The S5700 10G core Series Layer 3 Stackable Managed Switches are designed for , Small Medium Enterprises (SMEs), larger Enterprises, and Internet Service Providers (ISPs). They deliver high performance, flexibility, fault tolerance, and advanced software features for maximum return on investment. With Gigabit Ethernet RJ45 and SFP ports, 10 GbE SFP+ ports, advanced security features, and advanced Quality of Service (QoS), the DF5700 switches can operate as core, distribution or access layer switches. High port densities, switch stacking, and easy management make the DF5700 L3 Series switches ideal for a wide variety of business networking applications.
【Product introduction】
• 24 10/100/1000Mbps RJ45 Ports
• 4 Combo 10/100/1000 Mbps RJ45 Ports
• 4 10G SFP+ Slots
• 1 10/100/1000Mbps Management RJ45 Port
• Support APOLLO Cloud Management
• BCM high-end chip, supporting three-tier management
• Support RIP, OSPF, static router, DHCP server, DHCP relay
• Support port management, link aggregation, STP, loop protection, IMGP, 802.1X
• Support for IPv4/IPv6
• Support Web, CLI, SNMP (V1/V2/V3)
【APOLLO cloud management】
• Three management methods: local management; cloud management; mobile terminal management.
• Nine core modules: cloud topology; resource visualization; risk warning, prevention; real-life map, rapid fault location; cloud operation and maintenance, configuration, upgrade batch processing; multi-user, multi-dimensional authority, hierarchical control; AI blessing, Intelligent scheduling; business analysis, decision-making can be relied upon; open interface, customer business import.
【Powerful multi-service processing capabilities】
• Supports OSPF dynamic routing protocol to solve routing problems after subnetting of large complex networks and simplify network configuration.
• Support RIP dynamic routing protocol to solve routing problems after subnetting of small and medium-sized networks and simplify network configuration.
• Supports static routing. The administrator manually configures routing entries to implement communication between different network segments. It is simple, efficient, and reliable.
• Support DHCP server to assign IP addresses to hosts on the network.
• Supports DHCP relay. Switches on different interfaces or subnets can also obtain IP addresses and reduce the number of DHCP servers.
• Support proxy ARP to allow hosts on different physical networks on the same network segment to communicate normally.
• Supports IEEE 802.1Q VLANs, MAC VLANs, IP VLANs, and voice VLANs. You can flexibly assign VLANs according to different requirements.
• Supports GVRP to implement dynamic VLAN distribution, registration, and attribute propagation. This reduces manual configuration and ensures correct configuration.
• Supports the VLAN VPN function. The public network access device encapsulates the outer VLAN tag for the private network packets of the user, so that the packets carry two VLAN tags across the public network.
• Support QoS, support port-based, 802.1P-based and DSCP-based three priority modes and WFQ, SP, WRR, SP+WRR four queue scheduling algorithms.
• Supports ACLs by configuring matching rules, processing operations, and time permissions to filter packets and provide flexible security access control policies.
• Supports IGMP V1/V2 multicast protocol and supports IGMP Snooping to meet the requirements of multi-terminal HD video surveillance and video conference access.
• Supports PoE management POE power limitation, POE chip status check, setting PoE port priority, and custom PoE power supply time period.
• Support hardware watchdog, the device has a suspended animation state and automatically restarts to resume normal working state.
• Support IPV6 Ping, IPv6 Tracert, IPv6 Telnet IPV6 SSH IPv6 SSL.
【Complete security protection mechanism】
• Supports IP address, MAC address, and port ternary binding to filter packets.
• Supports ARP protection, and protects against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks.
• Support IP source protection to prevent illegal address spoofing including MAC spoofing, IP spoofing, and MAC/IP spoofing.
• Supports DoS protection and supports attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding.
• Supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports based on the authentication results.
• Supports port security. When the port learns the maximum number of MAC addresses, it stops learning to prevent MAC address attacks and control port network traffic.
• Support DHCP Snooping to effectively prevent private DHCP servers and ensure the legality of the DHCP server.
