华为S5700交换机产品售后技术培训
- 格式:ppt
- 大小:1.64 MB
- 文档页数:15
针对交换机配置与维护的培训大纲
1. 培训目标
本培训旨在提供交换机配置与维护的基础知识,使学员能够熟练掌握交换机的配置和维护技巧,并能够解决常见的交换机故障。
2. 培训内容
2.1 交换机基础知识
- 交换机的定义和作用
- 交换机的工作原理
- 交换机的分类和特点
2.2 交换机的配置
- 交换机的初始化设置
- VLAN的创建和配置
- 端口的配置和管理
- 交换机的安全配置
2.3 交换机的维护
- 交换机的固件升级
- 交换机的备份和恢复
- 交换机的性能监控和故障排除
- 交换机的安全性维护
2.4 交换机的最佳实践
- 交换机的规划和设计原则
- 交换机的冗余和高可用性配置
- 交换机的性能优化
3. 培训方法
- 理论讲解:通过教师讲解交换机的基础知识和配置维护技巧。
- 实践操作:提供实际的交换机设备,让学员进行配置和维护
的实践操作。
- 案例分析:分析真实的交换机故障案例,让学员学会故障排
除的方法和技巧。
4. 培训考核
- 培训结束后,进行交换机配置和维护的理论和实践考核。
- 考核内容包括交换机的基础知识、配置维护技巧和故障排除能力。
5. 培训资料和资源
- 提供交换机配置和维护的培训手册。
- 提供相关的网络资源和文档供学员参考。
6. 培训时间和安排
- 培训时间:2天
- 培训地点:提供实际的交换机设备进行培训操作。
- 培训人数:最多20人
以上为针对交换机配置与维护的培训大纲,旨在帮助学员掌握交换机的配置和维护技巧,提高其解决交换机故障的能力。
交换机设定与维修培训方针目标本培训方针旨在提供交换机设定与维修方面的培训,帮助参与者掌握处理交换机问题的技能和知识。
培训内容1. 交换机基础知识:- 了解交换机的基本功能和工作原理。
- 掌握交换机的不同类型和其适用场景。
- 理解交换机与其他网络设备的关系。
2. 交换机设定:- 学习如何进行交换机的初始设定。
- 掌握VLAN的配置和管理。
- 理解交换机端口的配置和监控。
3. 交换机故障排除与维修:- 学习如何检测和排除交换机故障。
- 掌握交换机的日常维护和保养。
- 理解交换机故障的常见原因和解决方法。
培训方法- 理论授课:通过讲解交换机的基本概念和操作步骤,帮助参与者建立起扎实的理论基础。
- 实践操作:提供实际的交换机设备,让参与者亲自进行设定和维修操作,以加强实际操作能力。
- 案例分析:通过分析真实的交换机故障案例,让参与者学会运用所学知识解决实际问题。
培训评估为了评估参与者的培训效果,将进行以下考核方式:1. 理论考试:测试参与者对交换机基础知识的理解程度。
2. 实操考核:通过参与者完成设定和维修任务的情况,评估其实际操作能力。
3. 综合评估:参考参与者在案例分析中的表现,综合评估其综合能力和问题解决能力。
培训证书培训结束后,将颁发合格证书给达到培训要求的参与者,以证明其已经完成了交换机设定与维修培训。
注意事项- 参与者应独立完成培训,不得寻求外部帮助。
- 培训过程中应遵守简单策略,避免引入法律复杂性。
- 在文档中不引用无法确认的内容。
以上为交换机设定与维修培训方针的概述。
希望本培训能够帮助参与者提升交换机设定与维修技能,为其在实际工作中更好地应对交换机相关问题提供支持。
华为设备培训课件1. 课程简介本课程是为华为设备用户提供的培训课件。
课程旨在帮助学员熟悉华为设备的配置、管理和故障排查等操作,提高设备的稳定性和可靠性。
本文档主要介绍课程的内容安排和学习目标。
2. 课程内容本课程包括以下几个模块的内容:2.1 基础知识本模块主要介绍华为设备的基础知识,包括设备的分类、硬件组成、操作系统、接口类型等。
学员将了解设备的基本概念和特性,为后续的操作和配置打下基础。
2.2 设备配置本模块将详细介绍华为设备的配置方法,包括设备连接与初始化、系统配置、接口配置、路由配置等。
学员将学会如何通过命令行界面或Web界面进行设备的配置,以及常见配置场景的实践操作。
2.3 设备管理本模块将介绍华为设备的管理方法,包括设备的监控、维护和备份等。
学员将学会如何使用命令和工具来监控设备的运行状况,进行设备的维护和故障排除,并了解如何进行设备的备份和还原。
2.4 高级配置本模块将介绍华为设备的高级配置方法,包括安全配置、QoS配置、VPN配置等。
学员将学会如何进行设备的安全加固、业务调度和隧道连接等高级配置操作,提高设备的性能和安全性。
3. 学习目标本课程的学习目标如下:•了解华为设备的基本概念和特性;•掌握华为设备的配置方法,能够独立完成设备的基本配置;•理解华为设备的管理方法,能够监控设备的运行状况和进行故障排除;•掌握华为设备的高级配置方法,能够进行安全加固和业务调度等高级配置操作。
4. 学习方式与工具要求本课程采用面授与实践相结合的教学方式,学员需要通过课堂学习和实验操作来熟悉设备的配置和管理。
为了达到最佳学习效果,学员需要满足以下工具要求:•一台配置合适的电脑,能够使用命令行界面或Web界面进行设备操作;•一台华为设备,用于课程实验和操作。
5. 考核方式与证书本课程的考核方式为理论测试和实践操作,学员需要通过考试和实验评估来验证所学知识的掌握情况。
合格的学员将获得华为设备培训课程的结业证书,并被记录在官方认证系统中。
交换机参数设置与维护培训计划目标本培训计划旨在提供关于交换机参数设置与维护的基础知识,帮助参与者了解交换机的功能和配置,并掌握日常维护的技能。
计划内容1.交换机基础知识介绍(2小时)-交换机的定义和作用-交换机与路由器的区别-交换机的分类和工作原理2.交换机参数设置(3小时)-交换机的物理连接与设备布线-V1.AN的概念和配置-交换机端口的配置-STP(生成树协议)的配置和优化3.交换机性能优化(2小时)-交换机的性能指标和监控-QoS(服务质量)的配置和管理-交换机缓存的配置和优化4.交换机故障排除与维护(3小时)-常见交换机故障的诊断和排除方法-交换机固件升级和备份-交换机的日常维护和管理培训方法-理论讲解:通过PPT和示意图进行交换机参数设置与维护知识的讲解。
-实际操作:提供交换机设备供参与者进行实际的参数配置和维护操作。
-案例分析:通过实际案例,让参与者了解如何应对各种交换机故障和配置需求。
培训评估-课堂练习:培训过程中进行小测试,以评估参与者对所学知识的掌握程度。
-实操考核:要求参与者在实际操作中完成一系列的参数配置和故障排除任务。
-反馈调查:培训结束后,通过调查问卷收集参与者对培训效果的反馈和建议。
培训资料-PPT讲义:提供详细的交换机参数设置与维护知识讲解的PPTo-操作手册:提供参与者在实操过程中的操作指导和步骤说明。
-案例分析:提供实际案例和解决方案,供参与者进行讨论和分析。
培训时间和地点-时间:预计为期一周,每天4小时,共20小时。
-地点:培训室或实验室,提供适当的教学设备和交换机设备。
培训师资-培训师应具备以下条件:-具备交换机参数设置与维护的丰富经验和专业知识。
-能够清晰地传达知识,引导参与者进行实际操作和案例分析。
-具备良好的沟通能力和团队合作精神。
培训费用■培训费用可根据具体情况商议,包括培训师的费用、培训材料的费用等。
注意事项-培训过程中应保证参与者的安全,遵守实验室规章制度。
Quidway S5700系列全千兆企业网交换机产品概述:Q uidway S5700系列全千兆企业网交换机(以下简称S5700),是华为公司为满足大带宽接入和以太网多业务汇聚而推出的新一代绿色节能的全千兆高性能以太网交换机。
它基于新一代高性能硬件和华为公司统一的VRP?( Versatile RoutingPlatform)平台,具备大容量、高密度千兆端口,可提供万兆上行,充分满足客户对高密度千兆和万兆上行设备的需求,同时针对企业网用户的园区网接入、汇聚、IDC千兆接入以及千兆到桌面等多种应用场景,融合了可靠、安全、绿色环保等先进技术,采用简单便利的安装维护手段,帮助客户减轻网络规划、建设和维护的压力,助力企业搭建面向未来的IT网络。
S5700系列以太网交换机为盒式设备,机箱高度为1U,提供标准型(SI)和增强型(EI)两种产品版本。
标准型支持二层和基本的三层功能,增强型支持复杂的路由协议和更为丰富的业务特性。
产品规格:强大的多业务支持能力S5700支持IGMP v1/v2/v3 Snooping/Filter/FastLeave/Proxy等协议。
S5700支持线速的跨VLAN组播复制功能,支持捆绑端口的组播负载分担,支持可控组播,可以充分满足IPTV 和其他组播业务的需求。
S5700支持MCE 功能,实现了不同VPN用户在同一台设备的隔离,有效解决用户数据安全问题,同时降低用户投资成本。
完备的高可靠保护机制S5700不仅支持传统的STP/RSTP/MSTP生成树协议,还支持SmartLink和RRPP等增强型以太网技术,可以实现毫秒级链路保护倒换,保证高可靠性的网络质量。
此外,针对Smartlink 和 RRPP均提供多实例功能,可实现链路负载分担,进一步提高了链路带宽利用率。
S5700支持以太Trunk(E-Trunk)功能。
在使用ETrunk之后,CE设备可以通过E-Trunk双归接入到两台PE设备上。
Quidway S5700 系列以太网交换机V100R006C00快速入门文档版本02发布日期2011-07-15版权所有 © 华为技术有限公司 2011。
保留一切权利。
非经本公司书面许可,任何单位和个人不得擅自摘抄、复制本文档内容的部分或全部,并不得以任何形式传播。
商标声明和其他华为商标均为华为技术有限公司的商标。
本文档提及的其他所有商标或注册商标,由各自的所有人拥有。
注意您购买的产品、服务或特性等应受华为公司商业合同和条款的约束,本文档中描述的全部或部分产品、服务或特性可能不在您的购买或使用范围之内。
除非合同另有约定,华为公司对本文档内容不做任何明示或默示的声明或保证。
由于产品版本升级或其他原因,本文档内容会不定期进行更新。
除非另有约定,本文档仅作为使用指导,本文档中的所有陈述、信息和建议不构成任何明示或暗示的担保。
华为技术有限公司地址:深圳市龙岗区坂田华为总部办公楼邮编:518129网址:客户服务邮箱:support@客户服务电话:4008302118前言读者对象本手册针对Quidway S5700系列以太网交换机设备开局,从管理维护的角度,对设备功能进行基本的验证,确保设备稳定、可靠地投入网上运行。
本文档主要适用于以下工程师:l数据配置工程师l调测工程师l网络监控工程师l系统维护工程师符号约定在本文中可能出现下列标志,它们所代表的含义如下。
命令行格式约定修订记录修订记录累积了每次文档更新的说明。
最新版本的文档包含以前所有文档版本的更新内容。
文档版本 02 (2011-07-15)相对于版本01 (2011-05-20)的变化如下:修改:l 2 产品硬件简介l7 文档获取文档版本 01 (2011-05-20)第一次正式发布。
