What is the Characteristics of Huawei S2700 Switch?

Easy Operation and Maintenance

Huawei S2700 supports Easy-Operation, which implements easy installation, configuration,
monitoring, and troubleshooting. This technology greatly reduces installation and
configuration costs and engineering costs, and improves upgrade efficiency. The S2700
provides the CLI and web platform, supports alarm management and visualized configuration,
and replacement of faulty devices.
The S2700 uses the ASIC chip and fanless design, which reduces mechanical faults and
protects the equipment against damages caused by condensed water and dusts.

Flexible Service Control
The S2700 supports various ACLs. ACL rules can be applied to VLANs to flexibly control
traffic on interfaces and schedule resources in VLANs.
The S2700 supports VLAN assignment based on interfaces, MAC addresses, protocols, and
IP subnets. It applies to networks where users move frequently and networks demanding high
security.
The S2700 supports GVRP, which dynamically distributes, registers, and propagates VLAN
attributes to reduce the manual configuration workloads of network administrators and ensure
correct VLAN configuration. In addition, Huawei S2700 supports SSHv2, HWTACACS, RMON,
interface-based traffic statistics, and NQA to help in network planning and upgrading.

Various Security Measures
The S2700 supports DHCP snooping, which generates user binding entries based on MAC
addresses, IP addresses, IP address leases, VLAN IDs, and interface numbers of users. The
DHCP snooping function protects networks against common attacks such as bogus IP packet
attacks, man-in-the-middle attacks, and bogus DHCP server attacks.
The S2700 can limit the number of MAC addresses learned on an interface to prevent packet
flooding that occurs when an attacker frequently changes source MAC addresses. The S2700
supports strict ARP learning. This feature prevents ARP spoofing attackers from exhausting
ARP entries so that users can connect to the Internet normally. It provides IP source check to
prevent DoS attacks caused by IP address spoofing.
The S2700 supports centralized MAC address authentication and 802.1x authentication. It
authenticates users based on static or dynamic user binding information such as the user
name, IP address, MAC address, VLAN ID, and interface number. VLANs and ACLs can be
applied to users dynamically.

Various Reliability Mechanisms
The S2700 supports iStack, which virtualizes multiple switches into one logical switch. iStack
improves the switching capacity and enhances reliability and scalability. The stacked switches
are managed using a single IP address, which greatly reduces system operation and
maintenance costs.
Besides STP, RSTP, and MSTP, the S2700 like S2700-28TP-EI also supports enhanced Ethernet reliability
technologies such as Smart Link and RRPP, which implement millisecond-level protection
switching and ensure network reliability.
The S2700 supports the Smart Ethernet Protection (SEP) protocol, which is a ring network
protocol applied to the link layer of an Ethernet network. SEP provides fast switchover within
several milliseconds without interrupting services. SEP features simplicity, high reliability,
high switchover performance, convenient maintenance, and flexible topology and enables
users to manage and plan networks conveniently.
The S2700 supports G.8032, also called Ethernet Ring Protection Switch (ERPS). ERPS is
based on traditional Ethernet MAC and bridging functions. It uses the mature Ethernet OAM
and Ring Automatic Protection Switching (Ring APS or R-APS) technologies to implement
fast protection switching on Ethernet. ERPS supports multiple services and provides flexible
networking, reducing the OPEX and CAPEX.