What’s the Product Characteristics of Huawei S2700 Switch
Easy Operation and Maintenance
The S2700 supports Easy-Operation, which implements easy installation, configuration, monitoring, and troubleshooting. This technology greatly reduces installation and configuration costs and engineering costs, and improves upgrade efficiency. The S2700 provides the CLI and web platform, supports alarm management and visualized configuration, and replacement of faulty devices.
The Huawei S2700 uses the ASIC chip and fanless design, which reduces mechanical faults and protects the equipment against damages caused by condensed water and dusts.
The S2700 supports various ACLs. ACL rules can be applied to VLANs to flexibly control traffic on interfaces and schedule resources in VLANs.
The S2700 supports VLAN assignment based on interfaces, MAC addresses, protocols, and IP subnets. It applies to networks where users move frequently and networks demanding high security.
The S2700 supports GVRP, which dynamically distributes, registers, and propagates VLAN attributes to reduce the manual configuration workloads of network administrators and ensure correct VLAN configuration. In addition, the S2700 supports SSHv2, HWTACACS, RMON, interface-based traffic statistics, and NQA to help in network planning and upgrading.
Various Security Measures
The S2700 supports DHCP snooping, which generates user binding entries based on MAC addresses, IP addresses, IP address leases, VLAN IDs, and interface numbers of users. The DHCP snooping function protects networks against common attacks such as bogus IP packet attacks, man-in-the-middle attacks, and bogus DHCP server attacks.
The S2700 can limit the number of MAC addresses learned on an interface to prevent packet flooding that occurs when an attacker frequently changes source MAC addresses. The S2700 supports strict ARP learning. This feature prevents ARP spoofing attackers from exhausting ARP entries so that users can connect to the Internet normally. It provides IP source check to prevent DoS attacks caused by IP address spoofing.
The S2700 supports centralized MAC address authentication and 802.1x authentication. It authenticates users based on static or dynamic user binding information such as the user name, IP address, MAC address, VLAN ID, and interface number. VLANs and ACLs can be applied to users dynamically.
