H3C S5120V3-LI is a Layer 2 Ethernet switch product independently developed by New H3C Technologies Co., Ltd. (H3C). It is a second-generation smart managed switch designed for network environments that require high performance, high port density, and easy installation.
H3C S5120V3-LI Ethernet switch provides 10/100/1000Base-T adaptive Ethernet ports or SFP optical ports. In enterprise networks, it can be used as an access device to provide Gigabit to desktops; in metropolitan area networks or networks of industrial users, it can provide Gigabit access to end users or tandem low-end switches downwards, and connect to high-capacity L3 switches through Gigabit fiber or link aggregation upwards.
H3C S5120V3-LI Ethernet switch series supports the innovative Intelligent Resilient Framework (IRF) technology, which allows users to connect up to nine S5120V3-LI switches to form a logically independent entity to build a highly reliable, easily scalable, and manageable new intelligent network.
H3C S5120V3-LI Ethernet switch series includes the following models:
S5120V3-28S-PWR-LI: 24*10/100/1000TX + 4*SFP+
S5120V3-52S-PWR-LI: 48*10/100/1000TX + 4*SFP+
S5120V3-28S-HPWR-LI: 24*10/100/1000TX + 4*SFP combo+ 4*SFP+

Abundant service capabilities

H3C S5120V3-LI Ethernet switch series supports Internet broadband access and offers Gigabit port access and uplink interface for small and medium-sized enterprises. It supports rich features such as Jumbo Frame, 802.1X, MAC authentication, port security, LACP, 4K VLANs, up to 16K MAC address and blackhole MAC address, and abundant functions such as port-based priority auto-mapping of Layer 2 and Layer 3, port-based mirror, redirection, port isolation, access control lists, port speed limit and rich Ethernet IPv6 features.

IRF2 (Second Generation Intelligent Resilient Framework)

H3C S5120V3-LI switch series supports IRF2 technology that allows multiple physical devices it connects to be virtualized into one logical device. In this way, users can manage and use these multiple devices as a single device. IRF can bring the following benefits to users:
Simplified management: Once an IRF is built, users can log into the unified logical device by connecting to any port of any member. By configuring a single device, users can manage the whole intelligent resilient system and all member devices in the system, without physically connecting to each member device for configuration and management.
Simplified services: Various control protocols running on the logical device formed by IRF are running as if they are on one device. For example, routing protocols perform the unified calculation as one device. With the application of cross-device link aggregation technology, the original spanning tree protocol will be replaced. This avoids a great number of protocol packet exchanges among the members, simplifies network operation, and shortens the convergence time during network flapping.
Elastic extension: Elastic extension can be achieved according to user needs to ensure user investment. And the new device can achieve a ''hot swap'' when adding or leaving IRF, without affecting the normal operation of other devices.
High reliability: The high reliability of IRF is embodied in three aspects, specifically, links, devices, and protocols. Not only the physical ports of members can be aggregated, but also the physical links between the IRF system and the upper or lower layer devices can be aggregated, and thus the reliability of links is increased through a multi-link backup. An IRF system comprises multiple member devices. As soon as the master fails, the IRF system elects a new master immediately to prevent service interruption and implement 1:N backup. The IRF system has real-time protocol hot backup functions responsible for backing up configuration information of the protocol to all other member devices, achieving 1:N protocol reliability.
High performance: For high-end switches, performance and port density will be limited by the hardware structure. But for an IRF system, its performance and port density are the sum of the performance and port numbers of all devices within the system. Therefore, the IRF technology can easily expand the switching capability of the device and the density of user ports several times, thereby greatly improving the performance of the device.
Easy management: The entire resilient framework shares one IP. This simplifies network device and topology management, improves operating efficiency, and reduces maintenance costs.

Comprehensive security control policies

ARP attacks and ARP viruses are major threats to LAN security, so the H3C S5120V3-LI switch series comes with diverse ARP protection functions such as ARP Detection to challenge the legitimacy of clients, validate the ARP packets, and set a speed limit for ARP to prevent ARP swarm attacks from targeting CPU.
H3C S5120V3-LI switch series supports EAD (End User Admission Domination) function. With the background system, EAD integrates terminal security policies, such as anti-virus and patching, into network access control and access right control policies to form a cooperative security system. By checking, isolating, fixing, managing, and monitoring access terminals, EAD changes passive, single point network protection to active, comprehensive network protection, and changes separate management to centralized management, enhancing the network capability for preventing viruses, worms, and new threats.
It supports multiple authentication methods such as 802.1X authentication and centralized MAC authentication, and flexibly adapts to the multiple authentication requirements of the network environment.

Rich QoS policies

H3C S5120V3-LI switch series supports packet filtering at Layer 2 through Layer 4 and traffic classification. It provides a flexible queue-scheduling algorithm and allows settings to be configured based on ports and queues at the same time. SP, WRR, and SP+WRR modes are supported. It also supports ACL in the inbound and outbound direction, traffic policing, and port and traffic mirroring in the outbound and inbound direction, to monitor packets on specified ports for network detection and troubleshooting.

Outstanding management capacity

H3C S5120V3-LI switch series supports Simple Network Management Protocol (SNMP) v1/v2/v3, which can be managed by iMC. This series supports CLI command line, Web-based network management, and Telnet for easier device management, as well as encryption methods like SSH2.0 for more secure management.
H3C S5120V3-LI switch series supports VLAN classification based on MAC address, which is a good solution for intelligent and flexible management of mobile office; combined with ACL policies in the global or VLAN mode, it simplifies configuration and minimizes hardware resources.

Layer 3 routing features

H3C S5120V3-LI switch series provides rich layer 3 routing features and supports static routing, RIP, RIPng, and OSPF V1/V2/V3.