| Ethernet features | Ethernet | Operating modes of full-duplex, half-duplex and auto-negotiation | S5720HI do not support the operating mode of half-duplex. |
| Rates of an Ethernet interface: 10 Mbit/s, 100 Mbit/s, 1000 Mbit/s, 10 Gbit/s, and auto-negotiation | None |
| Flow control on interfaces |
| Jumbo frames |
| Link aggregation |
| Load balancing among links of a trunk |
| Transparent transmission of Layer 2 protocol packets |
| Device Link Detection Protocol (DLDP) |
| Link Layer Discovery Protocol (LLDP) |
| Link Layer Discovery Protocol-Media Endpoint Discovery (LLDP-MED) |
| Interface isolation and forwarding restriction |
| Broadcast storm suppression |
| VLAN | Access modes of access, trunk, hybrid, and QinQ | None |
| Default VLAN |
| VLAN assignment based on interfaces, MAC addresses, protocols, and IP subnets |
VLAN assignment based on the following policies:
MAC address + IP address
MAC address + IP address + interface number
DHCP policies |
| VLAN stacking for untagged packets | Only the S5710LI, S5700SI, and S5700EI do not support this function. |
| Super VLAN | Only the S5700LI, S5700S-LI, and S5710-LI do not support this function. |
| VLAN mapping | None |
| Selective QinQ |
| MUX VLAN |
| Voice VLAN |
| Guest VLAN |
| GVRP | Generic Attribute Registration Protocol (GARP) | None |
| GARP VLAN Registration Protocol (GVRP) |
| VCMP | VCMP (VLAN centralized management protocol) | None |
| MAC | Automatic learning and aging of MAC addresses | None |
| Static, dynamic, and blackhole MAC address entries |
| Packet filtering based on source MAC addresses |
| Interface-based MAC learning limiting |
| Sticky MAC address entries |
| MAC address flapping detection |
| Configuring MAC address learning priorities for interfaces | Only the S5710EI, S5700HI, S5710HI, and S5720HI support this function. |
| MAC address spoofing defense | Only the S5710EI, S5700HI, S5710HI, and S5720HI do not support this function. |
| Port bridge | None |
| ARP | Static and dynamic ARP entries | None |
| RARP |
| ARP in a VLAN |
| Aging of ARP entries |
| Proxy ARP | Only the S5700LI and S5700S-LI do not support this function. |
| Multi-port ARP for connecting to the NLB cluster server | Only the S5710EI, S5700HI, S5710HI, and S5720HI support this function. |
| Ethernet loop protection | MSTP | STP | None |
| RSTP |
| MSTP |
| VBST |
| BPDU protection, root protection, and loop protection |
| TC-BPDU attack defense |
| STP loop detection |
| Loopback detection | Loop detection on an interface |
| SEP | Smart Ethernet Protection (SEP) |
| Smart Link | Smart Link |
| Smart Link multi-instance |
| Monitor Link |
| RRPP | RRPP protective switchover |
| Single RRPP ring, tangent RRPP ring, and intersecting RRPP ring |
| Hybrid networking of RRPP rings and other ring networks |
| ERPS | G.8032 v1/v2 | Only the S5700S-LI does not support this function. |
| Single closed ring |
| Subring |
| IPv4/IPv6 forwarding | IPv4 and unicast routes | Static IPv4 routes | None |
| VRF |
| DHCP client |
| DHCP server | Only the S5710LI does not support this function. |
| DHCP relay |
| DHCP policy VLAN | Only the S5700LI, S5700S-LI, and S5710LI do not support this function. |
| URPF check |
| Routing policies |
| RIPv1/RIPv2 |
| OSPF | Only the S5700LI, S5700S-LI, S5710LI, and S5700SI do not support this function. |
| BGP |
| MBGP |
| IS-IS |
| PBR (redirection in a traffic policy) |
| Multicast routing features | IGMPv1/v2/v3 | Only the S5700LI, S5700S-LI, S5710LI, and S5700SI do not support this function. |
| PIM-DM |
| PIM-SM |
| PIM-SSM |
| MSDP |
| Multicast routing policies |
| RPF |
| IPv6 features | IPv6 protocol stack | None |
| ND and ND snooping |
| DHCPv6 snooping |
| RIPng | Only the S5700LI, S5700S-LI, and S5710LI do not support this function. |
| DHCPv6 server |
| DHCPv6 relay |
| OSPFv3 | Only the S5700LI, S5700S-LI, S5710LI, and S5700SI do not support this function. |
