Ship to USA and Canada ONLY
ActForNet Quotation/Store System Upgraded. Click Now To Enjoy!
  • LS-S3352P-SI-DC Layer 3 switch

S3352P-SI Mainframe(48 10/100 BASE-T ports and 2 100/1000 BASE-X ports and 2 SFP GE (1000 BASE-X) ports (SFP Req.) and DC -48V)

Introduction

The Huawei S3300 series switches are new generation Layer 3 Ethernet switches developed to carry various services on the Ethernet, which provide powerful Ethernet functions for operators and enterprise customers. Based on the new generation high-performance hardware and Huawei Versatile Routing Platform (VRP), the S3300 provides the enhanced selective QinQ function and capability to replicate multicast packets between VLANs at the line speed, and supports carrier-class reliability technologies such as Smart Link (applicable to tree networks) and RRPP (applicable to ring networks), as well as the Ethernet OAM function.

The S3300 can be used as access devices in buildings or applied to the access layer and aggregation layer of campus networks. The S3300 is easy to install. It supports automatic configuration and plug-and-play, which dramatically reduces costs of network deployment.

 

Features

Powerful Service Support 

The S3300 provides the enhanced selective QinQ function to add outer VLAN tags to packets, without occupying ACL resources. The S3300 can map the CoS value in the inner VLAN tag of a packet to the outer VLAN tag or change the CoS value in the outer VLAN tag. In addition, the S3300 can flexibly mark the QoS classes of different services to carry various services. 

The S3300 supports 1 K multicast groups and supports IGMP snooping, IGMP filter, fast leave, and IGMP proxy. The S3300 supports line-speed replication of multicast packets between VLANs, multicast load balancing among member interfaces of a trunk, and controllable multicast, meeting requirements for IPTV services and other multicast services. 

The S3300 provides the Multi-VPN-Instance CE (MCE) function to isolate users of different VLANs on a device, which ensures data security and reduces investments of customers. 

Abundant QoS Policies and Security Mechanisms 

The S3300 implements complex traffic classification based on information such as the quintuple, IP preference, ToS, DSCP, IP protocol type, ICMP type, TCP source port, VLAN ID, Ethernet protocol type, and CoS. It supports the flow-based two-rate and three-color CAR. Each interface supports eight priority queues and multiple queue scheduling algorithms such as WRR, DRR, SP, WRR+SP, and DRR+SP, which effectively ensures the quality of voice, video, and data services. 

The S3300 provides multiple security measures to protect information security. It can defend against Denial of Service (DoS) attacks, attacks to networks, and attacks to users. DoS attacks include SYN Flood attacks, Land attacks, Smurf attacks, and ICMP Flood attacks. Attacks to networks refer to STP BPDU/root attacks. Attacks to users include bogus DHCP server attacks, man-in-the-middle attacks, IP/MAC spoofing attacks, DHCP request flood attacks, and DoS attacks by changing the CHADDR field of packets. 

The S3300 listens to the MAC addresses or IP addresses, address lease, VLAN IDs, and interfaces by establishing and maintaining a DHCP snooping binding table. In this way, IP addresses and access interfaces of DHCP users can be tracked. The S3300 directly discards invalid packets that do not match binding entries, such as ARP spoofing packets and packets with tampered IP addresses, to prevent man-in-the-middle attacks to campus networks that hackers initiate by using ARP packets. The trusted interface can also be configured to ensure validity of the DHCP server. 

The S3300 supports strict learning of ARP entries to prevent ARP spoofing attackers from exhausting ARP entries so that users can access the Internet normally. It also supports IP source check to prevent DoS attacks caused by MAC address spoofing, IP address spoofing, and MAC/IP spoofing. 
The S3300 supports centralized MAC address authentication, 802.1x authentication, and NAC function. User information such as the user name, IP address, MAC address, VLAN, access interface, and flag indicating whether anti-virus software is installed on the client can be bound statically or dynamically, and policies (VLAN, QoS, and ACL) can be delivered dynamically. 

The S3300 can limit the number of MAC addresses learned on an interface to prevent attackers from exhausting MAC address entries by using bogus source MAC address. In this way, MAC addresses of normal users can be learned and flooding is prevented. 

PoE Function 

The S3300 can use PoE power modules with different power levels to provide the Power over Ethernet (PoE) function. Powered devices (PDs) such as IP Phone, WLAN AP, Security, and Buletooth AP can be connected to the S3300 through ethernet cable. The S3300 provides -48V DC power for the connected PDs. As the power sourcing equipment (PSE), the S3300 complies with IEEE 802.3af and 802.3at (PoE+) and is compatible with PDs that do not comply with 802.3af or 802.3at. Each port provides a maximum power of 30 W, complying with IEEE 802.3at. The PoE+ function increases the maximum power of each port and implements intelligent power management in high-power applications, which helps you use PDs conveniently. In addition, the S3300 can work in power-saving mode. The S3300 PWR series support improved PoE solutions and you can determine whether a PoE port provides power and the time a PoE port provides power. 

