H3C S7500E Series High-End Multi-Service Routing Switch

Rich business, adapt to the development trend of converged business network

IRF2 (Second Generation Intelligent Resilient Architecture - Horizontal Virtualization)

The H3C S7500E is an evolution of data center technology. It provides software virtualization technology represented by IRF2, providing 2-4 hosts for collaborative work, unified management, and non-stop maintenance. IRF2 not only becomes a high-performance, virtualized data center switching device. The key technologies, and for traditional enterprise network applications, the high reliability and seamless upgrade and expansion capabilities provided by IRF2 have become an important part of H3C user value-added services. In addition, H3C's IRF2 virtualization technology can also be based on networking. Requires support for long-distance (80KM) common Ethernet 10 Gigabit fiber stacking.

IRF3: (3rd Generation Intelligent Resilient Architecture - Vertical Virtualization)

The H3C S7500E series supports heterogeneous virtualization in the vertical dimension. The core and access devices form a vertical logical virtual device through IRF3 technology. The AC and AP can be managed and configured in a unified manner. A remote interface board is added to the main equipment system to achieve extended I/O port capability and centralized control management. IRF3 technology can simplify management, greatly reduce network management nodes; simplify wiring, layer 2 becomes a layer, saves horizontal connection cables; finally realizes data forwarding plane virtualization, and simplifies service deployment and automatic orchestration.

Comprehensive MPLS and VPLS service capabilities

All products of the H3C S7500E support Multi-VRF and can be used as MCE devices. It supports Layer 3 MPLS VPN and Layer 2 MPLS VPN (Martini, Kompella). It supports MPLS OAM features for user management and maintenance. With H3C MPLS The VPN Manager works together to implement graphical MPLS deployment and maintenance.

Full support for VPLS, VLL, and support for tiered VPLS and QINQ+VPLS access modes, providing end-to-end Layer 2 VPN access solutions, supporting MPLS/VPLS full line rate forwarding, meeting VPLS scale deployment requirements.

High-performance IPv4/IPv6 service capabilities

The H3C S7500E supports the IPv4/IPv6 dual protocol stack, supports multiple tunnel technologies, supports IPv4/IPv6 multicast technology, and provides users with a complete IPv4/IPv6 solution. The H3C S7500E adopts a distributed architecture to implement IPv4/IPv6 services. Line rate non-blocking forwarding; H3C S7500E has passed the IPv6 network authentication of the Ministry of Information Industry and the second phase of IPv6 Ready certification, and is a mature commercial IPv6 product.

Wired and wireless integration, active and passive integration

The H3C S7500E's integrated wireless control module provides rich service capabilities, including sophisticated user control management, comprehensive RF management and security mechanisms, fast roaming, superior QoS, and support for IPv6; wireless control module and security policy server The linkage enables the endpoint access defense for wireless access users and improves the security of the entire network.

The H3C 7500E adopts a chip design that supports AC functions, which can expand the on-board AC function and provide customers with a richer choice of building wired and wireless integrated networks.

The H3C S7500E is the industry's highest density Ethernet Passive Optical Network (EPON) device. It provides a highly reliable EPON system with a distributed architecture, modular design, redundant hot backup of the main control board, passive backplane, and redundancy. The remaining power supply supports dual-channel power supply and has carrier-class reliability.

EAD endpoint access protection technology

The H3C S7500E supports large-capacity Portal authentication. It can be used as an EAD gateway device in thousands of users' LANs to provide EAD security authentication for network users. It can be used as a converged/core device in a large and medium-sized campus network. Provides Portal authentication for authentication and billing in the student dormitory area.<br/

BYOD basic network architecture

Supports a wide range of access authentication methods. It can be used as an authentication gateway device on the LAN of thousands of users to provide security authentication for access users. It can also be used as an aggregation/core in large and medium-sized campus networks with SSL VPN cards. The device acts as a VPN authentication gateway at the same time.
The H3C S7500E provides a basic network architecture for BYOD mobile office features, facilitating the expansion of BYOD applications such as mobile ERP, OA, and UC&C.

Cloud data center technology

As an enterprise-class network core device, the H3C S7500E series products can help users face a series of technologies and solutions required for cloud data centering:
TRILL: As the size of servers and switches increases, data center networks tend to be flattered to facilitate maintenance management, which requires building a large Layer 2 network; H3C S7500E series products support TRILL technology and vertical Virtualization technology to build a large second-tier network in the data center. The TRILL (TRansparent Interconnection of Lots of Links) protocol of the data center introduces the design of the three-layer routing technology IS-IS (Intermediate System-to-Intermediate System) Layer network, and made the necessary transformation. This combines the simplicity and flexibility of the second layer with the stability, scalability and high performance of the three layers.

MDC: H3C S7500E products can realize true 1:N virtualization through MDC technology, that is, virtualize one switch into N independent virtual switches. Different from traditional switch virtualization technology, each MDC virtual machine The switches are physically isolated and securely isolated. They have independent hardware resources and management rights. Each virtual switch has independent forwarding entries and configuration interfaces. The configuration and restart do not affect each other. This meets the needs of multi-service customers sharing core switches. In this way, on the one hand, the core switch can be fully utilized to achieve the function of isolation and multiplexing, on the other hand, the investment cost of the user is also reduced, and the two advantages are achieved.

