H3C S5130HIThe series of switches areH3CThe company's independently developed Layer 3 Gigabit Ethernet switch is an intelligent, manageable switch designed for network environments requiring high performance, high port density, and ease of installation. It is based on an industry-leading high-performance hardware architecture and...H3CadvancedComware V7Software platform development.

H3C S5130-HIThe series of switches supports a pluggable dual power supply and a pluggable dual fan design, achieving high hardware-level reliability.S5130-HIThe host uses a brand-new energy-saving chip and an innovative architecture design to achieve low power consumption when connected to a gigabit switch, bringing users a new green, environmentally friendly and energy-saving network access product.

H3C S5130-HIThe series of Ethernet switches currently includes the following models:

* S5130-30S-HI：24indivual10/100/1000BASE-Tport,4indivual10G/1G BASE-X SFP+port,2indivualQSFP+Stacking ports;

 * S5130-54S-HI：48indivual10/100/1000BASE-Tport,4indivual10G/1G BASE-X SFP+port,2indivualQSFP+Stacking ports;

 * S5130-30C-HI：24indivual10/100/1000BASE-Tport,4indivual10G/1G BASE-X SFP+port,1One port expansion slot2One fan module slot2One power module slot;

 * S5130-34C-HI：28indivual10/100/1000BASE-TPort, where8One iscombomouth,4indivual10G/1G BASE-X SFP+port,1One port expansion slot2One fan module slot2One power module slot;

 * S5130-54C-HI：48indivual10/100/1000BASE-Tport,4indivual10G/1G BASE-X SFP+port,1One port expansion slot2One fan module slot2One power module slot;

 * S5130-30F-HI：24indivual100/1000Base-XgigabitSFPport,8indivualCombo 10/100/1000Base-TAdaptive Ethernet port (and back)8indivualSFPmouthCombo），4indivual10G/1GBASE-X SFP+A port expansion slot.2One fan module slot2One power module slot;

 * S5130-30C-PWR-HI：24indivual10/100/1000BASE-Tport,4indivual10G/1G BASE-X SFP+port,1One port expansion slot2One fan module slot2One power module slot;

 * S5130-54C-PWR-HI：48indivual10/100/1000BASE-Tport,4indivual10G/1G BASE-X SFP+port,1One port expansion slot2One fan module slot2One power module slot;

 * S5130-54QS-HI：48indivual10/100/1000Base-Tport,4indivual10G/1G BASE-X SFP+port,2indivualQSFP+Stacking port,2One fan module,2One power module;

Features:

1、MACsecHardware encryption

MacsecIt is a type of network that is very suitable for Ethernet.Hop by HopThe link-layer security protocol performs the following three functions:

 1) Message encryption: By using encryption algorithms and keys, plaintext is transformed into ciphertext containing gibberish, making it difficult to decrypt even if eavesdropped on.

 2) Anti-replay attack: Prevents hackers from intercepting messages received by the target host and resending them to the target host to deceive it, such as during authentication.

 3) Anti-tampering: Prevents hackers from arbitrarily altering the original message content to achieve ulterior motives.

 macsecThere are two implementation modes:

 1Host-oriented mode: Used for first-hop protection when a terminal accesses the network.

 2Device-oriented mode:Protection of interconnection links between user equipment.

 H3C S5130-HISeries of switches hardware integrationMACsecSecurity encryption function, combined with our companyinodeIntelligent clients and core switches (S10500、S75E) Build a completeMACsecSolution;

 2、SmartMC(Intelligent Management Center)

* As network scale increases, a large number of access devices are needed at the network edge, making the management of these devices very cumbersome.SmartMCThe main purpose is to solve the problem of centralized management of a large number of dispersed network devices. It aims to solve the operation and maintenance tasks of small businesses that mainly use switches.SmartMCUnified operation and management of the network can be achieved through built-in device functionality and graphical interface.

 SmartMCFour business segments simplify the operation and management of small and medium-sized industrial parks:

 * Intelligent Management:

 This mainly includes the selection of equipment roles,FTPServer configuration, global configuration, and network port configuration, etc.

 * Intelligent Operation and Maintenance:

 This mainly includes group management, device or group upgrade and backup, monitoring, and device failure replacement.

 * Visualization:

 This mainly includes network topology visualization and management, device list display, etc.

 * Intelligent Business:

 This mainly includes user management: After creating and successfully activating network access users, these users can access the network through the port that is armed with one click.SmartMCWithin the network.

 * H3C S5130-HIThe series of switches can be used asSmartMCManagement equipment, throughS5130-HILog inSmartMCThe network can then be managed in a unified manner.;

 * H3C S5130-HISeries switches can also be used asSmartMCThe managed device, connected as a managed deviceSmartMCThe network allows for easy maintenance.

 3Open multi-service architecture (OAP(Insert card)

H3C S5130-HISeries switches based onH3COpen business architecture (OAAIt can not only provide the functions of a traditional switch, but also integrate features including...FW，IPSHigh performance such as load balancingOAPModule card, enablingS5130-HIThe switch has become a converged multi-service transport platform.