Good Extensibility and High Reliability Protection Mechanism 

The S3300 supports intelligent stacking (iStack). Multiple S3300s start to construct a virtual chassis-shaped structure immediately after stacking cables are connected. Stack members are classified into master, slave, and backup switches. The backup switch reduces the duration of service interruption when the master switch fails. The S3300 supports intelligent upgrade. Therefore, the software version of a new switch does not need to be changed when it is added to a stack. The stacking technology enables you to connect multiple switches through cables to expand the system capacity and manage switches in a stack by using a single IP address, which greatly reduces costs of system expansion, operation, and maintenance. Compared with traditional networking technologies, the iStack stacking technology has advantages in extensibility, reliability, and system architecture. 

Besides traditional STP, RSTP, and MSTP, the S3300 supports enhanced Ethernet reliability technologies such as Smart Link and RRPP, which implements millisecond-level protective link switchover and ensures network reliability. Smart Link and RRPP both support multi-instance to implement load balancing among links, further improving bandwidth usage. 

The S3300 supports BFD and provides millisecond-level detection for protocols such as OSPF, IS-IS, VRRP, and PIM to improve network reliability. Conforming to IEEE 802.3ah and 802.1ag, the S3300 supports point-to-point Ethernet fault management. It can detect faults in the last mile of a direct link on the user side. Ethernet OAM improves network management and maintenance capabilities on Ethernet and guarantees a stable network. 

The reliability design of the S3300 is highly expansible and compatible. The S3300 can work with devices on the incumbent network, which protects investments of customers and enables customer to deploy new services. 

Considerate Maintenance-free Design and Manageability 

The S3300 adopts a maintenance-free design and supports batch remote upgrade. Adopting a unique lightning protection design, the S3300 reduces lightning damages by 88% and its lightning damage rate is only 1/8 of counterpart products in the industry. The S3300 provides multiple maintenance and management modes for you to monitor various data. In addition, it supports Ethernet OAM (IEEE 802.3ah and 802.1ag), HGMPv2, SNMP, NTP, SSH V2.0, HWTACACS+, RMON, port-based traffic statistics, and NQA. 

The S3300 supports GVRP, which dynamically assigns, registers, and propagates VLAN attributes to reduce the network administrator's workload and ensure correct configuration of VLANs. The GVRP technology implements dynamic configuration of VLANs, On a complicated network, GVRP can simplify VLAN configuration and reduce network communication faults caused by incorrect configuration of VLANs. 

The S3300 supports MUX VLAN. The MUX VLAN function is used to isolate Layer 2 traffic between interfaces on a VLAN. Subordinate VLANs can communicate with the MUX VLAN but cannot communicate with each other. MUX VLAN is usually applied to enterprise intranets. With this function, a user interface can communicate with a server interface but cannot communicate with other user interfaces. MUX VLAN prevents communication between network devices connected to some interfaces or interface group but allows these devices to communicate with the default gateway. 

Upgrade and service delivery can be completed at one time, which simplifies management and performance in the future. 

Unique Fan-free and Noise-free Design 

The 24-port model of the S3300 adopts a fan-free design, which dramatically reduces the power consumption and noises of the equipment. In addition, this design reduces mechanical faults and protects the equipment against damages caused by condensed water and dusts. 

The S3300 adopts new generation integrated chips and power-saving circuit design to ensure even heat dissipation. It also supports idle port sleep to further reduce power consumption. 

Radiation of the S3300 is low and complies with radiation standards of electric appliances, so the S3300 has no harm to the human body and is more environment friendly. 

Powerful Lightening Protection Capability 

The S3300 adopts a Huawei patented lightning technology to prevent lightning induced over voltage. All ports have a lightning protection capability of IEC61000-4-5 10/700us 6 KV. Compared with conventional lightning protection technologies, the Huawei patented lightning technology greatly reduces the possibility of lightning damage on the equipment even in atrocious environments or even in scenarios where grounding cannot be implemented. 

Abundant IPv6 Features 

The S3300 hardware supports the IPv6/IPv6 dual stack, IPv6 over IPv4 tunnels (including manual tunnels, 6to4 tunnels, and ISATAP tunnels), and Layer 3 line-speed forwarding. Therefore, the S3300 can be deployed on IPv4 networks, IPv6 networks, and networks that run both IPv4 and IPv6. This makes networking flexible and enables a network to migrate from IPv4 to IPv6. 

The S3300 supports abundant IPv6 routing protocols including RIPng and OSPFv3. It uses the IPv6 Neighbor Discovery Protocol (NDP) to manage packets exchanged between neighbors. It also provides the Path MTU Discovery (PMTU) mechanism to select a proper MTU on the path from the source to the destination, thus optimizing network resources and obtaining the maximum throughput. 

 

 

 

Write a review

Please login or register to review

LS-S3352P-SI-DC Layer 3 switch

  • Brands Huawei
  • Product Code: LS-S3352P-SI-DC
  • Availability: In Stock
  • $1,392.84

  • Ex Tax: $1,392.84

Tags: ls-s3352p-ei-dc, layer, switch, s3300, 100m ls-s3352p-ei-ac ls-s3352p-si-ac ls-s3352p-si-dc