Fixed ports: 24 × 10/100/1000 Base T Ethernet ports
Memory and processor: 1 MB flash; Packet buffer size: 4 Mb
Mounting and enclosure: Mounts in an EIA standard 19-inch telco rack (hardware included); Desktop mounting
Throughput : up to 35.7 Mpps (64-byte packets)
Switching capacity : 48 Gbps
MAC address table size : 8192 entries
Environment
-Operating temperature :  32°F to 104°F (0°C to 40°C)
-Operating relative humidity:  5% to 95%, noncondensing
-Nonoperating/Storage temperature:  -40°F to 158°F (-40°C to 70°C)
-Nonoperating/Storage relative humidity :  5% to 95%, noncondensing
-Altitude :  up to 16,404 ft (5 km)
-Acoustic:  Power
Electrical characteristics
Frequency : 50/60 Hz
Voltage : 100—240 VAC, rated
Current : 0.3/1.8 A
Maximum power rating : 160 W 124 W PoE+

Fixed ports:24 × 10/100/1000Base-T Ethernet ports 4 × 100/1000 BASE-X SFP ports
Management Ethernet ports: 1 RJ-45 console port to access limited CLI poi
Fan: 2
Switching capacity : 56gbps
Packet forwarding rate: 42mpps
MAC table : 8k
Lightning protection level: 6 KV
PoE power: Maximum per switch 190W Maximum per port 30W
AC input voltage AC：100V～240V AC，50/60Hz
Power consumption : ≤ 235W
Operating temperature: 0ºC to 40ºC
Short-term operating temperature : 0ºC to 45ºC
Operating humidity : 5% RH to 95% RH, non-condensing

802.11ac Wave 1 standards compliance, delivering services simultaneously on 2.4G and 5G radios; 300 Mbit/s at 2.4 GHz; 867 Mbit/ s at 5 GHz; and 1.167 Gbit/s for the device.
ˉ PoE power supply in compliance with IEEE 802.3af/at for easy installation.
ˉ Support for High Density Boost, delivering industry-leading multi-user performance.
ˉ User access control based on user group policies, supporting up to 256 access users.
ˉ Fat AP and Fit AP working modes.
ˉ AP4030DN: uses built-in omnidirectional antennas with 4 dBi gain at 2.4 GHz radio and 6 dBi gain at 5 GHz radio.

802.11ac GE access
Huawei APs use the latest-generation 802.11ac chip with the highest performance and strongest coverage capability. They support the 80MHz bandwidth mode. Frequency bandwidth increase brings extended channels and more sub-carriers for data transmission, and a 2.16 times higher rate. With 2 x 2 MIMO support, the APs make a major leap in Wi-Fi access from 100M to GE.
High Density Boost technology
Huawei uses the following technologies to address challenges in high-density scenarios, including access problems, data congestion, and poor roaming experience:

• Interference suppression
ˉ Huawei’s Clear Channel Assessment (CCA) optimization technology reduces the possibility of air port resources shared by multiple devices, allows higher user access, and improves the throughput.
• Air port performance optimization
ˉ In high-density scenarios where many users access the network, the increased number of low-rate STAs consumes more resources on the air port, reduces the AP capacity, and lowers user experience. Therefore, Huawei APs will check the signal strength of STAs during access and reject access from weak-signal STAs. At the same time, the APs monitor the rate of online STAs in real time and forcibly disconnect low-rate STAs so that the STAs can reassociate with APs that have stronger signals. Terminal access control technology can increase air port use efficiency and allow access from more users.
• 5G-prior access
ˉ The APs support both 2.4G and 5G frequency bands. The 5G-prior access function enables an AP to steer STAs to the 5 GHz frequency band first, which reduces load and interference on the 2.4 GHz frequency band, improving user experience.
• Load balancing between APs
ˉ After the load balancing function is enabled, the AC distributes users evenly to APs based on user quantity and traffic volume. Traffic load is therefore balanced among APs to ensure stable AP performance.
• Smart roaming
ˉ Smart roaming technology is based on the 802.11k and 802.11v technologies and allows STAs to connect to APs with stronger signals, improving user experience and the overall performance of the wireless network.
Wired and wireless dual security guarantee
To ensure data security, Huawei APs integrate wired and wireless security measures and provide comprehensive security protection.
• Authentication and encryption for wireless access
ˉ The APs support WEP, WPA/WPA2–PSK, WPA/WPA2–802.1x, and WAPI authentication/encryption modes to ensure security of the wireless network. The authentication mechanism is used to authenticate user identities so that only authorized users can access network resources. The encryption mechanism is used to encrypt data transmitted over wireless links to ensure that the data can only be received and parsed by expected users.
• Analysis on non-Wi-Fi interference sources
ˉ Huawei APs can analyze the spectrum of non-Wi-Fi interference sources and identify them, including baby monitors, Bluetooth devices, digital cordless phones (at 2.4 GHz frequency band only), wireless audio transmitters (at both the 2.4 GHz and 5 GHz frequency bands), wireless game controllers, and microwave ovens. Coupled with Huawei eSight, the precise locations of the interference sources can be detected, and the spectrum of them displayed, enabling the administrator to remove the interference in a timely manner.
• Rogue device monitoring
ˉ Huawei APs support WIDS/WIPS, and can monitor, identify, defend, counter, and perform refined management on the rogue devices, to provide security guarantees for air interface environment and wireless data transmission.
• AP access authentication and encryption
ˉ The AP access control ensures validity of APs. The CAPWAP link protection and DTLS encryption provide security assurance, improving data transmission security between the AP and the AC.

