No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

S600-E Education Network Series Switches Product Description

This document describes the positioning, characteristics, architecture, link features, service features, application scenarios, operation and maintenance functions, and technical specifications of the switch.

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Product Characteristics

Product Characteristics

Huawei S600-E series education network switch is a new-generation Ethernet switch tailored for the education industry. It provides high performance, high security, intelligent management, and supports a large number of access users.

The S600-E series switch uses a next-generation high-performance hardware structure and Huawei Versatile Routing Platform (VRP) software platform. The switch provides extensive IPv6 features and security control functions, such as Source Address Validation Improvements (SAVI). It can function as a client in a Super Virtual Fabric (SVF) system to simplify network management. These features make the S600-E suitable for access and aggregation layers of various education networks.

Various IPv6 Features

  • Based on the mature and stable VRP platform, the S600-E supports IPv4/IPv6 dual protocol stack and IPv6 RIPng. The S600-E can be deployed on a pure IPv4 network, a pure IPv6 network, or a shared IPv4/IPv6 network, helping realize IPv4-to-IPv6 transition.

  • The openness feature of a campus network allows unauthorized IPv6 hosts to access the network easily. The S600-E supports the SAVI function and provides Neighbor Discovery (ND) snooping and DHCPv6 snooping to bind IPv6 addresses of hosts, preventing IPv6 address spoofing and unauthorized host access.

A Large Number of Access Users

The increasing number of access users on a campus network poses a high requirement on network capacity.

Huawei S600-E switches can be located at the access layer of a large-sized college campus network to provide large MAC and ARP tables, supporting ten hundred access users. Due to the high processing capability, the S600-E is qualified for Layer 3 egress of a campus network.

Complete Security Control

  • Many users access the college campus network through ADSL. To authenticate these users, Huawei S600-E provides the PPPoE+ function and allocates IPv4 or IPv6 addresses to users, improving access security and simplifying network operation and maintenance.

  • ARP attacks and ARP viruses are the major threats to college campus networks. The S600-E supports rich ARP attack defense functions. It provides ARP intrusion detection and ARP packet rate limiting to prevent ARP flood attacks, strict ARP learning to prevent ARP entry exhaustion by ARP spoofing attacks, as well as user-defined ACL, DHCP snooping, and static binding of interfaces, IP addresses, and MAC addresses to protect the gateway against ARP Man-In-The-Middle (MITM) attacks.

  • The S600-E supports MAC address authentication, Portal authentication, as well as 802.1X authentication, and implements dynamic delivery of policies (VLAN, QoS, and ACL) to users.

  • The S600-E provides a series of mechanisms to defend against DoS attacks and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks. User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and change of the DHCP CHADDR value.

Intelligent and Simple Management

  • Huawei S600-E can function as a client in an SVF system, changing the "Core/aggregation + Access switch + AP" structure into a logical device. The S600-E provides the simplest network management solution in the industry to simplify device management. It allows plug-and-play access switches and APs. In addition, the S600-E supports service configuration templates. The templates are configured on core devices, and automatically delivered to access devices, to implement centralized control, simplify service configuration, and allows flexible configuration modification.

  • The S600-E supports intelligent stack (iStack). This technology combines multiple switches into a logical switch. Member switches in a stack implement redundancy backup to improve device reliability and use inter-device link aggregation to improve link reliability.

  • iStack provides high network scalability. You can increase ports, bandwidth, and processing capacity of a stack by simply adding member switches to the stack.

  • iStack also simplifies device configuration and management. After a stack is set up, multiple physical switches are virtualized into one logical device. You can log in to any stack member switch to manage all the member switches in the stack.

Cloud-based Management

In Huawei CloudCampus Solution, switches can be managed by the management and control system (CloudCampus@AC-Campus for switches running V200R019C00 and earlier versions; iMaster NCE-Campus for switches running V200R019C10 and later versions).

  • The switches are plug-and-play.
  • The switches can automatically connect to the management and control system and use bidirectional certificate authentication to ensure management channel security.
  • The switches provide the NETCONF and YANG interfaces, through which the management and control system delivers configurations to them.
  • Remote maintenance and fault diagnosis can be performed on the switches using the management and control system.
Translation
Download
Updated: 2020-02-17

Document ID: EDOC1000123873

Views: 5779

Downloads: 66

Average rating:
This Document Applies to these Products

Related Version

Related Documents

Share
Previous Next