Features and Highlights
Powerful Service Processing Capability and Multiple Security Control Mechanisms
Layer 2/Layer 3 multicast protocols: CloudEngine S5731-S supports many Layer 2/Layer 3 multicast protocols such as PIM SM, PIM DM, PIM SSM, MLD, and IGMP snooping, supporting multi-terminal high-definition video surveillance and video conferencing services.
Layer 3 features: CloudEngine S5731-S also supports multiple Layer 3 features including OSPF, IS-IS, BGP, and VRRP, meeting enterprises' requirements on access and aggregation service bearing, and enabling a variety of voice, video, and data applications.
Authentication: CloudEngine S5731-S provides MAC address authentication, 802.1x authentication, and Portal authentication, as well as dynamic delivery of policies (VLAN, QoS, and ACL) to users.
DoS attack defense: CloudEngine S5731-S provides a series of mechanisms to defend against Denial of Service (DoS) and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks; User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and changing the DHCP CHADDR value.
DHCP snooping: CloudEngine S5731-S sets up and maintains a DHCP snooping binding table, discarding packets that do not match the table entries. You can specify DHCP snooping trusted and untrusted ports to ensure that users connect only to the authorized DHCP server.
ARP learning: CloudEngine S5731-S also supports strict ARP learning, which protects a network against ARP spoofing attacks to ensure normal network access.
CloudEngine S5731-S supports Super Virtual Fabric (SVF), which virtualizes the "Core/aggregation + Access switch + AP" structure into a single logical device. CloudEngine S5731-S provides the innovative network management solution in the industry to simplify device management, supporting plug-and-play access switches and APs. In addition, CloudEngine S5731-S supports service configuration templates, which are configured on core devices and automatically delivered to access devices, enabling centralized control, simplified service configuration, and flexible configuration modification. CloudEngine S5731-S functions as a client in an SVF system.
CloudEngine S5731-S supports zero-touch deployment, replacement of faulty devices without additional configuration, USB-based deployment, batch configuration, and batch remote upgrade. The capabilities facilitate device deployment, upgrade, service provisioning, and other management and maintenance operations, and also greatly reduce O&M costs. CloudEngine S5731-S can be managed using SNMP v1/v2c/v3, Command-Line Interface (CLI), web-based network management system, or SSH v2. 0. Additionally, it supports RMON, multiple log hosts, port traffic statistics collection, and network quality analysis, which facilitate network optimization and reconstruction.
Multiple Reliability Mechanisms
CloudEngine S5731-S supports iStack, a technology that can virtualize up to nine physical switches into one logical switch and provide high network scalability. Member switches in a stack implement redundancy backup to improve device reliability and use inter-device link aggregation to improve link reliability. You can increase a stack's ports, bandwidth, and processing capacity by simply adding member switches. iStack also simplifies device configuration and management. After a stack is set up, multiple physical switches are virtualized into one logical device. You can log in to any member switch in a stack to manage all the member switches in that stack.
CloudEngine S5731-S is equipped with two removable power modules that can work in 1+1 redundancy backup mode.
In addition to traditional STP, RSTP, and MSTP, CloudEngine S5731-S supports Huawei-developed Smart Ethernet Protection (SEP) technology and the latest Ethernet Ring Protection Switching (ERPS) standard. SEP is a ring protection protocol specific to the Ethernet link layer, and applies to various ring network topologies, such as open ring topology, closed ring topology, and cascading ring topology. This protocol is reliable, easy to maintain, and implements fast protection switching within 50 ms. ERPS is defined in ITU-T G.8032. It implements millisecond-level protection switching based on traditional Ethernet MAC and bridging functions.
CloudEngine S5731-S supports Smart Link, with which one CloudEngine S5731-S switch can connect to multiple aggregation switches through multiple links, implementing backup of uplinks and significantly improving reliability of access devices.
CloudEngine S5731-S supports Ethernet OAM (IEEE 802.3ah/802.1ag) to detect link faults quickly.