快速入门目录目录前言 (ii)1 概述 (1)2 产品硬件简介 (2)2.1 S2700以太网交换机简介 (3)2.2 S3700以太网交换机简介 (5)2.3 S5700以太网交换机简介 (7)2.4 S6700以太网交换机简介 (10)2.5 S2700系列以太网交换机指示灯介绍 (11)2.6 S3700系列以太网交换机指示灯介绍 (14)2.7 S5700系列以太网交换机指示灯介绍 (18)2.8 S6700系列以太网交换机指示灯介绍 (25)3 设备安装 (29)4 设备上电 (30)4.1 上电前检查 (31)4.2 设备上电 (34)4.3 上电后检查 (34)5 登录设备 (36)5.1 通过Console口登录Switch (37)5.2 通过Telnet登录设备 (40)5.3 登录Web网管客户端 (42)6 业务部署 (44)7 文档获取 (45)1概述介绍快速入门包括的内容。
BrochureProduct OverviewBuilding on next-generation, high-performance hardware and the Huawei Versatile Routing Platform (VRP), the S5700-LI supports Advanced Hibernation Management (AHM), intelligent stack (iStack), flexible Ethernet networking, and diversified security control. It provides customers with a green, easy-to-manage, easy-to-expand, and cost-effective gigabit to the desktop solution. In addition, Huawei customizes specialized models to meet customer requirements to suit special scenarios.● Huawei S5700-LI-BAT series battery LAN switches (S5700-LI-BAT for short) are the industry's first switch series to support batteries and provide visualized battery status management. The S5700-LI-BAT can ensure uninterrupted services inenvironments facing frequent mains power failures at the access layer. Access switches are usually distributed; therefore, it is costly and space-consuming to deploy high-performance Uninterruptible Power Supplies (UPSs) for the access switches.Huawei battery LAN switches solve this problem. The use of batteries ensures stable operation of the access layer in the event of mains power failures.● CSFP switches support downlink CSFP ports, and each downlink CSFP port provides 2 Gbit/s bandwidth bidirectionally. CSFP switches apply to scenarios where users increase continuously and demand higher bandwidth, and scenarios where deploying fibers is costly and difficult and construction timeframes are long. The switches with front power sockets can be installed in the 300 mm deep cabinet.Models and AppearancesModels and AppearancesDescriptionS5700-28P-LI-BAT●24x10/100/1000Base-T Ethernet ports, 4xGE SFP ports ● AC power supply●One battery slot for an external lead-acid battery used in the event of a mains power failure or a 150 W AC or DC power module used as the redundant power source ● Forwarding performance: 42 Mpps ● Switching Capacity: 256 GbpsS5700-28P-LI-24S-BAT●28 xGE SFP ports, 4 xCombo 10/100/1000Base-T Ethernet ports ● AC power supply●One battery slot for an external lead-acid battery used in the event of a mains power failure or a 150 W AC or DC power module used as the redundant power source ● Forwarding performance: 42 Mpps ●Switching Capacity: 256 GbpsS5700-52X-LI-48CS-AC ●48 xGE CSFP ports or 24 x GE SFP ports, 4 xCombo 10/100/1000Base-T Ethernetports, 4 x 10GE SFP+ ports●AC power supply, front power sockets, front access●Forwarding performance: 132 Mpps●Switching Capacity: 256 GbpsFeatures and HighlightsInnovative Energy Saving Design●The S5700-LI series smart energy-saving switches reduce power consumption without degrading system performance or user experience. The S5700-LI series uses innovative energy-saving technologies including energy efficient Ethernet (EEE), port power detection, dynamic CPU frequency adjustment, and device sleep mode. These technologies help reduce power consumption by adjusting power depending on the Up/Down states of links, presence/absence of optical modules, shutdown and undo shutdown operations on ports, and peak and off-peak hours. The S5700-LI series is the industry's first switch series that supports device sleep mode, and provides three energy saving modes to adapt to different usage scenarios: standard, basic, and deep modes.Flexible Ethernet Networking●In addition to traditional Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP), the S5700-LI supports Huawei-developed Smart Ethernet Protection (SEP) technology and the latest Ethernet Ring Protection Switching (ERPS) standard. SEP is a ring protection protocol specific to the Ethernet link layer, and applies to various ring network topologies, such as open ring topology, closed ring topology, and cascading ring topology. This protocol is reliable, easy to maintain, and implements fast protection switching within 50 ms. ERPS is defined in ITU-T G.8032. It implements millisecond-level protection switching based on traditional Ethernet MAC and bridging functions.●The S5700-LI supports SmartLink, which implements backup of uplinks. One S5700-LI switch can connect to multiple aggregation switches through multiple links, significantly improving reliability of access devices.