Whether the S series low-level switches can be used as gateway devices

2

It is recommended to choose a more high-level series of three-layer switch as a gateway device.

Other related questions:
Can low-end S series switches serve as gateways
You are not advised to use switches including the S2700 series, S5700LI, and S5700S-LI as gateways. The S2700 series, S5700LI, and S5700S-LI switches are Layer 2 switches. If they are used as gateways, they send all packets that need to be forwarded at Layer 3 to the CPU for software forwarding. This causes a high CPU usage. Because CAR parameters are configured to protect the CPU, a large number of packets are dropped, affecting forwarding of service packets. Therefore, it is recommended that you use high-end Layer 3 switches as gateways.

Whether the level of the local user of the S series switches affects data communication
S series switches (except S1700) configuring the local user level only affects the local user's login management of the device, and has no effect on data communication.

Can the upper-layer device of a VRRP device be configured as the gateway for S series switches
For S series switches (except the S1700), the upper-layer device of a VRRP device cannot be configured as the gateway. If you need to configure it, you are advised to use the Smart Link function.

Why level-1 users can run configuration-level commands on S series switches
Level-1 users can use only the commands at level 1 and level 0, but cannot use the level-2 (configuration-level) commands. You can use the following three methods to set the user level for users logging in through AAA local authentication. The user level set in the first method has the highest priority, and the user level set in the last method has the lowest priority. Run the local-user user-name privilege level level command in the AAA view to set the user level for the user named user-name. Run the admin-user privilege level level command in the service scheme view to set a user level for all users in a domain. Run the user privilege level level command in the user view to set a user level for all users logging in through the user view. By default, the users on the console port are at level 15 and the users on the VTY user interface are at level 0. Therefore, user level 1 set in the user view does not take effect because a higher user level has been set in the AAA or service scheme view.

Whether security zones of USG2000 and USG5000 series devices can be of the same level
The levels of different security zones cannot be the same.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top