1. H3C S3610 Multi Protocols Intelligent Ethernet Switches Main Slides

2. Agenda Overview Position Performance and Features Typical Applications
Today, my presentation includes 4 parts to introduce S3610 series to you, product overview, its network position, performance and features, and typical applications finally

3. Agenda
Overview
Position
Performance and Features
Typical Applications

4. Low End Switches Overview
H3C S5600
S F
S C/S C-PWR
S C/S C-PWR
H3C S3610
S P
S TP
H3C S3610 Multi Protocol Intelligent Ethernet Switches with IPv6
S P
S F
These two slides shows H3C’s portfolio of low end switches, and S3610 series is a FE layer 3 switches among them, and it is also the first H3C FE switch supporting IPv6
H3C S3600
S P-SI / S P-EI / S P-PWR-EI
S P-SI / S P-EI
/ S P-PWR-EI/ S3600-
28P-PWR-SI
S F-EI
S TP-SI

5. Low End Switches Overview
H3C S5100
S C-EI
S C-EI
S P-EI
S P-EI
H3C S3100
S T-SI
S T-SI
S3100-8T-SI
S C-SI
S C-SI
S3100-8C-SI

6. extended ports, AC and DC Models
H3C S3610 Overview
S F
S P
S TP
S P
Name
Switching Capacity
Throughput
Description
S F
12.8Gbps
9.53Mpps
24 100BASE-FX SFP ports, 2 10/100/1000 BASE-T, M SFP extended ports, AC and DC Models
S P
24 10/100BASE-TX ports, M SFP
extended ports, AC and DC Models
S TP
24 10/100BASE-TX ports, 2 10/100/1000 BASE-T Ethernet ports, M SFP extended ports, AC and DC Models
S P
17.6Gbps
13.1Mpps
48 10/100BASE-TX Ethernet ports, M SFP extended ports AC and DC Models
Currently, the S3610 series Ethernet Switches include the following models: S P, S TP, S F and S P. All of them support FE and GE uplinks at wire speed, AC and DC dual power supply mode.

7. Agenda
Overview
Position
Performance and Features
Typical Applications

8. Network Position
H3C S3610 is a layer 3 Ethernet switch series with double stack of IPv4 and IPv6, offering abundant service features and routing functionalities.
The S3610 series is designed to accommodate the convergence on intranets and metropolitan area networks (MANs) and to meet the requirements at the access layer.
H3C S3610 Series Ethernet Switches (the S3610 series) are wire speed L2/L3 Ethernet switches developed by Huawei-3Com Technology. They are intelligent network management switches intended for a network environment where high performance, dense port distribution, and ease of installation are required.
The H3C S3610 series are designed to accommodate the convergence on intranets and metropolitan area networks (MANs) and to meet the requirements at the access layer. Supporting IPv4/IPv6 double stack, they offer abundant service features and routing functionalities.

9. Agenda Overview Position Performance and Features Typical Applications
Now let us come to see the performance and features of S3610 series, we are going to divide them into 5 parts

10. S3610 Features: Performance & Port Types
Switching Capacity:
12.8Gbps(24-port) / 17.6Gbps(48-port)
Throughput:
9.53Mpps(24-port) / 13.1Mpps(48-port)
Full wire speed FE ports and GE uplink
Flexible port density and types:
24 Copper FE + 4 GE SFP
24 Copper FE + 2 GE SFP & 2 copper GE (COMBO)
24 Optical FE + 2 GE SFP & 2 copper GE (COMBO)
48 Copper FE + 4 GE SFP
AC/DC dual power supply mode
Availability
H3C S3610
Firstly, availability
Various port types are available to choose, including SFP based GE uplink and SFP/TX COMBO uplink. Moreover, S3610 series also involves a full optical port switch for applications requiring long working distance. In addition, 24 and 48 ports can meet various requirement of port density.
Moreover, S3610 supports AC/DC dual power supply mode and full wire speed FE and GE uplinks

