Huawei S600-E Series Switches Data Sheet

Huawei S600-E Series Switches Data Sheet

The S600-E series switches (S600-E for short) are new-generation Layer 3 Ethernet switches tailored for education industry. They feature high performance, high security, and intelligent management, and support a large number of access users. The S600-E was developed based on the Huawei Versatile Routing Platform (VRP) and next-generation high-performing hardware. It provides rich IPv6 features and security control functions such as Source Address Validation Improvements (SAVI) and can function as a client to access a Super Virtual Fabric (SVF) system to simplify network management. Due to the preceding characteristics, the S600-E can meet various education networks’ access and aggregation requirements.

Product appearance

The following models are available in the S600-E series.

Appearance Description

S628-E

  • 24 x Ethernet 10/100/1,000 ports, 4 x Gig SFP
  • AC power supply
  • Forwarding performance: 51 Mpps
  • Switching capacity: 336 Gbit/s

S628X-E

  • 24 x Ethernet 10/100/1,000 ports, 4 x 10 Gig SFP+
  • AC power supply
  • Forwarding performance: 108 Mpps
  • Switching capacity: 336 Gbit/s

S628-PWR-E

  • 24 x Ethernet 10/100/1,000 ports, 4 x Gig SFP
  • AC power supply
  • PoE+
  • Forwarding performance: 51 Mpps
  • Switching capacity: 336 Gbit/s

S628X-PWR-E

  • 24 x Ethernet 10/100/1,000 ports, 4 x 10 Gig SFP+
  • AC power supply
  • PoE+
  • Forwarding performance: 108 Mpps
  • Switching capacity: 336 Gbit/s

S652-E

  • 48 x Ethernet 10/100/1,000 ports, 4 x Gig SFP
  • AC power supply
  • Forwarding performance: 87 Mpps
  • Switching capacity: 336 Gbit/s

S652X-E

  • 48 x Ethernet 10/100/1,000 ports, 4 x 10 Gig SFP+
  • AC power supply
  • Forwarding performance: 144 Mpps
  • Switching capacity: 336 Gbit/s

S652-PWR-E

  • 48 x Ethernet 10/100/1,000 ports, 4 x Gig SFP
  • AC power supply
  • PoE+
  • Forwarding performance: 87 Mpps
  • Switching capacity: 336 Gbit/s

S652X-PWR-E

  • 48 x Ethernet 10/100/1,000 ports, 4 x 10 Gig SFP+
  • PoE+
  • AC power supply
  • Forwarding performance: 144 Mpps
  • Switching capacity: 336 Gbit/s

Product characteristics

Flexible Ethernet networking

  • In addition to traditional Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP), the S600-E supports Huawei-developed Smart Ethernet Protection (SEP) technology and the latest Ethernet Ring Protection Switching (ERPS) standard. SEP is a ring protection protocol specific to the Ethernet link layer, and applies to various ring network topologies, such as open ring topology, closed ring topology, and cascading ring topology. This protocol is reliable, easy to maintain, and implements fast protection switching within 50 ms. ERPS is defined in ITU-T G.8032. It implements millisecond-level protection switching based on traditional Ethernet MAC and bridging functions.
  • The S600-E supports Smart Link, which implements backup of uplinks. One S600-E switch can connect to multiple aggregation switches through multiple links, significantly improving reliability of access devices.
  • The S600-E supports Ethernet OAM (IEEE 802.3ah/802.1ag) to detect link faults quickly.

Mature IPv6 technologies

  • Based on the mature and stable VRP platform, the S600-E supports IPv4/IPv6 dual protocol stack and IPv6 RIPng. With these IPv6 features, the S600-E can be deployed on a pure IPv4 network, a pure IPv6 network, or a shared IPv4/IPv6 network, helping achieve IPv4-to-IPv6 transition.
  • The openness feature of a campus network allows unauthorized IPv6 hosts to access the network easily. The S600-E supports the SAVI function and provides Neighbor Discovery (ND) snooping and DHCPv6 snooping to bind hosts’ IPv6 addresses, preventing IPv6 address spoofing and unauthorized host access.

A large number of access users

  • The increasing number of access users on a campus network greatly strains network capacity. The S600-E can be used as an access device on a large college campus network. It supports up to 16K MAC addresses, successfully accommodating a large number of users.