●The S5700-LI supports Ethernet OAM (IEEE 802.3ah/802.1ag) to fast-detect link faults.Diversified Security Control●The S5700-LI supports 802.1x authentication, MAC address authentication, and combined authentication on a per port basis, as well as Portal authentication on a per VLANIF interface basis, and implements dynamic policy delivery (VLAN, QoS, and ACL) to users.●The S5700-LI provides a series of mechanisms to defend against DoS attacks and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks. User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and changing of the DHCP CHADDR value.●The S5700-LI collects and maintains information about access users, such as IP addresses, MAC addresses, IP address leases, VLAN IDs, and interface numbers in a DHCP snooping binding table. In this way, IP addresses and access interfaces of DHCP users can be tracked. You can specify DHCP snooping trusted and untrusted ports to ensure that users connect only to the authorized DHCP server.●The S5700-LI supports strict ARP learning. This feature prevents ARP spoofing attackers from exhausting ARP entries so that users can connect to the Internet normally.Easy Operation and Maintenance●The S5700-LI supports Huawei Easy Operation, a solution that provides zero-touch deployment, replacement of faulty devices without additional configuration, USB-based deployment, batch configuration, and batch remote upgrade. The Easy Operation solution facilitates device deployment, upgrade, service provisioning, and other management and maintenance operations, and also greatly reduces costs of operation and maintenance. The S5700-LI can be managed and maintained using Simple Network Management Protocol (SNMP) V1, V2, and V3, Command Line Interface (CLI), web-based network management system, or Secure Shell (SSH) V2.0. Additionally, it supports remote network monitoring (RMON), multiple log hosts, port traffic statistics collection, and network quality analysis that helps with network consolidation and reconstruction.●EasyDeploy: The Commander collects information about the topology of the client connecting to the Commander and saves client startup information based on the topology. The client can be replaced without configuration. Configuration and scripts can be delivered to the client in batches. In addition, the configuration delivery result can be queried.●The Commander can collect and display power consumption on the entire network.●The S5700-LI can use the GARP VLAN Registration Protocol (GVRP) to implement dynamic distribution, registration, and propagation of VLAN attributes. GVRP reduces manual configuration workload and ensures correct configuration. Additionally, the S5700-LI supports MUX VLAN, which involves a principal VLAN and multiple subordinate VLANs. Subordinate VLANs are classified into group VLANs and separate VLANs. Ports in the principal VLAN can communicate with ports in subordinate VLANs. Ports in a subordinate group VLAN can communicate with each other, whereas ports in a subordinate separate VLAN can communicate only with ports in the principal VLAN. The S5700-LI also supports VLAN Central Management Protocol (VCMP) and VLAN-Based Spanning Tree (VBST) protocol.iStack●The S5700-LI supports intelligent stack (iStack). This technology combines multiple switches into a logical switch. Member switches in a stack implement redundancy backup to improve device reliability and use inter-device link aggregation to improve link reliability. iStack provides high network scalability. You can increase ports, bandwidth, and processing capacity of a stack by simply adding member switches to the stack. iStack also simplifies device configuration and management. After a stack is set up, multiple physical switches are virtualized into one logical device. You can log in to any member switch in the stack to manage all the member switches in the stack.Excellent Network Traffic Analysis●The S5700-LI supports the sFlow function. It uses a method defined in the sFlow standard to sample traffic passing through it and sends sampled traffic to the collector in real time. The collected traffic statistics are used to generate statistical reports, helping enterprises maintain their networks.CSFP Providing High-density Access and Increased Bandwidth●CSFP switches support downlink CSFP ports. Each downlink CSFP port equipped with a CSFP GE optical module and one pair of fibers can provide 2 Gbit/s bandwidth bidirectionally, which is two times the bandwidth of standard SFP optical modules. The 24 downlink CSFP ports can provide 48 Gbit/s bandwidth bidirectionally, implementing high-density access (equal to access of 48 standard SFP ports) and saving the cost of deploying fibers and adding optical modules.Easy O&M with Front Panel●The