Справочник Пользователя для Huawei S2700-26TP-PWR-EI
P
ro
d
u
ct
B
ro
ch
u
re
H
u
aw
ei
En
te
rp
ris
e
S2
7
0
0
S
er
ie
s S
w
itc
h
es
3
Product Features
Maintenance-free, easy deployment and effortless management
The S2700 supports automatic configuration and plug-and-play, which dramatically reduces maintenance costs.
•
The S2700 offers a new application-specific integrated circuit (ASIC) switching technique and a fan-free design.
This design reduces mechanical faults and protects the device against damages caused by condensed water and
dust, reducing the maintenance workload by 53%.
The S2700 supports batch remote upgrades, which makes the device easy to use and deploy. It provides a Web
•
NMS system with a user-friendly GUI to implement automatic topology discovery, alarm management, and visual
configuration, facilitating operation and maintenance. The Network Quality Analyzing (NQA) function assists
users with network planning and upgrades. In addition, the S2700 supports HGMP v2, SSH v2, HWTACACS,
RMON, and port-based traffic statistics.
The S2700 supports GARP VLAN Registration Protocol (GVRP), which dynamically distributes, registers, and
•
propagates VLAN attributes to ensure correct VLAN configuration and reduce network administrator workloads.
Flexible service control
The S2700-EI supports various ACLs. ACL rules can be applied to VLANs to flexibly control ports and schedule
•
VLAN resources.
The S2700 supports port-based VLAN assignment and MAC address-based VLAN assignment. Port-based VLAN
•
assignment is used in networks where users move frequently, and MAC address-based VLAN assignment applies
to networks that require high levels of security.
Excellent security features
The S2700 supports DHCP snooping, which generates user binding entries based on users' access interfaces,
•
MAC addresses, IP addresses, IP address leases, VLAN IDs. The DHCP snooping function protects enterprises from
common attacks such as bogus IP packet attacks, man-in-the-middle attacks, and bogus DHCP server attacks.
The S2700 can limit the number of MAC addresses that can be learned on an interface to prevent attackers from
•
exhausting MAC address entries by using bogus source MAC addresses. This function minimizes packet flooding,
which occurs when users' MAC addresses cannot be found in the MAC address table. The S2700 can also limit
the number of ARP entries to prevent ARP spoofing attacks. In addition, it provides an IP source check function
to prevent malicious users from using spoofed IP addresses to initiate DoS attacks.
The S2700 supports centralized MAC address authentication and 802.1x authentication. It authenticates users
•
based on statically or dynamically bound user information such as the user name, IP address, MAC address,
VLAN ID, access interface, and flag indicating whether antivirus software is installed. VLANs, QoS policies, and
ACLs can be dynamically applied to users.