H3C S5120V3-LI Layer 3 Gigabit Ethernet Access Switch - S5120V3-28S-PWR-LI
Abundant service capabilities
H3C S5120V3-LI Ethernet switch series supports Internet broadband access and offers Gigabit port access and uplink interface for small and medium-sized enterprises. It supports rich features such as Jumbo Frame, 802.1X, MAC authentication, port security, LACP, 4K VLANs, up to 16K MAC address and blackhole MAC address, and abundant functions such as port-based priority auto-mapping of Layer 2 and Layer 3, port-based mirror, redirection, port isolation, access control lists, port speed limit and rich Ethernet IPv6 features.
IRF2 (Second Generation Intelligent Resilient Framework)
H3C S5120V3-LI switch series supports IRF2 technology that allows multiple physical devices it connects to be virtualized into one logical device. In this way, users can manage and use these multiple devices as a single device. IRF can bring the following benefits to users:
Simplified management: Once an IRF is built, users can log into the unified logical device by connecting to any port of any member. By configuring a single device, users can manage the whole intelligent resilient system and all member devices in the system, without physically connecting to each member device for configuration and management.
Simplified services: Various control protocols running on the logical device formed by IRF are running as if they are on one device. For example, routing protocols perform the unified calculation as one device. With the application of cross-device link aggregation technology, the original spanning tree protocol will be replaced. This avoids a great number of protocol packet exchanges among the members, simplifies network operation, and shortens the convergence time during network flapping.
Elastic extension: Elastic extension can be achieved according to user needs to ensure user investment. And the new device can achieve a "hot swap" when adding or leaving IRF, without affecting the normal operation of other devices.
High reliability: The high reliability of IRF is embodied in three aspects, specifically, links, devices, and protocols. Not only the physical ports of members can be aggregated, but also the physical links between the IRF system and the upper or lower layer devices can be aggregated, and thus the reliability of links is increased through a multi-link backup. An IRF system comprises multiple member devices. As soon as the master fails, the IRF system elects a new master immediately to prevent service interruption and implement 1:N backup. The IRF system has real-time protocol hot backup functions responsible for backing up configuration information of the protocol to all other member devices, achieving 1:N protocol reliability.
High performance: For high-end switches, performance and port density will be limited by the hardware structure. But for an IRF system, its performance and port density are the sum of the performance and port numbers of all devices within the system. Therefore, the IRF technology can easily expand the switching capability of the device and the density of user ports several times, thereby greatly improving the performance of the device.
Easy management: The entire resilient framework shares one IP. This simplifies network device and topology management, improves operating efficiency, and reduces maintenance costs.
Comprehensive security control policies
ARP attacks and ARP viruses are major threats to LAN security, so the H3C S5120V3-LI switch series comes with diverse ARP protection functions such as ARP Detection to challenge the legitimacy of clients, validate the ARP packets, and set a speed limit for ARP to prevent ARP swarm attacks from targeting CPU.
H3C S5120V3-LI switch series supports EAD (End User Admission Domination) function. With the background system, EAD integrates terminal security policies, such as anti-virus and patching, into network access control and access right control policies to form a cooperative security system. By checking, isolating, fixing, managing, and monitoring access terminals, EAD changes passive, single point network protection to active, comprehensive network protection, and changes separate management to centralized management, enhancing the network capability for preventing viruses, worms, and new threats.
It supports multiple authentication methods such as 802.1X authentication and centralized MAC authentication, and flexibly adapts to the multiple authentication requirements of the network environment.
Rich QoS policies
H3C S5120V3-LI switch series supports packet filtering at Layer 2 through Layer 4 and traffic classification. It provides a flexible queue-scheduling algorithm and allows settings to be configured based on ports and queues at the same time. SP, WRR, and SP+WRR modes are supported. It also supports ACL in the inbound and outbound direction, traffic policing, and port and traffic mirroring in the outbound and inbound direction, to monitor packets on specified ports for network detection and troubleshooting.
Outstanding management capacity
H3C S5120V3-LI switch series supports Simple Network Management Protocol (SNMP) v1/v2/v3, which can be managed by iMC. This series supports CLI command line, Web-based network management, and Telnet for easier device management, as well as encryption methods like SSH2.0 for more secure management.
H3C S5120V3-LI switch series supports VLAN classification based on MAC address, which is a good solution for intelligent and flexible management of mobile office; combined with ACL policies in the global or VLAN mode, it simplifies configuration and minimizes hardware resources.
Layer 3 routing features
H3C S5120V3-LI switch series provides rich layer 3 routing features and supports static routing, RIP, RIPng, and OSPF V1/V2/V3.
