The H3C S9900X series switches are core switching products specifically designed and developed by H3C Technologies Co., Ltd. (hereinafter referred to as H3C) for next-generation campus network cores and metropolitan area network aggregation. Adopting an advanced CLOS multi-level multi-plane switching architecture, it provides continuous bandwidth upgrade capabilities. Based on H3C's proprietary Comware V7 operating system and a virtualization software system with IRF2 (Intelligent Resilient Framework 2) technology as its foundation, it further integrates MPLS VPN, IPv6, application security, application optimization, wireless, and other network services. It provides uninterrupted forwarding, uninterrupted upgrades, graceful restart, ring network protection, and other high-reliability technologies, improving user productivity while ensuring maximum network uptime, thereby reducing the customer's total cost of ownership (TCO). Furthermore, the H3C S9900X complies with the "Restriction of Hazardous Substances in Electronic Equipment Standard (RoHS)," making it a green and environmentally friendly routing switch.

Features

1AdvancedCLOSMulti-level multi-plane switching architecture

Adopting advancedCLOSThe multi-level, multi-plane switching architecture provides continuous bandwidth upgrade capabilities, greatly improving system bandwidth and evolution capabilities, and allowing the overall capacity to be smoothly expanded to hundreds of kilowatts.Tbps;support40GEand100GEEthernet standard, fully meeting the application and future development needs of non-blocking campus networks.

The redundant design of the fan and power supply can cope with unexpected situations and greatly improve the overall reliability of the equipment.

2Innovative distributed multi-engine design

It adopts an innovative hardware design, providing the system with powerful control capabilities and millisecond-level high reliability through a fully distributed independent control engine, detection engine, and maintenance engine;

The distributed control engine provides a powerful control processing system for all business boards, easily handling various protocol messages and control messages, and supporting fine-grained control of protocol messages, providing the system with a complete ability to resist protocol message attacks.

A distributed detection engine allows all business boards to operate in a distributed manner.BFD、OAMIt can quickly detect faults and link with the control plane protocol to support fast protection switching and fast convergence. It can achieve millisecond-level fault detection to ensure uninterrupted service.

Distributed maintenance engine, intelligentCPUThe system supports intelligent power management, enabling sequential power-on and power-off of individual boards (reducing power surges caused by simultaneous power-on of individual boards, improving equipment lifespan, reducing electromagnetic radiation, and lowering system power consumption), as well as online device status checks.

3、IRF2(Second-generation intelligent elastic architecture)--Horizontal virtualization

To meet the needs of horizontal business integration within the park network.S9900XsupportIRF2The (second-generation intelligent elastic architecture) technology virtualizes multiple high-end devices into a single logical device, which is supported by H3C's professional expertise.2The core switch products of chassis virtualization have strong advantages in reliability, distribution, and ease of management, mainly reflected in three aspects:

Reliability: Through hot backup routing technology, redundant backup of all information in the control plane and data plane and uninterrupted three-layer forwarding are achieved throughout the virtual architecture, which greatly enhances the reliability and performance of the virtual architecture, eliminates single points of failure, and avoids business interruption.

Distributed nature: Through distributed cross-device link aggregation technology, load sharing and mutual backup of multiple uplinks are achieved, thereby improving the redundancy of the entire network architecture and the utilization rate of link resources.

Manageability: The entire resilient architecture shares a common...IPManagement simplifies network device management and network topology management, improves operational efficiency, and reduces maintenance costs.

4High availabilityM-LAGArchitecture

S9900XSeries switches supportM-LAG（Multichassis Link Aggregation GroupCross-device link aggregation technology(OriginalDRNItechnology)By virtualizing two physical devices into one device at the forwarding layer, cross-device link aggregation is achieved while maintaining independence at the control layer, thereby improving single-board-level reliability to device-level reliability.

5Next-generation wired and wireless integrated solution

S9900XThis series of switches supports next-generation wired and wireless integrated solutions. The switches natively support convergence.ACFunctionality that allows direct management of wirelessAPCompared to single wirelessACThe card insertion solution has the advantage of being more flexible and simple to deploy;

FusionACAs a native feature of the switch, it also supports...IRF2The combined use of virtualization technologies enables a single device to manage all wired and wireless devices across the network, greatly simplifying network operation and maintenance complexity..

6ComprehensiveIPv6Solution

S9900XThe series of switches fully supportIPv6Protocol family, supportsIPv6Static routesRIPng、OSPFv3、IS-ISv6、BGP4+waitIPv6Routing protocols that support a wide range of routing protocols.IPv4TowardsIPv6Transitional technologies, including:IPv6Hand-made tunnels6to4tunnel,ISATAPtunnel,GREtunnel,IPv4Compatible with tunneling technologies such as automatic configuration tunnels, ensuringIPv4TowardsIPv6A smooth transition.

7Hardware-level encryption technology

S9900XSupports hardware-level encryption technologyMacsectechnology(802.1aUnlike traditional end-to-end application layer protection software encryption technology,MacsecBy using cryptographic techniques to authenticate data sources, control protocols managing bridged networks and other data are protected, ensuring information integrity and providing re-protection and confidentiality services. Protection is achieved at the source by authenticating frames sent from that station.2Layer protocols are vulnerable to attacks.

Network topology