• Automatic radio calibration
ˉ Automatic radio calibration allows an AP to collect signal strength and channel parameters of surrounding APs and generate AP topology according to the collected data. Based on interference from authorized APs, rogue APs, and non-Wi-Fi interference sources, each AP automatically adjusts its transmit power and working channel to make the network operate at the optimal performance. In this way, network reliability and user experience are improved.
Automatic application identification
Huawei APs support smart application control technology and can implement visualized control on Layer 4 to Layer 7 applications.
• Traffic identification
ˉ Coupled with Huawei ACs, the APs can identify over 800 common applications in various office scenarios. Based on the identification results, policy control can be implemented on user services, including priority adjustment, scheduling, blocking, and rate limiting to ensure efficient bandwidth resource use and improve quality of key services.
• Traffic statistics collection
ˉ Traffic statistics of each application can be collected globally, by SSID, or by user, enabling the network administrator to know application use status on the network. The network administrator or operator can implement visualized control on service applications on smart terminals to enhance security and ensure effective bandwidth control.

Technical specifications

Interface type
1 x 10/100/1000M self-adaptive Ethernet interface (RJ45, PoE) 1 x Management console port (RJ45)

LED indicator
Indicates the power-on, startup, running, alarm, and fault status of the system.

Power specifications

Power input
• 12 V DC ± 10%
• PoE power supply: –48 V DC (in compliance with IEEE 802.3af/at)

Maximum power consumption
10.2 W NOTE The actual maximum power consumption depends on local laws and regulations.

Environmental specifications

Operating temperature
–10oC to +50oC
Storage temperature
–40oC to +70oC
Operating humidity
5% to 95% (non-condensing)
Dustproof and waterproof grade
IP41
Altitude
–60 m to +5000 m
Atmospheric pressure
70 kPa to 106 kPa

Radio specifications

Antenna type
AP4030DN: built-in antennas (horizontal beamwidth 360°) AP4130DN: external dual-band antennas

Antenna gain
• AP4030DN: 4 dBi (2.4 GHz); 6 dBi (5 GHz)
• AP4130DN: 2.5 dBi (2.4 GHz); 4 dBi (5 GHz)

Maximum number of VAPs for each radio
16

Maximum number of users
≤ 256

Maximum transmit power
20 dBm NOTE The actual transmit power depends on local laws and regulations.

Power increment
1 dBm

Receiver sensitivity
2.4 GHz 802.11b (CCK): –101 dBm @ 1 Mb/s; –89 dBm @ 11 Mb/s
2.4 GHz 802.11g (non-HT20): –95 dBm @ 6 Mb/s; –79 dBm @ 54 Mb/s
2.4 GHz 802.11n (HT20): –93 dBm @ MCS0; –75 dBm @ MCS7
2.4 GHz 802.11n (HT40): –90 dBm @ MCS0; –73 dBm @ MCS7
5 GHz 802.11a (non-HT20): –95 dBm @ 6 Mb/s; –78 dBm @ 54 Mb/s
5 GHz 802.11n (HT20): –95 dBm @ MCS0; –75 dBm @ MCS7
5 GHz 802.11n (HT40): –92 dBm @ MCS0; –73 dBm @ MCS7
5 GHz 802.11ac (VTH20): –95 dBm @ MCS0NSS1; –72 dBm @ MCS8NSS1
5 GHz 802.11ac (VTH40): –92 dBm @ MCS0NSS1; –67 dBm @ MCS9NSS1
5 GHz 802.11ac (VTH80): –87 dBm @ MCS0NSS1; –62 dBm @ MCS9NSS1

