Description
Overview
XS-S1960 Switch Series is the newest access switch series for SMB market.
XS-S1960-H Series Switches are fixed-configuration, Gigabit Ethernet
switches that provide enterprise-class access switching for branch offices,
the switches are managed switches offer advanced Layer 2 and basic Layer
3 features as well as High-power PoE Technology (IEEE 802.3bt). The
switches adopt new web interface and can be managed at the Ruijie Cloud
platform, provides easy device onboarding, configuration, monitoring, and
troubleshooting.
Highlights
• Smart web and managed at Ruijie Cloud
• PoE+ support with up to 370W power
budget and up to 60W by a single port
• Delivers enhanced network security,
network reliability
• Design for Durability
Product Features
Easy Network Maintenance
The XS-S1960-H Series supports abundant features such as
SNMP V1/V2/V3, RMON, Syslog, and logs and configuration
backup using USB for routine diagnosis and maintenance.
Administrators can use a wide variety of methods for easier
management and such include CLI, web management,
CWMP(TR069), etc. With a friendly browser UI, administrators
can do most of their job, such as performance monitoring,
configuration.
The XS-S1960-H Series fully supports Ruijie Cloud which is a
cloud-based service that help user manage and control devices
and networks. It can monitor the network and configure or remote
control devices.
Comprehensive Security Policies
The XS-S1960-H Series effectively prevents and controls virus
spread and hacker attacks with various inherent mechanisms
such as anti-Dos attacks, hacker IP scanning, illegal ARP packets
checking and multiple hardware ACL policies.
• Industry-leading CPU protection mechanism: The CPU
Protect Policy (CPP) provides policies for protecting the
CPU of a switch. In network environments, various attack
packets spread, which may cause high CPU usages of the
switches, affect protocol running and even difficulty in switch
management. To this end, switch CPUs must be protected,
that is, traffic control and priority-based processing must
be performed for various incoming packets to ensure the
processing capabilities of the switch CPUs.
◊ CPP can effectively prevent malicious attacks in the
network and provide a clean environment for legitimate
protocol packets.
◊ CPP is enabled by default. It provides protection during
the entire operation of switches.
• IP/MAC binding: Implement flexible binding of a port or the
system to the IP address and MAC address of users, strictly
limiting user access on a port or in the entire system.
• DHCP snooping: Allow DHCP responses from trusted
ports only; based on DHCP listening and by monitoring
ARP dynamically and checking the user IP address, directly
discard illegal packets inconsistent with binding entries to
effectively prevents ARP frauds and source IP address
frauds.
• Secure Shell and SNMPv3: Secure Shell (SSH) and Simple
Network Management Protocol v3 (SNMPv3) cryptographic
network protocol ensure the security of management
information. Provides services such as multi-element
binding, port security, time-based ACL and bandwidth rate
limiting to block unauthorized users.
• NFPP: Network Foundation Protection Policy (NFPP)
provides guards for switches. Malicious attacks are always
found in the network environment. These attacks bring
heavy burdens to switches, resulting in high CPU usage and
operational troubles. These attacks are as follows:
◊ Denial of Service (DoS) attacks may consume lots of
memory, entries, or other resources of a switch, which
will cause system service termination.
◊ Massive attack traffic is directed to the CPU, occupying
the entire bandwidth of the CPU. In this case, normal
protocol traffic and management traffic cannot be
processed by the CPU, causing protocol flapping or
management failure. The forwarding in the data plane
will also be affected and the entire network will become
abnormal.
◊ A great number of attack packets directed to the
CPU consume massive CPU resources, making the
CPU highly loaded and thereby influencing device
management and performance.
NFPP can effectively protect the system from these attacks.
Facing attacks, NFPP maintains the proper running of
various system services with a low CPU load, thereby
ensuring the stability of the entire network.
Virtual Switch Unit (VSU)
The Virtual Switch Unit technology, or VSU in short, enables
interconnection of several physical devices by virtualizing them
into one logical device. The logical device uses one single IP
address, Telnet process, command-line interface (CLI), and
enables auto version inspection and configuration. From the
user perspective, the benefits are multiplied work efficiency
and enhanced user experience of several devices operating at
the same. And they only have to manage one device. The VSU
technology also offers multiple benefits below:
• Easy management: Administrators can centrally manage
all the devices at the same time. It is no longer necessary to
configure and manage the switches one by one.
• Simplified typology: The VSU is regarded as one switch
in the network. By connection of aggregation link and
peripheral network devices, MSTP protocol is unnecessary
as there is no Layer 2 loop network. All protocols operate as
one switch.
• Millisecond failover: The VSU and peripheral devices are
connected via the aggregation link. Upon failure event of any
device or link, failover to another member link requires only
50 to 200ms.
• Exceptional scalability: The network is hot swappable, any
devices leaving or joining the virtualized network cause zero
impact on other devices.
High Reliability
The XS-S1960-H Series supports spanning tree protocols of
802.1d, 802.1w, and 802.1s to ensure rapid convergence,
improves fault tolerance capabilities, ensures stable running of
networks and load balancing of links, and provides redundant
links.
• Rapid Link Detection Protocol (RLDP): Detect the
connectivity of links and whether an optical fiber link is
normal from both ends, and supports the loop detection
function based on the port to prevent network faults caused
by loops generated by the connection of devices such as
hubs to ports.
• Ethernet Ring Protection Switching (ERPS) (G.8032):
Implements loop blocking and link recovery on the master
device. Other devices directly report link status to the master
device. Without passing through other standby devices, the
failover time of loop interruption and recovery is hence faster
than STP. The ERSP’s link failover rate can be completed
within milliseconds under ideal conditions.
• Rapid Ethernet Uplink Protection Protocol (REUP):
When Spanning Tree Protocol (STP) is disabled, the Rapid
Ethernet Uplink Protection Protocol (REUP) can provide
basic link redundancy through the rapid uplink protection
function and provide faster sub second-level fault recovery
than STP.
Design for Durability
In the corrosive gas, high humidity environment, electronic
products will accelerate corrosion, reliability and lifetime will be
shortened, However, deployment environments of access switch
are different, there may be lack of temperature and humidity
regulation and close to the source of pollution or the sea. Through
the design for durability, such as conformal coating, XS-S1960-H
Switch Series can operate stably in a variety of deployment
environments.
The PCBA of XS-S1960-24GT4SFP-UP-H and XS-S1960-
48GT4SFP-H have conformal coating with excellent insulation
and protection against moisture, dust, corrosion, mildew and salt
spray to enhance environmental adaptability.
New Option for High Power IP Devices
There used to be only two options available for remote power
supply scenarios, namely PoE and PoE+ standards. Both
XS-S1960-10GT2SFP-H and XS-S1960-24GT4SFP-UP-H
can support PoE and PoE+. But PoE standard would fail to
meet the needs if more than 30W power is required. Instead,
electrical wiring or even high power has to be deployed. Such
implementation gives an enormous burden to total investment
cost, completion schedule, post-sale maintenance, as well as
installation safety. XS-S1960-24GT4SFP-UP-H pushes the
frontier with leading IEEE802.3bt standard, delivering 60W
power output per port. It guarantees the best security, efficiency,
stability and energy-saving experiences.
More detail about IMPACT ARROW SOLUTION SDN BHD