Green Design
The S5120V3-LI series switch implements a variety of green energy saving features, including auto-power-down (port automatic energy saving), if the interface status has been down for a period of time, the system automatically stops the interface power and the system enters power-saving mode. They also support EEE energy feature, by which if a port stays idle for a period of time, the system will set the port to energy-saving mode.
The S5120V3-10P-LI, S5120V3-10P-PWR-LI, S5120V3-20P-LI, S5120V3-28P-LI and S5120V3-28S-LI switches are fan-less design, significantly reduce devices power consumption and noise.
Hardware Specifications (continued)
| Feature | S5120V3-28S-LI | S5120V3-52S-LI | S5120V3-28S-HPWR-LI | S5120V3-28S-PWR-LI | S5120V3-52S-PWR-LI |
| Switching capacity | 128Gbps | 176Gbps | 128Gbps | 128Gbps | 176Gbps |
| Forwarding capacity | 95.232Mpps | 130.952Mpps | 95.232Mpps | 95.232Mpps | 130.952Mpps |
| CPU | 1 Core, 800MHz |
| Flash/SDRAM | 256MB/512MB |
| Dimensions (W × D × H) | 440×160×43.6 mm | 440×230×43.6 mm | 440×260×43.6 mm | 440×260×43.6 mm | 440×400×43.6 mm |
| Weight | ≤ 2.5 kg | ≤ 3.5 kg | ≤ 4.5 kg | ≤ 4.5 kg | ≤ 6 kg |
| Management port | 1 console port |
| Networking interface | 24×10/100/1000TX+4×SFP Plus | 48×10/100/1000TX+4×SFP Plus | 24×10/100/1000TX+ 4×SFP combo + 4×SFP Plus | 24×10/100/1000TX+ 4×SFP Plus | 48×10/100/1000TX+ 4×SFP Plus |
| Maximum Stacking bandwidth | 80Gbps | 80Gbps | 80Gbps | 80Gbps | 80Gbps |
| Maximum stacking num | 9 | 9 | 9 | 9 | 9 |
| Port Surge | 6KV | 6KV | 6KV | 6KV | 6KV |
| Input voltage | AC: The rated voltage range is 100V to 240V, 50/60Hz. |
| Total power consumption | MIN:
AC: 10W
MAX:
AC: 24W | MIN:
AC: 19W
MAX:
AC: 44W | MIN: AC: 16W
MAX:
AC: 445W (PoE 370W) | MIN:
AC: 15W
MAX:
AC: 294W (PoE 240W) | MIN:
AC: 36W
MAX:
AC: 467W (PoE 370W) |
| Fan number | Fan-less | 1 | 3 | 1 | 1 |
| MTBF(Year) | 150.86 | 115.68 | 52.81 | 87.06 | 50.19 |
| MTTR(Hour) | 1 | 1 | 1 | 1 | 1 |
| Operating temperature | -5℃ ~ 50℃(normal operating temperature)
-5℃ ~ 45℃(When using transceiver modules with maximum transmission distance < 80km)
-5℃ ~ 40℃(When using transceiver modules with maximum transmission distance ≥ 80km) |
| Storage temperature | -40℃ ~ 70℃ |
| Relative humidity (non-condensing) | 5% RH to 95% RH, non-condensing |
Software Specifications
| Feature | S5120V3-LI switch series |
| Port aggregation | GE/10GE port aggregation Dynamic aggregation Static aggregation Cross-device aggregation |
| Broadcast/Multicast/Unicast storm suppression | Storm suppression based on port bandwidth percentage Storm suppression based on PPS Storm suppression based on BPS Broadcast traffic/Multicast traffic/Unknown unicast traffic suppression |
| Traffic control | 802.3x traffic control and half-duplex backpressure |
| IRF2 | Distributed device management, distributed link aggregation, and distributed resilient routing Stacking through standard Ethernet interfaces Local device stacking and remote device stacking |
| MAC address table | Static MAC address Blackhole MAC address Setting the maximum number of port MAC addresses to be learned |
| VLAN | Port-based VLAN MAC-based VLAN Protocol-based VLAN QinQ and selective QinQ VLAN mapping Voice VLAN MVRP |
| DHCP | DHCP Client DHCP Snooping DHCP Snooping option82 DHCP Relay DHCP Server DHCP auto-config |
| VLAN interface | Both IPv4 and IPv6 supported |
| ARP | ARP Detection ARP speed limit |
| IP routing | Static routing RIPv1/v2 and RIPng OSPFv1/v2 and OSPFv3 |
| Multicast | IGMP Snooping V2/V3 PIM Snooping MLD Snooping Multicast VLAN Multicast VLAN+ |
| Layer 2 ring network protocol | STP/RSTP/MSTP/PVST/PVST+ STP Root Protection Smart Link RRPP G.8032 ERPS (Ethernet Ring Protection Switching) |
