Ruijie RG-S6120-20XS4VS2QXS Switch de Core
Switch de Core 20 puertos SFP+ 4 puertos SFP28 y 2 puertos QSFP+
The RG-S6120 series switches are next-generation 10G Ethernet switches with high performance and high security recently launched by Ruijie. By adopting advanced hardware architecture design and Ruijie's new RGOS 12th gen modular operating system, the switches deliver faster hardware processing performance and a more convenient operating experience.
The RG-S6120 series provides 32 10G maximum fiber access and supports high-performance 10/25 / 40G port uplink, which fully meets user requirements for high-density access and high-performance aggregation.
The RG-S6120 series switches provide full end-to-end, high-performance QoS and flexible, feature-rich security configurations for large-scale network aggregation, as well as small and medium-sized network cores, meeting the needs of high-speed, high-security, intelligent enterprise networks.
Fuente de alimentación se vende por separado: RG-PA150I-F 1 Ud. requerida, 2 Uds redundancia.
Featured Features:
- Up to 32 10G Base-X access ports and 4 x 25G and 2 x 40G uplinks.
- 20 SFP+ +4SFP28 + 2QSFP+
- 20 x 10Gb + 4 x 25Gb + 2 x 40Gb
- VLAN/Port Isolation/STP/RSTP/RSTP/ACL/QoS/RIP/BGP4
- LACP/DHCP Snoop/IGMP
- Snoop/RIP/OSPFv2/OSPFv3
- Built-in advanced Layer 3 routing support
- Power and fan redundancy support (hot-swappable)
- Robust hardware design with high reliability (30-year MTBF warranty)
IPv4 / IPv6 dual-stack multi-layer switching
The RG-S6120 series provides hardware support for IPv4 / IPv6 dual-stack multilayer switching at line rates, supports hardware IPv4 and IPv6 packet distinction and processing, and provides flexible IPv6 network communication solutions according to IPv6 network requirements for network planning or maintaining the current state of the network. The switches also support a wide range of IPv4 routing protocols, including static routing, RIP, OSPFv2, IS-ISv4, BGP4, etc., allowing users to select appropriate protocols for network construction in different environments. The series also supports an abundant list of IPv6 routing protocols, such as static routing, RIPng, OSPFv3, IS-ISv6, BGP4+, etc., allowing users to select the appropriate protocols to upgrade an existing network to IPv6 or build a new IPv6 network.
Virtual Switch Unit (VSU)
Virtual Switch Unit, or VSU, technology, in short, enables the interconnection of multiple physical devices through link aggregation by virtualizing them into a logical device. The logical device uses a single IP address, Telnet process, command line interface (CLI) and allows automatic version inspection and configuration for management. From the user's perspective, it manages only one device, but realizes the work efficiency and user experience provided by multiple devices operating at the same time.
Link aggregation can be 10G ports or dedicated stacked cards to protect the user's investment.
- Easy management: Administrators can centrally manage all devices at the same time. It is no longer necessary to configure and manage switches one by one.
- Simplified typology: The VSU is considered as a switch in the network. By connecting the aggregation link and the peripheral network devices, the MSTP protocol is unnecessary as there is no Layer 2 loop network. All protocols operate as a single switch.
- Millisecond failover: the VSU and peripheral devices are connected through the aggregation link. In case of failure of any device or link, failover to another member's link requires only 50 to 200 ms.
- Exceptional scalability: the network is hot-swappable. Any device leaving or joining the virtualized network has no impact on other devices.
Comprehensive security policies
The RG-S6120 series effectively prevents and controls virus propagation and hacker attacks with various inherent mechanisms, such as anti-DoS attacks, hacker IP scanning, illegal ARP packet checking, and multiple hardware-based ACL policies.
ACL IPv6 basada en hardware: controle el acceso de los usuarios de IPv6 a los dispositivos periféricos incluso cuando los usuarios de IPv6 existen dentro de una red IPv4. Permite la coexistencia de usuarios de IPv4 e IPv6 en la red y controla el acceso a los recursos porHardware-based IPv6 ACL: Control IPv6 users' access to peripheral devices even when IPv6 users exist within an IPv4 network. Enables coexistence of IPv4 and IPv6 users on the network and controls access to resources by IPv6 users, such as restricting access to sensitive network resources.
parte de los usuarios de IPv6, como restringir el acceso a recursos sensibles de la red.
Hardware-based CPU protection mechanism: The CPU protection policy (CPP) distinguishes data streams sent to the CPU, which are processed according to their priorities, and implements bandwidth limitations as needed. In this way, users can prevent the CPU from being occupied by illegal traffic and protect against malicious attacks to ensure the security of the CPU and the switch.
IP/MAC binding: enable flexible binding of a port or the switch to users' IP address and MAC address, strictly limiting users' access on a port or the entire switch.
