CloudEngine S5731-S Series Switches

CloudEngine S5731-S Series Switches

Product Overview

Huawei’s CloudEngine S5731-S series switches were developed based on next-generation high-performing hardware and Huawei’s Versatile Routing Platform (VRP). CloudEngine S5731-S supports simplified Operations and Maintenance (O&M), Intelligent Stack (iStack), and flexible Ethernet networking. It also provides enhanced Layer 3 features and mature IPv6 features. CloudEngine S5731-S can be used in various scenarios. For example, it can be used as an access or aggregation switch on a campus network or as an access switch in a data center.

Models and Appearances

The following models are available in the CloudEngine S5731-S series.

Models and Appearances Description

CloudEngine S5731-S24T4X

  • 24 × 10/100/1000Base-T Ethernet ports, 4 10GE SFP+ ports
  • 1+1 power backup
  • Forwarding performance: 85 Mpps
  • Switching capacity: 672 Gbit/s

CloudEngine S5731-S24P4X

  • 24 × 10/100/1000Base-T Ethernet ports, 4 10GE SFP+ ports
  • 1+1 power backup
  • PoE+
  • Forwarding performance: 85 Mpps
  • Switching capacity: 672 Gbit/s

CloudEngine S5731-S48T4X

  • 48 × 10/100/1000Base-T Ethernet ports, 4 10GE SFP+ ports
  • 1+1 power backup
  • Forwarding performance: 105 Mpps
  • Switching capacity: 672 Gbit/s

CloudEngine S5731-S48P4X

  • 48 × 10/100/1000Base-T Ethernet ports, 4 10GE SFP+ ports
  • 1+1 power backup
  • PoE+
  • Forwarding performance: 105 Mpps
  • Switching capacity: 672 Gbit/s

Features and Highlights

Powerful Service Processing Capability and Multiple Security Control Mechanisms

Layer 2/Layer 3 multicast protocols: CloudEngine S5731-S supports many Layer 2/Layer 3 multicast protocols such as PIM SM, PIM DM, PIM SSM, MLD, and IGMP snooping, supporting multi-terminal high-definition video surveillance and video conferencing services.

Layer 3 features: CloudEngine S5731-S also supports multiple Layer 3 features including OSPF, IS-IS, BGP, and VRRP, meeting enterprises' requirements on access and aggregation service bearing, and enabling a variety of voice, video, and data applications.

Authentication: CloudEngine S5731-S provides MAC address authentication, 802.1x authentication, and Portal authentication, as well as dynamic delivery of policies (VLAN, QoS, and ACL) to users.

DoS attack defense: CloudEngine S5731-S provides a series of mechanisms to defend against Denial of Service (DoS) and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks; User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and changing the DHCP CHADDR value.

DHCP snooping: CloudEngine S5731-S sets up and maintains a DHCP snooping binding table, discarding packets that do not match the table entries. You can specify DHCP snooping trusted and untrusted ports to ensure that users connect only to the authorized DHCP server.

ARP learning: CloudEngine S5731-S also supports strict ARP learning, which protects a network against ARP spoofing attacks to ensure normal network access.


Easy O&M

CloudEngine S5731-S supports Super Virtual Fabric (SVF), which virtualizes the "Core/aggregation + Access switch + AP" structure into a single logical device. CloudEngine S5731-S provides the innovative network management solution in the industry to simplify device management, supporting plug-and-play access switches and APs. In addition, CloudEngine S5731-S supports service configuration templates, which are configured on core devices and automatically delivered to access devices, enabling centralized control, simplified service configuration, and flexible configuration modification. CloudEngine S5731-S functions as a client in an SVF system.

CloudEngine S5731-S supports zero-touch deployment, replacement of faulty devices without additional configuration, USB-based deployment, batch configuration, and batch remote upgrade. The capabilities facilitate device deployment, upgrade, service provisioning, and other management and maintenance operations, and also greatly reduce O&M costs. CloudEngine S5731-S can be managed using SNMP v1/v2c/v3, Command-Line Interface (CLI), web-based network management system, or SSH v2. 0. Additionally, it supports RMON, multiple log hosts, port traffic statistics collection, and network quality analysis, which facilitate network optimization and reconstruction.


Multiple Reliability Mechanisms

CloudEngine S5731-S supports iStack, a technology that can virtualize up to nine physical switches into one logical switch and provide high network scalability. Member switches in a stack implement redundancy backup to improve device reliability and use inter-device link aggregation to improve link reliability. You can increase a stack's ports, bandwidth, and processing capacity by simply adding member switches. iStack also simplifies device configuration and management. After a stack is set up, multiple physical switches are virtualized into one logical device. You can log in to any member switch in a stack to manage all the member switches in that stack.

