Quidway® S3300 Series Switches

Quidway® S3300 Series Switches

1

Quidway® S3300 Series Switches

Quidway S3300 series switches (hereinafter referred to as the S3300s), a new generation of Layer 3 Ethernet switches

launched by Huawei to meet the requirements for bearing multiple Ethernet services, can provide powerful Ethernet

functions for carriers or enterprise customers. Based on the new generation of high-performance hardware and

Huawei Versatile Routing Platform (VRP) software, the S3300 provides the enhanced selective QinQ function and the

capability to replicate multicast across VLANs at line speed, supports carrier-class-reliability networking technologies

such as SmartLink (used for tree networking) and RRPP (used for ring networking), and provides the Ethernet

Operation, Administration, and Maintenance (OAM) function to meet requirements of applicable scenarios such as

building access and convergence and access in campus networks. The S3300 is easy to install, and supports automatic

configuration and plug-and-play, which dramatically reduces the deployment costs of customer networks.

As case-shaped products with a chassis height of 1 U, the S3300 provides two product versions of SI and EI. The SI

supports Layer 2 functions and basic Layer 3 functions and the EI supports complex routing protocols and rich service

features. The models consist of S3328TP-SI, S3328TP-EI, S3328TP-EI-24S, S3328TP-PWR-EI, S3352P-SI, S3352P-EI,

S3352P-EI-24S, S3352P-EI-48S, and S3352P-PWR-EI.

Product Overview

2

www.huawei.com

S3328TP-SI/EI: It has twenty-four 10/100Base-TX interfaces, two 1000Base-X SFP interfaces, two Combo

interfaces (10/100/1000Base-T or 100/1000Base-X). The S3328TP-SI/EI has two models using the AC power supply and

the DC power supply respectively.

S3328TP-PWR-EI: It has twenty-four 10/100Base-TX interfaces, two 1000Base-X SFP interfaces, two Combo

interfaces (10/100/1000Base-T or 100/1000Base-X). The S3328TP-PWR-EI uses the AC power supply and supports PoE.

S3328TP-EI-24S: It has twenty-four 100Base-FX SFP interfaces, two 1000Base-X SFP interfaces, two Combo

interfaces (10/100/1000Base-T or 100/1000Base-X). The S3328TP-EI-24S has two models using the AC power supply

and the DC power supply respectively.

S3352P-SI/EI: It has forty-eight 10/100Base-TX interfaces, two 100/1000Base-X SFP interfaces, and two

1000Base-X SFP interfaces. The S3352P-SI/EI has two models using the AC power supply and the DC power supply

respectively.

S3352P-PWR-EI: It has forty-eight 10/100Base-TX interfaces, two 100/1000Base-X SFP interfaces, and two

1000Base-X SFP interfaces. The S3352P-PWR-EI uses the AC power supply and supports PoE.

S3352P-EI-24S: It has twenty-four 10/100Base-TX interfaces, twenty-four 1000Base-FX SFP interfaces, two

100/1000Base-X SFP interfaces, and two 1000Base-X SFP interfaces. The S3352P-EI-24S has two models using the AC

power supply and the DC power supply respectively.

S3352P-EI-48S: It has forty-eight 100Base-FX SFP interfaces, two 100/1000Base-X SFP interfaces, and two

1000Base-X SFP interfaces. The S3352P-EI-48S has two models using the AC power supply and the DC power supply

respectively.

Product Model and Appearance

S3328TP-SI/EI

S3328TP-PWR-EI

S3328TP-EI-24S

S3352P-SI/EI

S3352P-PWR-EI

S3352P-EI-24S

S3352P-EI-48S

3

Quidway® S3300 Series Switches

Product Features and Advantages

Powerful Multi-service Support CapabilityThe S3300 supports the enhanced selective QinQ function, which can be enabled without occupying ACL resources. The S3300 can map the CoS value of the inner VLAN to the outer VLAN or modify the CoS value of the outer VLAN and marks the QoS level flexibly according to service requirements to meet requirements for bearing multiple services.

