Huawei S5720I-SI Series Video Backhaul Switch

Huawei S5720I-SI Series Video Backhaul Switch

Product overview

The S5720I-SI series video backhaul switch is ideal for implementing outdoor video backhaul in public safety scenarios. The switch integrates multiple modules, including an extended-temperature switch, surge protector, multiple power outputs, fiber splice tray, protective shell, and mechanical lock, meeting all the needs of an outdoor access site.

Leveraging its high-performance hardware and Huawei Versatile Routing Platform (VRP), the switch provides flexible full gigabit access ports and 10 GE uplink ports, supports simple Operations and Maintenance (O&M) and flexible Ethernet networking, and provides enhanced Layer 3 features as well as mature IPv6 functions. The S5720I-SI series video backhaul switch supports an industrial-grade operating temperature range and has a high level of outdoor surge protection. It is also IP66-rated and comes with salt spray protection. It can withstand harsh weather conditions in outdoor environments and can be used for video access in Safe City scenarios.

This series is available in two models: S5720I-6X-PWH-SI-AC and S5720I-10X-PWH-SI-AC.

Product appearance

Appearance Description

S5720I-6X-PWH-SI-AC

  • Integrates multiple modules including the protective shell, surge protector, fiber splice tray, and multiple power outputs
  • 4 x 10/100/1,000 Base-T Ethernet ports and 2 x 10 GE SFP+ ports
  • PoE++
  • Built-in AC power supply
  • IP66
  • Surge protection
  • Salt spray protection
  • Forwarding performance: 35.7 Mpps
  • Switching capacity: 168 Gbit/s
  • Operating temperature: -40°C to +55°C

S5720I-10X-PWH-SI-AC

  • Integrates multiple modules including the protective shell, surge protector, fiber splice tray, and multiple power outputs
  • 8 x 10/100/1,000 Base-T Ethernet ports and 2 x 10 GE SFP+ ports
  • PoE++
  • Built-in AC power supply
  • IP66
  • Surge protection
  • Salt spray protection
  • Forwarding performance: 42 Mpps
  • Switching capacity: 168 Gbit/s
  • Operating temperature: -40°C to +55°C

Product features

Industrial-grade reliability to withstand harsh outdoor environments

  • Extended operating temperature range (-40°C to +55°C), enables it to work in harsh outdoor environments.
  • Built-in surge protector meets outdoor surge protection requirements.
  • IP66-rated, easily adapts to complex outdoor environments.
  • Salt spray protection, supports installation in areas more than 500 meters from the sea.

High-level integration and easy installation/deployment

  • The S5720I-SI series video backhaul switch integrates multiple modules, including a built-in surge protector, fiber splice tray, PoE++ power supply, multiple power outputs (12V/24V DC (or 24V AC, depending on the model)/220V AC), protective shell, and mechanical lock, eradicating the need for on-site installation. Additionally, the switch weighs only about 10 kilograms, facilitating wall- and pole-mounting.
  • Supports Super Virtual Fabric (SVF) that virtualizes “Core/Aggregation + Access Switches” into a single logical device. The S5720I-SI can function as the SVF client. SVF provides the innovative network management solution, simplifies device management, and supports plug-and-play of devices, as well as supporting service configuration profiles. These profiles are configured on the core device and automatically delivered to access devices, implementing centralized control, simplifying service configuration, and enabling flexible configuration modification.
  • Supports Zero-Touch Provisioning (ZTP), USB-based deployment, configuration-free replacement of a faulty device, batch configuration, and batch remote upgrade. These functions facilitate device deployment, service provisioning, and other management and maintenance work, significantly reducing O&M costs. The S5720I-SI series video backhaul switch can be managed and maintained using Simple Network Management Protocol (SNMP) v1, v2c, and v3, Command Line Interface (CLI), web system, or Secure Shell (SSH) v2.0. Additionally, it supports Remote Network Monitoring (RMON), multiple log hosts, interface traffic statistics collection, and network quality analysis that facilitates network optimization and reconstruction.

Professional video surveillance features

  • Smart Fault Diagnosis (SFD) of the downstream IP Cameras (IPCs): Specifically, the switch works with Huawei’s network management system, eSight, to implement fast fault diagnosis based on the device management status, port status, and alarms of the network path on which the IPC resides, and quickly demarcate the type of fault that led to the IPC disconnection (for example, an IPC fault, network device fault, power failure, or optical fiber link fault). This capability improves O&M efficiency, reduces O&M costs, and increases the IPC connectivity rate.
  • eMDI video quality demarcation: The switch works with Huawei eSight to analyze video service quality and quickly demarcate the video quality problem type, such as artifacts and frame freezing on the screen when playing a video.
  • Mechanical lock and alarm reporting upon cover being opened: It can quickly detect damage and intrusion, ensuring device security.

