Ethernet features
|
Ethernet
|
Operating modes of full-duplex,
half-duplex and auto-negotiation
|
S5720HI do not support the operating mode
of half-duplex.
|
Rates of an Ethernet interface: 10
Mbit/s, 100 Mbit/s, 1000 Mbit/s, 10 Gbit/s, and auto-negotiation
|
None
|
Flow control on interfaces
|
Jumbo frames
|
Link aggregation
|
Load balancing among links of a trunk
|
Transparent transmission of Layer 2
protocol packets
|
Device Link Detection Protocol (DLDP)
|
Link Layer Discovery Protocol (LLDP)
|
Link Layer Discovery Protocol-Media
Endpoint Discovery (LLDP-MED)
|
Interface isolation and forwarding
restriction
|
Broadcast storm suppression
|
VLAN
|
Access modes of access, trunk, hybrid,
and QinQ
|
None
|
Default VLAN
|
VLAN assignment based on interfaces, MAC
addresses, protocols, and IP subnets
|
VLAN assignment based on the following
policies:
MAC address + IP address
MAC address + IP address + interface
number
DHCP policies
|
VLAN stacking for untagged packets
|
Only the S5710LI, S5700SI, and S5700EI do
not support this function.
|
Super VLAN
|
Only the S5700LI, S5700S-LI, and S5710-LI
do not support this function.
|
VLAN mapping
|
None
|
Selective QinQ
|
MUX VLAN
|
Voice VLAN
|
Guest VLAN
|
GVRP
|
Generic Attribute Registration Protocol (GARP)
|
None
|
GARP VLAN Registration Protocol (GVRP)
|
VCMP
|
VCMP (VLAN centralized management
protocol)
|
None
|
MAC
|
Automatic learning and aging of MAC
addresses
|
None
|
Static, dynamic, and blackhole MAC
address entries
|
Packet filtering based on source MAC
addresses
|
Interface-based MAC learning limiting
|
Sticky MAC address entries
|
MAC address flapping detection
|
Configuring MAC address learning
priorities for interfaces
|
Only the S5710EI, S5700HI, S5710HI, and
S5720HI support this function.
|
MAC address spoofing defense
|
Only the S5710EI, S5700HI, S5710HI, and
S5720HI do not support this function.
|
Port bridge
|
None
|
ARP
|
Static and dynamic ARP entries
|
None
|
RARP
|
ARP in a VLAN
|
Aging of ARP entries
|
Proxy ARP
|
Only the S5700LI and S5700S-LI do not
support this function.
|
Multi-port ARP for connecting to the NLB
cluster server
|
Only the S5710EI, S5700HI, S5710HI, and
S5720HI support this function.
|
Ethernet loop protection
|
MSTP
|
STP
|
None
|
RSTP
|
MSTP
|
VBST
|
BPDU protection, root protection, and
loop protection
|
TC-BPDU attack defense
|
STP loop detection
|
Loopback detection
|
Loop detection on an interface
|
SEP
|
Smart Ethernet Protection (SEP)
|
Smart Link
|
Smart Link
|
Smart Link multi-instance
|
Monitor Link
|
RRPP
|
RRPP protective switchover
|
Single RRPP ring, tangent RRPP ring, and
intersecting RRPP ring
|
Hybrid networking of RRPP rings and other
ring networks
|
ERPS
|
G.8032 v1/v2
|
Only the S5700S-LI does not support this
function.
|
Single closed ring
|
Subring
|
IPv4/IPv6 forwarding
|
IPv4 and unicast routes
|
Static IPv4 routes
|
None
|
VRF
|
DHCP client
|
DHCP server
|
Only the S5710LI does not support this
function.
|
DHCP relay
|
DHCP policy VLAN
|
Only the S5700LI, S5700S-LI, and S5710LI
do not support this function.
|
URPF check
|
Routing policies
|
RIPv1/RIPv2
|
OSPF
|
Only the S5700LI, S5700S-LI, S5710LI, and
S5700SI do not support this function.
|
BGP
|
MBGP
|
IS-IS
|
PBR (redirection in a traffic policy)
|
Multicast routing features
|
IGMPv1/v2/v3
|
Only the S5700LI, S5700S-LI, S5710LI, and
S5700SI do not support this function.
|
PIM-DM
|
PIM-SM
|
PIM-SSM
|
MSDP
|
Multicast routing policies
|
RPF
|
IPv6 features
|
IPv6 protocol stack
|
None
|
ND and ND snooping
|
DHCPv6 snooping
|
RIPng
|
Only the S5700LI, S5700S-LI, and S5710LI
do not support this function.
