
|
Debugging and maintenance
|
- Unified management of logs, alarms, and debugging information
- Electronic labels
- User operation logs
- Detailed debugging information for network fault diagnosis
- Network test tools such as tracert and ping commands
- Port mirroring and traffic mirroring
|
Version upgrade
|
- Device software loading and in-service software loading
- In-service upgrade using the basic input/output system (BIOS) menu
- In-service patching
NOTE: To ensure secure service application, periodically upgrade the switch module software version.
|
Security and management
|
System security
|
- Hierarchical command-line protection based on user levels, preventing unauthorized users from accessing switch modules
- Secure Shell (SSH)
- Remote Authentication Dial In User Service (RADIUS) and Huawei Terminal Access Controller Access Control System (HWTACACS) authentication for login users
- Access control list (ACL) filtering
- Dynamic ARP inspection (DAI)
- DHCP packet filtering (appending the Option 82 field)
- Defense against control packet attacks
- Defense against attacks of source address spoofing, LAND, SYN flood (TCP SYN), smurf, ping flood (Internet Control Message Protocol Echo), teardrop, and ping of death
|
Network management
|
- Internet Control Message Protocol (ICMP)-based ping and tracert
- Simple Network Management Protocol version 1/2c/3 (SNMPv1/v2c/v3)
- Standard management information base (MIB)
- Remote network monitoring (RMON)
- Network quality analysis (NQA)
|
