Huawei S7700 Switches:
S7700 Series Smart Routing Switches
The S7700 series switches (S7700 for short) are high-end smart routing switches designed for next-generation enterprise networks. The S7700 design is based on Huawei’s intelligent multi-layer switching technology to provide intelligent service optimization methods, such as MPLS VPN, traffic analysis, comprehensive QoS policies, controllable multicast, load balancing, and security, in addition to high-performance Layer 2 to Layer 4 switching services.
|Switching capacity||1.92 Tbps||3.84 Tbps/5.12 Tbps||3.84Tbps/5.12 Tbps|
|Forwarding performance||576 Mpps/1440 Mpps||1152 Mpps/2880 Mpps||1344 Mpps/3360 Mpps|
|VLAN||Three types of interfaces: access, trunk, and hybrid|
|QinQ and selective QinQ|
|MAC address-based VLAN assignment|
|MAC address||MAC address learning and aging|
|Static, dynamic, and blackhole MAC address entries|
|Packet filtering based on source MAC addresses|
|Limit on the number of MAC addresses learned on ports and VLANs|
|Ring Protection||STP(IEEE 802.1d), RSTP(IEEE 802.1w), and MSTP(IEEE 802.1s)|
|BPDU protection, root protection, and loop protection|
|IP routing||IPv4 routing protocols, such as RIP, OSPF, BGP, and IS-IS|
|IPv6 dynamic routing protocols, such as RIPng, OSPFv3, ISISv6, and BGP4+|
|Multicast||IGMPv1/v2/v3 and IGMP v1/v2/v3 snooping|
|PIM-DM, PIM-SM, and PIM-SSM|
|MSDP and MBGP|
|Multicast traffic control|
|Multicast packet suppression|
|MPLS||Basic MPLS functions|
|CSS switch fabric clustering||CSS Switch Fabric Clustering (S7706 and S7712)|
|Service port clustering||Service Port Clustering (S7706 and S7712)|
|Reliability||LACP and E-Trunk between devices|
|VRRP and BFD for VRRP|
|BFD for BGP/IS-IS/OSPF/static route|
|NSF and GR for BGP/IS-IS/OSPF/LDP|
|TE FRR and IP FRR|
|Ethernet OAM (IEEE 802.3ah and 802.1ag)|
|QoS||Traffic classification based on Layer 2 protocol packet header, Layer 3 protocol information, Layer 4 protocol information, and 802.1p priority|
|ACL, CAR, re-mark, and scheduling|
|Queue scheduling algorithms including SP, WRR, DRR, SP+WRR, and SP+DRR|
|Congestion avoidance mechanisms, such as WRED and tail drop|
|Configuration and maintenance||Easy Operation|
|Console and SSH terminals|
|Network management protocols, such as SNMPv1/v2/v3|
|File uploading and downloading using FTP and TFTP|
|BootROM upgrade and remote upgrade|
|User operation logs|
|Security and management||802.1x authentication and portal authentication|
|RADIUS and HWTACACS authentication|
|Different user levels for commands, preventing unauthorized users from using certain commands|
|Defense against DoS attacks, TCP SYN Flood attacks, UDP Flood attacks, broadcast storms, and heavy traffic attacks|
|1K CPU queues|
|Ping and traceroute|
|Energy conservation||IEEE 802.3az: Energy Efficient Ethernet (EEE)|
|Dimensions (W x D x H)||442 mm x 476 mm x 175 mm||442 mm x 476 mm x 442 mm||442 mm x 476 mm x 664 mm|
|Chassis weight (empty)||< 15 kg||<30 kg||< 45 kg|
|Working voltage||DC: –38.4 V to –72 V AC: 90 V to 290 V|
|Maximum power consumption of the entire equipment||≤800 W||≤1600 W||≤3000 W|
|Maximum PoE power||2200 W||8800 W||8800 W|
Powerful Service Processing Capabilities
Huawei’s advanced switching architecture permits rapid bandwidth expansion. The highly expansible backplane enables ports to be upgraded to a rate of 40 Gbit/s or 100 Gbit/s, and is compatible with the currently used cards, helping enterprises maximize their ROI.
Each 7700 supports 480 10GE ports. The high density of 10GE ports brings enterprise campus networks and data centers into the era of the all-10GE core network.
The S7700′s multi-service routing and switching platform meets requirements for service bearing at the access layer, aggregation layer, and core layer of enterprise networks. The S7700 provides wireless access along with voice, video, and data services, helping enterprises build integrated full-service networks with high availability and low latency.
The S7700 supports distributed Layer 2/Layer 3 MPLS VPN functions, including MPLS, VPLS, HVPLS, and VLL, implementing VPN access for enterprise users.
The S7700 supports various Layer 2 and Layer 3 multicast protocols such as PIM SM, PIM DM, PIM SSM, MLD, and IGMP snooping. It can provide enterprises with multi-terminal high definition video surveillance and video conferencing services.
Carrier-Class Reliability and Visual Fault Diagnosis
Huawei’s high reliability design ensures that the S7700 is 99.999% reliable. The S7700 provides redundant backup for key components, including MPUs, power supply units, and fans, all of which are hot swappable.
