S9500E Datasheet (Core) - Starnet Data Design, Inc

2 H3C S9500E
SWITCHING
u Easy management: The entire resilient framework uses only one
IP address for management purposes. This simplifies network
device management and network topology management,
improves the operating efficiency, and lowers the maintenance
cost.
Service control at a fine granularity
u The S9500E provides complete queue scheduling, congestion
avoidance, traffic policing, traffic shaping, and priority marking
functions, which guarantee limitations on the bandwidth, delay
and jitter of various services and implement differentiated
services for different users and different classes of services.
u The Crossbar switching fabric of the S9500E supports VOQ and
E2E flow control technologies, which effectively avoid Head of
Line (HOL) blocking and implement differentiated services for
packets on the Crossbar.
High-performance MPLS VPN soluons
u The S9500E supports fully-distributed L3 MPLS VPN, VLL, and
VPLS/H-VPLS services. It is fit for high-performance P/PE
deployment, offering top-quality and multi-level MPLS VPN
solutions.
u The S9500E supports distributed multicast VPN, which enables
users to conveniently deploy high-performance multicast services
in MPLS VPN networks and meets user requirements for
multicast services such as video-conferencing and e-education.
Powerful network traffic analysis function
u The S9500E supports two network traffic analysis methods: sFlow
and Netstream. It employs dedicated high-performance hardware
cards for network service analysis and supports sampling and
traffic statistics as well as multiple log formats such as V5, V8 and
V9. The S9500E can cooperate with the iMC analysis system to
offer a complete network traffic analysis solution. In addition, it
can send logs to both the active server and the standby server to
prevent statistical information loss. Through network service
analysis, network service traffic which was originally invisible
becomes clearly visible. The S9500E can offer multiple kinds of
network traffic analysis reports to help users to timely optimize
network structure and adjust resource deployment.
Perfect security mechanism
u Employing H3C's Open Application Architecture (OAA) design
concept, the S9500E supports security control modules such as
the firewall module, IPS module and load balancing module.
These modules extend the firewall protection function to every
port of the switch. In addition, the virtual firewall function of the
S9500E facilitates network firewall rental service for VPN users. In
sum, the S9500E seamlessly integrates network services and
security services.
u The S9500E provides the following functions:
† Hierarchical user management and password protection.
Users are authenticated and different rights are granted to
different levels of users. The available user authentication
modes include AAA authentication and RADIUS
authentication.
† SSHv2.0 to provide security encryption channels for user
login.
† Standard ACL and extended ACL to filter packets and
prevent network attacks.
† Multi-level protection mechanism applied on the control
plane to prevent DoS and DDoS attacks.
† uRPF technology to prevent network attacks based on
source address spoofing.
Integrated wireless solution
u Integrating a wireless control module, the S9500E offers an
integrated wireless/wired solution. The wireless control module of
the S9500E provides abundant service capabilities, including fine
user control and management, RF management and security, fast
roaming, super strong QoS, and IPv6 support. The wireless
control module can cooperate with a security policy server to
provide Endpoint Admission Defense (EAD) for wireless users
and thus enhance the security of the entire network.
Complete IPv6 solution
u IPv6 is widely recognized as the base protocol for the next
generation network (NGN) because of its particular technical
advantages. The S9500E completely supports the IPv6 protocol
stack, IPv6 routing protocols including IPv6 static routing, RIPng,
OSPFv3, IS-ISv6, and BGP4+, as well as a multitude of
technologies that enable IPv4 to transit to IPv6. These transition
technologies guarantee smooth transition from IPv4 to IPv6 and
include IPv6 manual tunnel, 6to4 tunnel, ISATAP tunnel, GRE
tunnel and auto IPv4-compatible IPv6 tunnel.
Comprehensive maintenance detection mechanism
u The S9500E employs an online status detection mechanism and
a dedicated maintenance engine to detect the status of its