11. S3610 Features: Benefits From IPv6
Availability
Lower network administration costs:
The auto-configuration and hierarchical addressing features of IPv6 will make networks easy to manage.
Optimized for next generation networks:
Getting rid of NAT re-enables the peer-to-peer model and helps in deploying new applications. E.g. communications and mobility solutions such as VoIP
Protection of company assets:
Integrated IPSEC makes IPv6 inherently secure and provides for a unified security strategy for the entire network.
Investment protection:
The transition and translation suite of protocols helps in easy and planned migration from IPv4 and IPv6, while allowing for co-existence in the transition phase.
IPv6
H3C S3610
Secondly, let’s come to see the IPv6 features of S3610 series
This slide told us the benefits we can get from IPv6, including Lower network administration costs, Optimized for next generation networks, Protection of company assets, Investment protection.

12. S3610 Features: IPv6 & IPv4 Dual Stack
Availability
IPv4/IPv6 dual stack and hardware forwarding
IPv6
H3C S3610
IPv6 Transition Sequences
IPv4 Island
IPv6 Internet
IPv4 Island
Coz IPv6 is on the way, and IPv4 is still the mainstream of the current network, we need to consider their coexistance, therefore, S3610 series adopts the IPv4/IPv6 dual stack infrastructure to provide a full solution for the transition from IPv4 to IPv6
IPv6 Island
IPv4 Internet
IPv6 Island
Dual Stack
IPv6 Island
IPv6 Internet
IPv4 Internet
IPv6 Island
IPv6 Island

13. IPv6 policy based routing
S3610 Features: IPv6 vs IPv4
Availability
IPv4/IPv6 routing and multicast protocols
RIPv1/RIPv2
RIPng
OSPF v1/v2
OSPF v3
BGP4+
BGP4+ for IPv6
VRRP
VRRP v3
Policy based routing
IPv6 policy based routing
IGMP-snooping v1/v2/v3
MLD-snooping v1
IPv6
H3C S3610
IPv4/IPv6 applications
Now, let’s come to see the routing protocols of IPv6, in order to your understanding, I just made a simply comparison between the routing protocols of IPv4 and IPv6, in addition some common applications such as telnet, ping, tftp and dns and their corresponding technique in IPv6 are also mentioned here
Telnet
Telnet6
Ping
Ping6
TFTP
TFTP6
DNS
DNS6

14. S3610 Features: IPv6 Tunneling
Availability
IPv6 Tunneling
IPv6
H3C S3610
IPv6 over IPv4 tunneling is the encapsulation of IPv6 traffic within IPv4 packets so that they can be sent over an IPv4 backbone, allowing isolated IPv6 networks to interoperate, as shown here. The routers at both ends of an IPv6 tunnel must support both the IPv4 and IPv6 protocol stacks.
S3610 supports 4 tunneling types including Manual tunnel, 6 to 4 tunnel, ISATAP tunnel, and auto-tunnel as well
S3610 supports the following tunneling types:
Manual Tunnel
6 to 4 Tunnel
ISATAP Tunnel
Auto-Tunnel

15. S3610 Features: IPv6 Multicast
IPv4/IPv6 multicast management
IGMP v1/v2/v3
IGMP v1/v2/v3 snooping for IPv4
MLD-snooping for IPv6
Availability
IPv6
Multicast packet transmission
without MLD snooping
Multicast packet transmission
when MLD snooping runs
H3C S3610
Multicast Router
Multicast Router
Video stream
Video stream
VOD Server
VOD Server
S3610
S3610
Here is the multicast features of IPv6, it’s can be seen that IGMP snooping is for IPv4 and MLD-snooping for IPv6
And the following two graphs indicates the multicast transmission processes when MLD snooping running and the case without MLD snooping
Non-Multicast
Group member
Multicast
Group member
Non-Multicast
Group member
Non-Multicast
Group member
Multicast
Group member
Non-Multicast
Group member