|
DHCPv6 server
|
DHCPv6 relay
|
OSPFv3
|
Only the S5700LI, S5700S-LI, S5710LI, and
S5700SI do not support this function.
|
BGP4+ & ISIS for IPv6
|
VRRP6
|
MLDv1 and MLDv2
|
PIM-DM for IPv6
|
PIM-SM for IPv6
|
PIM-SSM for IPv6
|
Layer 2 multicast features
|
-
|
IGMPv1/v2/v3 snooping
|
None
|
Fast leave
|
IGMP proxy
|
MLD snooping
|
Interface-based multicast traffic
suppression
|
Inter-VLAN multicast replication
|
Controllable multicast
|
MPLS & VPN
|
Basic MPLS functions
|
LDP
|
Only the S5710EI, S5700HI, and S5710HI
support this function.
|
Double MPLS labels
|
Mapping from DSCP to EXP priorities in
MPLS packets
|
Mapping from 802.1p priorities to EXP priorities
in MPLS packets
|
MPLS TE
|
MPLS TE tunnel
|
MPLS TE protection group
|
VPN
|
Multi-VPN-Instance CE (MCE)
|
Only the S5700LI, S5700S-LI, S5710LI, and
S5700SI do not support this function.
|
VLL in SVC, Martini, CCC, and Kompella
modes
|
Only the S5710EI, S5700HI, and S5710HI
support this function.
|
VLL FRR
|
VPLS
|
MPLS L3VPN
|
Device reliability
|
BFD
|
Basic BFD functions
|
Only the S5700LI, S5700S-LI, S5710LI, and
S5700SI do not support this function.
|
BFD for static route/IS-IS/OSPF/BGP
|
BFD for PIM
|
BFD for VRRP
|
Stacking
|
Stack card supporting the stacking
function
|
Only the S5710LI, S5700SI (except
S5700-26X-SI-12S-AC), and S5700EI support this function.
|
Service interface supporting the stacking
function
|
Only the S5700LI (except S5700-10P-LI-AC,
S5700-10P-PWR-LI-AC, S5700-28P-LI-BAT, S5700-28P-LI-24S-BAT), S5710EI, and
S5700HI support this function.
|
Others
|
VRRP
|
Only the S5700LI, S5700S-LI, S5710LI, and
S5700SI do not support this function.
|
Ethernet OAM
|
EFM OAM (802.3ah)
|
Automatic discovery
|
None
|
Link fault detection
|
Link fault troubleshooting
|
Remote loopback
|
CFM OAM (802.1ag)
|
Software-level CCM
|
None
|
MAC ping
|
MAC trace
|
Hardware-level CCM
|
Only the S5700HI supports this function.
|
OAM association
|
Association between 802.1ag and 802.1ah
|
Only the S5700LI and S5700S-LI do not
support this function.
|
Association between 802.1ah and 802.1ag
|
Y.1731
|
Delay and variation measurement
|
None
|
Hardware-level delay and variation
measurement
|
Only the S5700HI supports this function.
|
QoS features
|
Traffic classifier
|
Traffic classification based on ACLs
|
None
|
Traffic classification based on outer
802.1p priorities, inner VLAN IDs, outer VLAN IDs, source MAC addresses, and
Ethernet types
|
Traffic classification based on inner
VLAN IDs
|
Only the S5720HI do not support this
function.
|
Traffic classification based on inner
802.1p priorities
|
Only the S5700LI, S5700S-LI, S5710LI, and
S5700SI do not support this function.
|
Traffic behavior
|
Access control after traffic classification
|
None
|
Traffic policing based on traffic
classification
|
Re-marking based on traffic
classification
|
Associating traffic classifiers with
traffic behaviors
|
Traffic policing
|
Rate limit on inbound and outbound
interfaces
|
Traffic shaping
|
Traffic shaping on interfaces and queues
|
Congestion avoidance
|
Simple Random Early Detection (SRED)
|
Only the S5700EI supports this function.
|
Weighted Random Early Detection (WRED)
|
Only the S5710EI, S5700HI, S5710HI, and
S5720HI support this function.
|
Tail drop
|
None
|
Congestion management
|
Queue mapping
|
None
|
Priority Queuing (PQ)
|
Deficit Round Robin (DRR)
|
PQ+DRR
|
Weighted Round Robin (WRR)
|
Only the S5720HI do not support this
function.
|
PQ+WRR
|
HQoS
|
Hierarchical Quality of Service
|
Only the S5720HI support this function.
