Ruijie RG-S2900G-E/P Switch Series

Ruijie CPU Protection Technology

CPP (CPU Protect Policy) is the industry-leading hardware CPU protection technology. CPP technology automatically distinguishes multi-layer protocol packet traffic such as IPv4 / IPv6 destined for the CPU and limits traffic speed to prevent abnormal packets from attacking the CPU and consuming resources. In this way, it can ensure the CPU stability of the core devices in L3 IPv4 / IPv6 networks and L2 network environments.

Ruijie’s Anti-ARP Mechanism

The RG-S2900G-E / P switch series supports spoofing-based anti-ARP (Address Resolution Protocol) hardware, flexible IP-MAC-port binding, and a variety of security mechanisms including static and dynamic port binding, port isolation and limiting traffic rates . supports multi-element binding to ensure secure user access.

Defense Against Ruijie’s Unauthorized DHCP Server

With wide adaptation for mobile devices, many users use SOHO wireless routers in their networks for easy Wi-Fi access. Such a router is usually built-in with a DHCP server. If the device is not connected, the DHCP server will exist on the wired network as an invalid server. Many end devices will get an incorrect IP address from a malicious DHCP server and then be denied network access. To solve the problem, the RG-S2900G-E / P only forwards address request packets from authorized DCHP servers. This ensures end devices to obtain IP addresses only from authorized DHCP servers, and avoids network access failures.

Protection Against Ruijie’s DoS Attacks

The openness of the network makes end devices vulnerable to virus infection and hacker attacks, hindering normal network access. Commonly encountered attacks such as ARP flooding result in failed request responses at the gateway; ICMP flooding will cause CPU overload; DHCP attack flooding requests can consume IP addresses on the DHCP server and the user cannot obtain an IP address and cannot access the network.

The RG-S2900G-E / P series provides NFPP (Network Foundation Protection Policy) classifying packets (management, forwarding and protocols), limiting their rates, and monitoring their attacks to support dual protection of CPU and channel bandwidth against attacks. In this way, the switch can ensure normal packet forwarding and protocol normal status, ensuring network stability.

Ruijie Network Guaranteed Stability

Network loops are another major culprit responsible for system instability. The RG-S2900G-E / P Series provides STP, RSTP and MSTP to eliminate misconnections to ensure network stability.

Ruijie’s Advanced QoS Features

Implementing 802.1p, IP ToS (Service Type), Layer 2 to Layer 7 filtering, SP (Strict Priority) and WRR (Round Robin Weight), the RG-S2900G-E / P series provides flexible and intensive flow policies such as bandwidth control and priority-based forwarding, so as to effectively provide multiservice services.

Ruijie High Reliability

The RG-S2900G-E / P series provides rich network resilience features including 802.1d, 802.1w, 802.1s and RLDP (Rapid Link Detection Protocol), designed for loop detection, ensuring network reliability, and enhancing fault tolerance capabilities.

Ruijie Flexible Access Control

The RG-S2900G-E / P series works with Ruijie SMP solutions to provide flexible authentication policies, which can meet the authentication requirements of different users and environments.

The RG-S2900G-E / P switch can support 802.1X and web authentication mode simultaneously. 802.1X mode enforces strict security controls while web authentication offers a more desirable user experience. Both together meet the requirements of various application scenarios.

802.1X requires a client to be deployed. When dealing with a large number of end users, the client installation will be a very time consuming and laborious task. The RG-S2900G-E / P series provides automatic client assignment that greatly simplifies 802.1X deployments. When users connect to the network for the first time, their web browser will automatically be redirected to the client’s download page. Users can easily download and install the client themselves.

In certain authentication scenarios, some servers must allow access without authentication (for example, self-service web pages on a university network). The RG-S2900G-E / P series offers secure tunneling technology to allow free authentication for users to access administrator-defined pages.

In addition, a separate solution is required for an end device such as a VOIP printer or telephone, which cannot be confirmed, to access the network. It is very complicated and risky to configure device ports like free authentication. To better solve this problem, the RG-S2900G-E / P series supports MAC address authentication, allowing a VOIP printer or phone to be authenticated via its own MAC address for network access.

Ruijie Energy Saving and Emission Reduction

With a new generation of hardware systems and an advanced energy-efficient circuit design, the RG-S2900G-E / P series greatly reduces noise and minimizes power consumption. The RG-S2928G-E model adapts a fanless design, reduces power consumption by more than 40% and offers a noise-free deployment solution. The Model RG-S2952G-E, on the other hand, implements a fan with variable speed control. At low temperatures, the fan will automatically reduce speed to minimize power consumed and noise generated.

The RG-S2900G-P series provides automatic / energy saving / static PoE modes. It also supports on / off the PoE port on a time basis. The device adopts mainstream EEE technology to further reduce power consumption.

The RG-S2900G-P series supports 6KV surge / lightning protection, guaranteeing tough performance in harsh environments.

Ruijie Easy Network Maintenance

The RG-S2900G-E / P series is easy to use. The plug-and-play switch supports major network management modes and protocols to minimize investment costs.

The RG-S2900G-E / P Series supports SNMPv1 / v2C / v3, RMON, Syslog, and USB log backup & configuration for routine network diagnosis and maintenance. Administrators can also manage and control the device using various modes such as CLI, web NMS, and Telnet.

The RG-S2900-E / P gigabit intelligent secure access switch is ideal for the following scenarios and full gigabit access to:
● large-scale enterprise LANs and institutions, such as government buildings, large factories, energy and corporate metallurgy
● business systems , such as hospitals, libraries, exhibition centers, and websites
● server clusters
● Secure access through flexible and diverse security control policies that can defend and control viruses and network attacks

Access to Large-Scale Campuses and Corporate Networks

Solution 1:

This network topology enables the RG-S2900-E / P series to work together with converged switches (RG-S5750 / S7600) across buildings and the RG-S8600 series in the core area to provide gigabit service for desktops. 10G high bandwidth links meet in the core area to meet the needs of users to increase the volume of information in universities, libraries, laboratories, financial centers, offices and exhibition centers.

Solution 2:

The RG-S2900-E / P series connects to the RG-S8600 series (Ruijie multi-service IPv6 core route-switch) via the upstream gigabit port. 10G links or multiple converged gigabit links in the core area. The RG-S2900-E / P series connects to a desktop group via a downstream gigabit port to provide gigabit service to desktops.