 4,high performanceIPv4/IPv6Business capabilities

H3C S5130-HIThe series of switches implements hardware-basedIPv4/IPv6Dual-stack platform, richIPv4andIPv6Layer 3 routing protocols, multicast technology, and policy-based routing mechanisms provide users with comprehensive...IPv4/IPv6Solution.

 5、IRF2(Second-generation intelligent elastic architecture)

H3C S5130-HISeries switches supportIRF2The (second-generation intelligent elastic architecture) technology connects multiple physical devices together, making them virtual as a single logical device. In other words, users can manage and use these multiple devices as a single device.IRFIt can bring the following benefits to users:

 * Simplify managementIRFOnce the architecture is established, it can connect to any port of any device to log in to a unified logical device. By configuring a single device, it can manage the entire intelligent elastic system and all member devices within the system, without having to physically connect to each member device to configure and manage them separately.

 * Simplify businessIRFThe various control protocols running in the formed logical devices are also run as a single device. For example, the routing protocol is calculated as a single device. With the application of cross-device link aggregation technology, it can replace the original spanning tree protocol. This can save a lot of protocol message interaction between devices, simplify network operation, and shorten the convergence time when the network is unstable.

 * Elastic scaling allows for flexible expansion based on user needs, ensuring the protection of user investment. Furthermore, new devices can be added or removed.IRFThe architecture allows for "hot-swapping" without affecting the normal operation of other devices.

 * High reliabilityIRFThe high reliability is reflected in three aspects: the link, the equipment, and the protocol. The physical ports of member devices support aggregation.IRFThe physical connections between the system and upper and lower layer devices also support aggregation, which improves the reliability of the links through multi-link backup;IRFThe system consists of multiple member devices, onceMasterIn case of equipment failure, the system will quickly and automatically elect a new one.MasterThis ensures uninterrupted service through the system, thereby achieving device-level [unclear - possibly related to security/safety].1：NBackup;IRFThe system has a real-time protocol hot backup function responsible for backing up the protocol configuration information to all other member devices, thereby achieving...1：NThe reliability of the protocol.

 * For high-end switches, performance and port density improvements are limited by hardware architecture.IRFThe system's performance and port density areIRFThe sum of the performance and number of ports of all internal devices. Therefore,IRFTechnology can easily increase the switching capacity and user port density of a device several times over, thereby significantly improving the device's performance.

IRF3(Vertical virtualization)

H3C S5130-HISome switch products in this series supportIRF3（Intelligent Resilient Framework 3Vertical virtualization technology, by adding access devices as remote interface boards to the main device system, virtualizes core layer devices and access layer devices into a single logical device in the vertical dimension, thereby achieving expansion.I/OThe purpose is to provide port capabilities and to enable centralized control and management.IRF3Technology can simplify management, significantly reduce network management nodes, simplify cabling, compress network layers, and ultimately achieve data forwarding plane virtualization.IRF3Vertical virtualization technology can bring the following benefits to users:

 * Unified management:IRF3Once the architecture is established, connecting to the master device allows for centralized configuration and management of all members within the architecture, without the need for separate configuration on each member device via physical connection.

 * Unified security policy: The security policy for the entire network only needs to be configured on the main device, avoiding potential policy conflicts caused by configuring each device on the entire network one by one, and greatly reducing the workload of security deployment.

 * Simplified network hierarchy: Supports large-scale remote interface board expansion capabilities, eliminating the need for traditional three-layer network architectures in network topologies.IRF3It can be simplified to a two-layer network, which simplifies the physical and logical layers of the network and makes cabling easier.

 * Simplify business processes:IRF3The various service configurations in the architecture are configured based on a single logical device, which greatly simplifies the entire network.VLAN、IP,routing,MplsPlanning considerations, etc.

 * Easy maintenance: The configuration and software version of all access devices are automatically assigned by the master device. When adding or leaving a new device, it can be "hot-swapped" and zero-configuration can be achieved without affecting the normal operation of other devices. Troubleshooting of the entire network is also a single point.

 6、SDN(Software-defined networking)

Software-defined networking (Software Defined Network，SDNThis is an innovative network architecture. Its core technology...OpenflowBy separating the network control layer and data forwarding layer, the management and maintenance of the network are greatly simplified. More importantly, flexible control of network traffic is achieved, providing a good network platform for innovation in core networks and applications.

 S5130-HIThe series of switches supports large flow tables, and works withH3C SDN controllerIt can easily achieve large-scale Layer 2 architecture networking and provides the function of quickly adding users to existing networks; while greatly simplifying the difficulty of network management, it can significantly reduce the cost of network maintenance.

 7、Visualization capabilities

H3C S5130-HISeries switches supportTelemetryTechnology, throughGRPCThe protocol sends real-time resource information and alarm information of the switch to the operation and maintenance platform. The operation and maintenance platform analyzes the real-time data and can realize functions such as network quality backtracking, fault diagnosis, risk warning, and architecture optimization, so as to accurately protect the user experience.

