Ruijie XS-S1960-10GT2SFP-P-H - Switch PoE+ gestionable L2+

L2+ manageable switch, 10 ports 10/100/1000BASE-T, 2 ports 100/1000BASE-X SFP (not combined), port 1-8 PoE/PoE+ 125 watts compatible; Managed by Ruijie Cloud, Web-UI and CLI. Ruijie Cloud Service lifetime license included.

The XS-S1960 series is the latest access switch series for the SMB market. They are fixed-configuration Gigabit Ethernet switches that provide enterprise-class access switching for branch offices; they are manageable switches that offer advanced Layer 2 and basic Layer 3 features, as well as high-power PoE technology (IEEE 802.3bt). The switches adopt a new web interface and can be managed on the free Ruijie Cloud platform, providing easy device onboarding, configuration, monitoring and troubleshooting.
Translated with www.DeepL.com/Translator (free version)

Easy network maintenance

The XS-S1960-H series supports rich functions such as SNMP V1 / V2 / V3, RMON, Syslog, and log and configuration backup via USB for diagnostics and routine maintenance. Administrators can use a wide variety of methods for easier management, such as CLI, web management, CWMP (TR069), etc. With a friendly browser user interface, administrators can do most of their work, such as performance monitoring, configuration.

Translated with www.DeepL.com/Translator (free version)

The XS-S1960-H series is fully compatible with Ruijie Cloud, which is a cloud-based service that helps users manage and control devices and networks. You can monitor the network and configure or control devices remotely.

Comprehensive security policies

The XS-S1960-H series effectively prevents and controls the spread of viruses and hacker attacks with various inherent mechanisms, such as anti-Dos attacks, hacker IP scanning, illegal ARP packet checking, and multiple hardware ACL policies.

• Industry-leading CPU protection mechanism: The CPU Protection Policy (CPP) provides policies to protect a switch's CPU. In network environments, various attack packets are propagated, which can cause high CPU usage of switches, affect protocol execution and even difficulties in switch management. To this end, switch CPUs must be protected, i.e., traffic control and priority-based processing must be performed for multiple incoming packets to guarantee the processing capabilities of switch CPUs.
  
  • CPP can effectively prevent malicious attacks on the network and provide a clean environment for legitimate protocol packets.
    
  • CPP is enabled by default. It provides protection during the entire switch operation.
    
• IP / MAC binding: implement flexible binding of a port or the system to users' IP address and MAC address, strictly limiting user access on a port or the entire system.
  
• DHCP probing: enable DHCP responses only from trusted ports; based on DHCP listening and dynamically monitoring ARP and verifying user's IP address, directly discard illegal packets inconsistent with binding entries to effectively prevent ARP fraud and source IP address fraud.
  
• Secure Shell and SNMPv3: Secure Shell (SSH) and Simple Network Management Protocol v3 (SNMPv3) cryptographic network protocol ensure the security of management information. It provides services such as multi-element binding, port security, time-based ACL and bandwidth rate limiting to block unauthorized users.
  
• NFPP: The Network Foundation Protection Policy (NFPP) provides protections for switches. Malicious attacks are always found in the network environment. These attacks place a heavy load on the switches, resulting in high CPU utilization and operational problems. These attacks are as follows:
  
• Denial-of-service (DoS) attacks can consume a lot of memory, inputs or other resources of a switch, which will result in termination of system service.
  
• Massive attack traffic is directed at the CPU, taking up all of the CPU's bandwidth. In this case, the CPU is unable to process normal protocol traffic and management traffic, resulting in protocol disruption or management failure. Forwarding in the data plane will also be affected and the entire network will become abnormal.
  

A large number of CPU-targeted attack packets consume massive CPU resources, which makes the CPU heavily loaded and thus influences the management and performance of the device.

NFPP can effectively protect the system from these attacks. In the face of attacks, NFPP maintains the proper operation of various system services with low CPU load, ensuring the stability of the entire network.

Virtual Switch Unit (VSU)

Virtual Switch Unit technology, or VSU for short, enables the interconnection of several physical devices by virtualizing them into one logical device. The logical device uses a single IP address, Telnet process, command line interface (CLI) and allows for automatic version inspection and configuration. From the user's perspective, the benefits are multiplied by the work efficiency and improved user experience of multiple devices operating at the same time. And they only have to manage one device. VSU technology also offers multiple benefits downstream:

• Easy management: Administrators can centrally manage all devices at the same time. It is no longer necessary to configure and manage switches one by one.
  
• Simplified typology: The VSU is considered as a switch in the network. By connecting the aggregation link and the peripheral network devices, the MSTP protocol is unnecessary as there is no Layer 2 loop network. All protocols operate as a single switch.
  
• Millisecond failover: the VSU and peripheral devices are connected through the aggregation link. In case of failure of any device or link, failover to another member link requires only 50 to 200 ms.
  
• Exceptional scalability: the network is hot-swappable, any device leaving or joining the virtualized network causes no impact on other devices.
  

High reliability

The XS-S1960-H series supports 802.1d, 802.1w and 802.1s spanning tree protocols to ensure fast convergence, enhances fault tolerance capabilities, ensures stable network operation and link load balancing, and provides redundant links.

• Rapid Link Detection Protocol (RLDP): detects link connectivity and whether a fiber-optic link is normal at both ends, and supports port-based loop detection function to avoid network failures caused by loops generated by connecting devices such as hubs to ports.
  
• Ethernet Ring Protection Switching (ERPS) (G.8032): implements loop blocking and link recovery on the master device. Other devices report link status directly to the master device. Without going through other standby devices, the failover time for loop break and loop recovery is therefore faster than STP. The link failover rate of ERSP can be completed in milliseconds under ideal conditions.
  
• Fast Ethernet Uplink Protection Protocol (REUP): When Spanning Tree Protocol (STP) is disabled, the Fast Ethernet Uplink Protection Protocol (REUP) can provide basic link redundancy through the Fast Uplink Protection function and provide sub-second level fault recovery faster than STP.
  

Design for durability

In the corrosive gas, high humidity environment, electronic products will accelerate corrosion, reliability and service life will be shortened. However, access switch implementation environments are different, there may be lack of temperature and humidity regulation and close to the source of pollution or sea. Thanks to the durability design, such as conformal coating, XS-S1960-H series switch can stably operate in a variety of deployment environments.