Security
Hierarchical user management and password protection Portal authentication MAC authentication SSHv1.5/SSHv2 Basic and advanced Access Control Lists for packet filtering OSPF, RIPv2, BGPv4 pain text and MD5 authentication IP address, VLAN ID, MAC address multiple binding combination uRPF Active/standby data backup CPU DoS Protection ARP Attack Protection
Multicast
PIM-DM, PIM-SM, PIM-SSM, MSDP, MBGP, and Any-RP IGMP V1/V2/V3 and IGMP V1/V2/V3 snooping MLD V1/V2 and MLD V1/V2 snooping
Ethernet
IEEE 802.1P(CoS priority) IEEE 802.1Q VLAN (up to 4094 VLANs) IEEE 802.1ad (QinQ), selective QinQ and Vlan mapping LLDP Static MAC configuration Limited MAC learning Port mirroring and traffic mirroring Port aggregation, port isolation, and port mirroring IEEE 802.1D (STP)/802.1w (RSTP)/802.1s (MSTP) IEEE 802.3ad (dynamic link aggregation), static port aggregation, and multi-chassis link aggregation Jumbo frame Multicast VLAN DHCP snooping Broadcast/multicast/unknown unicast storm suppression Port based, Protocol based, Subnet-based and MAC based VLAN
Routing
Static routing, RIP v1/v2, OSPF, IS-IS, and BGP4 IPv4/IPv6 ECMP VRRP IPv4/IPv6 dual stack IPv6 static routing, RIPng, OSPFv3, IS-ISv6, and BGP4+
VRRPv3
ACL&QoS
Standard and extended ACLs
Ingress and egress ACLs
VLAN ACLs
Global ACLs
Ingress/Egress CAR with 8K granularity
Diff-Serv QoS
802.1P/DSCP Priority marking and remarking
802.1p, TOS, DSCP, and EXP priority mapping Flexible queue scheduling algorithms including SP (Strict priority), WRR (Weighted Round Robin), SP+WRR, WFQ (Weighted Fair Queueing) Traffic shaping Rate limiting Congestion avoidance, Tail-Drop and WRED
System Management
SNMP v1/v2/v3 NQA (Network Quality Analysis) RMON and groups 1, 2, 3 and 9 Fault alarm and automatic fault recovery System logs Device status monitoring mechanism, including the CPU engine, backplane, chips and other key components
HA
1+1 redundancy for key components such as MPUs (MPU includes CPU + Switching Fabric)
1+1 redundancy for power modules
Passive backplane
Hot swapping for all components
Real-time data backup on active/standby MPUs
CPU protection
VRRP
NSR (Nonstop Routing)/GR (Graceful Restart) for OSFP/BGP/IS-IS/RSVP
Port aggregation and multi-card link aggregation
BFD for VRRP/BGP/IS-IS/OSPF/RSVP/static routing
Ethernet OAM (802.1ag and 802.3ah)
Smart-Link
ISSU (In-service Software Upgrade)