S6720-EI series 10 Gigabit switches (hereinafter referred to as S6720-EI), a new generation of all 10 Gigabit box switches independently developed by Huawei, can be used for access to 10 Gigabit servers in data centers, convergence or core of campus networks.
The S6720-EI is one of the highest performance box switches in the industry. It provides full line speed 10 Gigabit access interface and 40GE uplink interface, making it possible for 10 Gigabit server high-density access and campus network high-density 40GE core or convergence. At the same time, S6720-EI supports rich business features, perfect security control policies, rich QoS and other features to meet the scalability, reliability, manageability, security and other challenges of the data center.
The simple S6720S-26Q-EI-24S is only 220mm deep, which can meet the requirements of 300mm deep cabinet placement and save installation space.
Large capacity and high-density 10 Gigabit access and 40GE uplink
With the increasing demand for business bandwidth at the user end, 10G network cards at the server end are increasingly used to provide greater bandwidth services. The data center server switch urgently needs to provide higher forwarding performance and 10 Gigabit port expansion capability. The S6720-EI series box switch has the leading 10 Gigabit port density and switching capacity of equipment of the same grade in the industry. A single device can support up to 48 10 Gigabit ports for full line speed forwarding and up to 6 full line speed QSFP+ports. The port supports the flexible access of GE and 10GE, and automatically identifies the type of installed optical module, so as to maximize the protection of user investment and ensure the flexibility of use. In view of the requirements of large data flow and non blocking transmission in the data center, the S6720-EI switch can provide a strong cache capacity and support advanced cache scheduling mechanism, so as to ensure the maximum effective use of device cache capacity.
Perfect security control strategy
The S6720-EI provides multiple security protection functions. Support DOS (Denial of Service) anti attack, network anti attack, user anti attack and other functions. Among them, DOS anti attack mainly includes SYN Flood, Land, Smurf and ICMP Flood. The network anti attack mainly refers to the BPDU/Root attack of STP. The user's anti attack involves DHCP phishing attack, man in the middle attack, IP/MAC Spoofing attack, DHCP request flood, DOS attack that changes the CHADDR value, etc. The S6720-EI supports the establishment and maintenance of the DHCP Snooping binding table to directly discard illegal messages (ARP spoofing messages, unauthorized modification of IP addresses, etc.) that do not meet the binding table entries, effectively preventing hackers or attackers from implementing common "man in the middle" attacks through ARP messages. The validity of DHCP Server can also be ensured by using the trust port feature of DHCP Snooping.