models with front power sockets can be installed in a 300 mm deep cabinet, and can be maintained through the front panel. This simplifies operation and maintenance. The cabinets can be placed against the wall or back to back, and is well-suited for shallow cabinets and limited equipment room space.Product SpecificationsFixed ports ●S5700-28P-LI-BAT: 24 10/100/1000Base-TEthernet ports, 4 GE SFP ports●S5700-28P-LI-24S-BAT: 28 GE SFP ports,4 Combo 10/100/1000Base-T Ethernetports 48 GE CSFP ports or 24 GE SFP ports, 4 Combo 10/100/1000Base-T Ethernet ports, 4 10GE SFP+ portsMAC address table 16K MAC address entriesMAC address learning and agingStatic, dynamic, and blackhole MAC address entriesPacket filtering based on source MAC addressesInterface-based MAC learning limitingVLAN features 4K VLANsGuest VLAN and voice VLANGVRPMUX VLANVLAN assignment based on MAC addresses, protocols, IP subnets, policies, and interfaces1:1 and N:1 VLAN mappingJumbo frame 10KReliability RRPP ring topology and RRPP multi-instanceSmart Link tree topology and Smart Link multi-instance, providing millisecond-level protectionswitchoverSEPERPS (G.8032)STP (IEEE 802.1d), RSTP (IEEE 802.1w), and MSTP (IEEE 802.1s)BPDU protection, root protection, and loop protectionBPDU tunnelIP routing Static route, RIP, RIPngIPv6 features Neighbor Discovery (ND)Path MTU (PMTU)IPv6 ping, IPv6 tracert, and IPv6 TelnetACLs based on the source IPv6 address, destination IPv6 address, Layer 4 ports, and protocol typeMLDv1/v2 snoopingMulticast IGMPv1/v2/v3 snooping and IGMP fast leaveMulticast forwarding in a VLAN and multicast replication between VLANsMulticast load balancing among member ports of a trunkControllable multicastInterface-based multicast traffic statisticsQoS/ACL Rate limiting on packets sent and received by an interfacePacket redirectionInterface-based traffic policing and two-rate and three-color CAREight queues on each interfaceWRR, DRR, SP, WRR+SP, and DRR+SP queue scheduling algorithmsRe-marking of the 802.1p priority and DSCP priorityPacket filtering at Layer 2 to Layer 4, filtering out invalid frames based on the source MAC address,destination MAC address, source IP address, destination IP address, TCP/UDP port number, protocoltype, and VLAN IDRate limiting in each queue and traffic shaping on interfacesSecurity Hierarchical user management and password protectionDoS attack defense, ARP attack defense, and ICMP attack defenseBinding of the IP address, MAC address, interface number, and VLAN IDPort isolation, port security, and sticky MACMFFBlackhole MAC address entriesLimit on the number of learned MAC addressesIEEE 802.1x authentication and limit on the number of users on an interfaceAAA authentication, RADIUS authentication, HWTACACS authentication, and NACSSH V2.0Hypertext Transfer Protocol Secure (HTTPS)CPU defenseBlacklist and whitelistAccess Security DHCP relay, DHCP server, DHCP snooping, and DHCP securityLightning protection Service interface: 6 kV Service interface: 2 kVSuper Virtual Fabric (SVF) Working as an SVF client that is plug-and-play with zero configuration Automatically loading the system software package and patches of clients One-click and automatic delivery of service configurationsSupports independent running clientManagement and maintenance iStack (excluding battery LAN switches)Virtual Cable Test (VCT)Remote configuration and maintenance using Telnet SNMPv1/v2c/v3RMONeSight and web-based NMSHTTPSLLDP/LLDP-MEDSystem logs and multi-level alarms802.3az EEEDying Gasp (excluding battery LAN switches)Interoperability Supports VBST (Compatible with PVST/PVST+/RPVST)Supports LNP (Similar to DTP)Supports VCMP (Similar to VTP)Operating environment ●Long-term operating temperature: 0°C to45°C●Relative humidity: 5% to 95% (non-condensing)●Long-term operating temperature: 0°C to 45°C●Relative humidity: 5% to 95% (non-condensing)Input voltage AC:●Rated voltage range: 100 V to 240 V AC,50/60 Hz●Maximum voltage range: 90 V to 264 V AC,47/63 HzDC:●Rated voltage range: –48 V to –60 V, DC●Maximum voltage range: –36 V to –72 V,DC AC:●Rated voltage range: 100 V to 240 V AC, 50/60Hz●Maximum voltage range: 90 V to 264 V AC,47/63 HzDC:●Rated voltage range: –48 V to –60 V, DC●Maximum voltage range: –36 V to –72 V, DCPower socketpositionRear power sockets Front power sockets Battery One slot for lead-acid battery charger module NADimensions (W x D442 mm x 310 mm x 43.6 mm 442 mm x 220 mm x 43.6 mmx H)<79.9 WPower consumption ●S5700-28P-LI-BAT: <23 W●S5700-28P-LI-24S-BAT: <34.1 WNetworking and ApplicationsThe S5700-LI provides 1000M desktop access functions for a high performance network, such as voice VLAN, NAC and so on.The