The S3300 supports 1K multicast groups and protocols such as IGMP Snooping, Filter, Fast Leave, and Proxy. The S3300 supports the function of replicating multicast across VLANs at line speed, multicast load balancing among bound interfaces, and controllable multicast to fully meet the requirements for IPTV and other multicast services.

With the Multiple Customer Equipment (MCE) function supported, the S3300 implements the isolation of different VLAN users on one device, effectively solves the problem of data security, and reduces investment costs of users.

Rich QoS Policies and Security MechanismsThe S3300 can implement the traffic classification function based on information such as the quintuple, IP preference, IP protocol type, ICMP type, TCP source interface, VLAN, Ethernet frame protocol type, and CoS. The S3300 supports the two rate three color speed limit function, with eight priority queues supported by each interface. The S3300 supports multiple queue scheduling algorithms such as WRR, DRR, SP, WRR + SP, and DRR + SP to effectively ensure the quality of network services such as voice, video, and data.

The S3300 series switches provide multiple security measures to protect user security.

The S3300 listens to information about the MAC or IP address of an access user, lease, VLAN ID, and interface by establishing and maintaining a DHCP snooping binding table. In this manner, the problem of locating the IP address and interface of a DHCP user is solved. The S3300 directly discards illegal packets such as ARP spoofing packets and packets with tampered IP addresses that do not match binding entries. In this manner, the S3300 prevents common middleman attacks on campus networks initiated by hackers or attackers by using ARP packets. The trusted interface feature of DHCP snooping is used to ensure the validity of the DHCP server.

The S3300 supports strict learning of ARP entries to prevent ARP entries of the S3300 being fully occupied caused by ARP spoofing attacks. In this manner, normal users can access the Internet. The S3300 supports IP source check and prevents DoS attacks caused by bogus illegal addresses for MAC address spoofing and IP address spoofing.

The S3300 supports centralized MAC address authentication, 802.1X authentication, and NAC functions; supports dynamic or static binding of user identity elements including the user account, IP address, MAC address, VLAN ID, interface number, and client for antivirus protection; implements dynamic delivery of user policies including VLAN, QoS, and ACL policies.

The S3300 supports the source MAC address learning limit based on an interface. In this manner, source MAC address spoofing of users on MAC address entries of the S3300 is prevented and the flooding caused by normal users failing to learn MAC addresses in the MAC address table is prevented.

Rich IPv6 FeaturesThe S3300 supports the IPv4/IPv6 dual stack, the IPv6 over IPv4 tunnel (including manual tunnel, 6to4 tunnel, and ISATAP tunnel), and Layer 3 line-speed forwarding. The S3300 can be used in IPv4 networks or IPv6 networks or networks where IPv4 and IPv6 coexist. The flexible networking modes meet the requirements for transition from IPv4 networks to IPv6 networks.

The S3300 supports a variety of IPv6 routing protocols such as RIPng and OSPFv3.The S3300 supports the Neighbor Discovery Protocol (NDP) of IPv6 to manage interaction between neighboring nodes. The S3300 supports the Path MTU Discovery mechanism, which can discover an appropriate MTU value on the path from the source end to the destination end with a view to effectively utilizing network resources and obtaining the best throughput.

4

www.huawei.com

POE FeaturesThe S3300 PWR series switches support PoE by configuring the PoE power supply of different power levels. That is, the PoE power supply can connect to Powered Devices (PDs) through twisted pair cables (such as IP Phone, WLAN AP, Security, and Bluetooth AP) to provide –48 V DC power supply and implement electricity provision for PD devices remotely. As Power Sourcing Equipment (PSE), the S3300 supports electricity provision standards of IEEE 802.3af and can also be compatible with PDs inconsistent with IEEE 802.3af. The S3300 can provide a perfect solution for the integration of data and voice by supporting PoE and Voice VLAN technologies.