The S7700 innovatively implements the CSS function through switch fabrics, and packets are only switched once when they are forwarded between chassis. This addresses the problem of low switching efficiency caused by multiple switching processes during inter-chassis forwarding in clusters established using line cards. The cluster provides the industry’s highest cluster bandwidth 256 Gbit/s, In addition, inter-chassis link aggregation can be used to improve link use efficiency and prevent single-point failures.
The S7700 can use service ports as cluster ports, so that cluster members can be connected through optical fibers. This substantially expands the clustering distance.
The S7700 has a dedicated fault detection subcard that provides hardware-based OAM function conforming to IEEE 802.3ah, 802.1ag, and ITU-Y.1731. Hardware-based OAM implements 3.3 ms fault detection and can check session connectivity of all terminals in real time when a network fault occurs. The S7700 can also work with an NMS. The NMS provides a graphical fault diagnosis interface and traverses all network elements and links automatically to help users detect and locate faults quickly.
The S7700 implements seamless switchover between the master and slave MPUs and supports graceful restart to ensure nonstop forwarding. The in-service software upgrade (ISSU) function of the S7700 prevents interruption of key services during software upgrading.
Enhanced QoS Mechanism, Improving the Voice and Video Experience
The S7700′s QoS control mechanisms classify traffic based on information from the link layer to the application layer. With advanced queue scheduling and congestion control algorithms, the S7700 performs accurate multi-level scheduling for data flows, satisfying enterprises’ QoS requirements for a variety of services and user terminals.
The S7700 supports hardware-based low delay queues for multicast packets so that the video service can be processed with high priority and low delay. This feature guarantees the high quality of key services in an enterprise, such as video conference and surveillance.
The S7700 uses innovative priority scheduling algorithms to optimize the QoS queue scheduling mechanism for voice and video services. The improved scheduling mechanism shortens the delay of the VoIP service and eliminates the pixelation effect in the video service, improving user experience.
High-Performance IPv6 Service Processing, Resulting in a Smooth Transition From IPv4 to IPv6
Both the hardware platform and software platform of the S7700 support IPv6. The S7700 has earned the IPv6 Ready Phase 2 (Gold) designation.
The S7700 supports IPv4/IPv6 dual stack, various tunneling technologies, IPv6 static routing, RIPng, OSPFv3, BGP+, IS-ISv6, and IPv6 multicast. These features meet the demand for IPv6 networking and combined IPv4 and IPv6 networking.
Superb Traffic Analysis Capability, Resulting in Real-Time Network Performance Monitoring
The S7700 supports NetStream for the real-time collection and analysis of network traffic statistics.
The S7700 supports the V5, V8, and V9 Netstream formats and provides aggregation traffic templates to reduce the burden on the network collector system. In addition, the S7700 supports real-time traffic collection, dynamic report generation, traffic attribute analysis, and traffic exception trap.
NetStream monitors network traffic in real time and analyzes the device’s throughput, providing data for network structure optimization and capacity expansion.
Comprehensive Security Mechanisms, Protecting Enterprises From Internal and External Security Threats
The S7700 comes equipped with an integrated firewall card and supports virtual firewalls and NAT multi-instance, allowing multiple VPN customers to share the same firewall. Its application-layer packet filtering technology detects and filters application layer packets according to preset rules.
The S7700 provides comprehensive NAC solutions for enterprise networks. It supports MAC address authentication, Portal authentication, 802.1x authentication, and DHCP snooping-triggered authentication. These authentication methods ensure the security of various access modes, such as dumb terminal access, mobile access, and centralized IP address allocation.
The S7700 is the industry leader in integrated security solutions. It supports 1K CPU queues and uses a 2-level CPU protection mechanism, separating the data plane from the control plane. Additionally, the S7700 defends against DoS attacks, prevents unauthorized access, and prevents control plane overloading.
Wireless AC Boards, Meeting Mobile Office Requirements
The S7700 can use an access controller (AC) board to provide radio frequency management functions. The AC board allows access points (APs) to automatically select their radio channels and power. In an AP region, APs automatically adjust radio channels and power in the event of signal interference, enabling the receive signal strength indicator (RSSI) and signal-to-noise ratio (SNR) to be continuously updated. The system can then monitor the electromagnetic environment of every wireless user to improve network availability.
The S7700′s AC board supports multiple authentication methods, including 802.1x authentication, MAC address authentication, Portal authentication, and WAPI authentication. These authentication methods meet the requirements of users who use different types of STAs and require different security levels.
The S7700′s AC board supports Layer 2 roaming, allowing STAs to rapidly switch between APs. The S7700 supports 1+1 and N+1 cold backup between ACs and load balancing among ACs, improving network reliability.
Innovative Energy-Saving Chips, Allowing for Intelligent Power Consumption Control
The S7700 uses innovative energy-saving chips, which can dynamically adjust power on all ports based on traffic volume. An idle port enters a sleep mode to reduce power consumption.
The S7700 supports Power over Ethernet (PoE) and uses different energy management modes according to the powered device (PD) type, ensuring flexible energy management.
The S7700 supports IEEE 802.3az Energy Efficient Ethernet and provides the low power idle mode for the PHY line card. If the link utilization is low, the S7700 switches to a lower speed or power PHY to reduce power consumption