16. S3610 features: QinQ QinQ application for service provider H3C S3610
Availability
VLAN 100
IPv6
VLAN 200
header
data
user
vlan
H3C S3610
VLAN 20
VLAN 30 20
header
data
user
vlan
Multiple
Services
VLAN 200
VLAN 30
Now we come to the third part, in this part you will see the multiple services S3610 supports
VLAN VPN enables VLAN Tags of private networks to be inserted in those of the public networks so that the packets can travel across carrier’s network (public network) with nested VLAN tags carried. VLAN VPN is also known as QinQ. When a packet of this type travels across the public network, only the outer VLAN Tag (that is, the public network VLAN Tag) is used and that of the private network remains intact.
Compared with MPLS-based L2 VPN, VLAN VPN has the following features:
It provides simpler L2 VPN tunnels.
It can be implemented through full-static configuration, without the need of a signaling protocol.
header
data
user
vlan
VLAN 20
Service provider
Tunnel port for attach or extracting external VLAN tag
Client side: single tag or untagged, PE side: double tags or single tag.
VLAN 100

17. S3610 features: Selective QinQ
Selected QinQ
Attach SP VLAN tag according to customer’s tag.
Availability
MAN
IPv6
BRAS
H3C S3610 PE
4001
data
1024
Each service is assigned with different VLANs
4005
data
2048
Multiple
Services
S3610
LSW
Here is a slide to describe the workflow of selective qinq, selective QinQ is also known as VLAN-based QinQ. It determines whether or not an outer VLAN tag is inserted into a packet on the user side. It also determines the outer VLAN tag to be inserted into a packet by the VLAN tag the packet carries.
S8500
CPE
Selective QinQ
data
1024
Internet
data 5
data
2048
VLAN 2048~3071
VLAN 1024~2047
IPTV
VLAN 2~1023

18. S3610 features: Voice VLAN H3C S3610 Benefits:
Voice Queue
Data Queue 1
Data Queue 2
1. Mac address 00E0-BB mask ffff-ff
2. Ah! It is an IP Phone of Vendor A, B, C……( Totally, 16 Vendors)
3. Put the traffic from IP Phone into Voice VLAN automatically
4. Other traffic will be processed with lower priority
Voice Data
Other Data
Benefits:
Guarantee the QoS of voice data
Improve the security
Availability
IPv6
H3C S3610
Multiple
Services
Voice VLAN is designed for voice traffic. An H3C S3610 series switch with voice VLANs configured determines whether or not a received packet carries voice data by checking its source MAC address and forwards the packets carrying voice data in the voice VLANs. .Voice VLAN insures transmission priority of voice traffic and improves voice quality.

19. S3610 features: Policy Based QoS
Availability
Policy based QoS configuration.
IPv6
Counter
/Meter
Queuing
Scheduler
Classifier
Marker
H3C S3610
Queue0
Ingress
Egress SA DA
VLAN
S-Pt
D-Pt
Protocol
TOS
Queue1
Multiple
Services
DSCP
/COS
mark SP
WRR
SP+WRR
ACL
Counter
Queue2
QoS evaluates service performance for network packet transmission. Services offered by the network vary; therefore, QoS evaluation is based on individual aspects. Normally, QoS evaluates the service capabilities of satisfying such core requirements as delay, jitter, and packet loss rate, during packet transmission.
S3610 supports policy based QoS, and the workflow is shown like the graph.
packets
Queue7

20. S3610 features: Security Overview
Hierarchical management and password protection of users
IEEE 802.1X compliant access user authentication
AAA authentication
RADIUS authentication
HWTacacs
MAC-based centralized authentication
Port isolation
IP + MAC + port binding
Availability
IPv6
H3C S3610
Multiple
Services
Security
Let’s come to see the security features of S3610 series, this is an overview of these features, we will give you detailed information one by one