S5700-LI-BAT uses a battery as the backup power supply. When a mains power failure occurs, the battery begins powering the switch. When the mains power supply recovers, the switch automatically charges the battery. The use of batteries ensures high reliability at the access layer in the case of frequent mains power failures.Ordering Information98010509 S5700-28P-LI-BAT (24x10/100/1000Base-T Ethernet ports, 4xGE SFP ports, 1 battery slot, AC power supply)98010511 S5700-28P-LI-24S-BAT (28xGE SFP ports, 4xCombo 10/100/1000Base-T Ethernet ports, 1 battery slot,AC power supply)02357823 S5700-52X-LI-48CS-AC (48xGE CSFP ports or 24xGE SFP ports, 4xCombo 10/100/1000Base-T Ethernet ports, 4x10GE SFP+ ports, AC power supply, front power sockets, front access)02310TEE 100/1000BASE-BIDI CSFP single-fiber bidirectional optical module-CSFP-GE/FE-single-mode optical module (Tx1490/Rx1310 nm, 10 km, LC)02353857 RPS1800 Redundant Power System98010517 PBB-12AHA (12AH lead-acid battery charger module)02310JFA 150 W AC power module (optional for battery LAN switches, used as the redundancy for the internal power module)02310JFD 150 W DC power module (optional for battery LAN switches, used as the redundancy for the internal power module)More InformationFor more information about Huawei Campus Switches, visit or contact us in the following ways:●Global service hotline: /en/service-hotline●Logging in to the Huawei Enterprise technical support website: /enterprise/●Sending an email to the customer service mailbox: ********************Copyright © Huawei Technologies Co., Ltd. 2018. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior writtenconsent of Huawei Technologies Co., Ltd.Trademarks and Permissionsand other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.All other trademarks and trade names mentioned in this document are the property of their respective holders.NoticeThe purchased products, services and features are stipulated by the contract made between Huawei and thecustomer. All or part of the products, services and features described in this document may not be within thepurchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, andrecommendations in this document are provided "AS IS" without warranties, guarantees or representations ofany kind, either express or implied.The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.Huawei Technologies Co., Ltd.Address:Huawei Industrial Base Bantian,Longgang Shenzhen 518129 People'sRepublic of ChinaWebsite:。
Huawei S5700-EI Series SwitchesProduct BrochureThe S5700-EI series gigabit enterprise switches (S5700-EI) are next-generation energy-saving switchesdeveloped by Huawei to meet the demand for high-bandwidth access and Ethernet multi-servicemaintain, reducing workloads for network planning, construction, and maintenance. The S5700-EI usesS5700-EI Series Gigabit Enterprise Switches Product OverviewProduct Appearance•Switching capacity: 416Gbps2-2Huawei Enterprise Sx700 Series Switch Product•Switching capacity: 416GbpsProduct Features and highlightsPowerful support for services•The S5700-EI supports IGMP v1/v2/v3 snooping, IGMP filter, IGMP fast leave, and IGMP proxy. It supportsline-speed replication of multicast packets between VLANs, multicast load balancing among member interfaces of a trunk, and controllable multicast, meeting requirements for IPTV services and othermulticast services.•The S5700-EI provides the Multi-VPN-Instance CE (MCE) function to isolate users in different VPNs on a device, ensuring data security and reducing costs.•The S5710-EI supports multiple MPLS & VPN features, including Label Distribution Protocol (LDP) or Resource Reservation Protocol for Traffic Engineering (RSVP-TE), MPLS TE, VLL, VPLS, and MPLS L3VPN. Comprehensive reliability mechanisms•Besides STP, RSTP, and MSTP, the S5700-EI supports enhanced Ethernet reliability technologies such asSmart Link and RRPP (Rapid Ring Protection Protocol), which implement millisecond-level protection switchover and ensure network reliability. It also provides Smart Link multi-instance and RRPP multi-instance to implement load balancing among links, optimizing bandwidth usage.Huawei Enterprise Sx700 Series Switch Product2-3•The S5700-EI supports enhanced trunk (E-Trunk) that enables a CE to be dual-homed to two PEs (S5700s).E-Trunk greatly enhances link reliability between devices and implements link aggregation betweendevices. This improves reliability of access devices.