Huawei S6720-HI Series Switches

Product Brochure
 S6720-HI Series Switches
Product Overview
Huawei S6720-HI series switches are fixed agile switches with 10GE downlink and 40GE/100GE uplink
ports, and are applicable to enterprise campus, carrier, university, and government networks.
The S6720-HI delivers abundant agility features, software-defined functions and on-demand
service changes. With services and network convergence as the core, the S6720-HI supports the AC
function to manage APs. In addition, the switch provides the free mobility feature to ensure consistent
user experience, and the Super Virtual Fabric (SVF) feature to virtualize the entire network into one
device.

Models and Appearances

The following table lists the available models in the S6720-HI series.

S6720-50L-HI-48S • 48 *10 Gig SFP+,6 *40 Gig QSFP+ or 44 *10 Gig SFP+,4 *40
Gig QSFP+,2 *100 Gig QSFP28
• Dual pluggable power modules, 600 W AC or 350 W DC (no
equipped power modules by default)
• Switching capacity: 2.56Tbps

S6720-30L-HI-24S
• 24 *10 Gig SFP+,4 *40 Gig QSFP+,2* 100 Gig QSFP28
• Dual pluggable power modules, 600 W AC or 350 W DC (no
equipped power modules by default)
• Switching capacity: 2.56Tbps

1 Huawei S6720-HI Series Switch Product

Product Features and Highlights

Delivering abundant services more agilely

• The S6720-HI integrates the AC function, so customers do not need to buy independent AC devices or
hardware components. An S6720-HI switch can manage 1K APs adapting to the fast growth of wireless
services.
• With the unified user management function, the S6720-HI authenticates both wired and wireless users,
ensuring a consistent user experience no matter whether they are connected to the network through
wired or wireless access devices. The unified user management function supports various authentication
methods, including 802.1X, MAC address, and Portal authentication, and is capable of managing users
based on user groups, domains, and time ranges. These functions visualize user and service management
and boost the transformation from device-centric management to user-centric management.
Providing fine granular network management more agilely
• The S6720-HI uses the Packet Conservation Algorithm for Internet (iPCA) technology that changes the
traditional method of using simulated traffic for fault location. iPCA technology can monitor network
quality for any service flow anywhere, anytime, without extra costs. This cutting-edge fault detection
technology turns "extensive management" to "fine granular management."
• The S6720-HI supports Two-Way Active Measurement Protocol (TWAMP) to accurately check any IP link
and obtain the entire network's IP performance. This protocol eliminates the need of using a dedicated
probe or a proprietary protocol.
• The S6720-HI supports SVF and functions as a parent switch. With this virtualization technology, a
physical network with the "Small-sized core/aggregation switches + Access switches + APs" structure can
be virtualized into a "super switch", offering the industry's simplest network management solution.
Comprehensive VPN technologies
• The S6720-HI supports Multiprotocol Label Switching (MPLS), and can be used as access devices of
high-quality enterprise leased lines. The S6720-HI allows users in different VPNs to connect to the same
switch and isolates users through multi-instance routing. Users in multiple VPNs connect to the premises
equipment (PE) through the same physical port on the switch, which reduces the cost on VPN network
deployment.
Flexible Ethernet networking
• In addition to traditional Spanning Tree Protocol (STP), Rapid Spanning Tree Protocol (RSTP), and Multiple
Spanning Tree Protocol (MSTP), the S6720-HI supports Huawei-developed Smart Ethernet Protection
(SEP) technology and the latest Ethernet Ring Protection Switching (ERPS) standard. SEP is a ring
protection protocol specific to the Ethernet link layer, and applies to various ring network topologies,
such as open ring topology, closed ring topology, and cascading ring topology. This protocol is reliable,
easy to maintain, and implements fast service switching within 50 ms. ERPS is defined in ITU-T G.8032.
It implements millisecond-level protection switching based on traditional Ethernet MAC and bridging
functions.
• The S6720-HI supports Smart Link and Virtual Router Redundancy Protocol (VRRP), which implement
backup of uplinks. One S6720-HI switch can connect to multiple aggregation switches through multiple
links, significantly improving reliability of access devices.

Huawei S6720-HI Series Switch Product 2

 Various security control methods

• The S6720-HI supports 802.1X authentication, MAC address authentication, Portal authentication, and
hybrid authentication, and can dynamically deliver user policies such as VLANs, QoS policies, and access
control lists (ACLs). It also supports user management based on user groups.
Mature IPv6 features
• The S6720-HI is developed based on the mature, stable VRP and supports IPv4/IPv6 dual stacks, IPv6
routing protocols (RIPng, OSPFv3, BGP4+, and IS-IS for IPv6). With these IPv6 features, the S6720-HI
can be deployed on a pure IPv4 network, a pure IPv6 network, or a shared IPv4/IPv6 network, helping
achieve IPv4-to-IPv6 transition.
Intelligent stack (iStack)
• The S6720-HI supports the iStack function that combines multiple switches into a logical switch.
Member switches in a stack implement redundancy backup to improve device reliability and use inter-
device link aggregation to improve link reliability. iStack provides high network scalability. You can
increase a stack's ports, bandwidth, and processing capability by simply adding member switches. iStack
also simplifies device configuration and management. After a stack is set up, multiple physical switches
can be virtualized into one logical device. You can log in to any member switch in the stack to manage
all the member switches in it.
Cloud-based management
• The Huawei cloud management platform allows users to configure, monitor, and inspect switches on
the cloud, reducing on-site deployment and O&M manpower costs and decreasing network OPEX.
Huawei switches support both cloud management and on-premise management modes. These two
management modes can be flexibly switched as required to achieve smooth evolution while maximizing
return on investment (ROI).