21. S3610 features: 802.1x Authentication
Extended 802.1x authentication function
Efficent port/MAC based
Support EAP relay function
Support 802.1x EAP authentication
Availability
Radius Server
IPv6
3. Access switch as authenticator complete authentication process with Radius Server.
H3C S3610
DHCP Server
Core Network
Multiple
Services
Security
5. User can access Internet after getting IP address, then access the network normally.
IEEE 802.1X protocol (hereinafter referred to as 802.1X) is virtually a port-based network access control protocol. As "port-based network access control" implies, the network access server (NAS) on a LAN authenticates and controls the connected customer premises equipment (CPE) at the port level. If the CPE connected to a port passes authentication, it is allowed to access the LAN resources. Otherwise, it is rejected just like its physical link is disconnected.
2. User can’t access anywhere and get IP address before authentication.
1. User authentication initiate.
S3610
4. User get IP address from DHCP server after authentication.

22. S3610 features: Port Isolation
Port isolation means isolation of the ports of a switch so that packets cannot be forwarded between a port and another port (or another group of ports).
This prevents visiting between the ports, secures user network, and allows a low-cost intelligent community network to be built while effectively controlling unnecessary broadcasting and increasing the network throughput.
Availability
IPv6
H3C S3610
Multiple
Services
Security
Ethernet 1/0/1
Device
Port isolation means isolation of the ports of a switch so that packets cannot be forwarded between a port and another port (or another group of ports). This prevents visiting between the ports, secures user network, and allows a low-cost intelligent community network to be built while effectively controlling unnecessary broadcasting and increasing the network throughput.
Ethernet 1/0/4
Ethernet 1/0/2
Ethernet 1/0/3
PC1
PC2
PC3

23. S3610 features: MAC + IP + Port Binding
IPv4 addresses, MAC addresses, and ports can be configured to binding on the H3C S3610 series. If the IP address or MAC address bound to a port is changed, no packet with that MAC address or IP address can be forwarded through the port.
By MAC+IP+Port binding, users can filtering control the forwarding packets, which improves the security
Availability
IPv6
H3C S3610
Switch A
Ethernet 1/0/4
Ethernet 1/0/5
Multiple
Services
Security
DT3
MAC IP
To interface Ethernet 1/0/4
You can configure IPv4 addresses, MAC addresses, and port binding on the H3C S3610 series. If the IP address or MAC address bound to a port is changed, no packet with that MAC address or IP address can be forwarded through the port.
Switch B
Ethernet 1/0/5
Ethernet 1/0/4 PC
DT1
MAC IP
To interface Ethernet 1/0/4
DT2
MAC IP
To interface Ethernet 1/0/5 PC PC

24. S3610 features: Management Overview
Availability
Support CLI (Command Line Interface) configuration mode
Support Configuration via the console port
Support Local/Remote configuration via Telnet
Support Remote configuration via modem dial-up
Support System configuration with SNMP v1, 2 and 3
Support HGMP V2
Support RMON (Remote Monitoring) v1, 1/2/3/9 groups of MIBs
Support Quidview® network management system
Web-based network management
Support VCT
Easy
Management
IPv6
H3C S3610
Multiple
Services
Security
For the big amount of access and aggregation switches, easy management is very important to reduce the cost and energy for customers. This slide indicates the management features supported by S3610 series.

25. S3610 features: Remote Switch Port Analysis (RSPAN)
RSPAN (Remote Switched Port Analyzer ) function breaks through the limitation that the mirrored port and the mirroring port have to be located in the same switch, and makes it possible that the mirrored and mirroring ports be located across several devices in the network.
Availability
Easy
Management
IPv6
RSPAN
Target Ports
H3C S3610
S3610 series
RSPAN
Target Device
Multiple
Services
Security
Intermediate switches
must support RSPAN VLAN
Remote switched port analyzer (RSPAN) implements remote port mirroring. It allows the mirrored port and the mirroring port to be configured on different switches. This enables the mirrored and mirroring ports to span multiple devices in the network, thereby facilitating switch administration.
RSPAN
VLAN
S3610 series
S3610 series
RSPAN
Source
Device A
RSPAN
Source
Device B
RSPAN
Source ports
RSPAN
Source ports