Good Expandability and High-reliability Protection MechanismThe S3300 supports intelligent stacking and plug-and-play. The system starts to construct the stack virtual structure automatically after the stack cables are connected. Stack members are classified into master, slave, and standby devices. After the standby switch is configured, the period of service interruption caused by the failure of the master switch is reduced. The S3300 supports intelligent upgrade. Therefore, the software version of the switch does not need to be changed during stack expansion. The S3300 supports the stack of up to nine devices and the maximum stack bandwidth of 10 Gbit/s.

The S3300 supports not only the traditional STP, RSTP, and MSTP protocols but also enhanced Ethernet reliability technologies such as SmartLink (used for tree networking) and RRPP (used for ring networking) to implement millisecond protection switchover of links and ensure a high-reliability network. In addition, the S3300 provides the multi-service function for SmartLink and RRPP and implements load balancing among links to further increase the bandwidth utilization rate of links.

The S3300 supports BFD rapid detection of BFD links and can provide a millisecond detection mechanism for protocols such as OSPF, ISIS, VRRP, and PIM to enhance network reliability.

With powerful expandability and compatibility in its reliability design, the S3300 can be networked together with existing devices on a network, which protects user investment and provides effective assurance for the introduction of new services.

Free of Maintenance and ManageabilityThe S3300 has unique maintenance-free design and supports remote upgrade of devices in batches. With the unique lightning protection design, its rate of damage by lightning is 1/5 that of similar products in the industry and damages caused by lightning reduce by 80%.The S3300 supports multiple maintenance and management modes to fully monitor the status of various data. In addition, the S3300 supports Ethernet OAM (802.3ah and 802.1ag), HGMPv2, SNMP, NTP, SSH V2.0, HWTACACS+, RMON, traffic statistics based on the interface, and analysis of NQA network quality.

Inventive Fan-free, Silence, and Energy Conservation DesignWith the fan-free design, the S3300 reduces power consumption substantially, operates without noises, reduces mechanical faults, and eliminates erosion by condensation and damage by dust.

The S3300 adopts a new generation of high-integration chip and the energy conservation circuit design to achieve balanced heat dissipation. The S3300 supports the hibernation of idle interfaces to greatly reduce power consumption.With a low level of radiation up to the standard of household appliances, the S3300 is not harmful to people and more environmentally friendly and energy-saving.

Powerful lightning protectionThe S3300 adopts the Huawei patented build-in lightning protection technology to protect the device from lightning overvoltage. All interfaces support IEC61000-4-5 10/700us 6KV lightning protection. In the actual application, compared with the routine design, the design of the S3300 greatly reduces the rate of the damage caused by lightning

even though the S3300 is applied in the adverse environment or cannot be grounded properly.

5

Quidway® S3300 Series Switches

Product Specifications

Forwarding

performance9.6Mpps 13.2Mpps 9.6Mpps 9.6Mpps 9.6Mpps 13.2Mpps 13.2Mpps 13.2Mpps 13.2Mpps

Switching

capacity of

ports

12.8Gbps 17.6Gbps 12.8Gbps 12.8Gbps 12.8Gbps 17.6Gbps 17.6Gbps 17.6Gbps 17.6Gbps

Interface description

S3328TP-SI/EI/PWR-EI: twenty-four 10/100Base-TX interfaces, two 1000Base-X SFP interfaces, two Combo interfaces (10/100/1000Base-T or 100/1000Base-X)

S3328TP-EI-24S: twenty-four 100Base-FX SFP interfaces, two 1000Base-X SFP interfaces, two Combo interfaces (10/100/1000Base-T or 100/1000Base-X)

S3352P-SI/EI/PWR-EI: forty-eight 10/100Base-TX interfaces, two 100/1000Base-X SFP interfaces, and two 1000Base-X SFP interfaces

S3352P-EI-24S: twenty-four 10/100Base-TX interfaces, twenty-four 1000Base-FX SFP interfaces, two 100/1000Base-X SFP interfaces, and two 1000Base-X SFP interfaces