DHCP probing: allow DHCP responses from trusted ports only to prevent spoofing by unauthorized DHCP servers. Based on DHCP eavesdropping, switches dynamically monitor ARP packets, verify user IP addresses and directly discard illegal packets that do not match binding entries to effectively defend against ARP spoofing and source IP address spoofing.
IP-based Telnet access control: Prevent unauthorized users or hackers from attacking or controlling devices, thereby strengthening the security of device network management.
SSH and SNMPv3: Implement Secure Shell (SSH) and Simple Network Management Protocol v3 (SNMPv3) to encrypt management information in Telnet and SNMP processes, ensuring the security of management device information and preventing hackers from attacking or controlling devices.
Access control: Prevents unauthorized users from accessing the network through multiple functions including multi-element binding, port security, time-based ACL and flow-based rate limiting. The RG-S6120 series greatly strengthens visitor access control and restricts unauthorized user access to meet the needs of enterprise and campus networks.
NFPP: NFPP (Network Core Protection Policy) enhances switch security. It protects the switch processor and channel bandwidth by isolating attacking sources. Therefore, normal packet forwarding and protocol state is guaranteed.
High reliability design
The RG-S6120 series adopts multi-level hardware fault isolation and protection mechanism, 30-year MTBF guarantee. RG-S6120 series switches offer integrated power modules and fan module redundancy. Both power modules and fan modules can be hot-swapped without affecting the normal operation of the device. In addition, the switches also support fault detection and alarms for power modules and fan modules and automatically adjust fan speed according to temperature changes to better adapt to the environment. The devices support front/rear ventilation to improve heat dissipation efficiency and provide multiple reliability protections at the equipment level and link level. Over-current protection, over-voltage protection and over-temperature protection technology are also adopted.
Hardware-level dual-flash chip
Lightning-related failures account for approximately 5% of total failures throughout the year. The RG6120 series switches use dual-flash chips to store boot software to implement hardware-level redundancy backup and prevent boot failures.
Fault Isolation Technology
A short circuit in an optical module can cause an optical port failure or even a failure or burnout of the switch. The Ruijie S6120 series switch design for optical port protection circuits, a short circuit in an optical module can be detected quickly and the faulty module is isolated to avoid any impact on other ports and the whole device.
Apart from the robust hardware design, powered by Ruijie gen 12th RGOS, all Ruijie enterprise switches incorporate a variety of high-availability network functions for different scenarios and applications:
Spotlight high availability features
Spanning tree protocols: the series supports 802.1D, 802.1w and 802.1s spanning tree protocols to ensure fast convergence, improve fault tolerance capabilities, ensure stable network operation, link load balancing and reasonable use of network channels, and increase redundant link utilization.
Virtual Router Redundancy Protocol (VRRP): The series supports Virtual Router Redundancy Protocol (VRRP), which effectively ensures network stability.
Rapid Link Detection Protocol (RLDP): The series supports Rapid Link Detection Protocol (RLDP), which can perform rapid link connectivity detection and unidirectional link detection of fiber-optic links, and supports port-based loop detection to prevent network failures caused by loops generated by incorrect connection of devices such as hubs to ports.
Fast Ethernet Uplink Protection Protocol (REUP): When Spanning Tree Protocol (STP) is disabled, Fast Ethernet Uplink Protection Protocol (REUP) can provide basic link redundancy through Fast Uplink Protection and provide millisecond faster failover than STP.
Bidirectional Forwarding Detection (BFD): provides a method for upper-layer protocols, such as routing protocols, to quickly detect the connectivity of forwarding paths between 2 routing devices, greatly reducing the convergence time of upper-layer protocols in the event of link state changes.
Exceptional business support performance: supports IPv4 and IPv6 multicast with rich multicast protocols, e.g. IGMP Snooping, IGMP, MLD, PIM, PIM for IPv6, MSDP, etc. The switches offer multicast service for IPv4 network, IPv6 network and IPv4 / IPv6 coexistent network. IGMP source port and source IP checking are also supported to effectively eliminate unauthorized multicast sources and improve network security.
Rich QoS policies
The RG-S6120 series offers multilayer traffic classification and flow control for MAC traffic, IP traffic, application traffic, etc. and performs various traffic policies, such as refined bandwidth control and forwarding priority. The series also supports customized QoS functions for various applications.
The DiffServ-based QoS system supports a complete set of QoS policies covering 802.1P, IP TOS, Layer 2 to 7 filtering, SP, WRR, etc., and realizes the multiservice QoS logic of the entire network system.
Energy saving
RG-S6120 series switches adopt next-generation hardware architecture, advanced power-saving circuit design and components to save users' power and reduce noise pollution. The series adopts variable-speed axial fans so that devices can intelligently control the fan speed according to the current temperature to ensure stable device operation while reducing power consumption and noise.
Easy network maintenance
The RG-S6120 series supports rich functions such as SNMP, RMON, Syslog, logs and configuration backup via USB for routine network diagnosis and maintenance. Administrators can use a wide variety of management and maintenance methods to facilitate device management, such as command line interface (CLI), web management, Telnet, etc.
