The S9700 series terabit routing switches (S9700 for short) are high-end switches designed for nextgeneration campus networks and data centers to implement service aggregation. Based on Huawei Versatile Routing Platform (VRP), the S9700 provides high L2/L3 switching capabilities and integrates diversified services such as MPLS VPN, hardware IPv6, desktop cloud, video conferencing, and wireless access. In addition, the S9700 also provides a variety of reliability technologies including inservice software upgrade, non-stop forwarding, hardware OAM/BFD, and ring network protection. These technologies improve customers' network operation efficiency, maximize the device running time, and reduce customers' total cost of ownership (TCO). An S9700 can be upgraded to an agile switch when it is equipped with X1E cards, the line cards with Huawei's first Ethernet Network Processor (ENP). Agile switches allow customers to make innovations on their networks. The S9700 is available in three models: S9703, S9706, and S9712.
Agile Switch, Enabling Networks to Be More Agile for Services
The S9700 series' native AC capabilities allow enterprises to build a wireless network without additional AC hardware. Each S9700 switch can manage 2,048 APs and 32,768 users. It is the first core switch that provides T-bit AC capabilities, avoiding the performance bottleneck on independent AC devices. The native T-bit AC capabilities help organizations better cope with challenges in the high-speed wireless era.
The S9700 series' unified user management function authenticates both wired and wireless users, ensuring a consistent user experience no matter whether they are connected to the network through wired or wireless access devices. The unified user management function supports various authentication methods, including 802.1x, MAC address, and Portal authentication, and is capable of managing users based on user groups, domains, and time ranges. These functions control user and service management and enable the transformation from device-centered management to user-centered management.
Packet Conservation Algorithm for Internet (iPCA) changes the traditional method that uses simulated traffic for fault location. iPCA technology monitors network quality for any service flow at any network node, at any time, and without extra costs. It can detect temporary service interruptions within one second and can identify faulty ports accurately.
Super Virtual Fabric (SVF) technology can not only virtualize fixed-configuration switches into S9700 switch line cards but also virtualize APs as switch ports. With this virtualization technology, a physical network with core/aggregation switches, access switches, and APs can be virtualized into a "super switch", offering the simplest network management solution.
The S9700 series' Service Chain function can virtualize value-added service capabilities, such as next-generation firewall. Then these capabilities can be used by campus network entities (such as switches, routers, AC, AP, and terminals), regardless of their physical locations. Service Chain provides a more flexible value-added service deployment solution, which reduces equipment investment and maintenance costs.
Innovative CSS Technology
The S9700 switches support switch fabric clustering and service port clustering through cluster switching system (CSS) technology. CSS technology virtualizes multiple physical switches into one logical device that has higher reliability, switching efficiency, and flexibility and is easier to manage.
High reliability: Through hot backup of routes, all control plane and data plane information is backed up and forwarded continuously at Layer 3, which significantly improves the reliability and performance of the device. Inter-chassis link aggregation can also be used to eliminate single-point failure and prevent service interruption.
Flexibility: Service ports can be used as cluster ports so that cluster members can be connected through optical fibers. This expands the clustering distance substantially.
Easy management: The member switches in a cluster are managed using the same IP address, which simplifies network device and topology management, improves operation efficiency, and reduces maintenance costs.
All the key components of the S9700 (including MPUs, power supply units, and fans) use a redundant design, and all modules are hot swappable to ensure stable network operation.
The S9700 supports hardware-based BFD for protocols such as static routing, RIP, OSPF, BGP, ISIS, VRRP, PIM, and MPLS. Hardware-based BFD greatly improves network reliability.
The S9700 supports hardware-based Ethernet OAM, including comprehensive EEE802.3ah, 802.1ag, and ITU-Y. 1731 implementations. Hardware-based Ethernet OAM can collect accurate network parameters, such as transmission latency and jitter, to help customers monitor network operating status in real time and to realize quick detection, location, and switching when a network fault occurs.
The S9700 supports graceful restart to realize nonstop forwarding and ensure reliable and high-speed operation of the entire network.
Powerful Service Processing Capability
The S9700's multi-service routing and switching platform meets requirements for service bearing at the access layer, aggregation layer, and core layer of enterprise networks. The S9700 provides wireless access, voice, video, and data services, helping enterprises build an integrated full service network with high availability and low latency.