WLAN features
• Compliance with IEEE 802.11a/b/g/n/ac
• Maximum rate: 1.167 Gbit/s
• Maximum Ratio Combining (MRC)
• Cyclic Delay Diversity (CDD)/Cyclic Shift Diversity (CSD)
• Maximum Likelihood Detection (MLD)
• Data unit aggregation, including A-MPDU (Tx/Rx) and A-MSDU (Rx only)
• 802.11 Dynamic Frequency Selection (DFS)
• Short Guard Interval (GI) in 20 MHz, 40 MHz, and 80 MHz modes
• Priority mapping and packet scheduling based on a Wi-Fi Multimedia (WMM) profile to implement prioritybased data processing and forwarding
• Automatic and manual rate adjustment (the rate is adjusted automatically by default)
• WLAN channel management and channel rate adjustment
• Automatic channel scanning and interference avoidance
• Service Set Identifier (SSID) hiding, support for SSIDs in Chinese
• Signal Sustain Technology (SST)
• Unscheduled Automatic Power Save Delivery (U-APSD)
• Control and Provisioning of Wireless Access Points (CAPWAP) in Fit AP mode
• Automatic access in Fit AP mode
• WDS in Fit AP mode
• Mesh networking in Fit AP mode
• Dual-MPP Mesh networking in Fit AP mode
• Hotspot2.0 in Fit AP mode
• 802.11k and 802.11v smart roaming in Fit AP mode
• Fast roaming (≤ 50 ms)

Network features
• Compliance with IEEE 802.3u
• Auto-negotiation of the rate and duplex mode; automatic switchover between the Media Dependent Interface (MDI) and Media Dependent Interface Crossover (MDI-X)
• SSID-based VLAN assignment
• VLAN trunk on uplink Ethernet ports
• 4094 VLAN IDs (1 to 4094) and a maximum of 16 virtual APs (VAPs) for each radio
• AP control channel in tagged and untagged mixed mode
• DHCP client, obtaining IP addresses through DHCP • Tunnel forwarding and direct forwarding
• STA isolation in the same VLAN
• Multicast Domain Name Service (mDNS) gateway protocol: supports AirPlay and AirPrint service sharing between users of different VLANs
• Access control lists (ACLs)
• Link Layer Discovery Protocol (LLDP)
• Service holding upon CAPWAP link disconnection in Fit AP mode
• Unified authentication on the AC in Fit AP mode
• AC dual-link backup in Fit AP mode
• Soft Generic Routing Encapsulation (GRE)
• IPv6 Portal • IPv6 Source Address Validation Improvements (SAVI)
• IPv4/IPv6 ACL • Network Address Translation (NAT)
QoS features
• Priority mapping and packet scheduling based on a WMM profile to implement priority-based data processing and forwarding
• WMM parameter management for each radio
• WMM power saving
• Priority mapping for upstream packets and flow-based mapping for downstream packets
• Queue mapping and scheduling
• User-based bandwidth limiting
• Adaptive bandwidth management (the system dynamically adjusts bandwidth based on the number of users and radio environment to improve user experience)
• Airtime scheduling
• Support for Microsoft Lync APIs and high voice call quality through Lync API identification and scheduling

Security features
• Open system authentication
• WEP authentication/encryption
• WPA/WPA2-PSK authentication and encryption
• WPA/WPA2-802.1x authentication and encryption
• WPA-WPA2 authentication
• WAPI authentication and encryption
• WIDS including rogue AP and STA detection, attack detection, STA/AP blacklist and whitelist
• 802.1x authentication, MAC address authentication, and Portal authentication
• 802.11w Protected Management Frames (PMFs)