CloudEngine S5731-S is equipped with two removable power modules that can work in 1+1 redundancy backup mode.

In addition to traditional STP, RSTP, and MSTP, CloudEngine S5731-S supports Huawei-developed Smart Ethernet Protection (SEP) technology and the latest Ethernet Ring Protection Switching (ERPS) standard. SEP is a ring protection protocol specific to the Ethernet link layer, and applies to various ring network topologies, such as open ring topology, closed ring topology, and cascading ring topology. This protocol is reliable, easy to maintain, and implements fast protection switching within 50 ms. ERPS is defined in ITU-T G.8032. It implements millisecond-level protection switching based on traditional Ethernet MAC and bridging functions.

CloudEngine S5731-S supports Smart Link, with which one CloudEngine S5731-S switch can connect to multiple aggregation switches through multiple links, implementing backup of uplinks and significantly improving reliability of access devices.

CloudEngine S5731-S supports Ethernet OAM (IEEE 802.3ah/802.1ag) to detect link faults quickly.


Mature IPv6 Technologies

Transition your networks towards IPv6. CloudEngine S5731-S uses the mature, stable VRP platform and supports IPv4/IPv6 dual stack, IPv6 RIPng, and IPv6 over IPv4 tunnels (including manual, 6-to-4, and ISATAP tunnels). With these IPv6 features, you can deploy CloudEngine S5731-S switches on a pure IPv4 network, a pure IPv6 network, or a hybrid IPv4/IPv6 network, allowing you to upgrade your networks to IPv6 at your own pace.


Open Programmability System (OPS)

Achieve rapid innovation of new functions, program O&M functions, and implement intelligent O&M through OPS. CloudEngine S5731-S supports OPS, which is an open, Python-based platform that provides RESTful APIs to realize flexible programmability. With OPS, you can implement rapid service expansion, automatic function deployment, and intelligent device management, driving down the cost of network operation and maintenance and facilitating network operations.


Intelligent O&M

Realize intelligent O&M to deliver optimal user experience. Through Telemetry technology, CloudEngine S5731-S learns about the network in real time. Huawei's campus network analyzer, CampusInsight, in collaboration with CloudEngine S5731-S, analyzes network data using an intelligent fault identification algorithm. CampusInsight displays the real-time network status, demarcates and locates faults, and identifies network problems that affect user experience, enabling you to take remedial measures to ensure user experience.

CloudEngine S5731-S also supports a variety of intelligent O&M features for audio and video services, including the enhanced Media Delivery Index (eMDI). With eMDI, CloudEngine S5731-S can function as a monitored node, enabling CampusInsight to quickly and accurately demarcate faults that affect the quality of audio and video services.


Intelligent Upgrade

Ensure your switching devices always remain up to date. CloudEngine S5731-S obtains the version upgrade path and downloads the latest upgrades from the Huawei Online Upgrade Platform (HOUP) through a highly automated process. CloudEngine S5731-S also supports preloading of versions, shortening both the upgrade time and the service interruption time. The HOUP standardizes the upgrade operations, reducing the risk of upgrade failures. With the intelligent upgrade feature, you can simplify the upgrade operations and perform independent upgrades, thereby reducing your maintenance costs.

