S2326TP-EI Mainframe(24 10/100 BASE-T ports and 2 Combo GE(10/100/1000 BASE-T+100/1000 Base-X) ports and DC -48V)

Introduction

The Huawei S2300 series switches are new generation Ethernet intelligent access switches. The S2300 is mainly deployed on the IP MAN and intranets, meeting requirements of carrying various Ethernet services and accessing the Ethernet. Based on the new generation high-performance hardware and Huawei Versatile Routing Platform (VRP), the S2300 supports rich and flexible service features and thus improves the operability, manageability, and service expansibility. In addition, the S2300 supports powerful lightning protection, security features, ACLs, QinQ, 1:1 VLAN switching, and N:1 VLAN switching to flexibly deploy VLANs.

Product Features

Maintenance-Free, Easy Deployment, and Easy Management
• The S2300 supports automatic configuration and plug-and-play, which dramatically reduces maintenance costs. It adopts a fan-free design, which reduces mechanical faults and protects the device against damages caused by condensed water and dust. According to the reference value, 33% of device failures are caused by fan failures. In this case, this design reduces 53% of the maintenance rate.
• The S2300 supports automatic remote upgrade in batches, which facilitates the usage and deployment of the S2300. It supports diversified management and maintenance modes such as SNMP v1/v2/v3, CLI, Web NMS,Telnet, and HGMP, which make device management more flexible. In addition, the S2300 supports HGMP v2, NTP, SSH v2, HWTACACS+, RMON, port-based traffic statistics, and NQA, which help to better deploy and reconstruct networks.
• The S2300 supports GVRP, which dynamically assigns, registers, and propagates VLAN attributes to reduce the manual configuration workload of network administrators and ensure correct configuration of VLANs. The GVRP technology implements dynamic configuration of VLANs. In a complex networking environment, GVRP can simplify VLAN configuration and reduce network communication faults caused by incorrect configuration of VLANs.
• Deployment, upgrade, and service provisioning of the S2300 can be completed at a time, which simplifies subsequent management and maintenance.

No Noise, Energy Saving, and Low Radiation
• The S2300 adopts next-generation highly-integrated chips and power-saving circuit design to ensure even heat dissipation. It also supports idle port sleep to further reduce power consumption. Compared with products of the same type, the S2300 generates no noise and reduces 40% of power consumption owing to the fan-free design. The power consumption of the S2300 is similar to that of an energy-saving light bulb. The S2300 emits low radiation and complies with the radiation standards of electric appliances, so it has no harm to human body and can be placed in a distribution box in a residential area.

Powerful Surge Protection
• The S2300 adopts the Huawei patented built-in surge protection technology that can effectively defend against lightning induced over-voltage. Each port has a surge protection capability of 7 kV. Compared with the conventional surge protection design, the Huawei patented surge protection technology greatly reduces the possibility of lightning damage on the device in severe environments or even in scenarios where grounding cannot be implemented.

VLAN-based Service Control
• The S2300-EI supports various ACL control modes, especially the delivery of ACL rules based on VLAN IDs. In this manner, the S2300-EI can flexibly control multiple ports in a VLAN and uniformly dispatch resources.
• The S2300-EI supports 1:1 VLAN switching to provide IPTV services with no home gateway configured. In addition, the S2300 is the first switch in the industry to support N:1 VLAN switching. In this manner, VLAN aggregation is implemented on the user side and the number of VLANs is decreased.
• The S2300-EI supports QinQ to encapsulate private VLAN tags into public VLAN tags of packets and transmit the packets over the backbone network of carriers.
• The S2300 supports multiple VLAN division modes: port-based VLAN division (you can specify the VLAN to which a port belongs) and MAC-based VLAN division (which is applied to the networks where there are high requirements for security and mobility).

Rich Multicast Functions
• The S2300 supports rich Layer-2 multicast replication functions, including IGMP snooping, IGMP filter, fast leave, and multicast load balancing among bundled ports. It supports port-based multicast rate limit and traffic statistics, fully meeting the requirements of IPTV services.

PoE Features
• Several models of the S2300 support PoE and comply with IEEE 802.3af and 802.3at (PoE+). By using this function, the S2300 can supply power over the Ethernet to the connected standard PDs such as IP Phones, WLAN APs, and Bluetooth APs. Each port can provide up to 30 W of power. This reduces the power cable layout and management cost for terminal devices. The S2300 can also be configured to provide power for PDs at specified time as required.

Comprehensive QoS Policies
• The S2300 supports complex traffic classification based on VLAN IDs, MAC addresses, IP protocols, source addresses, destination addresses, priorities, or ports to which application programs are applied. It also supports flow-based rate limit to ensure line-speed forwarding on each port, ensuring the high quality of voice, video, and data services. Each port supports four queues and multiple queue scheduling algorithms such as WRR, SP, and WRR+SP.

Excellent Security Features
• The S2300 provides various security protection measures. The S2300 listens to the MAC/IP address, address lease, VLAN ID, and port number about a DHCP user by establishing and maintaining a DHCP snooping binding table. In this way, IP addresses and access ports of DHCP users can be tracked. The S2300 directly discards invalid packets that do not match binding entries, such as ARP spoofing packets and packets with bogus IP addresses, to prevent hackers or attackers from initiating man-in-the-middle attacks to campus networks by using ARP packets. The trusted port feature of DHCP snooping is used to ensure the validity of the DHCP server.
• The S2300 supports strict ARP learning to prevent ARP spoofing attackers from exhausting ARP entries so that authorized users can connect to the Internet. It also supports IP source check to prevent DoS attacks caused by MAC address spoofing, IP address spoofing, and MAC/IP address spoofing.
• The S2300 supports centralized MAC address authentication, 802.1x authentication, and NAC. User information such as the user account, IP address, MAC address, VLAN ID, access port number, and flag indicating whether antivirus software is installed on the client can be bound statically or dynamically, and user policies (VLAN, QoS, and ACL) can be delivered dynamically.
• The S2300 can limit the number of source MAC addresses learned on a port to prevent attackers from exhausting MAC address entries by using bogus source MAC addresses. In this way, MAC addresses of authorized users can be learned and flooding is prevented.

Good Expandability
• The S2300 switches support Intelligent Stacking (iStack) and plug-and-play. Multiple S2300s start to construct a virtual switch automatically after being connected by stacking cables. Stacked switches are classified into active, standby, and slave switches. After a standby switch is configured, the duration of service interruption caused by faults on the active switch is reduced. The S2300 supports intelligent upgrade, freeing customers from upgrading the software version of a switch after adding the switch to a stack. Utilizing the iStack technology, multiple switches can be interconnected to expand the system capacity and can be managed by using a single IP address, which greatly reduces the cost of system expansion, operation, and maintenance. Compared with traditional networking technologies, iStack has advantages in expansibility, reliability, and system architecture.