【Various reliability protection】
• Support loop protection, automatically detect switch loop status, and block loop ports.
• Supports the STP/RSTP/MSTP spanning tree protocol to eliminate Layer 2 loops and implement link backup.
• Supports spanning tree security to prevent devices in the spanning tree network from being subjected to various forms of malicious attacks.
• Supports static aggregation and dynamic aggregation, which effectively increases link bandwidth, implements load balancing, link backup, and improves link reliability.
【Easy operation and maintenance】
• Supports various management and maintenance methods such as Web network management, CLI command line (Console, Telnet), and SNMP (V1/V2/V3).
• Supports encryption methods such as HTTPS, SSL V3, and SSHV1/V2 for more secure management.
• Support RMON, system log, and port traffic statistics for network optimization and transformation.
• Supports cable detection, ping detection, and Tracert detection operations to easily analyze failed network nodes.
• Support LLDP to facilitate the network management system to query and judge the communication status of the link.
• Supports CPU monitoring, memory monitoring, ping detection, Tracert detection, and cable detection.
Interface
4 Combo 10/100/1000 Mbps RJ45 Ports
4 10G SFP+ Slots
1 10/100/1000Mbps Management RJ45 Port
1 RJ45 Console Port
1 Mini-usb Console Port
1 USB 2.0
Forwarding rate (Mpps)
96Mpps
Packet buffer (byte)
2 MB
Route table
100-240V/50-60Hz2K（IPv4/1024、IPv6/1024）
Stacking
Physical stacking Stackable 9 switches Virtual stack Aggregate 32 switches Support ring/daisy chain stack connection
Power
100~240VAC, 50/60Hz
Power redundancy
Dual power
Dimensions ( W x D x H )
440*320*44mm
Standard Compliance
IEEE 802.3 10Base-T Ethernet IEEE 802.3u 100Base-Tx Ethernet IEEE 802.3ab 1000Base-T Ethernet IEEE 802.3z 1000 Base-X IEEE 802.3az EEE support IEEE 802.3x flow control IEEE 802.3ad LACP aggregation IEEE 802.1AB LLDP/LLDP-MED IEEE 802.1D Spanning Tree Protocol(STP) IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) (RSTP) IEEE 802.1Q VLAN tagging IEEE 802.1p CoS support IEEE 802.1X Port authentication Resilience and Availability IEEE 802.1D Spanning Tree Protocol(STP) IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) IEEE 802.3ad LACP
IP Routing
BGP BGPv4/v4+ 4bytes AS Text/MD5 for BGPv4 VRF-Lite IPv4 Static Route RIPv1/v2 OSPFv2 BGPv4 Bidirectional Forwarding Detection (BFD) for OSPF OSPF OSPF v2/v3 OSPF passive interface Stub/NSSA area OSPF equal cost route Text/MD5 for OSPFv2 Static Route Max. 512 IPv4 entries Max. 256 IPv6 entries IPv4/IPv6 Default Route PBR (Policy-based Route) IPv4/v6 Static Route RIP VRRP RIPv1/v2/ng
Multicast
L3 Multicast IGMPv1/v2/v3 MLDv1/v2 IGMP/MLD Proxy DVMRPv3 PIM-DM/SM/SSM/SDM SSM Mapping for IPv4/IPv6 Multicast Source Discovery Protocol (MSDP) L2 Multicast MLD Snooping MLD v1/v2 Snooping Supports up to 4K MLD groups3 Host-based MLD Snooping Fast Leave Supports 64 static MLD groups MLD Snooping Querier Per VLAN MLD Snooping MLD Proxy Reporting IGMP Snooping IGMP v1/v2/v3 Supports up to 8K IGMP groups3 Supports 64 static IGMP groups Per VLAN IGMP Snooping IGMP Snooping Querier Host-based IGMP Snooping Fast Leave PIM Snooping
VLAN
