For Fast Ethernet switching over twisted-pair copper, Huawei's S3700 Series combines proven reliability with robust routing, security, and management features in a compact, energy-efficient switch.
Choose Standard (SI) models for L2 and basic L3 switching; Enhanced (EI) models support IP multicasting and more complex routing protocols (OSPF, IS-IS, BGP).
Choose Huawei S3700 Enterprise Switches for resilient 100 Mbit/s Fast Ethernet L3 switching in large data centers, or as core switches in small to medium-sized enterprise campus IT environments.
Typical Deployment Scenarios
S3700 Switches in Small to Medium-sized Enterprise Networks as Core Switches
S3700 Switches Used as L3 Access Switches in a Large-scale Data Center
Highlights – Features and Benefits
Energy-efficient Fast Ethernet switches designed for resilience, scalability, and manageability.
Powerful Support for Services
The Multi-VPN-Instance CE (MCE) function isolates users in different VLANs on a device, ensuring data security and reducing costs.
S3700 EI models support multicast functions such as IGMP snooping, IGMP filter, fast leave, and IGMP proxy.
The S3700 PWR offers an improved Power over Ethernet (PoE) function, configurable to determine when or whether a PoE port provides power.
Comprehensive QoS Policies and Security Mechanisms
The S3700 classifies complex traffic based on packet information, such as the 5-tuple, IP preference, ToS, DSCP, IP protocol type, ICMP type, TCP source port, VLAN ID, Ethernet protocol type, and CoS. The S3700 supports a flow-based, two-rate, three-color Committed Access Rate (CAR).
Multiple security measures defend against Denial of Service (DoS) attacks, as well as attacks against networks or individual users: SYN Flood attacks, Land attacks, Smurf attacks, and ICMP Flood attacks.
DHCP snooping generates user binding entries based on users’ access interfaces, MAC addresses, IP addresses, IP address leases, and VLAN IDs.
Strict ARP learning prevents ARP spoofing attacks that exhaust ARP entries. The S3700 also provides IP source guard to prevent DoS attacks caused by MAC address spoofing, IP address spoofing, and MAC/IP spoofing.
The S3700 supports centralized MAC address authentication and 802.1x authentication. It authenticates users based on statically or dynamically bound user information, such as the user name, IP address, MAC address, VLAN ID, access interface, and flag, indicating whether antivirus software is installed. VLANs, QoS policies, and Access Control Lists (ACLs) can be dynamically applied to users.
The S3700 can limit the number of MAC addresses learned on an interface to prevent attackers from exhausting MAC address entries by using bogus source MAC addresses. This function minimizes the packet flooding that occurs when users’ MAC addresses cannot be found in the MAC address table.
Various Routing and IPv6 Features
The S3700 supports various routing protocols, including static routing, RIP, OSPF, IS-IS, and BGP.
S3700 hardware supports IPv4/IPv6 dual stack, IPv6 over IPv4 tunnels (including manual tunnels, 6to4 tunnels, and ISATAP tunnels), and Layer 3 line-speed forwarding.
High Scalability and Excellent Reliability
The S3700 supports intelligent stacking (iStack). Up to nine S3700s can be connected with stack cables to set up a stack, which functions as a virtual switch.
Besides STP, RSTP, and MSTP, the S3700 supports enhanced Ethernet reliability technologies, such as Smart Link and Rapid Ring Protection Protocol (RRPP), which implement millisecond-level protection switchovers and ensure network reliability.
The S3700 supports Ethernet Ring Protection Switching (ERPS), also referred to as G.8032. As the latest ring network protocol, ERPS was developed based on traditional Ethernet MAC and bridging functions and uses a mature Ethernet OAM function and a Ring Automatic Protection Switching (R-APS) mechanism to implement millisecond-level protection switching. ERPS supports various services and allows flexible networking, helping customers build a network with lower OPEX and CAPEX.
The S3700 supports Bidirectional Forwarding Detection (BFD), which provides millisecond-level fault detection for protocols, such as OSPF, IS-IS, VRRP, and PIM, to improve network reliability.
Maintenance-Free Design and Manageability
The S3700 adopts a maintenance-free design and supports batch remote upgrades. It provides multiple maintenance and management modes to help users monitor various data.
GARP VLAN Registration Protocol (GVRP) dynamically distributes, registers, and propagates VLAN attributes to reduce network administrator workloads and ensure the correct VLAN configurations. In a complex network topology, GVRP simplifies VLAN configuration and reduces network communication faults caused by incorrect VLAN configuration.
The S3700 supports MUX VLAN, which isolates the Layer 2 traffic between interfaces in a VLAN. Interfaces in a subordinate, separate VLAN can communicate with ports in the principal VLAN, but cannot communicate with each other.
Unique Fan-Free and Energy-Saving Design
S3700s equipped with 24 electrical ports offer a fan-free design, which dramatically reduces power consumption and eliminates noise.
An energy-saving integrated circuit design ensures uniform heat dissipation. Idle ports can enter a sleep mode to further reduce power consumption.