Complete security control

  • Many users access the college campus network through ADSL. To authenticate these users, Huawei S600-E provides the PPPoE+ function and allocates IPv4 or IPv6 addresses to users, improving access security and simplifying network Operations and Maintenance (O&M).
  • ARP attacks and ARP viruses are the major threats to college campus networks. The S600-E supports rich ARP attack defense functions. It provides ARP intrusion detection and ARP packet rate limiting to prevent ARP flood attacks, strict ARP learning to prevent ARP entry exhaustion caused by ARP spoofing attacks, and user-defined ACL, DHCP snooping, and binding of ports, IP addresses, and MAC addresses to protect the gateway against ARP Man-In-The-Middle (MITM) attacks.
  • The S600-E supports MAC address authentication, Portal authentication, and 802.1x authentication, and implements dynamic delivery of policies (VLAN, QoS, and ACL) to users.
  • The S600-E provides a series of mechanisms to defend against DoS and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks. User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and change of the DHCP CHADDR value.

Accurate traffic analysis

  • The S600-E supports the sFlow function. It uses a method defined in the sFlow standard to sample traffic passing through it and sends sampled traffic to the traffic analysis platform. The collected traffic statistics are used to generate statistical reports, helping colleges maintain their networks and adjust services.

Intelligent and simple management

  • The S600-E can function as a client in an SVF system, changing the “core/aggregation + access switch + AP” structure into a logical device. The S600-E enables the simplest network management solution in the industry. It allows plug-and-play access switches and APs. In addition, the S600-E supports service configuration templates. The templates are configured on core devices and automatically delivered to access devices, enabling centralized control, simplified service configuration, and flexible configuration modification.
  • The S600-E supports intelligent stack (iStack). This technology combines multiple switches into a logical switch. The S600-E supports stacking through electrical ports. Member switches in a stack implement redundancy backup to improve device reliability and use inter-device link aggregation to improve link reliability.
  • iStack provides high network scalability. You can increase a stack’s ports, bandwidth, and processing capacity by simply adding member switches.
  • iStack also simplifies device configuration and management. After a stack is set up, multiple physical switches are virtualized into one logical device. You can log in to any member switch in the stack to manage all the member switches in the stack.

