Ruijie RG-CS86 Series Multi-GE Switches

RG-CS86 series switches are next-generation multi-GE switches developed by Ruijie. With an advanced hardware architecture and Ruijie modular operating system, the RG-CS86 delivers fast hardware processing and good operation experience.The RG-CS86 offers flexible multi-GE access (1GE/2.5GE/5GE/10GE) and high-performance 10GE/40GE uplink ports, catering for demands of high-density access and high-performance aggregation.The RG-CS86 delivers robust performance, sound end-to-end service quality, and rich security functions for the aggregation layer of large-scale networks, the core layer of small- and medium-scale networks, and campus data centers. This satisfies requirements on high speed, security, and intelligence for enterprise campus networks.

Product Features

Multi-GE Access

Recent years have witnessed the rapid evolution of the Ethernet interface standards from 10BASE-T and 100BASE-T to 1000BASE-T (IEEE 802.3ab) that is widely applied to devices covering PCs and APs. However, as the Wi-Fi 6 technology has been introduced, APs can delivers an uplink rate of 10 Gbps, posing an increasing challenge to GE network devices. The RG-CS86 provides 100M/1000M/2.5G/5GBASE-T and 100M/1000M/2.5G/5G/10GBASE-T Ethernet ports in auto-negotiation mode which can better adapt to Wi-Fi 6 APs.

High-Power PoE Power Supply

In the previous scenarios of PoE remote power supply, only PoE (IEEE 802.3af) and PoE+ (IEEE 802.3at) standards are available. If the power exceeds 30 W, PoE cannot be used for power supply. Instead, power cables must be deployed for mains power supply, and even EHV power deployment is required. This imposes tremendous challenges on deployment costs and period, maintenance, and security during the deployment. In compliance with the IEEE802.3bt standard, the RG-CS86 adopts high-power PoE power supply and achieves a maximum PoE output of 90 W through a single Ethernet port to significantly improve user experience.

IPv4/IPv6 Dual-Stack Multi-Layer Switching

The hardware of the RG-CS86 supports IPv4/IPv6 dual stacks and multilayer line-rate switching to differentiate and process IPv4 and IPv6 packets. The RG-CS86 also provides flexible IPv6 network communication solutions for users to perform network planning or maintain network status quo based on various IPv6 network demands. The RG-CS86 supports a wide range of IPv4 routing protocols, covering IPv4 static routing, RIP, OSPFv2, IS-ISv4, and BGP4. You can select appropriate routing protocols to flexibly build networks based on various network environments. Meanwhile, the RG-CS86 also supports abundant IPv6 routing protocols, including IPv6 static routing, RIPng, OSPFv3, IS-ISv6, and BGP4+. A routing protocol can be selected flexibly to upgrade the live network to an IPv6 network or establish a new IPv6 network.

Virtual Switching Unit

The RG-CS86 supports Virtual Switch Unit (VSU). VSU enables multiple physical devices to be connected through aggregate links and virtualized into one logical device. The devices use the same IP address, Telnet process, and CLI for management, and support automatic version check and automatic configuration. In this context, a network administrator only manages one logical device, improving working efficiency and experience.

Simplified management: The network administrator can manage multiple switches uniformly without connecting to each switch for separate configuration and management.

Simplified network topology: A VSU serves as a switch on a network and connects to peripheral devices through aggregate links. Therefore, no Layer 2 loop occurs and MSTP configuration is not required. Various control protocols can run on the VSU.

Fault recovery within milliseconds: A VSU connects to peripheral devices through aggregate links. If a fault occurs on one device or member link in the VSU, data and services can be switched to another member link within 30 ms.

High scalability: Devices can be added to or removed from a virtualized network, without affecting normal operation of other devices.

Sound Security Protection Policies

The RG-CS86 can effectively defend against virus spread and hacker attacks through multiple inherent mechanisms, such as DoS attack defense, IP scanning attack defense, validity check of ARP packets, and multiple hardware-based ACLs.The hardware-based IPv6 ACL can easily control the access of IPv6 users at the network edge even if there are IPv6 users on an IPv4 network. The switch allows IPv4 and IPv6 users to coexist and can control access permissions of IPv6 users, for example, restricting access to sensitive resources on the network.

The RG-CS86 provides a unique hardware CPU protection mechanism: CPU Protection Policy (CPP). The CPP enables the switch to classify data traffic sent to the CPU, process the traffic by queue priority, and apply the rate limit to traffic as required. The CPP fully protects the CPU from being occupied by unauthorized traffic, malicious attacks, and resource consumption, which ensures the security of the CPU and the switch.

The RG-CS86 and its ports can be flexibly bound to a user’s IP address and MAC address, which strictly restricts the access of users connected to the ports or the switch.

DHCP snooping enables the RG-CS86 to receive DHCP Response messages only from trusted ports and prevent spoofing from unauthorized DHCP servers. With DHCP snooping, the switch dynamically monitors ARP packets, checks users’ IP addresses, and discards unauthorized packets that do not match binding entries. This effectively prevents ARP spoofing and source IP address spoofing.

