Ruijie Switch XS-S1960 Series By Ruijie

• IP / MAC binding: Implement flexible port or system binding to a user’s IP address and MAC address, strictly restricting user access across ports or system-wide.
• DHCP snooping: Allow DHCP responses from trusted ports only; based on DHCP listening and by dynamically monitoring ARP and checking the user’s IP address, it instantly removes illegal packets that do not match binding entries to effectively prevent ARP fraud and source IP address fraud.
• Secure Shell and SNMPv3: The secure shell cryptographic network protocols (SSH) and Simple Network Management Protocol v3 (SNMPv3) ensure the security of management information. Provides services such as multi-element binding, port security, time-based ACLs and bandwidth speed limiting to block unauthorized users.
• NFPP: The Network Foundation Protection Policy (NFPP) provides protection for switches. Malicious attacks are always found in networked environments. These attacks carry a heavy load on the switch, resulting in high CPU usage and operational problems. Such attacks are as follows:
o Denial of Service (DoS) attacks can consume large amounts of memory, entries or other resources of the switch, which will result in a system outage.
o Massive attack traffic is directed to the CPU, occupying the entire CPU bandwidth. In this case, the normal protocol and management traffic cannot be processed by the CPU, causing protocol packing or management failure. Forwards in the data field will also be affected and the whole network will be abnormal.
o A large number of attack packages directed at the CPU consume enormous CPU resources, make the CPU heavily loaded and thus affect device management and performance.
NFPP can effectively protect the system from these attacks. In the face of attacks, NFPP maintains a well-run of various system services with low CPU load, thus ensuring the stability of the entire network.

Virtual Switch Unit (VSU)
Virtual Switch Unit technology, or VSU for short, allows the interconnection of several physical devices by virtualizing them into one logical device. Logical devices use a single IP address, Telnet process, command line interface (CLI), and allow automatic version checking and configuration. From a user perspective, the benefits are doubled work efficiency and an improved user experience from multiple devices operating simultaneously. And they only need to manage one device. VSU technology also offers the following benefits:
• Easy management: Administrators can centrally manage all devices at the same time. No more need to configure and manage individual switches.
• Simplified typology: VSU is considered one of the switches in the network. With aggregation link connections and peripheral networking devices, the MSTP protocol is unnecessary because there is no Layer 2 loop network. All protocols operate as a single switch.
• Millisecond failure: VSU and peripheral devices are connected via an aggregation link. In case of any device or link failure, failover to another member’s link only takes 50 to 200 ms.
• Excellent scalability: Hot swappable network, any device exiting or joining virtual network does not cause any impact on other devices.