Leading PoE++ power supply

  • PoE ++ (802.3bt): A single PoE ++ port provides up to 60W of power.
  • Long-distance PoE++ power supply: When PoE++ ports work in FE mode and Category 5e and above, network cables are used, the switch can provide 200-meter PoE power supply to the following Huawei cameras: M2220-I, M2221-FL, M2221-VL, M2260-I, and M2220-I.
  • Perpetual PoE technology: The switch supplies uninterrupted power to PDs even when it reboots, eliminating fault-triggered interruptions.

Powerful service processing capabilities and multiple security control mechanisms

  • Various Layer 2 and Layer 3 multicast protocols, including Protocol Independent Multicast Sparse Mode (PIM SM), PIM Dense Mode (DM), PIM Source-Specific Multicast (SSM), Multicast Listener Discovery (MLD), and Internet Group Management Protocol (IGMP) snooping, ensuring high-quality HD video surveillance services.
  • Layer 3 features, such as Open Shortest Path First (OSPF), Intermediate System to Intermediate System (IS-IS), Border Gateway Protocol (BGP), and Virtual Router Redundancy Protocol (VRRP), meeting enterprise access and aggregation service requirements and supporting more voice, video, and data applications.
  • MAC address authentication, 802.1X authentication, Portal authentication, and dynamic delivery of user policies (VLAN, QoS, and ACL).
  • Series of mechanisms to defend against DoS attacks and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, LAND, Smurf, and ICMP flood attacks. User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and changing the DHCP CHADDR value.
  • Setting up and maintaining a DHCP snooping binding table, and discarding the packets that do not match the table entries. DHCP snooping allows a physical port to be configured as a trusted or untrusted port to ensure that users are connected to only authorized DHCP servers.
  • Strict ARP learning, protecting the network against ARP spoofing attacks and ensuring normal network access.

Multiple reliability mechanisms

  • Huawei-developed Smart Ethernet Protection (SEP) technology and the latest Ethernet Ring Protection Switching (ERPS) standard, in addition to the traditional Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP). SEP is a ring protection protocol dedicated to the Ethernet link layer. It is applicable to various ring topologies such as open ring topology, closed ring topology, and cascading ring topology. SEP is reliable and easy to maintain and performs fast protection switching (under 50 milliseconds). ERPS is defined in ITU-T G.8032. It provides protection switching within milliseconds based on the traditional Ethernet MAC and bridging functions.
  • Smart Link. One switch can be connected to multiple aggregation switches through multiple links to implement uplink backup, significantly improving the reliability of access devices.
  • Ethernet OAM (IEEE 802.3ah/802.1ag), quickly detecting link faults.

Mature IPv6 technology

  • The S5720I-SI series video backhaul switch uses the mature, stable VRP platform and supports IPv4/IPv6 dual stacks, IPv6 RIPng, and IPv6 over IPv4 tunnels including manual, 6-to-4, and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) tunnels. With these IPv6 features, the switch can be deployed on IPv4 networks, IPv6 networks, or networks that run both IPv4 and IPv6, meeting the requirements for IPv4-to-IPv6 transition.

Hardware specifications

Item S5720I-6X-PWH-SI-AC S5720I-10X-PWH-SI-AC
Fixed Ports 4 x 10/100/1,000 Base-T ports and 2 x 10G SFP+ ports 8 x 10/100/1,000 Base-T ports and 2 x 10G SFP+ ports
Management Ports Console port (RJ45) and USB 2.0 port
PoE 4 PoE++ ports, each providing up to 60W of power
Maximum total PoE output power: 200W (shared with 12V DC and 24V AC outputs)
802.3af/802.3at/802.3bt standards compliance
8 PoE++ ports, each providing up to 60W of power
Maximum total PoE output power: 200W (shared with 12V DC and 24V DC outputs)
802.3af/802.3at/802.3bt standards compliance
Dimensions (W x D x H) 300 mm x 110 mm x 390 mm 300 mm x 100 mm x 390 mm
Weight 10.1 kg 9.8 kg
Input Voltage Rated AC voltage: 220V to 240V AC, 50/60 Hz
Maximum AC voltage: 176V to 264V AC, 45 Hz to 66 Hz
Rated AC voltage: 100V to 240V AC, 50/60 Hz
Maximum AC voltage: 90V to 264V AC, 47 Hz to 63 Hz
Power Output Maximum total output power of 12V DC/24V AC/PoE: 150W
12V DC (two outputs): 48W in total, with a maximum of 48W for each output
24V AC (one output): 72W
220V AC (one output): maximum current of 4 A
Maximum total output power of 12V DC/24V DC/PoE: 200W
12V DC (two outputs): 96W in total, with a maximum of 96W for each output
24V DC (one output): 72W
AC:
220V AC (one output): maximum current of 4 A
Mechanical Lock Supported
Cable Cover Supported (optional)
Fiber Splice Tray Built-in
Protection Rating IP66
Surge Protection AC input:
Common mode: 20 kA; differential mode: 20 kA
12V DC output:
Common mode: 4 kV; differential mode: 2 kV
24V AC output:
Common mode: 6 kV; differential mode: 2 kV
12V/24V DC output:
Common mode: 6 kV; differential mode: 6 kV
Network port:
Differential mode: 6 kV; common mode: 1.5 kV
Salt Spray Protection Supported, allowing the switch to be installed in areas more than 500 meters away from the sea
Heat Dissipation Natural heat dissipation
Installation Mode Pole-mounted or wall-mounted