| ACL | Packet filtering at Layer 2 through layer 4 Traffic classification based on source MAC addresses, destination MAC addresses, source IPv4/IPv6 addresses, Time range-based ACL VLAN-based ACL Bidirectional ACL |
| QoS | Port rate limit (receiving and transmitting) Packet redirection Committed access rate (CAR) Eight output queues on each port Flexible queue scheduling algorithms based on ports and queues, including SP, WRR and SP+WRR 802.1p DSCP remarking |
| Traffic Statistic | Sflow |
| Forwarding | Wire-speed/Line-rate architecture |
| Mirroring | Port mirroring Traffic mirroring RSPAN |
| Security | Hierarchical user management and password protection AAA authentication support RADIUS authentication HWTACACS SSH2.0 Port isolation 802.1X authentication, centralized MAC authentication Port security IP Source Guard HTTPs EAD |
| Management and maintenance | Loading and upgrading through XModem/FTP/TFTP Zero Touch Provisioning Configuration through CLI, Telnet, and console port SNMPv1/v2c/v3 and Web-based NMS Restful Remote monitoring (RMON ) alarm, event, and history recording IMC NMS System log, alarming based on severities, and output of debugging information NTP Ping, Tracert NQA Virtual cable test (VCT) Device link detection protocol (DLDP) Loopback-detection |
Performance Specification
| Entries | S5120V3-10P-LI, S5120V3-10P-PWR-LI, S5120V3-28P-HPWR-LI, S5120V3-28S-LI, S5120V3-28S-PWR-LI, S5120V3-28S-HPWR-LI, S5120V3-52S-LI, S5120V3-52S-PWR-LI, S5120V3-28F-LI | S5120V3-20P-LI, S5120V3-28P-LI, S5120V3-28P-PWR-LI, S5120V3-52P-LI, S5120V3-52P-PWR-LI |
| MAC address entries | 16K | 8K |
| Static Mac address | 1K |
| VLAN table | 4094 |
| VLAN interface | 32 |
| IPv4 routing entries | 1024 | 512 |
| IPv4 ARP entries | 1024 | 128 |
| IPv4 ACL entries | 512 | 256 |
| IPv4 multicast L2 entries | 1000 |
| IPv6 unicast routing entries | 240 | 16 |
| QOS forward queues | 8 |
| IPv6 ACL entries | 256 |
| IPv6 ND entries | 240 | 64 |
| Jumbo frame length | 10000 |
| MAX num in one link group | 8 |
| Link group num | 124 |
| | |
PoE Power Capacity
| Product Name | Total PoE power capacity | PoE Ports Quantity |
| S5120V3-10P-PWR-LI | 125W | 15.4W (802.3af): 8 30W (802.3at): 4 |
| S5120V3-28P-PWR-LI | 240W | 15.4W (802.3af): 15 30W (802.3at): 8 |
| S5120V3-28P-HPWR-LI | 370W | 15.4W (802.3af): 24 30W (802.3at): 12 |
| S5120V3-52P-PWR-LI | 370W | 15.4W (802.3af): 24 30W (802.3at): 12 |
| S5120V3-28S-PWR-LI | 240W | 15.4W (802.3af): 15 30W (802.3at): 8 |
| S5120V3-28S-HPWR-LI | 370W | 15.4W (802.3af): 24 30W (802.3at): 12 |
| S5120V3-52S-PWR-LI | 370W | 15.4W (802.3af): 24 30W (802.3at): 12 |
Standards and Protocols Compliance
| Organization | Standards And Protocols |
| IEEE | 802.1x Port based network access control protocol |
| 802.1ab Link Layer Discovery Protocol |
| 802.1ak MVRP and MRP |
| 802.1ax Link Aggregation |
| 802.1d Media Access Control Bridges |
| 802.1p Priority |
| 802.1q VLANs |
| 802.1s Multiple Spanning Trees |
| 802.1ag Connectivity Fault Management |
| 802.1v VLAN classification by Protocol and Port |
| 802.1w Rapid Reconfiguration of Spanning Tree |
| 802.3ad Link Aggregation Control Protocol |
| 802.3af Power over Ethernet |
| 802.3at Power over Ethernet |
| 802.3az Energy Efficient Ethernet |
| 802.3ah Ethernet in the First Mile |
| 802.3x Full Duplex and flow control |
| 802.3u 100BASE-T |
| 802.3ab 1000BASE-T |
| 802.3z 1000BASE-X |
| IETF | RFC 768 User Datagram Protocol (UDP) |
| RFC 791 Internet Protocol (IP) |
| RFC 792 Internet Control Message Protocol (ICMP) |
| RFC 793 Transmission Control Protocol (TCP) |
| RFC 813 Window and Acknowledgement Strategy in TCP |
