Flexible Ethernet Networking

Diversified Security Control

• CloudEngine S5735-L-V2 supports Portal authentication, 802.1X authentication, MAC address authentication, and hybrid authentication on a per port basis, and implements dynamic policy delivery (VLAN, QoS, and ACL) to users.

• CloudEngine S5735-L-V2 provides a series of mechanisms to defend against DoS attacks and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks. User-targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and changing of the DHCP CHADDR value.

• CloudEngine S5735-L-V2 sets up and maintains a DHCP snooping binding table, and discards the packets that do not match the table entries. The DHCP snooping trusted port feature ensures that users connect only to the authorized DHCP server.

• CloudEngine S5735-L-V2supports strict ARP learning. This feature prevents ARP spoofing attackers from exhausting ARP entries so that users can connect to the Internet normally.

Easy Operation and Maintenance

• CloudEngine S5735-L-V2 supports Huawei Easy Operation, a solution that provides zero-touch deployment, replacement of faulty devices without additional configuration, USB-based deployment*, batch device configuration, and batch remote upgrade. The Easy Operation solution facilitates device deployment, upgrade, service provisioning, and other management and maintenance operations, and also greatly reduces O&M costs. CloudEngine S5735-L-V2 can be managed and maintained using Simple Network Management Protocol (SNMP) V1, V2, and V3, Command Line Interface (CLI), web-based network management system, or Secure Shell (SSH) V2.0. Additionally, it supports remote network monitoring (RMON), multiple log hosts, port traffic statistics collection, and network quality analysis, paving the way for network optimization and reconstruction.

• CloudEngine S5735-L-V2 supports MUX VLAN, which involves a principal VLAN and multiple subordinate VLANs. Subordinate VLANs are classified into group VLANs and separate VLANs. Ports in the principal VLAN can communicate with ports in subordinate VLANs. Ports in a subordinate group VLAN can communicate with each other, whereas ports in a subordinate separate VLAN cannot communicate with each other. CloudEngine S5735-L-V2 also supports VLAN-Based Spanning Tree (VBST) protocol. Note:Only those switches with USB ports can USB-based deployment.