Service features

Item Description
MAC IEEE 802.1d compliance
16K MAC address entries
Automatic learning and aging of MAC address entries
Static, dynamic, and blackhole MAC address entries
Packet filtering based on source MAC addresses
VLAN 4K VLANs
Guest VLAN and voice VLAN
GVRP
MUX VLAN
VLAN assignment based on MAC addresses, protocols, IP subnets, policies, and ports
VLAN mapping
Reliability RRPP ring topology and RRPP multi-instance
Smart Link tree topology and Smart Link multi-instance, providing protection switching within milliseconds
SEP
STP (IEEE 802.1d), RSTP (IEEE 802.1w), and MSTP (IEEE 802.1s)
ERPS (G.8032)
BPDU protection, root protection, and loop protection
IP Routing Static routing, RIPv1/v2, RIPng, OSPF, OSPFv3, IS-IS, IS-ISv6, BGP, BGP4+, VRRP, VRRP6, and ECMP
IPv6 Features Neighbor Discovery (ND)
Path MTU (PMTU)
IPv6 ping, IPv6 tracert, and IPv6 Telnet
6to4 tunnels, ISATAP tunnels, and manually configured tunnels
Multicast IGMP v1/v2/v3, PIM-SM, PIM-DM, and PIM-SSM
IGMP v1/v2/v3 snooping and IGMP fast leave
MLD v1/v2 and MLD v1/v2 snooping
Intra-VLAN multicast forwarding and inter-VLAN multicast replication
Multicast load balancing among member ports of a trunk link
Controllable multicast
Port-based multicast traffic statistics collection
QoS/ACL Inbound and outbound traffic rate limiting on a port
Packet redirection
Port-based traffic policing and two-rate, three-color CAR
Eight queues per port
DRR, SP, and DRR + SP queue scheduling algorithms
Re-marking of the 802.1p priority and DSCP value of packets
Packet filtering on Layer 2 to Layer 4, filtering out invalid frames based on the source MAC address, destination MAC address, source IP address, destination IP address, TCP/UDP source/destination port number, protocol number, and VLAN ID
Queue-based rate limiting and traffic shaping on ports
Security Features Hierarchical user management and password protection
DoS attack defense, ARP attack defense, and ICMP attack defense
Binding of the IP address, MAC address, port number, and VLAN ID
Port isolation, port security, and sticky MAC
MAC Forced Forwarding (MFF)
Blackhole MAC address entries
Limit on the number of learned MAC addresses
IEEE 802.1X authentication and limit on the number of users on a port
AAA authentication, RADIUS authentication, and HWTACACS authentication
NAC
SSH v2.0
HTTPS
CPU protection
Blacklist and whitelist
DHCPv4/v6 client/relay/server/snooping
Attack source tracing and punishment for IPv6 packets such as ND, DHCPv6, and MLD packets
Separation between user authentication and policy enforcement points
Reliability LACP
E-trunk
Ethernet OAM (IEEE 802.3ah and 802.1ag)
ITU-Y.1731
DLDP
LLDP
BFD for BGP/IS-IS/OSPF/static route
Super Virtual Fabric (SVF) Plug-and-play
Automatic loading of software and patches
One-click automatic provisioning of services
Configuration of an AS in independent mode and configuration of services that are not supported by the profile on the parent
OAM EFM
CFM
Y.1731
Management and Maintenance Virtual cable test
SNMPv1/v2c/v3
RMON
Network Management System (NMS) and web-based network management features
System logs and multi-level alarms
sFlow
NETCONF
Dying gasp
Alarms upon opening the cover of the device
Offline IPC fault diagnosis
eMDI
Interconnection and Interoperability VLAN-Based Spanning Tree (VBST) (compatible with PVST/PVST+/RPVST)
Link-type Negotiation Protocol (LNP) (similar to DTP)
VLAN Central Management Protocol (VCMP) (similar to VTP)

Networking and applications

Video surveillance network in Safe City scenarios

The S5720I-SI series video backhaul switch supports an extended operating temperature range, has a built-in surge protector, and provides IP66 protection as well as salt spray protection capabilities. It is applicable to outdoor environments and can be used in Safe City scenarios to provide long-distance PoE access for cameras.

Ordering information

Model Description
S5720I-6X-PWH-SI-AC S5720I-6X-PWH-SI-AC (4 x 10/100/1,000 BASE-T ports, 2 x 10 GE SFP+ ports, PoE++, AC power supply)
S5720I-10X-PWH-SI-AC S5720I-10X-PWH-SI-AC (8 x 10/100/1,000 BASE-T ports, 2 x 10 GE SFP+ ports, PoE++, AC power supply)
ES5MPJB00000 Cable cover (used in S5720I-10X-PWH-SI-AC and S5720I-6X-PWH-SI-AC)