High Performance and High Scalability
Ruijie RG-S5760-X series provides four to eight fixed 10G SFP ports, which excellently meet deployment requirements of the convergence layer of the large-sized enterprise and campus networks or the core layer of the medium- and small-sized networks. Customers can select the number of 10G SFP ports as required. The switches provide a large entry capacity, which is two or three times larger than the box-type aggregation switches of the same grade.
IPv4/IPv6 Dual-stack Multi-layer Switching
The hardware of the RG-S5760-X series switches supports line-rate IPv4/IPv6 dual-stack multi-layer switching, distinguishes and processes IPv4 and IPv6 protocol packets. In that case, the switches can plan networks or maintain the network status based on IPv6 network requirements, and flexibly create IPv6 network communication solutions. The RG-S5760-X series switches support a wide range of IPv4 routing protocols, including static routing, RIP, OSPFv2, IS-ISv4 and BGP4. Users can select appropriate routing protocols based on network environments to flexibly build networks. The RG-S5760-X series switches also support abundant IPv6 routing protocols, including static routing, Routing Information Protocol next generation (RIPng), OSPFv3, IS-ISv6 and BGP4+, which can be selected flexibly to either upgrade the existing network to an IPv6 network or build a new IPv6 network.
Virtual Switching Unit
The RG-S5760-X series switches support the Virtual Switching Unit (VSU), in which multiple physical devices are connected and virtualized into one logical device. The devices use the same IP address, Telnet process, and command line interface (CLI) for management and support automatic version check and automatic configuration. Users need to manage only this logical device to enjoy the work efficiency and use experience brought by multiple devices.
Aggregation links can be set up between 10G interfaces with a maximum stacked bandwidth of 80 Gbps.
Simplified management: Administrators can manage multiple switches in a unified manner, with no need to connect to each switch for configuration and management.
Simplified network topology: A VSU serves as a switch on a network and connects to peripheral devices through aggregate links. Therefore, no layer-2 loop exists and the Multiple Spanning Tree Protocol (MSTP) does not need to be configured. Various control protocols run on the VSU.
Fault recovery within milliseconds: A VSU connects to peripheral devices through aggregate links. If one device or member link in the VSU malfunctions, data and services can be switched to another member link within only 50–200 milliseconds.
High scalability: User devices can be added to or removed from a virtualized network in a “hot swap” manner, without affecting normal operation of other devices.
RG-S5760-X series support the Virtual Extensible LAN (VXLAN), which will allow users to build a logical L2 network on an L3 network via software upgrade.
Flexible and Comprehensive Security Policies
Effectively prevents and controls virus spread and hack attacks with various inherent mechanisms, such as anti-DoS attacks, hacker IP scanning, illegal ARP packets checking and multiple hardware ACL policies.
Supports hardware-based IPv6 ACL. Allows coexistence of IPv4/IPv6 users and controls the resources access by IPv6 users.
Industry-leading CPU protection mechanism: The CPU protection policy (CPP) distinguishes the data flows sent to the CPU, which are processed according to their priorities, and implements the limitation on the bandwidth rate as needed. In this manner, users can prevent the CPU from being occupied by illegal traffic and protect against malicious attacks to guarantee normal operation of the CPU and switch.
Supports the innovative Network Foundation Protection Policy (NFPP) technology to limit the rate of ARP packets, ICMP requests, DHCP requests, and other packets sent to networks. The switches discard packets whose rate exceeds the threshold, identify attack behaviors, and isolate users launching attacks. In this way, the basic networks are protected from network attacks, and therefore the network stability is guaranteed.
Implements flexible binding of a port or the system to the IP address and MAC address of users, strictly limiting user access on a port or in the entire system.
Supports DHCP snooping, and allows DHCP responses from trusted ports only. Based on DHCP listening and by monitoring ARP dynamically and checking the user IP address, the series directly discards illegal packets inconsistent with binding entries to effectively prevent ARP frauds and source IP address frauds.
Telnet access control based on the source IP address to prevent illegal personnel or hack attacks and strengthen the device security.
Secure Shell (SSH) and Simple Network Management Protocol v3 (SNMPv3) cryptographic network protocol ensure the security of management information and provide services such as multi-element binding, port security, time-based ACL and bandwidth rate limiting to block unauthorized users.
The switches take multiple measures to prevent unauthorized access, including multi-element bindings, port security, time-based ACLs, and data flow-based bandwidth limits. These measures help control user access and restrict the communication of unauthorized users in enterprise networks and campus networks.
The Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and MSTP help the RG-S5760-X series switches achieve fast convergence, improve the fault tolerance capability, and ensure stable network operation and load balance of links. The switches utilize network channels appropriately to raise the utilization of redundant links.
The Virtual Router Redundancy Protocol (VRRP) helps the switches effectively ensure the network stability.
With the Rapid Link Detection Protocol (RLDP), the switches can quickly detect the link connectivity and unidirectional optical fiber links. The port loop detection function helps the switches prevent network failures caused by loops resulting from unauthorized port connection to hubs.
The RG-S5760-X series switches support the Ethernet Ring Protection Switching (ERPS) technology, which is an international layer-2 link redundancy backup protocol designed for the core Ethernet. The loop block and link recovery of ERPS are implemented on the controlling device, and non-controlling devices directly report their link status to the controlling device, without processing from other non-controlling devices. Therefore, loop disruption and recovery time of ERPS is faster than that of STP. Based on the above differences, ERPS supports link recovery within milliseconds in the ideal environment.
When STP is disabled, the Rapid Link Protection Protocol (RLDP) can still provide basic link redundancy and millisecond-level fault recovery faster than STP.
With the Bidirectional Forwarding Detection (BFD), the switches are able to detect links within milliseconds, and quickly converge routing and other services through the correlation with upper-layer routing protocols, ensuring the continuity of services.
The switches support hardware-based dual boot systems. Two flash chips are used to store boot software (system boot programs) to achieve hardware-level boot redundancy and prevent switch startup failures caused by flash chip faults.
Superior Multiservice Support Features
Supports IPv4 and IPv6 multicast functions, including rich multicast protocols such as IGMP Snooping, IGMP, MLD, PIM, PIM for IPv6.
Supports the Internet Group Management Protocol (IGMP) source IP address checking to guard against illegal multicast sources and improve network security.
Supports rich Layer 3 service features such as Equal-cost Multipath routing (ECMP) to meet communication needs of different link planning.
Advanced QoS Policies
Supports multilayer traffic classification and flow control capabilities such as MAC traffic, IP traffic, and application traffic that implement multiple traffic policies such as refined bandwidth control and forwarding priorities; supports the provision of services according to the corresponding QoS level.
The QoS guarantee system with DiffServ at its core supports complete QoS policies such as 802.1p, IP TOS, Layers 2 through 7 filter, SP, and WRR.
The RG-S5760-X series adopt the next-generation hardware architecture as well as advanced energy-efficient circuit design and components, to significantly save energy and lower noise. The entire series are equipped with variable-speed axial fans to intelligently control the fan speed based on the ambient temperature, which reduces the power consumption and noise while ensuring stable operation of the devices.
Easy Network Maintenance
The RG-S5760-X series switches support the Simple Network Management Protocol (SNMP), Remote Network Monitoring (RMON), Syslog, Sampled Flow (sFlow), log and configuration backup using USB flash drives for routine network diagnosis and maintenance. Administrators can also use CLI, Web-based management and Telnet and other methods to manage and maintain devices conveniently.
The switches support OpenFlow and NETCONF interfaces, which enable the switches to support the software defined network (SDN) via upgrade. This substantially reduces network maintenance costs while greatly simplifying network management.