Product Specifications

Item CloudEngine S5731-S24T4X CloudEngine S5731-S24P4X CloudEngine S5731-S48T4X CloudEngine S5731-S48P4X
Fixed port 24 × 10/100/1000Base-T ports, 4 × 10GE SFP+ ports 24 × 10/100/1000Base-T (PoE+) ports, 4 × 10GE SFP+ ports 48 × 10/100/1000Base-T ports, 4 × 10GE SFP+ ports 48 × 10/100/1000Base-T (PoE+) ports, 4 × 10GE SFP+ ports
Dimensions (W x D x H) 442 mm x 420 mm x 43.6 mm 442 mm x 420 mm x 43.6 mm 442 mm x 420 mm x 43.6 mm 442 mm x 420 mm x 43.6 mm
Input voltage
  • Rated: 100 V AC to 240 V AC; 50/60 Hz
  • Max AC input: 90 V AC to 290 V AC; 45–65 Hz
  • Max DC input: 190 V AC to 290 V DC
  • Rated: 100 V AC to 240 V AC; 50/60 Hz
  • Max AC input: 90 V AC to 290 V AC; 45–65 Hz
  • Max DC input: 190 V AC to 290 V DC
  • Rated: 100 V AC to 240 V AC; 50/60 Hz
  • Max AC input: 90 V AC to 290 V AC; 45–65 Hz
  • Max DC input: 190 V AC to 290 V DC
  • Rated: 100 V AC to 240 V AC; 50/60 Hz
  • Max AC input: 90 V AC to 290 V AC; 45–65 Hz
  • Max DC input: 190 V AC to 290 V DC
Maximum power consumption 114 W
  • Without PDs: 121 W;
  • With PDs: 977 W (740 W available for PDs)
124 W
  • Without PDs: 132 W;
  • With PDs: 1750 W (1440 W available for PDs)
Operating temperature
  • 0-1800 m altitude: -5°C to 45°C
  • 1800-5000 m altitude: The operating temperature reduces by 1°C for each 220 m increase in altitude.
  • 0-1800 m altitude: -5°C to 45°C
  • 1800-5000 m altitude: The operating temperature reduces by 1°C for each 220 m increase in altitude.
  • 0-1800 m altitude: -5°C to 45°C
  • 1800-5000 m altitude: The operating temperature reduces by 1°C for each 220 m increase in altitude.
  • 0-1800 m altitude: -5°C to 45°C
  • 1800-5000 m altitude: The operating temperature reduces by 1°C for each 220 m increase in altitude.
Relative humidity 5% to 95% (non-condensing) 5% to 95% (non-condensing) 5% to 95% (non-condensing) 5% to 95% (non-condensing)
Heat dissipation Air cooled, intelligent speed adjustment, and pluggable fans Air cooled, intelligent speed adjustment, and pluggable fans Air cooled, intelligent speed adjustment, and pluggable fans Air cooled, intelligent speed adjustment, and pluggable fans

Service Features

Feature Description
MAC address table IEEE 802.1d standards compliance
32K MAC address entries
MAC address learning and aging
Static, dynamic, and blackhole MAC address entries
Packet filtering based on source MAC addresses
VLAN 4094 VLANs
Guest VLAN and voice VLAN
GVRP
MUX VLAN
VLAN assignment based on MAC addresses, protocols, IP subnets, policies, and ports
VLAN mapping
Ethernet loop protection RRPP ring topology and RRPP multi-instance
Smart Link tree topology and Smart Link multi-instance, providing millisecond-level protection switching
SEP
ERPS (G.8032)
BFD for OSPF, BFD for IS-IS, BFD for VRRP, and BFD for PIM
STP (IEEE 802.1d), RSTP (IEEE 802.1w), and MSTP (IEEE 802.1s)
BPDU protection, root protection, and loop protection
IP routing Static routes, RIP v1 and v2, RIPng, OSPF, OSPFv3, IS-IS, IS-ISv6, BGP, BGP4+, ECMP, routing policies
Up to 16K FIBv4 entries
Up to 8K FIBv6 entries
Interoperability VLAN-Based Spanning Tree (VBST), working with PVST, PVST+, and RPVST
Link-type Negotiation Protocol (LNP), similar to DTP
VLAN Central Management Protocol (VCMP), similar to VTP
IPv6 features Up to 8K ND entries
PMTU
IPv6 Ping, IPv6 Tracert, and IPv6 Telnet
ACLs based on source IPv6 addresses, destination IPv6 addresses, Layer 4 ports, or protocol types
Multicast Listener Discovery snooping (MLD v1 and v2)
IPv6 addresses configured for sub-interfaces, VRRP6, DHCPv6, and L3VPN
Multicast IGMP v1, v2, and v3 snooping and IGMP fast leave
Multicast forwarding in a VLAN and multicast replication between VLANs
Multicast load balancing among member ports of a trunk
Controllable multicast
Port-based multicast traffic statistics
IGMP v1, v2, and v3, PIM-SM, PIM-DM, and PIM-SSM
MSDP
MVPN
QoS/ACL Rate limiting in the inbound and outbound directions of a port
Packet redirection
Port-based traffic policing and two-rate three-color CAR
Eight queues per port
DRR, SP and DRR+SP queue scheduling algorithms
WRED
Re-marking of the 802.1p and DSCP fields of packets
Packet filtering at Layer 2 to Layer 4, filtering out invalid frames based on the source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocol type, and VLAN ID
Queue-based rate limiting and shaping on ports
Security Hierarchical user management and password protection
DoS attack defense, ARP attack defense, and ICMP attack defense
Binding of the IP address, MAC address, port number, and VLAN ID
Port isolation, port security, and sticky MAC
MAC Forced Forwarding (MFF)
Blackhole MAC address entries
Limit on the number of learned MAC addresses
IEEE 802.1x authentication and limit on the number of users on a port
AAA authentication, RADIUS authentication, and HWTACACS authentication
NAC
SSH v2.0
HTTPS
CPU protection
Blacklist and whitelist
Attack source tracing and punishment for IPv6 packets such as ND, DHCPv6, and MLD packets
Secure Boot
IPsec
ECA
Deception
Reliability LACP
E-trunk
Ethernet OAM (IEEE 802.3ah and IEEE 802.1ag)
ITU-Y.1731
DLDP
LLDP
BFD for BGP, BFD for IS-IS, BFD for OSPF, and BFD for static route
VXLAN VXLAN L2 and L3 gateways
Centralized and distributed gateway
BGP-EVPN
Configured through the NETCONF protocol
Super Virtual Fabric (SVF) Supports a two-layer client architecture.
Supports IGMP snooping on access switches (ASs), and the maximum number of access users on a port can be configured.
Supports independent configuration of ASs, services unsupported by templates can be configured on the parent.
Supports third-party devices between SVF parent and clients.
Functions as an SVF client for plug-and-play with zero configuration.
iPCA Directly coloring service packets to collect real-time statistics on the number of lost packets and packet loss ratio
Collection of real-time statistics on the number of lost packets and packet loss ratio at network and device levels
TWAMP Two-way IP link performance measurement
Measurement on two-way packet delay, one-way packet loss rate, and one-way packet jitter
Management and maintenance iStack, with up to 9 member switches in a stack
SNMP v1, v2c, and v3
RMON
Web-based NMS
System logs and alarms of different levels
GVRP
MUX VLAN
NetStream
Intelligent O&M