802.1Q Double VLAN (Q-in-Q) Port-based Q-in-Q Selective Q-in-Q Port-based VLAN MAC-based VLAN Subnet-based VLAN VLAN Group Max. 4K VLAN groups Max. 4094 VIDs Multicast VLAN (ISM VLAN for IPv4/IPv6) Voice VLAN Auto Surveillance VLAN VLAN Trunking GVRP: Up to 4K dynamic VLANs Asymmetric VLAN Rate limiting: policy-based/port Based bandwidth control with 64kbps granularity Port-based egress traffic shaping IEEE 802.1p with 8 priority queues Per port DSCP/DSCP to 802.1p prioritymapping Congestion control on all ports Selective Q-in-Q
Security
802.1X Port security Layer 2 MAC filtering Layer 3 IP filtering Layer 4 TCP/UDP socket filtering Static MAC forwarding Multiple RADIUS servers Multiple TACACS+ servers 802.1x VLAN and 802.1p assignment by RADIUS Login authentication by RADIUS Login authentication by TACACS+ TACACS+ accounting Authorization on RADIUS Authorization on TACACS+ SSH v2 SSL Intrusion lock MAC freeze MAC search MAC filtering DHCP snooping ARP inspection Static IP-MAC-Port binding Policy-based security filtering Port isolation Limited MAC number per port IP source guard Guest VLAN IEEE 802.1Q tag-based and port-based VLAN GVRP automatic VLAN memberregistration Full range 4K PVID support Limited MAC number per port IP filtering TCP/UDP socket filtering BPDU transparency IEEE 802.1X port-based Authentication Enhanced 802.1X compensation Assignment over VLAN Layer 2 protocol tunneling Root guard BPDU guard Storm control: Broadcast, multicast Unknown unicast (DLF)
QoS
802.3x flow control 802.1p Class of Service (SPQ, WFQ,WRR, hybrid-SPQ combination capable) DiffServ (DSCP) Port-based rate limiting (ingress/egress) Rate limiting per IP/TCP/UDP per port Policy-based rate limiting Layer 2 Multicast
IPv6
IPv6 over Ethernet (RFC 2464) IPv6 addressing architecture (RFC 4291) Dual stack (RFC 4213) ICMPv6 (RFC 4443) Path MTU (RFC 1981) Minimum path MTU size of 1280 (RFC5095) Encapsulation for maximum PMTU of 1500 Neighbor discovery (RFC 4861) DHCPv4/v6 server/relay Default DHCP client mode
Device Management
SNMP v1, v2c, v3 SNMP trap group RMON (1, 2, 3, 9) Custom default Syslog (IPv4/IPv6) ICMP echo/echo reply IEEE 802.1AB LLDP IEEE 802.1AB LLDP-MED Display port utilization Web interface Management through Console Telnet, SNMP Remote firmware upgrade by FTP/Web/TFTP Configuration saving and retrieving Multiple logins supported Configure clone CLI DHCP relay per VLAN DHCP Client option 12 DHCP Auto-configuration DHCP Auto-image DHCP Relay option 60/61/62/18/37/125 DHCP/DHCPv6 Local Relay DHCP Server NTP Port mirroring: ingress/egress/bothport mirroring
Link Aggregation
Link Aggregation IEEE 802.3ad LACP link aggregation Static port trunking Up to 16 aggregation groups, 8 ports per group randomly selected Link aggregation algorithm source/destination IP address
MIB
RFC 1066 TCP/IP-based MIB RFC 1213, 1157 SNMPv2c/v3 MIB RFC 1493 bridge MIB RFC 1643 Ethernet MIB RFC 1757 RMON group 1, 2, 3, 9 RFC 2011, 2012, 2013 SNMPv2 MIB RFC 2233 SMIv2 MIB RFC 2358 Ethernet-like MIB RFC 2674 bridge MIB extension RFC 2819, 2925 remote management RFC 3621 power Ethernet MIB RFC 4022 management information Base for transmission control protocol RFC 4113 management information Base for user datagram protocol RFC 4292 IP forwarding table MIB RFC4293 Management Information Base (MIB) for IP Cable diagnostic MIB
Pre-sales Business Consulting
After-sales Technical Support 
