H3C S6520X-26C-SI SFP Switch

- H3C S6520X-26C-SI L3 SFP+ Switch

- H3C S6520X-26C-SI L3 SFP+ Next Business Day Support Services (24Mo)

- 2 x H3C 150W Asset-manageable AC Power Supply Module

S6520X-26C–SI: 24 × 1/10G SFP+ ports, 1 × expansion slot, 2 × power module slots

Features and Benefits

High-density 10GE and Multi-Giga forwarding

The switch offers high-density 10GE forwarding and can expand 10GE ports flexibly, working at wire-speed.

It provides 16/24*10/1GE autosensing SFP+ ports, one expansion slot that support up to 10 kinds of modules range from GE to 10GE, 25GE, 40GE, and multi-giga ports. S6520X-26MC-UPWR-SI support 24 

*1G/2.5G/5GBase-T (UPOE) ports, Max 90W PoE supported on these ports.

H3C Intelligent Resilient Framework 2 (IRF2)

H3C Intelligent Resilient Framework 2 (IRF 2) virtualizes multiple S6520X-SI switches into one virtual switch and provides the following benefits:

Scalability: IRF 2 allows you to add devices to the IRF 2 system easily. It provides a single point of management, enables switch plug-and-play, and supports software auto-update for software synchronization from the master to the new member devices. It brings business agility with lower total cost of ownership by allowing new switches to be added to the fabric without network topology change as business grows.

High availability: The H3C proprietary routing hot backup technology ensures redundancy and backup of all information on the control and data planes and non-stop Layer 3 data forwarding in an IRF 2 fabric.

It also eliminates single point of failure and ensures service continuity.

Redundancy and load balancing: The distributed link aggregation technology supports load sharing and mutual backup among multiple uplinks, which enhances the network redundancy and improves link resources usage.

Flexibility and resiliency: The switch use standard GE ports instead of specialized ports for IRF links between IRF member devices. This allows customers to assign bandwidth as needed between uplink, downlink, and IRF system connections. In addition, an S6520X-HI IRF fabric can span a rack, multiple racks, or multiple campuses.

Wide Range of Advanced Features

The switch offers a wide range of features, including:

Modular hardware and software design: The switch uses modular, hot swapping, and redundancy design for hardware, including power modules and fan trays. The switch also uses modular design for software, which enables feature installation and removal on an as-needed basis. Refined physical architecture and optimized software workflows greatly reduce the end-to-end packet processing delay.

Software-defined networking (SDN): An innovative network architecture that separates the control plane from the forwarding plane, typically by using OpenFlow. SDN significantly simplifies network management, reduces maintenance complexities and costs, enables flexible traffic management, and offers a good platform for network and application innovations.

Virtual eXtensible LAN (VXLAN): A MAC-in-UDP technology that provides Layer 2 connectivity between distant

network sites across an IP network. VXLAN enables long-distance virtual machine and data mobility and is typically used in data centers and the access layer of campus networks for multitenant services. The H3C implementation of VXLAN supports automatic VXLAN tunnel establishment with EVPN.

Ethernet Virtual Private Network (EVPN): A Layer 2 VPN technology that provides both Layer 2 and Layer 3

connectivity between distant network sites across an IP network. EVPN uses MP-BGP in the control plane and VXLAN in the data plane. EVPN provides the following benefits: Configuration automation; Separation of the control plane and the data plane; Integrated routing and bridging (IRB).

In-Service Software Upgrade (ISSU) and Operation, Administration, and Maintenance (OAM): Ensure business continuity and improve Ethernet management and maintainability.

Comprehensive Security Control Policies

The switch supports AAA authentications (including RADIUS authentication) and dynamic or static binding of user identifiers such as user account, IP address, MAC address, VLAN, and port number.

Using the switch in conjunction with H3C IMC, you can manage and monitor online users in real time and take prompt action on illegitimate behaviors.

The User Profile allows to define a set of policies based on user group in different application scenario.

The switch offers a large number of inbound and outbound ACLs and VLAN-based ACL assignment. This simplifies configurations and saves ACL resources.

MACsec

MACsec is an ideal hop-by-hop link-layer security protocol for Ethernet networks, which are typically insecure. It provides the following services:

Data encryption: Encrypts data over the Ethernet link to protect data against security issues such as eavesdropping.

Anti-replay: Prevents packets from being intercepted and modified en route to protect the network

against unauthorized access.

Tampering protection: prevents packet tampering to protect data integrity.

MACsec supports the following deployments:

Client-oriented: Protects data transmission over the link between the client and its access device.

Device-oriented mode: Protects data transmission over the link between two peering devices.

The switch can cooperate with H3C iNode client and core switches such as S10500X and S7500X to provide a complete MACsec solution.

High Availability

In addition to node and link protection, the switch offers the following hardware high availability features:

1+1 power module redundancy and 1+1 fan tray redundancy.

Hot-swappable interface modules.

Automatic power and fan tray status monitoring and alarming mechanisms.

Automatic fan speed adjustment based on the change in temperature.

Self-protection mechanisms that protect power modules against overcurrent, overvoltage, and

overtemperature conditions.

Outstanding Management Capacity

The switch provides a variety of management features and is easy to manage. It offers the following device management features:

Provides multiple management interfaces, including the console port, out-of-band management

Ethernet port, and USB port.

Supports configuration and management from CLI or H3C IMC Intelligent Management Center.

Supports multiple access methods, including SNMPv1/v2c/v3, Telnet, and more secure SSH 2.0 and SSL.

Uses OAM to enhance system management capability.

Supports FTP for system upgrade.