Huawei S2700-18TP-EI-AC 02352332 User Manual
Product codes
02352332
Product Features
Maintenance-free, easy deployment and effortless management
The S2700 supports automatic configuration and plug-and-play, which dramatically reduces maintenance
•
costs. The S2700 offers a new application-specific integrated circuit (ASIC) switching technique and a
fan-free design. This design reduces mechanical faults and protects the device against damages caused
by condensed water and dust, reducing the maintenance workload by 53%.
fan-free design. This design reduces mechanical faults and protects the device against damages caused
by condensed water and dust, reducing the maintenance workload by 53%.
The S2700 supports batch remote upgrades, which makes the device easy to use and deploy. It
•
provides a Web NMS system with a user-friendly GUI to implement automatic topology discovery, alarm
management, and visual configuration, facilitating operation and maintenance. The network quality
analyzing (NQA) function assists users with network planning and upgrades. In addition, the S2700
supports HGMP v2, SSH v2, HWTACACS, RMON, and port-based traffic statistics.
management, and visual configuration, facilitating operation and maintenance. The network quality
analyzing (NQA) function assists users with network planning and upgrades. In addition, the S2700
supports HGMP v2, SSH v2, HWTACACS, RMON, and port-based traffic statistics.
The S2700 supports GARP VLAN Registration Protocol (GVRP), which dynamically distributes, registers,
•
and propagates VLAN attributes to ensure correct VLAN configuration and reduce network administrator
workloads.
workloads.
Flexible service control
The S2700-EI supports various ACLs. ACL rules can be applied to VLANs to flexibly control ports and
•
schedule VLAN resources.
The S2700 supports port-based VLAN assignment and MAC address-based VLAN assignment. Port-
•
based VLAN assignment is used in networks where users move frequently, and MAC address-based VLAN
assignment applies to networks that require high levels of security.
assignment applies to networks that require high levels of security.
Excellent security features
The S2700 supports DHCP snooping, which generates user binding entries based on users' access
•
interfaces, MAC addresses, IP addresses, IP address leases, VLAN IDs. The DHCP snooping function
protects enterprises from common attacks such as bogus IP packet attacks, man-in-the-middle attacks,
and bogus DHCP server attacks.
protects enterprises from common attacks such as bogus IP packet attacks, man-in-the-middle attacks,
and bogus DHCP server attacks.
The S2700 can limit the number of MAC addresses that can be learned on an interface to prevent
•
attackers from exhausting MAC address entries by using bogus source MAC addresses. This function
minimizes packet flooding, which occurs when users' MAC addresses cannot be found in the MAC
address table. The S2700 can also limit the number of ARP entries to prevent ARP spoofing attacks.
In addition, it provides an IP source check function to prevent malicious users from using spoofed IP
addresses to initiate DoS attacks.
minimizes packet flooding, which occurs when users' MAC addresses cannot be found in the MAC
address table. The S2700 can also limit the number of ARP entries to prevent ARP spoofing attacks.
In addition, it provides an IP source check function to prevent malicious users from using spoofed IP
addresses to initiate DoS attacks.
The S2700 supports centralized MAC address authentication and 802.1x authentication. It authenticates
•
users based on statically or dynamically bound user information such as the user name, IP address, MAC
address, VLAN ID, access interface, and flag indicating whether antivirus software is installed. VLANs,
QoS policies, and ACLs can be dynamically applied to users.
address, VLAN ID, access interface, and flag indicating whether antivirus software is installed. VLANs,
QoS policies, and ACLs can be dynamically applied to users.
PoE function
The S2700 PWR can use Power over Ethernet (PoE) power supplies with different power levels to provide
•
-48 V DC power for powered devices (PDs) such as IP Phones, WLAN APs, and Bluetooth APs. In its role
as power sourcing equipment (PSE), the S2700 PWR complies with IEEE 802.3af and 802.3at (PoE+), and
can work with PDs that are incompatible with 802.3af or 802.3at (PoE+). Each port provides a maximum
of 30 W of power, complying with IEEE 802.3at. The PoE+ function increases the maximum power
available on each port and implements intelligent power management for high-power consumption
applications. This process facilitates the ease of PD use. PoE ports are still able to work while in power-
saving mode.
as power sourcing equipment (PSE), the S2700 PWR complies with IEEE 802.3af and 802.3at (PoE+), and
can work with PDs that are incompatible with 802.3af or 802.3at (PoE+). Each port provides a maximum
of 30 W of power, complying with IEEE 802.3at. The PoE+ function increases the maximum power
available on each port and implements intelligent power management for high-power consumption
applications. This process facilitates the ease of PD use. PoE ports are still able to work while in power-
saving mode.
3