Full wire-speed forwarding

Long distance transmission (10M, 200m, UTP5)

Precise user authentication
HGMP intelligent remote management
Convenient remote diagnosis
Quidway

S2403H Enterprise
Desktop Switch
OVERVIEW
Quidway S2403H Ethernet Switch, developed by
Huawei independently, is a type of in-building / desk-
top Layer 2 wire-speed Ethernet switch. Coupled with
the traditional Ethernet functions, it has more advanced
hardware and software features, and serves well for
broadband Ethernet access.
Introduction:
Fig.1 Quidway S2403H front view
Quidway

S2403H Enterprise Desktop Switch
Fig.2 Quidway S2403H rear view
50
51
Main Features
Product Features:
High performance:
Full wire-speed layer 2 forwarding on each port.
Precise user authentication
Supporting port-based/user-based 802.1x authen-
tication mode. IEEE 802.1x port-based authenti-
cation to prevent unauthorized devices (clients)
from accessing to the network.
MAC address customized management
S2403H maintains a MAC address table for packet
forwarding and can learn source MAC address. It
provides the function of management over the ad-
dress table. The user can set limits to the number
of addresses learned via each port, use address
table lock to bind MAC address and port for
security, and set aging time of the table to update
the entries in time.
Intelligent remote management
Managing several member switches with one
command switch, thereby simplifying the configu-
ration management.
Providing topology discovery and displaying
function, which is useful for network monitoring and
debugging.
Configuring one public IP address on the com-
mand switch to configure and manage several
switches, thereby saving the IP address resource.
Performing software upgrade and parameter con-
figuration to multiple switches simultaneously.
Independent of network topology and distance
Remote diagnosis
On the mainframe and extended interface mod-
ules of S2403H, there are indicators showing
operation status of interface.
Providing hardware watchdog for protective re-
set when the system work abnormally.
Providing user privilege management, operation
log management and online help functions.
Providing alarm level management and alarm
filtering functions.
Providing system status query, version query and
debugging & tracing functions for real-time moni-
toring of system operation status, suitable recov-
ering solutions are initiated automatically when
there is error detected.
Supporting abundant service features:
A. QoS
Based on 802.1p tags priority control, it supports
2 priorities.
B. Multicast
It supports IGMP Snooping.
C. Security features
It supports locking and static setting of MAC
address table, and the controlled filtering of MAC.
D. VLAN
Supporting the port-based VLAN;
Supporting the VLAN based on IEEE 802.1Q tag
Supporting the VLAN based on port and 802.
1Q tag hybrid strategy;
Supporting 802.1Q VLAN trunk.
E. Port Mirroring
It supports the port-based mirroring mode.
52
Fig.3 Networking for access to the Internet with broadband in residential areas
Product application
As we have introduced, S2403H is a kind of in-building/desktop Ethernet switch. As an in-
building switch, S2403H is suitable for residential area networking to access the Internet
with broadband. As a desktop switch, it is suitable for interior networking of enterprises
Together with MA5200, S3000 and S3500 Switches, it can provide a well designed solution
to MAN and enterprise networking. It is obvious that S2403H can be used flexibly in differ-
ent networking environment and has a promising future in the market. Here we will intro-
duce several typical networking examples.
Accessing Internet with Broadband in Residen-
tial Areas
When constructing broadband accessing network in residential areas, S2403H is located
in the doorway of the apartment buildings and provides 10/100M auto-sensing interface for
home users, who can access with the Category 5 twisted pair directly. S2403 can access