The S9700 supports distributed Layer 2/Layer 3 MPLS VPN functions, MPLS, VPLS, HVPLS, and VLL. These functions allow enterprise users to connect to the enterprise network through VPNs.
The S9700 supports many Layer 2/Layer 3 multicast protocols such as PIM SM, PIM DM, PIM SSM, MLD, and IGMP snooping, to support multi-terminal high-definition video surveillance and video conferencing services.
The software platform provides various routing protocols and supports large routing tables for both SME networks and large-scale multinational company networks. Moreover, it supports IPv6, allowing an enterprise network to smoothly migrate to IPv6.
Powerful Network Traffic Analysis
The S9700 supports Netstream and V5/V8/V9 packet formats. The Netstream feature supports aggregation traffic template, real-time traffic collection, dynamic report generation and traffic attribute analysis, and traffic exception report. The S9700 sends traffic statistics logs to master and backup servers to avoid data loss. The S9700 can realize real-time network monitoring and the traffic analysis of the entire network. It also provides applications and analysis including fault pre-detection, effective fault rectification, fast problem handling, and security monitoring, to help customers optimize network structure and adjust service deployment.
Comprehensive Security Measures
NGFW is a next-generation firewall card that can be installed on an S9700. In addition to the traditional defense functions such as firewall, identity authentication, and Anti-DDoS, the NGFW supports IPS, anti-spam, web security, and application control functions.
The S9700 provides comprehensive NAC solutions for enterprise networks. It supports MAC address authentication, portal authentication, 802.1x authentication, and DHCP snooping-triggered authentication. These authentication methods ensure security of various access modes such as dumb terminal access, mobile access, and centralized IP address allocation.
The S9700 is the industry leader in integrated security solutions. It uses a 2-level CPU protection mechanism, and protects the CPU by separating the data plane and control plane. Additionally, the S9700 defends against DoS attacks and unauthorized access, and prevents control plane overloading.
Comprehensive IPv6 Solution
The S9700 software and hardware platforms support IPv6 and the S9700 has been granted an IPv6 Network Access License and the IPv6 Ready Logo Phase 2 Certification by the Ministry of Industry and Information Technology.
The S9700 supports various IPv6 unicast routing protocols (such as IPv6 static routing, RIPng, OSPFv3, IS-ISv6, and BGP4+) and multicast features (such as MLD v1/v, MLD snooping, PIM-SM/DMv6, and PIM-SSMv6), which provides customers with comprehensive IPv4/IPv6 solutions.
The S9700 supports various IPv4-to-IPv6 technologies: IPv6 manual tunnels, 6-to-4 tunnel, ISATAP tunnel, GRE tunnel, and IPv4-compatible automatic tunnels. These technologies ensure smooth transition from an IPv4 network to an IPv6 network.
Innovative Energy Conservation Design
The S9700 uses a rotating ventilation channel to improve heat dissipation efficiency. In addition, it uses a variable current chip to dynamically adjust the power according to traffic. Ports can go into a sleeping state when there is no traffic to reduce power consumption.
The S9700 uses intelligent fan-speed adjustment technology. The fan module monitors and controls the temperature in each zone, and adjusts the fan speed of in each zone individually. This technology extends the service life of each fan and reduces power consumption.
The S9700 supports IEEE 802.3az Energy Efficient Ethernet, provides a low-power idle mode for the PHY line card, and switches to a lower power state during low link utilization.
Application in Large-Scale Campus Networks The S9703 supports distributed IPv4/IPv6/MPLS wire-speed switching and provides high-density 10G data throughput for core and convergence nodes on enterprise campus networks. The S9703 supports the wireless AC module and can integrate it with the campus core device, saving on network investments. The S9703 also supports hardware CPU queues to protect the enterprise core against DDoS attacks and security threats.
Applications in Large-Scale Data Centers The S9703 functions as a high-density 10G core and convergence node in large-scale data centers, helping enterprises build highly reliable, non-blocking, virtualized data center networks. The S9703 deploys various technologies to ensure uninterrupted services, including ISSU upgrades, IP FRR, hardware-level BFD, NSF, VRRP, and E-Trunk. Using the CSS and integrated load balancing solutions, the S9703 improves network efficiency and reduces network maintenance costs.
