Ruijie RG-S2900G-E V3 Series Switches

Ruijie’s Comprehensive Security Policy

Ruijie RG-S2900G-E V3 Series effectively prevents and controls the spread of the virus from a breaker attack with various inherent mechanisms such as anti-DoS attacks, IP scanning hackers, illegal ARP packet checking and several ACL hardware policies.

● Industry-leading CPU protection mechanisms: CPU Protection Policies (CPP) provide policies to protect CPUs from switches. In a networked environment, various packet attacks spread, which can cause high CPU usage on a switch, affecting protocol running and even difficulties in switch management. For this purpose, CPU switches must be protected, that is, traffic control and priority-based processing must be performed for the various incoming packets to ensure CPU switch processing capabilities.

○ CPP can effectively prevent malicious attacks on the network and provide a clean environment for legitimate protocol packages.

○ CPP is activated by default. This provides protection during operation of the entire switch.

● IP / MAC binding: Apply flexible port or system binding to the user’s IP address and MAC address, strictly limiting user access to the port or throughout the system.

● DHCP snooping: Allow DHCP responses only from trusted ports; based on listening to DHCP and by dynamically monitoring ARP and checking the user’s IP address, immediately discarding illegal packets that are not consistent with binding entries to effectively prevent ARP fraud and the source of IP address fraud.

● Secure Shell and SNMPv3: Secure Shell (SSH) and Simple Network Management Protocol v3 (SNMPv3) cryptographic network protocols ensure the security of management information. Provides services such as multi-element binding, port security, time-based ACLs, and bandwidth restrictions to block unauthorized users.

● NFPP: The Foundation Network Protection Policy (NFPP) provides guards for switches. Malicious attacks are always found in a networked environment. These attacks carry a heavy load on the switch, resulting in high CPU usage and operational problems. These attacks are as follows:

Attacks Denial of Service (DoS) attacks can use up a lot of memory, entries, or other switch resources, which will cause system service termination.

○ massive attack traffic directed at the CPU, occupying the entire CPU bandwidth. In this case, normal protocol traffic and management traffic cannot be processed by the CPU, causing protocol or management failure. Forwarding to the data plane will also be affected and the entire network will become abnormal.

NFPP can effectively protect the system from this attack. Facing attacks, NFPP maintains the running of various system services with low CPU load, thus ensuring stability of the entire network.

NFPP Network Protection

Virtual Switch Unit (VSU)

T

Virtual Switch Unit technology, or in short VSU, enables the interconnection of several physical devices by visualizing them into one logical device. Logical devices use a single IP address, Telnet process, command line interface (CLI), and allow automatic version inspection and configuration. From a user perspective, the benefits are multiple work efficiencies and an improved user experience of several devices operating at the same time. And they only need to manage one device. VSU technology also offers many benefits below:

● Easy management: Administrators can centrally manage all devices simultaneously. No need to configure and manage switches one by one.

● Simplified typology: VSU is considered as a switch on the network. With aggregation link connections and peripheral network devices, the MSTP protocol is not needed because there is no Layer 2 network loop. All protocols operate as one switch.

● Millisecond failover: VSU and peripheral devices are connected via aggregation links. After any device or link failure, link failure to other members only requires 50 to 200 ms.

● Exceptional scalability: Hot swappable networks, all devices that leave or join a virtual network cause zero impact on other devices.

Simple Network Topology Enabled by VSU

High reliability

The RG-S2900G-E V3 series supports the spanning tree protocols of 802.1d, 802.1w and 802.1s to ensure fast convergence, improve fault tolerance capabilities, ensure stable network running and balance load links, and provide redundant links.

● Virtual Router Redundant Protocol (VRRP): Effectively ensures network stability.

● Rapid Link Detection Protocol (RLDP): Detects link connectivity and whether optical fiber links are normal from both ends, and supports port-based loop detection functions to prevent network errors caused by loops generated by loops generated by device connections such as hubs to the port.

