The S5700-HI provides a series of mechanisms to defend against DoS attacks and user-targeted attacks.
•
DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks. User-
targeted attacks include bogus DHCP server attacks, IP/MAC address spoofing, DHCP request flood, and
change of the DHCP CHADDR value. You can specify DHCP snooping trusted and untrusted ports to
ensure that users connect only to the authorized DHCP server.
The S5700-HI supports strict ARP learning. This feature prevents ARP spoofing attackers from exhausting
•
ARP entries so that users can connect to the Internet normally.
Easy Operation
The S5700 supports EasyOperation, a solution that provides auto configuration, plug-and-play, USB-
•
based deployment, and batch remote upgrade. The EasyOperation solution facilitates device deployment,
upgrade, service provisioning, and other management and maintenance operations, and also greatly
reduces costs of operation and maintenance.
The S5700 can be managed and maintained using Simple Network Management Protocol (SNMP) V1,
•
V2, and V3, command line interface (CLI), web-based network management system, or Secure Shell
(SSH) V2.0. Additionally, it supports remote network monitoring (RMON), multiple log hosts, port traffic
statistics collection, and network quality analysis that help in network consolidation and reconstruction.
The S5700-HI can use the General VLAN Registration Protocol (GVRP) to implement dynamic distribution,
•
registration, and propagation of VLAN attributes. GVRP reduces manual configuration workload and
ensures correct configuration. Besides, the S5700-HI supports the MUX VLAN function, which involves a
principal VLAN and multiple subordinate VLANs. Subordinate VLANs are classified into group VLANs and
separate VLANs. Ports in the principal VLAN can communicate with ports in subordinate VLANs. Ports in
a subordinate group VLAN can communicate with each other, whereas ports in a subordinate separate
VLAN can communicate only with ports in the principal VLAN.
Mature IPv6 Technologies
The S5700-HI uses the mature, stable Versatile Routing Platform (VRP) and supports IPv4/IPv6 dual stacks,
•
IPv6 routing protocols (RIPng, OSPFv3, BGP4+, and IS-IS for IPv6), and IPv6 over IPv4 tunnels including
manual, 6-to-4, and Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) tunnels. With these IPv6
features, the S5710-HI can be deployed on a pure IPv4 network, a pure IPv6 network, or a shared IPv4/
IPv6 network, helping realize IPv4-to-IPv6 transition.
3