| BGP4+ & ISIS for IPv6 |
| VRRP6 |
| MLDv1 and MLDv2 |
| PIM-DM for IPv6 |
| PIM-SM for IPv6 |
| PIM-SSM for IPv6 |
| Layer 2 multicast features | – | IGMPv1/v2/v3 snooping | None |
| Fast leave |
| IGMP proxy |
| MLD snooping |
| Interface-based multicast traffic suppression |
| Inter-VLAN multicast replication |
| Controllable multicast |
| MPLS & VPN | Basic MPLS functions | LDP | Only the S5710EI, S5700HI, and S5710HI support this function. |
| Double MPLS labels |
| Mapping from DSCP to EXP priorities in MPLS packets |
| Mapping from 802.1p priorities to EXP priorities in MPLS packets |
| MPLS TE | MPLS TE tunnel |
| MPLS TE protection group |
| VPN | Multi-VPN-Instance CE (MCE) | Only the S5700LI, S5700S-LI, S5710LI, and S5700SI do not support this function. |
| VLL in SVC, Martini, CCC, and Kompella modes | Only the S5710EI, S5700HI, and S5710HI support this function. |
| VLL FRR |
| VPLS |
| MPLS L3VPN |
| Device reliability | BFD | Basic BFD functions | Only the S5700LI, S5700S-LI, S5710LI, and S5700SI do not support this function. |
| BFD for static route/IS-IS/OSPF/BGP |
| BFD for PIM |
| BFD for VRRP |
| Stacking | Stack card supporting the stacking function | Only the S5710LI, S5700SI (except S5700-26X-SI-12S-AC), and S5700EI support this function. |
| Service interface supporting the stacking function | Only the S5700LI (except S5700-10P-LI-AC, S5700-10P-PWR-LI-AC, S5700-28P-LI-BAT, S5700-28P-LI-24S-BAT), S5710EI, and S5700HI support this function. |
| Others | VRRP | Only the S5700LI, S5700S-LI, S5710LI, and S5700SI do not support this function. |
| Ethernet OAM | EFM OAM (802.3ah) | Automatic discovery | None |
| Link fault detection |
| Link fault troubleshooting |
| Remote loopback |
| CFM OAM (802.1ag) | Software-level CCM | None |
| MAC ping |
| MAC trace |
| Hardware-level CCM | Only the S5700HI supports this function. |
| OAM association | Association between 802.1ag and 802.1ah | Only the S5700LI and S5700S-LI do not support this function. |
| Association between 802.1ah and 802.1ag |
| Y.1731 | Delay and variation measurement | None |
| Hardware-level delay and variation measurement | Only the S5700HI supports this function. |
| QoS features | Traffic classifier | Traffic classification based on ACLs | None |
| Traffic classification based on outer 802.1p priorities, inner VLAN IDs, outer VLAN IDs, source MAC addresses, and Ethernet types |
| Traffic classification based on inner VLAN IDs | Only the S5720HI do not support this function. |
| Traffic classification based on inner 802.1p priorities | Only the S5700LI, S5700S-LI, S5710LI, and S5700SI do not support this function. |
| Traffic behavior | Access control after traffic classification | None |
| Traffic policing based on traffic classification |
| Re-marking based on traffic classification |
| Associating traffic classifiers with traffic behaviors |
| Traffic policing | Rate limit on inbound and outbound interfaces |
| Traffic shaping | Traffic shaping on interfaces and queues |
| Congestion avoidance | Simple Random Early Detection (SRED) | Only the S5700EI supports this function. |
| Weighted Random Early Detection (WRED) | Only the S5710EI, S5700HI, S5710HI, and S5720HI support this function. |
| Tail drop | None |
| Congestion management | Queue mapping | None |
| Priority Queuing (PQ) |
| Deficit Round Robin (DRR) |
| PQ+DRR |
| Weighted Round Robin (WRR) | Only the S5720HI do not support this function. |
| PQ+WRR |
| HQoS | Hierarchical Quality of Service | Only the S5720HI support this function. |
| Configuration and maintenance | Login and configuration management | Command line configuration | None |
| Error message and help information in English and Chinese |
| Login through console and Telnet terminals |
| SSH1.5/SSH2 |
| Send function and data communication between terminal users |