•The S5700-EI supports the Smart Ethernet Protection (SEP) protocol, a ring network protocol applied tothe link layer on an Ethernet network. SEP can be used on open ring networks and can be deployed onupper-layer aggregation devices to provide fast switchover, ensuring non-stop transmission of services.SEP features simplicity, high reliability, fast switchover, easy maintenance, and flexible topology, facilitatingnetwork planning and management.•The S5700-EI supports Ethernet Ring Protection Switching (ERPS), also referred to as G.8032. As the latestring network protocol, ERPS was developed based on traditional Ethernet MAC and bridging functionsand uses mature Ethernet OAM function and a Ring Automatic Protection Switching (R-APS) mechanismto implement millisecond-level protection switching. ERPS supports various services and allows flexiblenetworking, helping customers build a network with lower OPEX and CAPEX.•The S5700-EI supports redundant power supplies, and can use an AC power supply and a DC powersimultaneously. Users can choose a single power supply or use two power supplies to ensure devicereliability.•The S5700-EI supports VRRP, and can set up VRRP groups with other Layer 3 switches. VRRP providesredundant routes to ensure stable and reliable communication. Multiple equal-cost routes to an uplinkdevice can be configured on the S5700-EI to provide route redundancy. When an active route isunreachable, traffic is switched to a backup route.•The S5700-EI supports Bidirectional Forwarding Detection (BFD) and provides millisecond-level detectionfor protocols such as OSPF, IS-IS, VRRP, and PIM to improve network reliability. The S5700-EI complies withIEEE 802.3ah and 802.1ag. IEEE 802.3ah defines the mechanism for detecting faults on direct links overthe Ethernet in the first mile, and 802.1ag defines the mechanism for end-to-end service fault detection.The S5700-EI supports Y.1731. Besides fast end-to-end service fault detection, the S5700-EI can use theperformance measurement tools defined in Y.1731 to monitor network performance, providing accuratedata about network quality.Well-designed QoS policies and security mechanisms•The S5700-EI implements complex traffic classification based on packet information such as the 5-tuple,IP precedence, ToS, DSCP, IP protocol type, ICMP type, TCP/UDP port number, VLAN ID, Ethernet protocoltype. ACLs can be applied to inbound or outbound direction on an interface. The S5700-EI supportsa flow-based two-rate three-color CAR. Each port supports eight priority queues and multiple queuescheduling algorithms such as WRR, DRR, SP, WRR+SP, and DRR+SP. All of these ensure the quality ofvoice, video, and data services.Huawei Enterprise Sx700 Series Switch Product•The S5700-EI provides multiple security measures to defend against Denial of Service (DoS) attacks,and attacks against networks or users. DoS attack types include SYN Flood attacks, Land attacks, Smurf attacks, and ICMP Flood attacks. Attacks to networks refer to STP BPDU/root attacks. Attacks to users include bogus DHCP server attacks, man-in-the-middle attacks, IP/MAC spoofing attacks, DHCP requestflood attacks. DoS attacks that change the CHADDR field in DHCP packets are also attacks against users.•The S5700-EI supports DHCP snooping, which discards invalid packets that do not match any binding entries, such as ARP spoofing packets and IP spoofing packets. This prevents man-in-the-middle attacksto campus networks that hackers initiate by using ARP packets. The interface connected to a DHCP server can be configured as a trusted interface to protect the system against bogus DHCP server attacks.•The S5700-EI supports strict ARP learning, which prevents ARP spoofing attacks that will exhaust ARP entries. It also provides IP source check to prevent DoS attacks caused by MAC address spoofing, IP address spoofing, and MAC/IP spoofing.•The S5700-EI supports 802.1x authentication, MAC address authentication, and combined authentication on a per port basis, as well as Portal authentication on a per VLANIF interface basis. The S5700-EI also supports NAC. The S5700-EI authenticates users based on statically or dynamically bound user information such as the user name, IP address, MAC address, VLAN ID, access interface, and flag indicating whether antivirus software is installed. VLANs, QoS policies, and ACLs can be applied to users dynamically.•The S5700-EI can limit the number of MAC addresses learned on an interface to prevent attackers from exhausting MAC address entries by using bogus source MAC addresses. This function minimizes packetflooding that occurs when MAC addresses of users cannot be found in the MAC address table.Fine-grained traffic management•The S5710-EI supports NetStream. The NetStream module supports V5, V8, and V9 packet formats and provides various traffic analysis functions, such as real-time traffic sampling, dynamic report generation, traffic attribute analysis, and traffic exception report. The Netstream module enables administrators to monitor network status in real time and provides applications and analysis functions including potential fault detection, effective fault rectification, fast problem handling, and security monitoring, to help customers optimize network structure and adjust resource deployment.