 8、Comprehensive security control strategy

H3C S5130-HISeries switches supportEADThe (terminal access control) function, in conjunction with the backend system, can integrate terminal security measures such as terminal antivirus and patch repair with network security measures such as network access control and access permission control into a coordinated security system. By inspecting, isolating, repairing, managing and monitoring network access terminals, the entire network can be transformed from passive defense to active defense, from single-point defense to comprehensive defense, and from decentralized management to centralized policy management, thereby improving the network's overall defense capabilities against emerging security threats such as viruses and worms.

 H3C S5130-HIThe series of switches supports centralizedMACAddress authentication,802.1xAuthentication,PORTALAuthentication supports user accounts,IP、MAC、VLANDynamic or static binding of user identifier elements such as port, while implementing user policies (VLAN、QoS、ACLDynamic distribution; supports coordinationH3CThe companyiMCThe system manages online users in real time and promptly diagnoses and dismantles illegal online activities.

 H3C S5130-HIThe series of switches offers enhancedACLControl logic that supports ultra-high capacity input and output ports.ACLAnd supports based onVLANofACLThe distribution simplifies the user configuration process while avoiding...ACLWaste of resources. Furthermore,S5130-HIThe series will also support unicast reverse path lookup technology (uRPFThe principle is that when a data packet is received on one of the interfaces of a device, it will look up the path in reverse to verify whether there is a route from the receiving interface to the source address specified in the packet, that is, to verify its authenticity. If it does not exist, the data packet will be deleted. In this way, we can effectively prevent the increasingly rampant source address spoofing in the network.

 Professional lightning protection

H3C S5130-HIThis series of switches adopts professional built-in surge protection technology and supports industry-leading...10KVThe lightning protection capability of the business port greatly reduces the damage rate of the equipment caused by lightning strikes, even in relatively harsh working environments.

 Multiple reliability protections

S5130-HIThe series of switches features multiple layers of reliability protection at both the device and link levels.

 S5130-HIThis series of switches supports pluggable AC/DC dual power supply modules and pluggable dual-fan reliability design, allowing for flexible configuration of AC or DC power supply modules according to actual environmental needs. In addition, the entire unit supports power supply and fan fault detection and alarm, and can automatically adjust the fan speed according to temperature changes. These designs make the equipment more reliable.

 In addition to device-level reliability, this product also supports a wide range of link-level reliability technologies, includingLACP/STP/RSTP/MSTP/Smart Link/RRPPProtection protocols such as fast ring network protection mechanism are supported.IRF2Intelligent elastic architecture, supports1：NRedundant backup, ring stacking support, and cross-device link aggregation greatly improve network reliability. Even when the network is carrying multiple services and high traffic, it does not affect the network convergence time, ensuring normal service operation.

 AbundantQoSStrategy

H3C S5130-HISeries switches supportL2（Layer 2）~L4（Layer 4Packet filtering function, providing source-based filtering.MACAddress, destinationMACAddress, SourceIPAddress, destinationIPaddress,TCP/UDPPort number, protocol type,VLANStream classification. Provides flexible queue scheduling algorithms, which can be configured based on both port and queue, supporting...SP（Strict Priority）、WRR（Weighted Round Robin）、SP+WRR、WFQ、WDRRFive modes. Supported.CAR（Committed Access Rate) Function, with a minimum granularity of8KbpsIt supports port mirroring in both inbound and outbound directions, used to monitor packets on a specified port and copy data packets from the port to the monitoring port for network testing and troubleshooting.

 Enhanced Power over Ethernet (PoE) capabilityPoE+）

H3C S5130-HISeries switches support802.3af/802.3atEnhanced Power over Ethernet (PoE) capability, maximum single-port capacity.30WThe output power can be802.11nWireless access point, visualIPTelephones, high-powered surveillance cameras, and other terminal devices are equipped with Power over Ethernet (PoE) capabilities, while also supporting multiple types of...PoEPower supply module, enabling flexible operationPoEOutput capability, and can also provide stand-alone functionality.1440W PoEPower supply capability, to achieve48portPoE+Full power supply.

Network Application 1: Typical Applications in Large Campus Networks

In large and medium-sized enterprise campus networks, the S5130-HI series Ethernet switches can serve as access switches, providing high-performance, high-capacity switching services and supporting 10GE/40GE uplink interfaces, offering higher bandwidth for access devices. Furthermore, the core, aggregation, and high-performance access layers all utilize H3C's innovative IRF2 (Intelligent Resilient Architecture) technology. Without altering the original network topology, it simplifies network topology, services, and management by virtualizing multiple devices into a unified logical device, resulting in a 1:N reliability multiplier and significantly improved network performance, among other advantages.

S5130-HI series Ethernet switches are used in the aggregation layer of enterprise/campus networks.

Product Specifications