Mature IPv6 Technologies
Transition your networks towards IPv6. CloudEngine S5731-S uses the mature, stable VRP platform and supports IPv4/IPv6 dual stack, IPv6 RIPng, and IPv6 over IPv4 tunnels (including manual, 6-to-4, and ISATAP tunnels). With these IPv6 features, you can deploy CloudEngine S5731-S switches on a pure IPv4 network, a pure IPv6 network, or a hybrid IPv4/IPv6 network, allowing you to upgrade your networks to IPv6 at your own pace.
Open Programmability System (OPS)
Achieve rapid innovation of new functions, program O&M functions, and implement intelligent O&M through OPS. CloudEngine S5731-S supports OPS, which is an open, Python-based platform that provides RESTful APIs to realize flexible programmability. With OPS, you can implement rapid service expansion, automatic function deployment, and intelligent device management, driving down the cost of network operation and maintenance and facilitating network operations.
Realize intelligent O&M to deliver optimal user experience. Through Telemetry technology, CloudEngine S5731-S learns about the network in real time. Huawei's campus network analyzer, CampusInsight, in collaboration with CloudEngine S5731-S, analyzes network data using an intelligent fault identification algorithm. CampusInsight displays the real-time network status, demarcates and locates faults, and identifies network problems that affect user experience, enabling you to take remedial measures to ensure user experience.
CloudEngine S5731-S also supports a variety of intelligent O&M features for audio and video services, including the enhanced Media Delivery Index (eMDI). With eMDI, CloudEngine S5731-S can function as a monitored node, enabling CampusInsight to quickly and accurately demarcate faults that affect the quality of audio and video services.
Ensure your switching devices always remain up to date. CloudEngine S5731-S obtains the version upgrade path and downloads the latest upgrades from the Huawei Online Upgrade Platform (HOUP) through a highly automated process. CloudEngine S5731-S also supports preloading of versions, shortening both the upgrade time and the service interruption time. The HOUP standardizes the upgrade operations, reducing the risk of upgrade failures. With the intelligent upgrade feature, you can simplify the upgrade operations and perform independent upgrades, thereby reducing your maintenance costs.
Networking and Applications
Large-sized Enterprise Campus Networks
CloudEngine S5731-S provides various terminal security management features, and supports functions such as PoE, voice VLAN, and QoS. The switch can be used for desktop access and provides gigabit access.
CloudEngine S5731-S provides various security features including ARP security, IP security, IP source guard, and user access control policies such as NAC and ACLs, to control access of user terminals.
In addition, the switch supports the Link Aggregation Control Protocol (LACP) to provide multi-link access for servers, improving link bandwidth and reliability.
In terms of device management, CloudEngine S5731-S provides Easy Operation and USB-based deployment, which facilitates device deployment and management.
Small- and Mid-Sized Enterprise Campus Network
CloudEngine S5731-S switches can be located at the aggregation layer to build a high-performance, reliable enterprise campus network.
On an enterprise network or campus network, CloudEngine S5731-S switches connect to access switches through gigabit or 10 gigabit interfaces, provide high performance and large switching capacity, and connect to core switches through 10 gigabit optical interfaces. The network provides 10 Gbit/s rate for the backbone layer and 100 Mbit/s access rate for terminals, meeting requirements for high bandwidth and multi-service.
CloudEngine S5731-S provides SEP and RRPP to implement millisecond-level protection switchover. The switches form a stack system by using iStack technology to implement the distributed forwarding structure and fast fault recovery. The stack system increases the number of user interfaces and improves packet processing capability. The member switches can be managed in a uniform manner to facilitate network management and maintenance.
Small-Sized Enterprise Campus Network
CloudEngine S5731-S switches can be used as the core switches of a small-sized enterprise campus network, which have powerful aggregation and routing capabilities. CloudEngine S5731-S switches use iStack to ensure high reliability. The switches provide various access control policies to achieve centralized user management and simplify configuration.