S3352P-EI-48S: forty-eight 100Base-FX SFP interfaces, two 100/1000Base-X SFP interfaces, and two 1000Base-X SFP interfaces

MAC table

Complies with IEEE 802.1d

Supports a 16K MAC table

Supports automatic learning and aging of MAC addresses

Supports static, dynamic, and blackhole MAC entries

Supports the filtering of source MAC addresses

VLAN features

Supports 4K VLANs

Supports Guest VLAN, Voice VLAN, and Super VLAN

Supports VLANs based on the MAC/protocol/IP subnet

Supports the QinQ function

Supports the selective QinQ function

Supports the 1:1 VLAN switching function

Supports the N:1 VLAN switching function

Reliability

multiple instances. The duration of protection switchover is less than 50 ms

Supports the SmartLink tree topology and multi-instance SmartLink and provide millisecond protection for active and standby links

Supports STP, RSTP, and MSTP

Supports BPDU protection, root protection, and loopback protectionN/A Support the BFD for OSPF/ISIS/VRRP/PIM function

IP routeStatic route and RIP V1/2N/A OSPF, IS-IS, BGP, and ECMP

S3328TP-SI

S3352P-SI

S3328TP-EI

S3328TP-PWR-EI

S3328TP-EI-24S

S3352P-EI

S3352P-EI-24S

S3352P-EI-48S

S3352P-PWR-EI

S3300-SI S3300-EIItem

6

www.huawei.com

IPv6 features

Supports Neighbor Discovery (ND)

Supports PMTU

Supports IPv6 Ping, IPv6 Tracert, and IPv6 Telnet

Supports manual configuration of tunnels

Supports 6to4 tunnel

Supports ISATAP tunnel

Supports ACLs based on the source IPv6 address, destination IPv6 address, Layer 4 interface, and protocol type

Multicast

Supports 1K multicast groups

Supports IGMP v1/v2/v3 Snooping and the fast leave mechanism

Supports multicast VLANs and the replication of multicast across VLANs

Supports multicast load balancing among bound interfaces

Supports controllable multicast

Supports statistics on multicast traffic based on the interfaceN/A IGMP v1/v2/v3、PIM-SM、PIM-DM

QoS/ACL

Supports restrictions on the rates for interfaces to receive and send packets

Supports packet redirection

Supports traffic policing based on the interface and the two rate three color CAR function

Supports eight priority queues for each interface

Supports queue scheduling algorithms such as WRR, DRR, SP, WRR+SP, and DRR+SP

Supports re-marking of 802.1p priority and DSCP priority of packets

Supports Layer 2 to Layer 4 packet filtering and provides the function of filtering invalid frames based on the source MAC address, destination MAC address, source IP address, destination IP address, interface, protocol, and VLAN

Supports speed limit based on the queue and the Shapping function of interfaces

Security features

Supports hierarchical management of users and password protection

Supports the function of guarding against DoS and ARP attacks

Supports the binding of the IP address, MAC, and interface

Supports interface isolation and interface security

Supports blackhole MAC addresses

Supports the restriction on the number of learned MAC addresses

Supports IEEE 802.1X authentication and the restriction on the maximum number of users for a single interface

Supports AAA authentication, RADIUS, HWTACACS+, and so on

Supports SSH V2.0

Supports the CPU protection functionLightning protection

All service interfaces support 6 KV lightning protection or even 15 KV lightning protection if additional lightning arresters are installed

S3328TP-SI

S3352P-SI

S3328TP-EI

S3328TP-PWR-EI

S3328TP-EI-24S

S3352P-EI

S3352P-EI-24S

S3352P-EI-48S

S3352P-PWR-EI

S3300-SI S3300-EIItem

7

Quidway® S3300 Series Switches

S3328TP-SI

S3352P-SI

S3328TP-EI

S3328TP-PWR-EI

S3328TP-EI-24S

S3352P-EI

S3352P-EI-24S

S3352P-EI-48S

S3352P-PWR-EI

S3300-SI S3300-EI

Management and

maintenance

Supports MFF

Supports the automatic configuration function

Supports Virtual Cable Test

Supports Ethernet OAM (802.3ah and 802.1ag)

