Коммутатор Huawei S5720-28X-PWR-SI-AC, 20xGE (PoE), 4xSFP+ [02350DLW]

4K VLANs

Guest VLAN and voice VLAN

GVRP

MUX VLAN

VLAN assignment based on MAC addresses, protocols, IP subnets, policies, and ports

1:1 and N:1 VLAN Mapping

Ring protection AC

RRPP ring topology and RRPP multi-instance

Smart Link tree topology and Smart Link multi-instance, providing the millisecond-level protection switchover

SEP

ERPS(G.8032)

STP(IEEE 802.1d), RSTP(IEEE 802.1w), and MSTP(IEEE 802.1s)

BPDU protection, root protection, and loop protection

Neighbor Discovery (ND)

Path MTU (PMTU)

IPv6 ping, IPv6 tracert, and IPv6 Telnet

ACLs based on the source IPv6 address, destination IPv6 address, Layer 4 ports, or protocol type

MLD v1/v2 snooping

6to4 tunnel, ISATAP tunnel, and manually configured tunnel

PIM DM, PIM SM, PIM SSM

IGMP v1/v2/v3 snooping and IGMP fast leave

Multicast forwarding in a VLAN and multicast replication between VLANs

Multicast load balancing among member ports of a trunk

Controllable multicast

Port-based multicast traffic statistics

Rate limiting on packets sent and received by an interface

Packet redirection

Port-based traffic policing and two-rate three-color CAR

Eight queues on each port

WRR, DRR, SP, WRR+SP, and DRR+SP queue scheduling algorithms

Re-marking of the 802.1p priority and DSCP priority

Packet filtering at Layer 2 to Layer 4, filtering out invalid frames based on the source

MAC address, destination MAC address, source IP address, destination IP address,

TCP/UDP port number, protocol type, and VLAN ID

Rate limiting in each queue and traffic shaping on ports

User privilege management and password protection

DoS attack defense, ARP attack defense, and ICMP attack defense

Binding of the IP address, MAC address, interface, and VLAN

Port isolation, port security, and sticky MAC

Blackhole MAC address entries

MAC Forced Forwarding (MFF)

Limit on the number of learned MAC addresses

802.1x authentication and limit on the number of users on an interface

AAA authentication, RADIUS authentication, HWTACACS+ authentication, and NAC

SSH v2.0

Hypertext Transfer Protocol Secure (HTTPS)

CPU defense

Blacklist and whitelist

802.1x authentication, MAC address authentication, and combined authentication on a per port basis

Portal authentication on a per VLANIF interface basis

MACSec(hardware ready)

Working as an SVF client that is plug-and-play with zero configuration

Automatically loading the system software package and patches of clients

One-click and automatic delivery of service configurations

Supports independent running client