|
Configuration and maintenance
|
Login and configuration management
|
Command line configuration
|
None
|
Error message and help information in
English and Chinese
|
Login through console and Telnet
terminals
|
SSH1.5/SSH2
|
Send function and data communication
between terminal users
|
Hierarchical user authority management
and commands
|
SNMP-based NMS management (eSight)
|
Web page-based configuration and
management
|
EasyDeploy (client)
|
EasyDeploy (commander)
|
Only the S5700LI, S5700S-LI, and S5710LI
do not support this function.
|
Easy deployment and maintenance
|
File system
|
File system
|
None
|
Directory and file management
|
File upload and download through FTP,
TFTP, SFTP, SCP, and FTPS
|
Monitoring and maintenance
|
Hardware monitoring
|
None
|
Reporting alarms on abnormal device
temperature
|
Second-time fault detection to prevent
detection errors caused by instant interference
|
Version matching check
|
Dying gasp
|
Only the S5700LI (except S5700-52X-LI-48CS-AC,
S5700-28P-LI-BAT, S5700-28P-LI-24S-BAT), S5700S-LI, S5700HI, and S5710HI
support this function.
|
Information center and unified management
over logs, alarms, and debugging information
|
None
|
Electronic labels, and command line query
and backup
|
Virtual cable test (VCT)
|
User operation logs
|
Detailed debugging information for
network fault diagnosis
|
Network test tools such as traceroute and
ping commands
|
Port mirroring, flow mirroring, and
remote mirroring
|
Energy saving
|
Version upgrade
|
Device software loading and online
software loading
|
None
|
BootROM online upgrade
|
Remote in-service upgrade
|
In-service patching
|
Security
|
AAA
|
Local authentication and authorization
|
None
|
RADIUS authentication, authorization, and
accounting
|
HWTACACS authentication, authorization,
and accounting
|
NAC
|
802.1x authentication
|
None
|
MAC address authentication
|
Portal authentication
|
Hybrid authentication
|
Only the S5710LI does not support this
function.
|
ARP security
|
ARP packet rate limiting based on source
MAC addresses
|
Only the S5710EI, S5700HI, and S5710HI
support this function.
|
ARP packet rate limiting based on source
IP addresses, interfaces, and VLANs, and global ARP packet rate limiting
|
None
|
ARP anti-spoofing
|
Association between ARP and STP
|
Only the S5700LI and S5700S-LI do not
support this function.
|
ARP gateway anti-collision
|
Dynamic ARP Inspection (DAI) and Static
ARP Inspection (SAI)
|
None
|
Egress ARP Inspection (EAI)
|
IP security
|
ICMP attack defense
|
None
|
IP source guard
|
CPU attack defense
|
CPU attack defense
|
MFF
|
MAC-Forced Forwarding (MFF)
|
DHCP snooping
|
DHCP snooping
|
Option 82 function and dynamic rate
limiting for DHCP packets
|
Attack defense
|
Defense against flood attacks without IP
payloads, attacks from IGMP null payload packets, LAND attacks, Smurf
attacks, and attacks from packets with invalid TCP flag bits
|
Defense against attacks from many
fragments, attacks from many packets with offsets, attacks from repeated
packet fragments, Tear Drop attacks, Syndrop attacks, NewTear attacks, Bonk
attacks, Nesta attacks Rose attacks, Fawx attacks, Ping of Death attacks, and
Jolt attacks
|
Defense against TCP SYN flood attacks,
UDP flood attacks (including Fraggle attacks and UDP diagnosis port attacks),
and ICMP flood attacks
|
Network management
|
-
|
Ping and traceroute
|
None
|
NQA
|
Network Time Protocol (NTP)
|
IPCA
|
Only the S5720HI support this function.
|
sFlow
|
The S5700SI and S5720HI does not support
this function.
|
NetStream
|
Only the S5710EI, S5700HI, S5710HI, and
S5720HI support this function.
|
SNMP v1/v2c/v3
|
None
|
Standard MIB
|
HTTP
|
Hypertext Transfer Protocol Secure
(HTTPS)
|
Remote network monitoring (RMON)
|
RMON2
|
Only the S5710EI, S5700HI, S5710HI, and
S5720HI support this function.
|
WLAN
|
-
|
AP Management Specifications
|
Only the S5720HI support this function.
|
Radio Management Specifications
|
WLAN Service Management Specifications
|
QOS
|
WLAN Security Specifications
|
WLAN user management specifications
|