the central device (such as Huawei MA5200 Ethernet access processing system) of the
residential area via 100Mbps uplink FE interface.
Building in the area
GE
S3500
S2403H
S3000
Broadband metropolitan
commerce network
in-building switches
Broadband intelligent
residential area
Center of the area
FE FE FE
S2403H S2403H
10/100M 10/100M 10/100M 10/100M 10/100M 10/100M
NetEngine 40 series
NetEngine 40
series
NetEngine 40 series
NetEngine 40
series
53
For the network of small and middle enterprises or the branches of large enterprises, S2403H
can serve as a Layer 2 convergence switch, access users directly via 10/100M and be
connected to S3026 or S3526 Ethernet Switch via uplink and then be connected to the head
office or other branches via the router.
In the large enterprise and campus network, S2403H serves as a desktop switching device
on the accessing layer. It is connected to the convergence layer switch (Layer 3 switch) via
uplink, and thus connected to the Gigabit switch on the backbone network. In this way, it
provides the solution to access the backbone network at the speed of 1000Mbps and con-
nect the desktop at 100Mbps for the whole enterprise networking.
Fig.4 Networking for enterprise and campus network
Enterprise and Campus Network
S3500
S5516
Server Farms
NetEngine 08E
S2403H
GE
FE
10/100M
10/100M
10/100M
10/100M 10/100M
10/100M
10/100M
S2403H
FE
FE
FE
FE
R2600/3600
Series routers
Branches
Local sever
Internet
DDN/FR/X.25
GE
GE
10/100M
Head office
S3000
FE
FE
54
1-port 100Base-FX single-mode module
1-port 100Base-FX multi-mode module
At present, the system supports the following types
of network interface modules:
Software Specifications
Layer 2
function Supports up to 32 VLANs (Virtual Local Area Network) com
plied with IEEE 802.1Q Standard
Supports port-based VLAN
Supports GVRP (GARP VLAN Registration Protocol)
Supports VLAN Trunk
Supports the aggregation of a group of four 10/100Base-TX
auto-sensing ports
Supports STP and RSTP, complied with IEEE 802.1D and
IEEE 802.1w.
Supports port-based mirror, which copies all traffic of a specific
port to the monitoring port.
Address self-learning
Complied with IEEE 802.1D standard
Supports up to 4k MAC addresses
Table 1. Software feature specification
Vlan:
Link aggregation:
Port mirror:
MAC address table:
STP&RSTP
QoS Supports priority settings (2 queues) complied with
IEEE 802.1p Standard
Supports IEEE 802.3x flow control (full-duplex)
Supports Back-pressure based flow control (half-
duplex)
Authentication Supports port-based/User-based 802.1x authenti-
cation mode.
Network management Supports command line interface (CLI)
Supports Telnet remote configuration
Supports configuration via Console port
Supports SNMP (Simple Network Management
Protocol), Huawei iManager QuidView and Group 1, 2,
3 and 9 MIB of RMON
Supports HGMP Client
Supports system log
Supports hierachical alarms
Supports alarm/debugging information filter, output and
statistics
Supports the maintaining and diagnosis tools such as
Ping and Tracert
Supports remote maintenance through Telnet and
HGMP
Table 1(continue). Software feature specification
55
Ethernet protocol IEEE 802.1D, IEEE 802.3, IEEE 802.3u, IEEE 802.3x
IEEE 802.3z, IEEE 802.1Q, IEEE 802.1p
IP protocol IP, TCP, UDP, ICMP, ARP
Application protocol FTP, TFTP, BOOTP, Telnet
NM protocol SMI, SNMP, RMON
MIB-II, Ethernet-like MIB, Bridge MIB, Ether-like MIB
Main supported protocols and applications
Description Specification
FE Module Slots 1 slots
CPU ARM 125MHz
SDRAM 18M
FLASH 8M
Buffer RAM 6M
Switching Capacity 9.6G
Forwarding Capacity 3.87Mpps
Dimension(Height x Width x Depth) 42mm x 436mm x 240mm
Power Configuration DC input voltage: -40V~-60V
AC input voltage: 100 ~ 240V
Power Dissipation 30W
Max altitude 4000m
Operating Temperature 0C ~ 45C
Environmental Humidity 10% ~ 90%, no condensation
Hardware Specifications
Table 2. The basic configuration, dimension and operating environment
56