Packet forwarding rate
Wireless network management
AP access control, AP region management, and AP profile management
Radio profile management, uniform static configuration, and centralized dynamic management
Basic WLAN services, QoS, security, and user management
Unified user management
802.1x, MAC address, and Portal authentication
Traffic- and time-based accounting
User authorization based on user groups, domains, and time ranges
iPCA quality awareness
Marking real service packets to obtain real-time count of dropped packets and packet loss ratio
Counting number of dropped packets and packet loss ratio on devices and L2/L3 networks
Virtualizing access switches (ASs) and APs into one logical device to simplify management and maintenance
Two layers of ASs allowed in an SVF system
Third-party devices allowed between SVF parent and clients
Access, trunk, and hybrid interfaces supported
QinQ and selective QinQ
MAC address-based VLAN assignment
Automatic learning and aging of MAC addresses
Static, dynamic, and blackhole MAC address entries
Packet filtering based on source MAC addresses
MAC address limiting based on ports and VLANs
STP (IEEE 802.1d), RSTP (IEEE 802.1w), and MSTP (IEEE 802.1s)
BPDU protection, root protection, and loop protection
IPv4 routing protocols, such as RIP, OSPF, BGP, and IS-IS
IPv6 dynamic routing protocols, such as, RIPng, OSPFv3, ISISv6, and BGP4+
IGMP v1/v2/v3, IGMPv1/v2/v3 snooping
PIM-SM, PIM-DM, PIM-SSM
Multicast traffic control
Multicast protocol packet suppression
Supports MPLS VPN/VLL/VPLS
LACP and E-Trunk
VRRP and BFD for VRRP
BFD for BGP/IS-IS/OSPF/static route
NSF, and GR for BGP/IS-IS/OSPF/LDP
TE FRR and IP FRR
Ethernet OAM (IEEE 802.3ah and 802.1ag) (hardware-based)
In-Service Software Upgrade (ISSU)
Traffic classification based on Layer 2 headers, Layer 3 protocols, Layer 4 protocols, and 802.1p priority
Actions of ACL, CAR, re-mark, and schedule
Queue scheduling algorithms, such as SP, WRR, DRR, SP+WRR, and SP+DRR
Congestion avoidance mechanisms, such as WRED and tail drop
Configuration and maintenance
Console, Telnet, and SSH login
Network management protocols, such as SNMPv1/v2/v3
File uploading and downloading using FTP and TFTP
BootROM upgrade and remote upgrade
User operation logs
Security and management
802.1x authentication and Portal authentication
RADIUS and HWTACACS authentication for login users
Command line authority control based on user levels, preventing unauthorized users from using commands
Defense against DoS attacks, TCP SYN Flood attacks, UDP Flood attacks, broadcast storms, and heavy traffic attacks
1K CPU queues
Ping and traceroute functions based on ICMP packets
Remote network monitoring
Interoperable with VBST (compatible with PVST/PVST+/RPVST)
Interoperable with LNP (similar to DTP)
Interoperable with VCMP (similar to VTP)
Supports IEEE 802.3az: Energy Efficient Ethernet (EEE)
Dimensions (W x D x H)
442 mm × 476 mm × 175 mm
442 mm × 476 mm × 442 mm
442 mm × 476 mm × 664 mm
Chassis weight (empty)
Power supply capability of the equipment
Packaging & Shipping
Trade terms: FOB,CIF,CFR,etc
Price Terms: L/C,D/P,T/T,Western Union,PAYPAL
Payment Terms: T/T in advance
MOQ: 1 pcs
FOB Price:US $1 - 1,000 / Piece
Lead time: Within 5 working days after receipt payment.
Shipment: Express, Air, Sea
Supply capability: 200 Piece/Pieces per Week
Sample availability: Yes (not free)
Package information: carton package with the original package
1.We can provide detail documents and remote help for device installation and configuration.
2.Warranty: 1 year. ( After the quality guarantee period began to charge appropriate maintenance service fee.)
3.Our company promises goods enjoy full return due to quality problem since goods delivered within 7 days or 15 days , returned goods must keep original state and it’s accessories are complete.
Shanghai Chucheng Information and Technology Co., LTD, Our company have 10 years experience in communication industry.
As the core partner of Huawei, CISCO,ZyXEL, ZTE,Grandstream and New Rock , we are capable to provide you with the good quality, reasonable price and considerate service . If you have any needs about them, you are welcome to contact us now for more details!