VXLAN
• VXLAN is used to construct a Unified Virtual Fabric (UVF). As such, multiple service networks or tenant
networks can be deployed on the same physical network, and service and tenant networks are isolated
from each other. This capability truly achieves 'one network for multiple purposes'. The resulting benefits
include enabling data transmission of different services or customers, reducing the network construction
costs, and improving network resource utilization. The S6720-HI series switches are VXLAN-capable and
allow centralized and distributed VXLAN gateway deployment modes. These switches also support the
BGP EVPN protocol for dynamically establishing VXLAN tunnels and can be configured using NETCONF/
YANG.
Clock synchronization
• The S6720-HI supports Ethernet Synchronization and the IEEE 1588v2 protocol,which implements low-
cost, high-precision, and high-reliability time and clock synchronization. This feature can meet strict
requirements of power and transportation industry customers on time and clock synchronization.l
OPS (available on all OPS-supported switches)
• Open Programmability System (OPS) is an open programmable system based on the Python language. IT
administrators can program the O&M functions of a switch through Python scripts to quickly innovate
functions and implement intelligent O&M.

3 Huawei S6720-HI Series Switch Product

Product Specifications

Item S6720-50L-HI-48S S6720-30L-HI-24S

48 *10 Gig SFP+,6 *40 Gig QSFP+ or 44

24 *10 Gig SFP+,4 *40 Gig QSFP+,2*
Fixed ports *10 Gig SFP+,4 *40 Gig QSFP+,2 *100
100 Gig QSFP28
Gig QSFP28

64K MAC address entries

IEEE 802.1d standards compliance
MAC MAC address learning and aging
Static, dynamic, and blackhole MAC address entries
Packet filtering based on source MAC addresses

4K VLANs
Guest VLANs and voice VLANs
GVRP
VLAN MUX VLAN
VLAN assignment based on MAC addresses, protocols, IP subnets, policies, and
ports
VLAN mapping

Static routes, RIP v1/2, RIPng, OSPF, OSPFv3, IS-IS, IS-ISv6, BGP, BGP4+, ECMP,
IP routing
routing policy

VLAN-Based Spanning Tree (VBST), working with PVST, PVST+, and RPVST
Interoperability Link-type Negotiation Protocol (LNP), similar to DTP
VLAN Central Management Protocol (VCMP), similar to VTP

AP access control, AP domain management, and AP configuration template

management
Radio management, unified static configuration, and dynamic centralized
Wireless service
management
WLAN basic services, QoS, security, and user management
CAPWAP, tag/terminal location, and spectrum analysis

RRPP ring topology and RRPP multi-instance

Smart Link tree topology and Smart Link multi-instance, providing millisecond-level
protection switchover
SEP
Ethernet loop protection
ERPS (G.8032)
BFD for OSPF, BFD for IS-IS, BFD for VRRP, and BFD for PIM
STP (IEEE 802.1d), RSTP (IEEE 802.1w), and MSTP (IEEE 802.1s)
BPDU protection, root protection, and loop protection

MPLS L3VPN
MPLS L2VPN (VPWS/VPLS)
MPLS
MPLS-TE
MPLS QoS

Huawei S6720-HI Series Switch Product 4

 Item S6720-50L-HI-48S S6720-30L-HI-24S

Neighbor Discover (ND)

PMTU
IPv6 Ping, IPv6 Tracert, IPv6 Telnet
IPv6 features ACLs based on source IPv6 addresses, destination IPv6 addresses, Layer 4 ports, or
protocol types
Multicast Listener Discovery snooping (MLDv1/v2)
IPv6 addresses configured for sub-interfaces, VRRP6, DHCPv6, and L3VPN

IGMP v1/v2/v3 snooping and IGMP fast leave

Multicast forwarding in a VLAN and multicast replication between VLANs
Multicast load balancing among member ports of a trunk
Controllable multicast
Multicast
Port-based multicast traffic statistics
IGMP v1/v2/v3, PIM-SM, PIM-DM, and PIM-SSM
MSDP
Multicast VPN

Rate limiting in the inbound and outbound directions of a port

Packet redirection
Port-based traffic policing and two-rate three-color CAR
Eight queues on each port
DRR, SP, and DRR+SP queue scheduling algorithms
QoS/ACL WRED
Re-marking of the 802.1p and DSCP fields of packets
Packet filtering at Layer 2 to Layer 4, filtering out invalid frames based on the
source MAC address, destination MAC address, source IP address, destination IP
address, TCP/UDP source/destination port number, protocol type, and VLAN ID
Queue-based rate limiting and shaping on ports