26. S3610 features: Huawei Group Management Protocol v2
Benefits:
Save IP address for network management
Easy to install and maintain
Manage the network more efficiently
Availability
Easy
Management
IPv6
H3C S3610
Command Switch
Multiple
Services
Security
NDP
NDP
NDP
NDP
The H3C S3610 series implements clustering based on HGMPv2.
After enabling HGMPv2, the network administrator can manage multiple switches through the public network IP address of a master switch. The master switch is called a management device, while managed switches are called member devices. Generally, member devices do not have public network IP addresses, and they are managed and maintained through the redirection by the management device. The management device and member devices form a cluster. Figure 3-21 shows a typical cluster implementation.
H3C
S3610 series
HGMP v2
H3C
S3610 series
Member Switches
H3C
S3610 series
H3C
S3610 series

27. S3610 features: Virtual Cable Test (VCT)
VCT (Virtual Cable Test) testing items include: whether short or open circuit exists in the Rx/Tx direction of the cable, and what is the length of the cable in normal status or the length from the port to the fault point of the cable.
Availability
Easy
Management
IPv6
H3C S3610 X
S3610 series
S3100 series
Multiple
Services
Security
A virtual cable test (VCT) is used to test the cable connected to an Ethernet electrical interface. You can perform a VCT to test whether a cable is short circuited or open and test the length of faulty portion of the cable, so as to locate the network fault.

28. S3610 features: Quidview NMS
Availability
Quidview Network Management System
Performance management
Server management
Topology management
Security management
Fault management
Easy
Management
IPv6
H3C S3610
Multiple
Services
Security
H3C S3610 series support Huawei-3Com Quidview NMS for centralized management, which is implemented in multilingual graphical interfaces. The NMS provides management in topology, configuration, fault, security, and performance.

29. Agenda
Overview
Position
Performance and Features
Typical Applications

30. Broadband Ethernet Access for Residential Community
On the broadband access network of a residential community, an H3C S3610 switch is located in the center. It is downlinked to the S3100 series to reach the Ethernet users and uplinked to a core L3 switch through a GE extension module to connect to the MAN backbone.
On the broadband access network of a residential community, an H3C S3610 switch is located in the center. It is downlinked to the S3100 series to reach the Ethernet users and uplinked to a core L3 switch through a GE extension module to connect to the MAN backbone.

31. Networks of Branches or Small- to Medium-Sized Enterprises
For small-to medium-sized enterprises or branches of a large enterprise, the H3C S3610 series can serve as the backbone switches on their networks and can be connected to the headquarters or other branches through routers.
For small-to medium-sized enterprises or branches of a large enterprise, the H3C S3610 series can serve as the backbone switches on their networks and can be connected to the headquarters or other branches through routers.

32. Large Enterprise & Campus Networks
In a large enterprise or campus network, the H3C S3610 series are located at the convergence layer. They are downlinked to layer 2 switches, S3100 Series for example; and uplinked to a layer 3 switch through GE interfaces. These switches together provide a network-wide intranet solution that covers gigabit-to-backbone and 100 Mbps-to-desktop.
In a large enterprise or campus network, the H3C S3610 series are located at the convergence layer. They are downlinked to layer 2 switches, S3100 Series for example; and uplinked to a layer 3 switch through GE interfaces. These switches together provide a network-wide intranet solution that covers gigabit-to-backbone and 100 Mbps-to-desktop.

33. IPv4/IPv6 Hybrid Networking
Full IPv4 networking and full IPv6 networking are similar. At the early stage of IPv6 implementation, however, IPv4/IPv6 hybrid networks are common. This gives full play to the IPv4/IPv6 dual-stack and IPv6 over IPv4 tunneling features provided by the H3C S3610 series and enables flexible networking.
Full IPv4 networking and full IPv6 networking are similar. At the early stage of IPv6 implementation, however, IPv4/IPv6 hybrid networks are common. This gives full play to the IPv4/IPv6 dual-stack and IPv6 over IPv4 tunneling features provided by the H3C S3610 series and enables flexible networking.

34. Any Questions?