S6720S-26Q-EI-24S-DC

S6720S-26Q-EI-24S-DC is a next-generation 10GE fixed switch. The product could function as an access switch in an Internet data center (IDC) or a core/aggregation switch on a campus network. At the same time, S6720S-26Q-EI-24S-DC has industry-leading performance and provides line-speed 10GE access ports and 40GE uplink ports. It can be used in a data center to provide 10 Gbit/s access to servers or function as a core switch on a campus network to provide 10 Gbit/s traffic aggregation. What's more, S6720-EI provides a wide variety of services, comprehensive security policies, and various QoS features to help customers build scalable, manageable, reliable, and secure data center networks.
S6720S-26Q-EI-24S is a compact switch with 220 mm depth and perfectly suitable in a 300 mm deep cabinet, saving installation space for customers.

S6720S-26Q-EI-24S-DC Appearance and Structure

S6720S-26Q-EI-24S-DC Specifications

S6720S-26Q-EI-24S-DC Features

l  Provide multiple security measures to defend against Denial of Service (DoS) attacks, as well as attacks against networks or users. DoS attacks include SYN flood, Land, Smurf, and ICMP flood attacks. Attacks to networks refer to STP BPDU/root attacks. Attacks to users include bogus DHCP server attacks, man-in-the-middle attacks, IP/MAC spoofing attacks, and DHCP request flood attacks. DoS attacks that change the CHADDR field in DHCP packets are also attacks against users.

l  Support DHCP snooping, which generates user binding entries based on users' access interfaces, MAC addresses, IP addresses, IP address leases, and VLAN IDs. DHCP snooping discards invalid packets that do not match any binding entries, such as ARP spoofing packets and IP spoofing packets. This prevents hackers from using ARP packets to initiate attacks on campus networks. The interface connected to a DHCP server can be configured as a trusted interface to protect the system against bogus DHCP server attacks.

l  Support strict ARP learning, which prevents ARP spoofing attacks that exhaust ARP entries. The S6720-EI also provides IP source check to prevent DoS attacks caused by MAC address spoofing, IP address spoofing, and MAC/IP spoofing. URPF, provided by the S6720-EI, authenticates packets by checking the packet transmission path in reverse, which can protect the network against source address spoofing attacks.

l  Support centralized MAC address authentication and 802.1X authentication. The S6720-EI authenticates users based on statically or dynamically bound user information such as the user name, IP address, MAC address, VLAN ID, access interface, and flag indicating whether antivirus software is installed. VLANs, QoS policies, and ACLs can be dynamically applied to users.

l  Can limit the number of MAC addresses learned on an interface to prevent attackers from exhausting MAC address entries by using bogus source MAC addresses. This function minimizes the packet flooding that occurs when users' MAC addresses cannot be found in the MAC address table.

S6720-EI Series Switches

S6720-30C-EI-24S-AC 24 10GE SFP+ ports, 2 40GE QSFP+ ports Double hot swappable AC power supplies
S6720-30C-EI-24S-DC 24 10GE SFP+ ports, 2 40GE QSFP+ ports Double hot swappable DC power supplies
S6720-54C-EI-48S-AC 48 10GE SFP+ ports, 2 40GE QSFP+ ports Double hot swappable AC power supplies
S6720-54C-EI-48S-DC 48 10GE SFP+ ports, 2 40GE QSFP+ ports Double hot swappable DC power supplies
S6720S-26Q-EI-24S-AC 24 10GE SFP+ ports, 2 40GE QSFP+ ports Double hot swappable AC power supplies
S6720S-26Q-EI-24S-DC 24 10GE SFP+ ports, 2 40GE QSFP+ ports Double hot swappable DC power supplies