EVB: The H3C S7500E product supports EVB (Edge Virtual Bridging). The network traffic generated by the virtual machine is uploaded to the physical switch connected to the server through VEPA (Virtual Ethernet Port Aggregator) technology, which not only realizes the traffic forwarding between virtual machines. It also solves problems such as virtual machine traffic policing and access control policy deployment.
FCOE: H3C S7500E series products support FCOE technology; FCOE technology is mainly used to solve the heterogeneous problem of LAN network and storage network in cloud computing data center. Through the deployment of FCoE and CEE technologies, data center front-end network and back-end network architecture can be realized. Convergence, solve the technical problems of data, computing and storage, and thus greatly reduce the cost of procurement and expansion of data centers;

EVI: The H3C S7500E series supports EVI (Ethernet Virtual Interconnection) technology. EVI is an advanced "MAC in IP" technology. EVI solution deployment is very simple. Based on the existing IP network, it is distributed. The physical site provides flexible Layer 2 connectivity and enables the interconnection of 64 sites.

Comprehensive security protection against multiple network security threats

Three-plane security mechanism
The H3C S7500E provides a complete security protection mechanism to ensure network security from the control, management, and forwarding planes. In the control plane, the protocol packet attack identification module is built in to prevent protocol attacks such as TCN and ARP. OSPF/BGP/ The IS-IS routing protocol uses MD5 authentication to prevent network defects caused by illegal routing update messages. The management plane, SNMPv3 network management protocol, SSH V2, user authentication based on 802.1x, AAA/Radius, and hierarchical user rights management are guaranteed. Security of device management; in the forwarding plane, it supports fine binding of multiple combinations of IP, VLAN, MAC, and port; supports uRPF unicast reverse path forwarding to prevent illegal traffic from accessing the network, and adopts the longest match-by-packet forwarding mechanism. Effective against viruses. The H3C S7500E also supports built-in high-performance firewalls and abnormal traffic cleaning modules to integrate professional security into the switch.
Wired and wireless full support for EAD

The H3C S7500E is an important part of the EAD endpoint access defense solution. The S7500E can dynamically receive control policies from the security policy server and deliver corresponding access rights based on the security status of the terminal. The H3C S7500E supports both the EAD of wired end users and the EAD of wireless end users. It can achieve terminal security and no loopholes.
Enhanced ACL features

The H3C S7500E series supports powerful ACLs: standard and extended ACLs, VLAN-based ACLs, user-friendly configuration, and ACL-saving resources. ACLs are supported in the outbound direction and inbound direction to meet the strict control requirements of financial and other industries.

Carrier-class high reliability to ensure long-term stable operation of user services

Carrier-class high reliability design

The H3C S7500E adopts a single-point failure design. All key components, such as the main control board, power supply, and fan, are designed with redundancy. The passive backplane avoids a single point of failure in the chassis. All boards and power modules support hot swap. The H3C S7500E series can operate stably for a long time in harsh environments, achieving 99.999% carrier-class reliability.

Multi-service high reliability operation

The H3C S7500E supports uninterrupted forwarding and graceful restart, provides millisecond-level switching time, supports ISSU to implement uninterrupted service version upgrade, and supports equal-cost routing (ECMP) to help users establish multiple equal-cost paths to load balance traffic. And redundant backup; support RRPP fast ring network protection protocol; support Smart-Link protocol to ensure fast switching of millisecond-level services of dual uplink network topology. Through the above technologies, the H3C S7500E can run uninterruptedly while carrying multiple services to achieve business continuity.

HA based on IRF2 architecture

IRF2 technology can virtualize multiple S7500Es into a "combined device", use and configure the same machine, and expand the number of ports and switching capabilities, while also enhancing the reliability of the device through mutual backup between multiple devices. Provides millisecond-level link convergence capability. Simplifies the management process, reduces management costs, and smoothly expands network capacity based on actual needs. Supports hardware-based rich OAM fault detection mechanism to implement millisecond-level link fault detection.

HA based on DRNI architecture

The S7500E series switches support the cross-device link aggregation technology of the DRNI (Distributed Resilient Network Interconnect). The two physical devices are virtualized into one device at the forwarding level to implement cross-device link aggregation. Independent, providing device-level redundancy protection and traffic load sharing while improving system reliability.

Professional lightning protection

The H3C S7500E series switches adopt the professional built-in lightning protection technology to support the lightning protection capability of the industry-leading 8KV service port, which can greatly reduce the loss rate of lightning strikes on equipment in the harsh working environment.

Hardware level encryption technology

The S7500E supports the hardware-level encryption technology Macsec technology (802.1ae), which is different from the traditional end-to-end basic application layer protection soft encryption technology. Macsec protects the management of bridged networks and other data by protecting the data source's cryptographic technology. Re-protection and confidentiality services are provided. By confirming the frame sent by the station, the attack on the Layer 2 protocol can be protected from the root.

Enhanced Power over Ethernet (PoE+)

H3C S7500E series switches can support 802.3af/802.3at enhanced Ethernet power supply function, single port maximum 30W output power, can be 802.11n wireless access point, visible IP phone, high power surveillance camera and more The terminal device provides Ethernet power capability.