Product specifications

Item S628-E
S628-PWR-E
S628X-E
S628X-PWR-E
S652-E
S652-PWR-E
S652X-E
S652X-PWR-E
Fixed Ports 24 x Ethernet 10/100/1,000 ports, 4 x Gig SFP 24 x Ethernet 10/100/1,000 ports, 4 x 10 Gig SFP+ 48 x Ethernet 10/100/1,000 ports, 4 x Gig SFP 48 x Ethernet 10/100/1,000 ports, 4 x 10 Gig SFP+
MAC Address Table 16K MAC address entries
MAC address learning and aging
Static, dynamic, and blackhole MAC address entries
Packet filtering based on source MAC addresses
Port-based MAC address learning limiting
VLAN Features 4K VLANs Guest VLAN and voice VLAN
GVRP
MUX VLAN
VLAN assignment based on MAC addresses, protocols, IP subnets, policies, and ports
1:1 and N:1 VLAN mapping
Ethernet Loop Protection RRPP ring topology and RRPP multi-instance
Smart Link tree topology and Smart Link multi-instance, providing millisecond-level protection switchover
SEP
ERPS (G.8032)
STP (IEEE 802.1d), RSTP (IEEE 802.1w), and MSTP (IEEE 802.1s)
BPDU protection, root protection, and loop protection
BPDU tunnel
Reliability Ethernet OAM (IEEE 802.3ah and IEEE 802.1ag)
ITU-Y.1731
DLDP
LACP
IP Routing Static route, RIP, RIPng, and OSPF
IPv6 Features Neighbor Discovery (ND)
Path MTU (PMTU)
IPv6 ping, IPv6 tracert, and IPv6 Telnet
ACLs based on the source IPv6 address, destination IPv6 address, Layer 4 ports, and protocol type
MLDv1/v2 snooping
Multicast IGMPv1/v2/v3 snooping and IGMP fast leave
Multicast forwarding in a VLAN and multicast replication between VLANs
Multicast load balancing among member ports of a trunk
Controllable multicast
Port-based multicast traffic statistics
QoS/ACL Rate limiting on packets sent and received by a port
Packet redirection
Port-based traffic policing and two-rate three-color CAR
Eight queues on each port
WRR, DRR, SP, WRR + SP, and DRR + SP queue scheduling algorithms
Re-marking of the 802.1p priority and DSCP priority
Packet filtering at Layer 2 to Layer 4, filtering out invalid frames based on the source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocol type, and VLAN ID
Rate limiting in each queue and traffic shaping on ports
Access Authentication IEEE 802.1x authentication and limit on the number of users on a port
AAA authentication, RADIUS authentication, HWTACACS authentication, and NAC
PPPoE+
DHCP relay, DHCP server, DHCPv6 relay, DHCPv6 server, and SAVI
Security Hierarchical user management and password protection
DoS attack defense, ARP attack defense, and ICMP attack defense
Binding of the IP address, MAC address, port number, and VLAN ID
Port isolation, port security, and sticky MAC
MFF
Blackhole MAC address entries
Limit on the number of learned MAC addresses
SSH V2.0
HTTPS
CPU defense
Blacklist and whitelist
DHCP snooping, DHCP security, and ND snooping
Lightning Protection Service port: 7 kV
SVF Plug-and-play SVF client
Automatic software and patch loading to clients
One-click and automatic delivery of service configurations
Independent client running
Management and Maintenance iStack
Remote configuration and maintenance using Telnet
SNMPv1/v2c/v3
RMON
eSight and web-based NMS
HTTPS
System logs and multi-level alarms
Energy Efficient Ethernet (802.3az)
Dying gasp
sFlow
Interoperability Supports VBST (compatible with PVST/PVST+/RPVST)
Supports LNP (similar to DTP)
Supports VCMP (similar to VTP)
Operating Environment Long-term operating temperature: 0°C to 45°C
Relative humidity: 5% to 95% (non-condensing)
Input Voltage AC:
Rated voltage range: 100V to 240V, 50 Hz to 60 Hz
Maximum voltage range: 90V to 264V, 47 Hz to 63 Hz
Dimensions (W x D x H) S628-E/S628X-E/S652-E/S652X-E: 442 mm x 220 mm x 43.6 mm
S628-PWR-E/S628X- PWR-E/S652- PWR-E/S652X- PWR-E: 442 mm x 310 mm x 43.6 mm

Networking and applications

Large-sized agile college campus networks

The S600-E can be located at the access layer of a large-sized college campus network to support a large number of access users. The S600-E supports security functions such as SAVI to control network security as well as rich IPv6 features to support IPv4-to-IPv6 network transition. In addition, the S600-E can function as a client in an SVF system to implement plug-and-play and zero configuration features.

Small- and medium-sized college campus networks

The S600-E can be located at the access layer of a small- and medium-sized college campus network, and the Huawei S5720-HI can be located at the core layer. An SVF system is deployed on the entire network for simplified network management that does not compromise performance or reliability.

Ordering Information

The following table lists ordering information of the S600-E series education network switches.

Product Description
S628-E (24 Ethernet 10/100/1,000 ports, 4 Gig SFP, AC 110V/220V)
S628X-E (24 Ethernet 10/100/1,000 ports, 4 x 10 Gig SFP+, AC 110V/220V)
S628-PWR-E (24 Ethernet 10/100/1,000 PoE+ ports, 4 Gig SFP, 370W PoE AC 110V/220V)
S628X-PWR-E (24 Ethernet 10/100/1,000 PoE+ ports, 4 x 10 Gig SFP+, 370W PoE AC 110V/220V)
S652-E (48 Ethernet 10/100/1,000 ports, 4 Gig SFP, AC 110V/220V)
S652X-E (48 Ethernet 10/100/1,000 ports, 4 x 10 Gig SFP+, AC 110V/220V)
S652-PWR-E (48 Ethernet 10/100/1,000 PoE+ ports, 4 Gig SFP, 370W PoE AC 110V/220V)
S652X-PWR-E (48 Ethernet 10/100/1,000 PoE+ ports, 4 x 10 Gig SFP+, 370W PoE AC 110V/220V)