The switch also supports the device access control through source IP-based Telnet, which can prevent unauthorized users and hackers from maliciously attacking and controlling the switch, and enhance the network management security of the switch.

Through the Secure Shell (SSH) and Simple Network Management Protocol version 3 (SNMPv3), the switch can encrypt management information in Telnet and SNMP processes. This ensures information security of management devices and prevents hackers from attacking and controlling the devices.

The switch rejects unauthorized network access and enables authorized network access by employing multi-element binding, port security, time-based ACL, and data stream-based rate limiting. The RG-CS86 can strictly control user access to enterprise networks and campus networks and restrict the communication of unauthorized users.

The RG-CS86 supports the Network Foundation Protection Policy (NFPP) to enhance its security. By isolating attack sources, the policy can protect the processor and channel bandwidth resources of the switch. This ensures normal packet forwarding and protocol status.

High Reliability

The RG-CS86 supports built-in redundant power modules and fan modules. The power and fan modules are hot swappable without affecting the normal operation of the switch. The switch also provides fault detection and alarms for power and fan modules. The fan speed can be automatically adjusted based on temperature changes to better adapt to various environments. The RG-CS86 adopts the front-to-rear airflow to enhance the cooling efficiency. By using overcurrent, overvoltage, and overheating protection technologies, the RG-CS86 achieves device-level and link-level reliability protection

The RG-CS86 supports Spanning Tree Protocols (IEEE 802.1D, IEEE 802.1w, and IEEE 802.1s) to achieve fast convergence, improve the fault tolerance capability, and ensure stable network operation and link load balancing. The RG-CS86 effectively utilizes network channels to improve the usage of aggregate links.

The Virtual Router Redundancy Protocol (VRRP) effectively facilitates network stability for the switch

With the Rapid Link Detection Protocol (RLDP), the RG-CS86 can quickly detect the link connectivity and unidirectional optical fiber links. Through port loop detection, the switch can prevent network failures caused by the loops that occurs in the scenario where an unauthorized port is connected to hubs

When STP is disabled, the Rapid Ethernet Uplink Protection Protocol (REUP) can still provide basic link redundancy and millisecond-level fault recovery faster than STP

The RG-CS86 supports Bidirectional Forwarding Detection (BFD) for upper-level protocols (such as routing protocols), rapidly detecting connectivity of the forwarding path between two routing devices. BFD greatly shortens the convergence time for the upper-level protocols upon link status changes.

Powerful Multi-Service Capability

The RG-CS86 supports the IPv4 and IPv6 multicast functions as well as multiple multicast protocols, including IGMP snooping, IGMP, Multicast Listener Discovery (MLD), Protocol Independent Multicast (PIM), PIM for IPv6, and Multicast Source Discovery

Protocol (MSDP). The switches provide multicast service support for IPv4 networks, IPv6 networks, and IPv4 and IPv6 coexistent networks.

The IGMP source port and source IP address check function supported by the RG-CS86 can effectively eliminate unauthorized multicast sources and enhance the network security.

Sound QoS Policies

The RG-CS86 is capable of classifying and controlling various flows including MAC flows, IP flows, and application flows, to implement fine-grained bandwidth control, forwarding priority, and other flow policies. Furthermore, the switch can provide services based on applications and QoS levels required by different applications

The Differentiated Services (DiffServ) model supports IEEE 802.1p priorities, IP ToS values, traffic filtering based on Layer 2 to Layer 7 information, Strict Priority (SP), Weighted Round Robin (WRR), and other QoS policies.

Energy-Saving Design

The RG-CS86 adopts the next-generation hardware architecture, and advanced energy-efficient circuit design and components, to reduce energy consumption and noise. RG-CS86 series switches are equipped with variable-speed axial fan modules to intelligently control the fan speed based on the ambient temperature, which reduces the power consumption and noise while ensuring stable operation of the switch

In the networking where PoE power supply is adopted, the RG-CS86 provides automatic and energy-saving modes.

Flexible Device Management Modes

Ruijie Cloud Make Your Business Easy

The RG-CS86 series switches support Ruijie cloud APP to management, can bring customers simplified O&M management and user experience:

Ease of networking: Only a mobile phone available for Internet access is required to complete the device deployment. The switches support plug and play.

Ease of O&M: The O&M is simple. The network can be managed at any time, and You can manage the network wherever you go. VLAN visualized on Ruijie Cloud, lower technical barriers from configuration to management.

Ease of monitoring: You can view the network health and device details (system status, traffic trend, connectivity, power supply status, etc.) at any time. Faults and user network experience are visible, alarms are pushed in time once they are generated, and logs are generated to facilitate event traceback

The RG-CS86 series switches also support the Simple Network Management Protocol (SNMP), Remote Network Monitoring (RMON), Syslog, Sampled Flow (sFlow), log and configuration backup using USB flash drives for routine network diagnosis and maintenance. Administrators can also use CLI, web-based management, telnet, CPE WAN Management Protocol (CWMP(TR069) based zero configuration and other methods to manage and maintain devices conveniently.