● Ethernet Ring Protection Switching (ERPS) (G.8032): Apply loop blocking and connect recovery to the master device. Other devices immediately report the status of the link to the master device. Without passing through other standby devices, the timing of fault failure and loop recovery is therefore faster than STP. ERSP link failure rates can be resolved in milliseconds in ideal conditions.

● Rapid Ethernet Uplink Protection Protocol (REUP): When Spanning Tree Protocol (STP) is deactivated, the Rapid Ethernet Uplink Protection Protocol (REUP) can provide basic link redundancy through fast uplink protection functions and provides subconductor-level error recovery faster than STP.

Software-Defined Networking (SDN)

With a completely new hardware architecture and the latest RGOS11.X Ruijie modular operating system, the RG-S2900G-E V3 Series fully supports OpenFlow 1.3. in collaboration with the Ruijie SDN controller, it forms a large-scale Layer 2 network architecture with ease. A smooth upgrade of the entire network to SDN one is also activated. The switch series therefore greatly simplifies network management and minimizes network deployment savings.

Energy efficiency

Ruijie RG-S2900G-E V3 Series adopts the latest generation of hardware architecture with a highly energy-efficient circuit design and component selection. This device successfully reduces energy consumption. In addition to maximized energy savings, the RG-S2900G-E V3 Series also significantly reduces noise pollution. All models in this series use a variable speed axial fan, which supports intelligent speed adjustment based on the current ambient temperature. All features allow the switch to run smoothly and reduce power consumption and noise pollution at the same time.

The RG-S2900G-E V3 series also supports auto off mode. When an interface shuts down for a period of time, the system will automatically turn it off for extra energy efficiency. The EEE energy saving mode is another excellent feature. The system will automatically change the idle port to an energy saving mode. When there is a new packet, the system will issue a listening stream to the port to continue service.

Easy Network Maintenance

The Ruijie RG-S2900G-E V3 Series supports many features such as SNMP V1 / V2 / V3, RMON, Syslog, and log backup and configuration using USB for routine diagnosis and maintenance. Administrators can use various methods for easier management and such as CLI, web management, Telnet, CWMP (TR069), etc.

The RG-S2900G-E V3 Series fully supports the RG-SNC (Smart Network Commander) which is a network management system launched by Ruijie Networks specifically designed for management and configuration of network performance. With a browser-friendly UI, SNC provides various features such as network topology display, device management, performance monitoring, configuration & software management, real-time alarms and log & report management.

RG-SNC Topology Management

Design for Durability

In corrosive gases, high humidity environments, electronic products will accelerate corrosion, reliability and service life will be shortened. However, the environment of the diffusion of the access switch is different, there may be a lack of temperature and humidity regulation and proximity to pollution sources or the sea. Through a design for durability, the Ruijie RG-S29E V3 series switch can operate stably in a variety of usage environments.

Fanless design: If air flow on the surface of electronic products is too fast, it will increase the level of gas corrosion on the equipment and shorten the life of the equipment. For low-power products, fanless design is the most effective anti-corrosion measure. RG-S2928G-E uses a fanless design to reduce corrosive gases and dust ingress.

Product Specifications from Ruijie RG-S2900G-E V3

Applications from the Ruijie RG-S2900G-E V3

The RG-S2900-E / P V3 gigabit safe and smart access switch is ideal for the following and the same scenario

● Full gigabit access to LAN large-scale companies and institutions, such as government buildings, large companies, energy, and metallurgical companies Full gigabit access to server clusters

● Secure access through flexible and diverse security control policies that can defend and control viruses and network attacks

● Gigabit full access to business systems, such as hospitals, libraries, exhibition centers and websites

This network topology enables the Ruijie RG-S2900-E V3 series to work together with convergence switches (eg RG-S5750-H) in all buildings and core switches (eg RG-N18000 Series) in the core area to provide gigabit services for the desktop. 10G high bandwidth links meet in the core area to meet the needs of users to increase the volume of information in universities, libraries, laboratories, financial centers, offices, and exhibition centers.

Ordering Information from Ruijie RG-S2900G-E V3