Maintenance features
• Unified management and maintenance on the AC in Fit AP mode
• Plug-and-Play (PnP) in Fit AP mode: automatic ally going online and loading configurations
• WDS zero-configuration deployment in Fit AP mode
• WMN zero-configuration deployment in Fit AP mode
• Batch upgrade
• Local AP management through the serial port or using Telnet
• Real-time configuration monitoring and fast fault location using the NMS
• System status alarm
• STelnet using Secure Shell (SSH) v2
• Secure File Transfer Protocol (SFTP) using SSH v2
• Web local AP management through HTTP or HTTPS in Fat AP mode
• Simple Network Management Protocol (SNMP) v1/v2/v3 in Fat AP mode
• Network Time Protocol (NTP) in Fat AP mode
BYOD
• Identifies the device type according to the Organizationally Unique Identifier (OUI) in the MAC address.
• Identifies the device type according to the User Agent (UA) information in an HTTP packet
• Identifies the device type according to DHCP options.
• The RADIUS server delivers packet forwarding, security, and QoS policies according to the device type carried in the RADIUS authentication and accounting packets.
Location service
• Locates tags manufactured by AeroScout or Ekahau.
• Locates Wi-Fi terminals.

Spectrum analysis
• Identifies interference sources such as baby monitors, Bluetooth devices, digital cordless phones (at 2.4 GHz frequency band only), wireless audio transmitters (at both the 2.4 GHz and 5 GHz frequency bands), wireless game controllers, and microwave ovens.
• Works with Huawei eSight to locate and perform spectrum analysis on interference sources.

•Twenty-four 10/100/1000 Base-T ports and four 1000Base-X Ports
•AC power supply, supporting RPS
•Forwarding performance: 42Mpps
•Switching Capacity: 128Gbp

Innovative Energy Saving Design
The S5700S-LI offer customers extensive selection of energy-saving with standard mode, basic mode andadvanced mode that accommodates most needs. By matching port link down/up, optical-module inplace/out of place, port shut down/undo shutdown, idle period, busy period to increase the proportion of the dynamic energy-saving to reduce the power consumption. The S5700S-LI series reduces energy consumption without compromising system performance, ensuring good user experience. The S5700-LI adopts multiple cutting-edge energy-saving designs, including Energy Efficient Ethernet (EEE), port energy detection, dynamic CPU frequency adjustment, and device sleeping.

Comprehensive reliability mechanisms
Besides STP, RSTP, and MSTP, the S5700S-LI supports enhanced Ethernet reliability technologies such as Smart Link and RRPP (Rapid Ring Protection Protocol), which implement millisecond-level protection switchover and ensure network reliability. It also provides Smart Link multi-instance and RRPP multi instance to implement load balancing among links, optimizing bandwidth usage.

The S5700S-LI supports the Smart Ethernet Protection (SEP) protocol, a ring network protocol applied to the link layer on an Ethernet network. SEP can be used on open ring networks and can be deployed on upper-layer aggregation devices to provide fast switchover (within 50 ms), ensuring non-stop transmission of services. SEP features simplicity, high reliability, fast switchover, easy maintenance, and flexible topology, facilitating network planning and management.

Complying with IEEE 802.3ah and 802.1ag, the S5700S-LI supports point-to-point Ethernet fault management and can detect faults in the last mile of an Ethernet link to users.

Well-designed QoS policies and security mechanisms
The S5700S-LI implements complex traffic classification based on packet information such as the 5-tuple, IP preference, ToS, DSCP , IP protocol type, ICMP type, TCP source port, VLAN ID, Ethernet protocol type, and CoS. ACLs can be applied to inbound or outbound direction on an interface. The S5700S-LI supports a flow-based two-rate three-color CAR. Each port supports eight priority queues and multiple queue scheduling algorithms such as WRR, DRR, PQ, WRR+PQ, and DRR+PQ. All of these ensure the quality of voice, video, and data services.
The S5700S-LI provides multiple security measures to defend against Denial of Service (DoS) attacks and attacks against networks or users. DoS attack types include SYN Flood attacks, Land attacks, Smurf attacks, and ICMP Flood attacks. Attacks to networks refer to STP BPDU/root attacks. Attacks to users include bogus DHCP server attacks, man-in-the-middle attacks, IP/MAC spoofing attacks, DHCP request flood attacks. DoS attacks that change the CHADDR field in DHCP packets are also attacks against users.
The S5700S-LI supports DHCP snooping, which discards invalid packets that do not match any binding entries, such as ARP spoofing packets and IP spoofing packets. This prevents man-in-the-middle attacks to campus networks that hackers initiate by using ARP packets. The interface connected to a DHCP server can be configured as a trusted interface to protect the system against bogus DHCP server attacks.

The S5700S-LI supports strict ARP learning, which prevents ARP spoofing attacks that will exhaust ARP entries. It also provides IP source check to prevent DoS attacks caused by MAC address spoofing, IP address spoofing, and MAC/IP spoofing.