Networking and Applications

Large-sized Enterprise Campus Networks

CloudEngine S5731-S provides various terminal security management features, and supports functions such as PoE, voice VLAN, and QoS. The switch can be used for desktop access and provides gigabit access.

CloudEngine S5731-S provides various security features including ARP security, IP security, IP source guard, and user access control policies such as NAC and ACLs, to control access of user terminals.

In addition, the switch supports the Link Aggregation Control Protocol (LACP) to provide multi-link access for servers, improving link bandwidth and reliability.

In terms of device management, CloudEngine S5731-S provides Easy Operation and USB-based deployment, which facilitates device deployment and management.


Small- and Mid-Sized Enterprise Campus Network

CloudEngine S5731-S switches can be located at the aggregation layer to build a high-performance, reliable enterprise campus network.

On an enterprise network or campus network, CloudEngine S5731-S switches connect to access switches through gigabit or 10 gigabit interfaces, provide high performance and large switching capacity, and connect to core switches through 10 gigabit optical interfaces. The network provides 10 Gbit/s rate for the backbone layer and 100 Mbit/s access rate for terminals, meeting requirements for high bandwidth and multi-service.

CloudEngine S5731-S provides SEP and RRPP to implement millisecond-level protection switchover. The switches form a stack system by using iStack technology to implement the distributed forwarding structure and fast fault recovery. The stack system increases the number of user interfaces and improves packet processing capability. The member switches can be managed in a uniform manner to facilitate network management and maintenance.


Small-Sized Enterprise Campus Network

CloudEngine S5731-S switches can be used as the core switches of a small-sized enterprise campus network, which have powerful aggregation and routing capabilities. CloudEngine S5731-S switches use iStack to ensure high reliability. The switches provide various access control policies to achieve centralized user management and simplify configuration.

Ordering Information

The following table lists ordering information of the CloudEngine S5731-S series switches.

Model Product Description
CloudEngine S5731-S24T4X CloudEngine S5731-S24T4X (24*10/100/1000BASE-T ports, 4*10GE SFP+ ports, without power module)
CloudEngine S5731-S24P4X CloudEngine S5731-S24P4X (24*10/100/1000BASE-T ports, 4*10GE SFP+ ports, PoE+, without power module)
CloudEngine S5731-S48T4X CloudEngine S5731-S48T4X (48*10/100/1000BASE-T ports, 4*10GE SFP+ ports, without power module)
CloudEngine S5731-S48P4X CloudEngine S5731-S48P4X (48*10/100/1000BASE-T ports, 4*10GE SFP+ ports, PoE+, without power module)
PAC600S12-CB 600W AC Power Module
PAC1000S56-CB 1000W AC PoE Power Module
FAN-023A-B Fan Module

For more information, visit https://e.huawei.com/en/ or contact the local Huawei sales office.