•The S5700-EI supports the Sampled Flow (sFlow) function, which uses a sampling mechanism to obtain statistics about traffic forwarded on a network and sends the statistics to the Collector in real time. The Collector analyzes traffic statistics to help customers manage network traffic efficiently. The S5700-EI integrates the sFlow Agent module and uses hardware for traffic monitoring. Unlike traffic monitoring through port mirroring, sFlow does not degrade network performance during traffic monitoring.Easy deployment and maintenance free•The S5700-EI supports automatic configuration, plug-and-play, and batch remote upgrade. These capabilities simplify device management and maintenance and reduce maintenance costs. The S5700-EI supports SNMP v1/v2c/v3 and provides flexible methods for managing devices. Users can manageHuawei Enterprise Sx700 Series Switch Productthe S5700-EI using the CLI and Web NMS. The NQA function helps users with network planning andupgrading. In addition, the S5700-EI supports NTP, SSH v2, HWTACACS+, RMON, log hosts, and port-based traffic statistics.•EasyDeploy: The Commander collects information about the topology of the client connecting to theCommander and saves client startup information based on the topology. The client can be replacedwithout configuration. Configuration and scripts can be delivered to the client in batches. In addition, theconfiguration delivery result can be queried. The Commander can collect and display power consumptionon the entire network.•The S5700-EI supports the GARP VLAN Registration Protocol (GVRP), which dynamically distributes,registers, and propagates VLAN attributes to reduce manual configuration workloads of networkadministrators and to ensure correct VLAN configuration. In a complex network topology, GVRP simplifiesVLAN configuration and reduces network communication faults caused by incorrect VLAN configuration.•The S5700-EI supports MUX VLAN. MUX VLAN isolates Layer 2 traffic between interfaces in a VLAN.Interfaces in a subordinate separate VLAN can communicate with ports in the principal VLAN but cannotcommunicate with each other. MUX VLAN is usually used on an enterprise intranet to isolate userinterfaces from each other but allow them to communicate with server interfaces. This function preventscommunication between network devices connected to certain interfaces or interface groups but allowsthe devices to communicate with the default gateway.PoE function•The S5700-EI PWR can use PoE power supplies with different power levels to provide -48V DC power forPowered Devices (PDs) such as IP phones, WLAN APs, and Bluetooth APs. In its role as Power SourcingEquipment (PSE), the S5700-EI PWR complies with IEEE 802.3af and 802.3at (PoE+) and can work with PDsthat are incompatible with 802.3af or 802.3at. Each port provides a maximum of 30 W power, complyingwith IEEE 802.3at. The PoE+ function increases the maximum power of each port and implements intelligentpower management for high-power consumption applications. This facilitates the use of PDs. PoE portscan work in power-saving mode. The S5700-EI PWR provides improved PoE solutions. Users can configurewhether and when a PoE port supplies power.High scalability•The S5700-EI supports intelligent stacking (iStack). Multiple S5700-EI switches can be connected withstack cables to set up a stack, which functions as a virtual switch. A stack consists of a master switch,a backup switch, and several slave switches. The backup switch takes over services when the masterswitch fails, reducing service interruption time. Stacks support intelligent upgrade so that users do notneed to change the software version of a switch when adding it to a stack. The iStack function allowsusers to connect multiple switches with stack cables to expand system capacity. These switches can bemanaged using a single IP address, which greatly reduces the costs of system expansion, operation, andmaintenance. Compared with traditional networking technologies, iStack has advantages in scalability,reliability, and system architecture.Huawei Enterprise Sx700 Series Switch ProductVarious IPv6 features•The S5700-EI supports IPv4/IPv6 dual stack and can migrate from an IPv4 network to an IPv6 network.S5700-EI hardware