| Hierarchical user authority management and commands |
| SNMP-based NMS management (eSight) |
| Web page-based configuration and management |
| EasyDeploy (client) |
| EasyDeploy (commander) | Only the S5700LI, S5700S-LI, and S5710LI do not support this function. |
| Easy deployment and maintenance |
| File system | File system | None |
| Directory and file management |
| File upload and download through FTP, TFTP, SFTP, SCP, and FTPS |
| Monitoring and maintenance | Hardware monitoring | None |
| Reporting alarms on abnormal device temperature |
| Second-time fault detection to prevent detection errors caused by instant interference |
| Version matching check |
| Dying gasp | Only the S5700LI (except S5700-52X-LI-48CS-AC, S5700-28P-LI-BAT, S5700-28P-LI-24S-BAT), S5700S-LI, S5700HI, and S5710HI support this function. |
| Information center and unified management over logs, alarms, and debugging information | None |
| Electronic labels, and command line query and backup |
| Virtual cable test (VCT) |
| User operation logs |
| Detailed debugging information for network fault diagnosis |
| Network test tools such as traceroute and ping commands |
| Port mirroring, flow mirroring, and remote mirroring |
| Energy saving |
| Version upgrade | Device software loading and online software loading | None |
| BootROM online upgrade |
| Remote in-service upgrade |
| In-service patching |
| Security | AAA | Local authentication and authorization | None |
| RADIUS authentication, authorization, and accounting |
| HWTACACS authentication, authorization, and accounting |
| NAC | 802.1x authentication | None |
| MAC address authentication |
| Portal authentication |
| Hybrid authentication | Only the S5710LI does not support this function. |
| ARP security | ARP packet rate limiting based on source MAC addresses | Only the S5710EI, S5700HI, and S5710HI support this function. |
| ARP packet rate limiting based on source IP addresses, interfaces, and VLANs, and global ARP packet rate limiting | None |
| ARP anti-spoofing |
| Association between ARP and STP | Only the S5700LI and S5700S-LI do not support this function. |
| ARP gateway anti-collision |
| Dynamic ARP Inspection (DAI) and Static ARP Inspection (SAI) | None |
| Egress ARP Inspection (EAI) |
| IP security | ICMP attack defense | None |
| IP source guard |
| CPU attack defense | CPU attack defense |
| MFF | MAC-Forced Forwarding (MFF) |
| DHCP snooping | DHCP snooping |
| Option 82 function and dynamic rate limiting for DHCP packets |
| Attack defense | Defense against flood attacks without IP payloads, attacks from IGMP null payload packets, LAND attacks, Smurf attacks, and attacks from packets with invalid TCP flag bits |
| Defense against attacks from many fragments, attacks from many packets with offsets, attacks from repeated packet fragments, Tear Drop attacks, Syndrop attacks, NewTear attacks, Bonk attacks, Nesta attacks Rose attacks, Fawx attacks, Ping of Death attacks, and Jolt attacks |
| Defense against TCP SYN flood attacks, UDP flood attacks (including Fraggle attacks and UDP diagnosis port attacks), and ICMP flood attacks |
| Network management | – | Ping and traceroute | None |
| NQA |
| Network Time Protocol (NTP) |
| IPCA | Only the S5720HI support this function. |
| sFlow | The S5700SI and S5720HI does not support this function. |
| NetStream | Only the S5710EI, S5700HI, S5710HI, and S5720HI support this function. |
| SNMP v1/v2c/v3 | None |
| Standard MIB |
| HTTP |
| Hypertext Transfer Protocol Secure (HTTPS) |
| Remote network monitoring (RMON) |
| RMON2 | Only the S5710EI, S5700HI, S5710HI, and S5720HI support this function. |
| WLAN | – | AP Management Specifications | Only the S5720HI support this function. |
| Radio Management Specifications |
| WLAN Service Management Specifications |
| QOS |
| WLAN Security Specifications |
| WLAN user management specifications |
