HUAWEI eKit S310 Series S310-48P4S Managed L3 Switch

Flexible Ethernet Networking
- In addition to traditional Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol (MSTP), eKitEngine S310 series switches support the latest Ethernet Ring Protection Switching (ERPS) standard in the industry. ERPS is defined in ITU-T G.8032. It provides millisecond-level protection switching based on traditional Ethernet MAC and bridging functions.
- eKitEngine S310 series switches support the Smart Link function, which implements backup of uplinks. One switch can connect to multiple aggregation switches through multiple links, significantly improving reliability of access devices.

Diversified Security Control
- eKitEngine S310 series switches support multiple security authentication modes including MAC address authentication and 802.1X authentication, and dynamically deliver user policies (VLAN, QoS, and ACL). eKitEngine S310 series switches support port-based 802.1X authentication, MAC address authentication, and multi-mode authentication.
- eKitEngine S310 series switches provide a series of mechanisms to defend against DoS attacks and user-targeted attacks. DoS attacks are targeted at switches and include SYN flood, Land, Smurf, and ICMP flood attacks. Usertargeted attacks include bogus DHCP server attacks, IP/MAC spoofing attacks, DHCP request flood attacks, and attacks with variable DHCP CHADDR values in packets.
- eKitEngine S310 series switches can generate and maintain DHCP snooping binding entries and discard invalid packets that do not match the binding entries. DHCP snooping trusted and untrusted ports can be specified to ensure that users connect only to the authorized DHCP server.
- eKitEngine S310 series switches support strict ARP entry learning, which prevents ARP spoofing from exhausting ARP entries and ensures Internet access of authorized users.

Easy Operations and Maintenance
- eKitEngine S310 series switches can be managed and maintained using SNMPv1, SNMPv2c, SNMPv3, CLI, web system, or SSHv2.0. Additionally, they support remote network monitoring (RMON), multiple log hosts, port traffic statistics collection, and network quality analysis, facilitating network optimization and reconstruction.
- eKitEngine S310 series switches support the MUX VLAN function. MUX VLAN contains a principal VLAN and multiple subordinate VLANs. Subordinate VLANs can be classified into group VLANs and separate VLANs. Subordinate VLANs can communicate with the principal VLAN. Ports on a subordinate group VLAN can communicate with each other, whereas ports on a subordinate separate VLAN cannot communicate with each other. Additionally, eKitEngine S310 series switches support VLAN-based Spanning Tree (VBST).

Intelligent Stack (iStack)
- eKitEngine S310 series switches support iStack. Multiple switches that support stacking can be logically stacked into one virtual switch.
- Member switches in a stack implement redundancy backup to improve device reliability and use inter-device link aggregation to improve link reliability.
- iStack provides high network scalability. You can increase ports, bandwidth, and processing capacity of a stack by simply adding member switches to the stack.
- iStack also simplifies device configuration and management. After a stack is set up, multiple physical switches are virtualized into one logical device. You can log in to any stack member switch to manage all the member switches in the stack.
- Some models of S310 series switches support two dedicated stack ports, which free uplink ports and do not need to be configured.

PoE Power Supply
PoE models of eKitEngine S310 series switches provide the following capabilities:
- Fast PoE: PoE switches can supply power to PDs within seconds upon power-on, which is different from common switches that supply power to PDs in 1 to 3 minutes after power modules are installed. When a PoE switch restarts due to a power failure, it continues to supply power to PDs immediately after being powered on without waiting until it completes the restart. This greatly shortens the power-off time of PDs.
- Perpetual PoE: When a PoE switch restarts (for example, during software upgrade), it continues to supply power to downstream PDs, ensuring uninterrupted PoE power supply.

Smart Upgrade
- Based on Huawei Online Upgrade Platform (HOUP), eKitEngine S310 series switches support smart upgrade. They obtain the version upgrade path from the HOUP and download the new system software. The upgrade process is highly automated as it supports one-click upgrade. In addition, this feature supports system software pre-loading, which greatly shortens the upgrade time and reduces the service interruption time.
- Smart upgrade greatly simplifies device upgrade operations, making it possible for customers to upgrade versions by themselves. This feature helps customers reduce considerable maintenance costs. In addition, the upgrade policy of the HOUP is used to standardize the upgrade path, which greatly reduces the risk of upgrade failure.

Cloud Management
- Huawei eKit app allows users to configure, monitor, and inspect switches on the cloud, reducing onsite deployment and O&M manpower costs and decreasing network OPEX.
- eKitEngine S310 series switches support both cloud management and on-premise management modes. These two management modes can be flexibly switched as required to achieve smooth evolution while maximizing return on investment (ROI).