Hierarchical user management and password protection

DoS attack defense, ARP attack defense, and ICMP attack defense
Binding of the IP address, MAC address, port number, and VLAN ID
Port isolation, port security, and sticky MAC
MAC Forced Forwarding (MFF)
Blackhole MAC address entries
Limit on the number of learned MAC addresses
IEEE 802.1X authentication and limit on the number of users on a port
Security AAA authentication, RADIUS authentication, and HWTACACS authentication
NAC
SSH V2.0
HTTPS
CPU protection
Blacklist and whitelist
Attack source tracing and punishment for IPv6 packets such as ND, DHCPv6, and
MLD packets
IPSec for management packet encryption

LACP
E-trunk
Ethernet OAM (IEEE 802.3ah and IEEE 802.1ag)
Reliability ITU-Y.1731
DLDP
LLDP
BFD for BGP, BFD for IS-IS, BFD for OSPF, BFD for static routes

VXLAN functions, VXLAN L2 and L3 gateways，BGP EVPN

VXLAN VXLAN configuration using NETCONF/YANG
BFD and OAM by hardware

5 Huawei S6720-HI Series Switch Product

Item S6720-50L-HI-48S S6720-30L-HI-24S

Acting as the parent node to vertically virtualize downlink switches and APs as one
device for management
Two-layer client architecture
SVF
ASs can be independently configured. Services not supported by templates can be
configured on the parent node.
Third-party devices allowed between SVF parent and clients

Marking service packets to obtain the packet loss ratio and number of lost packets
in real time
iPCA
Measurement of the number of lost packets and packet loss ratio on networks and
devices

Cloud-based management
Virtual cable test
SNMP v1/v2c/v3
RMON
Web-based NMS
Management and
System logs and alarms of different severities
maintenance
GVRP
MUX VLAN
802.3az Energy Efficient Ethernet (EEE)
NetStream
Dying gasp upon power-off

Dimensions (W x D x H) 442 mm x 420 mm x 43.6 mm 442 mm x 420 mm x 43.6 mm

AC:
Rated AC voltage: 100 V to 240 V AC; 50/60 Hz
Max. AC voltage: 90 V to 264 V AC; 47–63 Hz;
Input voltage
DC:
Rated DC power: –48 V to 60 V DC
Max. DC voltage: –38.4 V to 72 V DC

Maximum power
279 W 232 W
consumption

Power consumption
194 W 138 W
(30% traffic load)

0–1800 m altitude: 0°C to 45°C

Operating temperature 1800–5000 m altitude: The operating temperature reduces by 1°C every time the
altitude increases by 220 m.

Relative humidity 5% to 95% (non-condensing)

Heat dissipation Heat dissipation with fan, intelligent fan speed adjustment

Huawei S6720-HI Series Switch Product 6

 Applications

Enterprise campus networks

Huawei S6720-HI is the first fixed agile switch with 10GE downlink and 40GE/100GE uplink ports. It
supports in-depth wired and wireless convergence and unified management on devices, users, and services.
The S6720-HI can be used as the core device in an enterprise branch network or a small- or middle-sized
campus network, or as the aggregation device in a large-sized campus network. The switch helps achieve a
manageable and highly reliable enterprise campus network with scalable services.

Large campus Small- and medium-sized

campus
Core
Core S6720-HI
S12700/7700

10GE
40GE/100GE

Access
Aggregation switch
S6720-HI

Access switch AP AP AP

Ordering Information
The following table lists ordering information of the S6720-HI series switches.

Model Product Description

S6720-50L-HI-48S (48 *10 Gig SFP+,6 *40 Gig QSFP+ or

S6720-50L-HI-48S 44 *10 Gig SFP+,4 *40 Gig QSFP+,2 *100 Gig QSFP28;
without power module)

S6720-30L-HI-24S (24 *10 Gig SFP+,4 *40 Gig QSFP+,2*

S6720-30L-HI-24S
100 Gig QSFP28; without power module)

PAC-600WA-B 600 W AC power module

PDC-350WA-B 350 W DC power module

For more information, visit http://e.huawei.com or contact the local Huawei sales office.

7 Huawei S6720-HI Series Switch Product

Copyright © Huawei Technologies Co., Ltd. 2018. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei
Technologies Co., Ltd.

Trademark Notice
, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.
Other trademarks, product, service and company names mentioned are the property of their respective owners.

General Disclaimer
The information in this document may contain predictive statements including,
without limitation, statements regarding the future financial and operating results,
future product portfolio, new technology, etc. There are a number of factors that
could cause actual results and developments to differ materially from those
expressed or implied in the predictive statements. Therefore, such information is
provided for reference purpose only and constitutes neither an offer nor an
acceptance. Huawei may change the information at any time without notice.