Ruijie RG-S2900G-E/P Switch Series

Complete Safety Features

Ruijie CPU Protection Technology

CPP (CPU Protect Policy) is the industry’s leading hardware CPU protection technology. CPP technology automatically distinguishes multi-layer protocol packet traffic such as IPv4 / IPv6 intended for the CPU and limits the speed of traffic to prevent abnormal packets from attacking the CPU and consuming resources. In this way, it can ensure the CPU stability of the core devices in the L3 IPv4 / IPv6 network and L2 network environment.

Ruijie Anti-ARP Mechanism

The RG-S2900G-E / P switch series supports spoofing-based anti-ARP (Address Resolution Protocol) hardware, flexible IP-MAC-port binding, and various security mechanisms including static and dynamic port binding, port isolation and limiting traffic rates . supports multi-element binding to ensure secure user access.

Defense Against Unofficial DHCP Server

With extensive adaptation for mobile devices, many users use SOHO wireless routers on their networks for easy Wi-Fi access. Such routers are usually built-in with DHCP servers. If the device is not connected, the DHCP server will be on the wired network as an invalid server. Many end devices will get the wrong IP address from a malicious DHCP server and then be denied network access. To resolve the problem, RG-S2900G-E / P only forwards the packet request address from the authorized DCHP server. This ensures the end device gets the IP address only from an authorized DHCP server, and avoids network access failures.

Protection against DoS attacks

Network openness makes the end device vulnerable to virus infections and hacker attacks, hampering normal network access. Commonly discovered attacks such as ARP flooding result in failure of response requests at the gateway; ICMP flooding will cause CPU overload; A flooding DHCP attack request can consume an IP address on a DHCP server and users cannot obtain an IP address and cannot access the network.

The RG-S2900G-E / P series provides NFPP (Network Foundation Protection Policy) to classify packages (management, forwarding, and protocols), limit their rates, and monitor their attacks to support dual protection of CPU and channel bandwidth against attacks. In this way, the switch can ensure normal packet forwarding and normal protocol status, ensuring network stability.

Guaranteed Network Stability

Network loops are another major cause that is responsible for system instability. The RG-S2900G-E / P series provides STP, RSTP, and MSTP to eliminate misconnection to ensure network stability.

Advanced QoS Features

By implementing 802.1p, IP ToS (Service Type), filtering Layer 2 through Layer 7, SP (Strict Priority) and WRR (Round Robin Weight), the RG-S2900G-E / P series provides flexible and intensive flow policies such as bandwidth control and priority-based forwarding, so as to provide effective multiservice services.

High reliability

The RG-S2900G-E / P series provides rich network robustness features including 802.1d, 802.1w, 802.1s and RLDP (Rapid Link Detection Protocol), which are designed for loop detection, ensure network reliability, and increase fault tolerance capabilities.

Flexible Access Control

The RG-S2900G-E / P series works with the Ruijie SMP solution to provide flexible authentication policies, which can meet different user and environment authentication requirements.

The RG-S2900G-E / P switch can support 802.1X and web authentication mode simultaneously. Mode 802.1X enforces strict security controls while web authentication offers a more desirable user experience. Both of them together meet the requirements of various application scenarios.

802.1X requires a client to be placed. When dealing with a large number of end users, client installation will be a very time-consuming and tiring job. The RG-S2900G-E / P series provides automated client assignments that greatly simplifies 802.1X deployment. When users connect to the network for the first time, their web browser will automatically be redirected to the client download page. Users can easily download and install the client themselves.

In certain authentication scenarios, some servers must allow access without authentication (for example, self-service web pages on university networks). The RG-S2900G-E / P series offers secure distribution technology to enable free authentication for users to access pages specified by the administrator.

In addition, a separate solution is needed for end devices such as printers or VOIP phones, which cannot be confirmed, to access the network. Very complicated and risky configuring device ports such as free authentication. To better solve this problem, the RG-S2900G-E / P series supports MAC address authentication, allowing the printer or VOIP telephone to be authenticated via its own MAC address for network access.

Energy Saving and Emission Reduction

With a new generation of hardware systems and an advanced energy saving circuit design, the RG-S2900G-E / P series greatly reduces noise and minimizes power consumption. The RG-S2928G-E model adapts fanless design, reduces power consumption by more than 40% and offers a noiseless deployment solution. The RG-S2952G-E model, on the other hand, implements a fan with variable speed control. At low temperatures, the fan will automatically reduce speed to minimize power consumed and noise produced.

The RG-S2900G-P series provides automatic / energy saving / static PoE modes. It also supports turning on / off the PoE port on time. The device adopts mainstream EEE technology to further reduce power consumption.

The RG-S2900G-P series supports 6KV surge / lightning protection, guaranteeing strong performance in harsh environments.

Easy Network Maintenance

The RG-S2900G-E / P series is easy to use. Plug-and-play switches support major network management modes and protocols to minimize investment costs.

The RG-S2900G-E / P series supports SNMPv1 / v2C / v3, RMON, Syslog, and USB log backup & configuration for routine network diagnosis and maintenance. Administrators can also manage and control devices using various modes such as CLI, web NMS, and Telnet.

The RG-S2900-E / P gigabit secure and smart access switch is ideal for the following, scenarios and full gigabit access to:
● LAN large-scale companies and institutions, such as government buildings, large factories, energy, and metallurgical companies
● business systems, such as hospitals, libraries, exhibition centers, and websites
● server cluster
● Secure access through flexible and diverse security control policies that can defend and control viruses and network attacks

Access to Large Scale Campus and Corporate Networks

● Solution 1:

This network topology enables the RG-S2900-E / P series to work with convergence switches (RG-S5750 / S7600) throughout the building and the RG-S8600 series in the core area to provide gigabit services for desktops. 10G high bandwidth links meet in the core area to meet the needs of users to increase the volume of information in universities, libraries, laboratories, financial centers, offices and exhibition centers.

● Solution 2:

RG-S2900-E / P series is connected to the RG-S8600 (multi-service IPv6 core route-switch Ruijie) series through the upstream gigabit port. 10G links or many converged gigabit links in the core area. The RG-S2900-E / P series is connected to the desktop group via downstream gigabit ports to provide gigabit services to the desktop.