Supports interface mirroring and remote interface mirroring (RSPAN)

Supports SNMPv1/v2/v3

Supports RMON

Supports iManager NMS、WEB NMS

Supports Huawei Group Management Protocol (HGMP)

Supports SSH V2.0

Supports Telnet configuration and maintenance

Supports system logs and hierarchical alarmsEnvironment requirements

Temperature range: 0OC–50OC, relative humidity: 10%–90% (without condensation)

Power supply

AC:

Rated voltage range: 100 V–240 V, 50/60 Hz

Maximum voltage range: 90 V–264 V, 50/60 Hz

DC:

Rated voltage range: –48 V to –60 V

Maximum voltage range: –36 V to –72 VDimensions (mm) (width

x depth x height)

S3328TP-EI/SI，S3328TP-EI-24S，S3352P-EI/SI：442×220×43.6

S3328TP-PWR-EI, S3352P-EI-48S, S3352-EI-24S, and S3352P-PWR-EI: 442 × 420 × 43.6

Weight

24-port Base-T <2.5kg 48-port Base-T <3kg

24-port Base-X <2.6kg 48-port Base-X <4.8kg

S3328TP-PWR-EI <4.03kg (excluding the power supply module), S3352P-PWR-EI<4.31kg (excluding the power supply module)

Power consumption

24-port Base-T <20w 48-port Base-T < 38w

24-port Base-X <52w 48-port Base-X < 90w

S3328TP-PWR-EI: The maximum power consumption is 448 W and external power of PoE is 370W.

S3352P-PWR-EI: The maximum power consumption is 880 W and external power of PoE is 740W.

Item

8

www.huawei.com

Order InformationS3300 series Ethernet switches order information

LS-3328TP-SI-AC/LS-3328TP-SI-DC

S3328TP-SI (the input voltage is 220 V in the case of an AC power supply and –48 V in the case of a DC power supply)

LS-3328TP-EI-AC/LS-3328TP-EI-DC

S3328TP-EI (the input voltage is 220 V in the case of an AC power supply and –48 V in the case of a DC power supply)

LS-3328TP-PWR-EI-AC S3328TP-PWR-EI (the input voltage is 220 V in the case of an AC power supply)LS-3328TP-EI-24S-AC/ LS-3328TP-EI-24S-DC

S3328TP-EI-24S (the input voltage is 220 V in the case of an AC power supply and –48 V in the case of a DC power supply)

LS-3352P-SI-AC/ LS-3352P-SI-DC

S3352P-SI (the input voltage is 220 V in the case of an AC power supply and –48 V in the case of a DC power supply)

LS-3352P-EI-AC/ LS-3352P-EI-DC

S3352P-EI (the input voltage is 220 V in the case of an AC power supply and –48 V in the case of a DC power supply)

LS-3352P-PWR-EI-AC S3352P-PWR-EI (the input voltage is 220 V in the case of an AC power supply)LS-3352P-EI-48S-AC/LS-3352P-EI-48S-DC

S3352P-EI-48S (the input voltage is 220 V in the case of an AC power supply and –48 V in the case of a DC power supply)

LS-3352P-EI-24S-AC/ LS-3352P-EI-24S-DC

S3352P-EI-24S (the input voltage is 220 V in the case of an AC power supply and –48 V in the case of a DC power supply)

For more information, please visit www.huawei.com or contact the Huawei local sale office.

Model Description

9

10

Trademarks Notice , HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.

Other trademarks, product, service and company names mentioned are the property of their respective owners.

NO WARRANTYTHE CONTENTS OF THIS MANUAL ARE PROVIDED “AS IS”. EXCEPT AS REQUIRED BY APPLICABLE LAWS, NO WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, ARE MADE IN RELATION TO THE ACCURACY, RELIABILITY OR CONTENTS OF THIS MANUAL.

2009

20090325