supports IPv4/IPv6 dual stack, IPv6 over IPv4 tunnels (including manual tunnels, 6to4tunnels, and ISATAP tunnels), and Layer 3 line-speed forwarding. The S5700-EI can be deployed on IPv4networks, IPv6 networks, or networks that run both IPv4 and IPv6. This makes networking flexible andenables easy migration from IPv4 to IPv6.Product Specifications2-7Huawei Enterprise Sx700 Series Switch ProductHuawei Enterprise Sx700 Series Switch Product*:The S5700 switches of the EI series are collectively called S5700-EI. S5710-EI is a sub-series switches of S5700-EI .2-9Huawei Enterprise Sx700 Series Switch ProductOn Large-sized Enterprise NetworksThe S5700-EI can function as an access device on a large-sized enterprise network or an aggregation device on a small-sized or medium-sized campus network. It supports link aggregation and dual-homing to improve network reliability.In Data CentersThe S5700-EI can be used in a data center. It connects to gigabit servers and aggregates traffic from the servers to uplink devices through trunk links. If multiple servers are available, an S5700-EI stack can be used to facilitate network maintenance and improve network reliability.InternetWANApplicationsHuawei Enterprise Sx700 Series Switch ProductFor more information, visit or contact your local Huawei sales office.S5710-28C-EI(24xEthernet 10/100/1000 ports,4 of which are dual-purpose 10/100/1000 or SFP ,4x10 GigSFP+, without power module)S5710-28C-PWR-EI-AC(24xEthernet 10/100/1000 PoE+ ports,4 of which are dual-purpose 10/100/1000 orSFP ,4x10 Gig SFP+, with 580W AC power)S5710-52C-EI(48xEthernet 10/100/1000 ports,4x10 Gig SFP+, with 2 interface slots, without powermodule)S5710-52C-PWR-EI(48xEthernet 10/100/1000 PoE+ ports, 4x10 Gig SFP+, with 2 interface slots, withoutpower module)8xGig SFP interface card(used in S5710-EI series)8xEthernet 10/100/1000 ports interface card(used in S5710-EI series)4xGig SFP interface card(including 4xGig SFP optical interface, extend channel card)(used in S5700-EI series)2x10GE SFP+ interface card(used in S5710-EI series)2x10GE SFP+ interface card(used in S5700-SI and S5700-EI series)4x10GE SFP+ optical interface card(including 4x10GE SFP+ interface, extend channel card)(used in S5700-SIand S5700-EI series)Ethernet Stack Interface Card(Including stack card,100cm stack cable)Ethernet Stack Interface Card(Including stack card,300cm stack cable)150W AC Power Module150W DC Power Module500W AC PoE Power Module580W AC PoE Power Module 1150W AC PoE Power Module Product List2-11Huawei Enterprise Sx700 Series Switch ProductCopyright © Huawei Technologies Co., Ltd. 2015. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.Trademark Notice, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.Other trademarks, product, service and company names mentioned are the property of their respective owners.General DisclaimerThe information in this document may contain predictive statements including,without limitation, statements regarding the future financial and operating results,future product portfolio, new technology, etc. There are a number of factors thatcould cause actual results and developments to differ materially from thoseexpressed or implied in the predictive statements. Therefore, such information isprovided for reference purpose only and constitutes neither an offer nor anacceptance. Huawei may change the information at any time without notice.。
XXXX公司华为产品培训(交换机基础培训)本次培训主要目的是细化理解华为交换机的分类以及基本名词和单位的使用。
核心交换机:S9700 S9300 S7700汇聚交换机:S7700 S6700(只有两款,24口和48口,性价比不高,不建议推) S5700 接入交换机:S5700 S3700 S2700内容2小节:单位名词FE:百兆电口,FE是Fast Ethernet的缩写,代表快速以太网,指的是百兆,速率是100Mbit/s GE:千兆电口,GE是Gigabit Ethernet的缩写,代表千兆以太网,速率是1000Mbit/s10GE:万兆电口SFP、SFP+:光模块,如交换机参数指光接口Combo:光、电复用接口(光口和电口都可以用)10/100Mbps:自适应百兆电口10/100/1000Mbps:自适应千兆电口Base-X 千兆光口例100/1000Base-XBase-T 千兆电口例10/100/100Base-TBase-TX 百兆电口例10/100Base-TXRJ45:10/100 Base TX RJ45接口是常用的以太网接口,支持10兆和100兆自适应的网络连接速度(交换机参数,为支持百兆电口)---硬件版本参数---HI--高级版本,支持MPLS、硬件BFD等特性EI--增强版本,支持丰富的三层特性,OSPF、ISIS、BGP、RIP等,包括IPv6SI—标准版本,支持RIP、RIPng、静态路由等基本三层特性,同时规格较EI版本弱LI--弱特性版本,二层交换机,仅支持二层转发,三层vlanif仅用来做telnet管理接口PWR--支持PoE功能,即给下挂设备进行供电(远程以太网)。
---上行端口参数---Z--没有上行接口;(新产品不允许此位)G--上行光口,且是GBIC接口;P--上行光口,且是SFP接口;T--上行电口,为RJ45接口;TP--上行光电Combo,上行接口为多种接口类型复合V--上行VDSL接口;W--上行可配置WAN接口;C--上行接口可选配;M--上行接口为多模光口;S--上行接口为单模光口;AC—交流供电DC—直流供电内容3小节:举例1、以下分别是百兆还是千兆交换机,是几层交换机?S5700-10P-LI-AC S2700-26TP-SI-AC S3700-28TP-SI-AC参考答案:千兆二层百兆二层百兆三层2、请用自己的理解描述一下S3700-28TP-SI-AC主机(24百兆RJ45,2千兆Combo,2千兆SFP,交流供电)参考答案:S3700百兆三层,标准版交换机,共28个接口,上行光电复用,其中24个百兆电口,2个千兆光电复用口,2个千兆光口,采用交流供电3、对以下参数进行理解“16个10/100Base-TX以太网端口,2个10/100/1000Base-T以太网端口,2个复用的千兆Combo SFP;交流供电,支持PoE+”参考答案:16个百兆电口,2个千兆电口,2个千兆光电复用口,采用交流供电,支持给下挂设备供电。