| RFC 815 IP datagram reassembly algorithms |
| RFC 8201 Path MTU Discovery for IP version 6 |
| RFC 826 Address Resolution Protocol (ARP) |
| RFC 879 TCP maximum segment size and related topics |
| RFC 896 Congestion control in IP/TCP internetworks |
| RFC 917 Internet subnets |
| RFC 919 Broadcasting Internet Datagrams |
| RFC 922 Broadcasting Internet Datagrams in the Presence of Subnets (IP_BROAD) |
| RFC 951 BOOTP |
| RFC 1027 Proxy ARP |
| RFC 1122 Requirements for Internet Hosts - Communications Layers |
| RFC 1213 MIB-2 Stands for Management Information Base |
| RFC 1215 Convention for defining traps for use with the SNMP |
| RFC 1256 ICMP Router Discovery Messages |
| RFC 1350 TFTP Protocol (revision 2) |
| RFC 1393 Traceroute Using an IP Option |
| RFC 1519 Classless Inter-Domain Routing (CIDR) |
| RFC 1542 BOOTP Extensions |
| RFC 1583 OSPF Version 2 |
| RFC 1591 Domain Name System Structure and Delegation |
| RFC 1757 Remote Network Monitoring Management Information Base |
| RFC 1812 Requirements for IP Version 4 Router |
| RFC 1918 Address Allocation for Private Internet |
| RFC 2131 Dynamic Host Configuration Protocol (DHCP) |
| RFC 2132 DHCP Options and BOOTP Vendor Extensions |
| RFC 2273 SNMPv3 Applications |
| RFC 2328 OSPF Version 2 |
| RFC 2375 IPv6 Multicast Address Assignments |
| RFC 2401 Security Architecture for the Internet Protocol |
| RFC 2402 IP Authentication Header |
| RFC 2460 Internet Protocol, Version 6 (IPv6) Specification |
| RFC 2464 Transmission of IPv6 over Ethernet Networks |
| RFC 2576 (Coexistence between SNMP V1, V2, V3) |
| RFC 2579 Textual Conventions for SMIv2 |
| RFC 2580 Conformance Statements for SMIv2 |
| RFC 2711 IPv6 Router Alert Option |
| RFC 2787 Definitions of Managed Objects for the Virtual Router Redundancy Protocol |
| RFC 2925 Definitions of Managed Objects for Remote Ping, Traceroute, and Lookup Operations |
| RFC 3101 OSPF Not-so-stubby-area option |
| RFC 3046 DHCP Relay Agent Information Option |
| RFC 3056 Connection of IPv6 Domains via IPv4 Clouds |
| RFC 3137 OSPF Stub Router Advertisment sFlow |
| RFC 3416 (SNMP Protocol Operations v2) |
| RFC 3417 (SNMP Transport Mappings) |
| RFC 3418 Management Information Base (MIB) for the Simple Network Management Protocol (SNMP) |
| RFC 3484 Default Address Selection for IPv6 |
| RFC 3509 Alternative Implementations of OSPF Area Border Routers |
| RFC 3580 IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines |
| RFC 3623 Graceful OSPF Restart |
| RFC 4022 MIB for TCP |
| RFC 4113 MIB for UDP |
| RFC 4213 Basic Transition Mechanisms for IPv6 Hosts and Routers |
| RFC 4251 The Secure Shell (SSH) Protocol |
| RFC 4252 SSHv6 Authentication |
| RFC 4253 SSHv6 Transport Layer |
| RFC 4254 SSHv6 Connection |
| RFC 4291 IP Version 6 Addressing Architecture |
| RFC 4292 IP Forwarding Table MIB |
| RFC 4293 Management Information Base for the Internet Protocol (IP) |
| RFC 4419 Key Exchange for SSH |
| RFC 4443 ICMPv6 |
| RFC 4541 IGMP & MLD Snooping Switch |
| RFC 4552 Authentication/Confidentiality for OSPFv3 |
| RFC 4750 OSPFv2 MIB partial support no SetMIB |
| RFC 4861 IPv6 Neighbor Discovery |
| RFC 4862 IPv6 Stateless Address Auto-configuration |
| RFC 4940 IANA Considerations for OSPF |
| RFC 5095 Deprecation of Type 0 Routing Headers in IPv6 |
| RFC 5187 OSPFv3 Graceful Restart |
| RFC 5340 OSPFv3 for IPv6 |
| RFC 5424 Syslog Protocol |
| RFC 5880 Bidirectional Forwarding Detection |
| RFC 5905 Network Time Protocol Version 4: Protocol and Algorithms Specification |
| RFC 6620 FCFS SAVI |
| RFC 6987 OSPF Stub Router Advertisement |
| RFC 5381 Experience of Implementing NETCONF over SOAP |
| ITU | ITU-T Y.1731 |
| ITU-T Rec G.8032/Y.1344 Mar. 2010 |