The S5700S-LI supports centralized MAC address authentication, 802.1x authentication, and NAC. It authenticates users based on statically or dynamically bound user information such as the user name, IP address, MAC address, VLAN ID, access interface, and flag indicating whether antivirus software is installed. VLANs, QoS policies, and ACLs can be applied to users dynamically.

The S5700S-LI can limit the number of MAC addresses learned on an interface to prevent attackers from exhausting MAC address entries by using bogus source MAC addresses. This function minimizes packet flooding that occurs when MAC addresses of users cannot be found in the MAC address table.

Easy deployment and maintenance free
The S5700S-LI supports automatic configuration, plug-and-play, and batch remote upgrade. These capabilities simplify device management and maintenance and reduce maintenance costs. The S5700SLI supports SNMP v1/v2/v3 and provides flexible methods for managing devices. Users can manage the S5700S-LI using the CLI and Web NMS. The NQA function helps users with network planning and upgrades. In addition, the S5700SLI supports NTP , SSH v2, HWTACACS+, RMON, log hosts, and portbased traffic statistics.

The S5700S-LI supports GVRP（GARP VLAN Registration Protocol）, which dynamically distributes, registers, and propagates VLAN attributes to reduce manual configuration workloads of network administrators and to ensure correct VLAN configuration. In a complex network topology, GVRP simplifies VLAN configuration and reduces network communication faults caused by incorrect VLAN configuration.

The S5700S-LI supports MUX VLAN. MUX VLAN isolates Layer 2 traffic between interfaces in a VLAN. Interfaces in a subordinate separate VLAN can communicate with ports in the principal VLAN but cannot communicate with each other. MUX VLAN is usually used on an enterprise intranet to isolate user interfaces from each other but allow them to communicate with server interfaces. This function prevents communication between network devices connected to certain interfaces or interface groups but allows the devices to communicate with the default gateway.

Fine-grained traffic management

The S5700S-LI supports the Sampled Flow (sFlow) function, which uses a sampling mechanism to obtain statistics about traffic forwarded on a network and sends the statistics to the Collector in real time. The Collector analyzes traffic statistics to help customers manage network traffic efficiently.

IPv6 features: IPv6 host Static IPv6 routes Path MTU (PMTU) IPv6 ping, IPv6 tracert IPv4 and IPv6 dual stack ACLs based on the source IPv6 address, destination IPv6 address, Layer 4 ports, or protocol type. Multicast IGMP v1/v2/v3 snooping and IGMP fast leave MLD v1/v2 snooping Multicast VLAN Multicast load balancing among member ports of a trunk Controllable multicast Port-based multicast traffic statistics

QoS/ACL: Rate limiting on packets sent and received by an interface Packet redirection Port-based traffic policing and two-rate three-color CAR Eight queues on each port WRR, DRR, PQ, WRR+PQ, and DRR+PQ queue scheduling algorithms Re-marking of the 802.1p priority and DSCP priority Packet filtering at Layer 2 to Layer 4, filtering out invalid frames based on the source MAC address, destination MAC address, source IP address, destination IP address, port number, protocol type, and VLAN ID Rate limiting in each queue and traffic shaping on ports

Security: User privilege management and password protection DoS attack defense, ARP attack defense, and ICMP attack defense Binding of the IP address, MAC address, interface, and VLAN Port isolation, port security, and sticky MAC Limit on the number of learned MAC addresses 802.1x authentication and limit on the number of users on an interface AAA authentication, RADIUS authentication, HWTACACS authentication, and NAC SSH v2.0 Hypertext Transfer Protocol Secure (HTTPS) CPU defense Blacklist and whitelist

Surge protection: 6 KV surge protection capability on service ports

Management and maintenance: MAC Forced Forwarding (MFF) Virtual cable test Ethernet OAM (IEEE 802.3ah and 802.1ag) SNMP v1/v2/v3 RMON Web NMS NTP System logs and alarms of different levels DLDP MUX VLAN EEE 802.3az(Energy Efficient Ethernet) sFlow

Operating environment: Operating temperature: 0oC–50oC Relative humidity: 5%–95% (non-condensing)

Input voltage: AC: Rated voltage range: 100 V to 240 V AC, 50/60 Hz Maximum voltage range: 90 V to 264 V AC, 50/60 Hz

Dimensions: (W x D x H) 442 mm x 220 mm x 43.6 mm 442 mm x 310 mm x 43.6 mm

Power consumption: < 25W < 52W