3COM OS Switch 5500G

Hardware and Software Compatibility Matrix

Compatibility matrix

Item Specifications
Product family Switch 5500G series
Hardware 24-Port-EI 48-Port-EI
platform
24-Port-PWR
48-Port-PWR 24-Port-FX

Minimum
memory 128 MB
requirements
Minimum flash
16 MB
requirements
Boot ROM
V5.02 for the main board; V220 for the expansion board
version
Host software s4c03_03_02s56p01.app
s4c03_03_02s168p01.app
DM version 3Com DM V4.0 SP07 R0002
iMC version
iMC PLAT 3.20-R2602 iMC ICC 3.20-R2602 iMC ACLM 3.20-R2602

iMC UAM 3.60-E6102

iNode version iNode PC 3.60-E6111

Web version s4i06_00
Remarks
s4c03_03_02s56p01.app is the 56-bit SSH encryption program.

s4c03_03_02s168p01.app is the 168-bit SSH encryption program.

 3COM OS Switch 5500G

⚫ V3.03.00 is the first release of V3.03.xx series. Some new features are added on the basis of
V3.02.xx. Refer to Feature Updates for details.
⚫ V3.02.xx is an enhanced version and is backward and forward compatible.

Restrictions and Cautions

When configuring the S5500G, be sure that you are aware of these restrictions and cautions:
1) For storm suppression, use the pps mode because the ratio mode is not suitable for long frames.
2) If an interface goes up and down frequently during receiving route update packets, garbage
routes cannot be removed.
3) On a stacking switch, not all ports are capable of line-speed forwarding.
4) The default anti-attack function may be affected if the default queue scheduling configuration is
changed. Leave the default queue-scheduling configuration unchanged if there is no special
requirement
5) IGMP snooping is not supported on the 10G expansion board.
6) Silicon behaviour: Giant packets and CRC error packets cannot be counted accurately on the
10G expansion board.
7) Silicon behaviour: IP packets with the Options field cannot be forwarded
8) The flow control function can process received pause frames, but cannot send out pause frames.
9) Using the display mac-address command can display MAC addresses on the main control
board but cannot display MAC addresses on the expansion board and the slave device.
10) When the 5500G-EI acts as an SSH server, the SFTP server on it only supports the PSFTP client
of the third-party software named putty.
11) Ensure that the device is power-on when performing write operations to the flash such as
executing the save command.
12) When user-defined ACLs are used, 4 bytes (inner VLAN tag length) need to be added when
calculating the offset of packets, because the chip treats all packets as double tagged.
13) BGP does not support equal-cost multi-path (ECMP).
14) Don’t upgrade the boot ROM of the expansion card before the version higher than 220 is
released.
15) Limitation of port mirroring: The packets sent by CPU cannot be mirrored on the egress port.
16) When you mirror packets sent by ports on an expansion board, the packets from a port on the
front panel to the expansion board cannot be mirrored if the monitor port is not on the expansion
board.
17) Do not use VLAN mapping together with voice VLAN, 802.1X, MAC authentication, port security,
or configuration of maximum MAC addresses that can be learned.
18) A nonexistent destination VLAN can be configured in mac-address-mapping, and thus the
corresponding MAC replication in the VLAN can be done.
19) Link-aggregate ports don’t support ARP inspection and IP source guard features.
 3COM OS Switch 5500G

20) DHCP snooping can't work together with selective QinQ.

21) If you need to configure both mac-address-mapping and link-aggregation on the same port,
configure mac-address-mapping first, and then configure link-aggregation. If you need to remove
them, remove link-aggregation configuration first. When lots of MAC addresses need to be
mapped, don’t perform shutdown and undo shutdown operations frequently.
22) The destination MAC address of smartlink packets is 01-0f-e2-00-00-04.
23) After upgrading the software of a NTP-configured stacking device from a version between
V3.03.00 and V3.03.00p03 to V3.03.02 or later, you need to remove the existing NTP
configuration and reconfigure it.

Feature List
Hardware Features
Hardware features

Category Description

Dimensions (H × W × D) 43.6mm × 440mm × 260mm (1.72 × 17.32 ×10.24 in.) (devices without
PWR)
43.6mm × 440mm× 420mm (1.72 × 17.32 × 16.54 in.) (devices with
PWR)
Weight (full configuration) ≤7.5kg (16.53 lb.) (24-port devices)

≤8kg (17.64 lb.) (48-port devices)

Input voltage AC:

Rated Voltage range: 100 VAC to 240 VAC (50Hz to 60Hz)

Max Voltage range: 90 VAC to 264 VAC (50Hz to 60Hz)

DC:
Rated voltage range: –60 VDC to –48 VDC
Max voltage range: –72 VDC to –36 VDC
Maximum power S5624P: 170 W
consumption
S5648P: 230 W

S5624P-PWR: 540 W

S5648P-PWR: 600 W

S5624F: 170 W

Operating temperature 0°C to 45°C (32°F to 113°F)

Operating humidity 10% to 90%

 3COM OS Switch 5500G

Software Features
Table 4 Software features

Features Description

XRN stack

Port auto-negotiation Supports both speed and duplex mode auto-negotiation

MAC address table Address learning

Supports up to 16 K MAC addresses including up to 256 static MAC
addresses

Jumbo Frame Supports a maximum of 9 K bytes

STP/RSTP/MSTP Supports STP and complies with IEEE 802.1D/802.1s

Flow control Supports IEEE 802.3x flow control mode (full-duplex)

Supports back-pressure based flow control (half-duplex)

Link aggregation Supports up to 8 aggregation groups, and up to 8 FE ports or 4 GE per

group
Supports link aggregation across devices

VLAN Supports:
Up to 4 K IEEE 802.1Q-compliant VLANs;
Port-based VLANs; port-based VLAN trunk;
Inter-VLAN routing;
VLAN batch configuration;
VLAN batch display

Unicast, multicast and Supports bandwidth ratio- and rate-based suppression modes on ports.
broadcast suppression

802.1X authentication The main purpose of IEEE 802.1X is to implement authentication for
wireless LAN users, but its application in IEEE 802 LANs provides a
method of authenticating LAN users.

Centralized MAC Centralized MAC address authentication is triggered by data packets. In

address authentication this authentication, the MAC addresses of packets are used as both user
names and passwords. Upon receiving the first packet from a user, the
switch retrieves the source MAC address from the packet, adds the
address to both user name and password fields in a RADIUS packet, and
sends the RADIUS packet (authentication packet) to a RADIUS server.
The remaining procedure is similar to 802.1X. If authentication succeeds,
the source MAC address is added to the MAC address table on the
switch, and the user is permitted to access the network.
Port internal/external The port internal loopback test detects the connectivity between switch
loopback test chips and PHY chips. The port external loopback test detects the
connectivity between PHY chips and network interfaces with the help of
the self-loop header. The two tests used together can determine whether
a fault is a switch fault or a link fault.
Voice VLAN The voice VLAN feature adds ports into voice VLANs by identifying the
source MAC addresses of packets. It automatically assigns higher priority
for voice traffic to ensure voice quality. This feature supports two
application modes: manual and automatic.
 3COM OS Switch 5500G

Features Description

DHCP relay Through a DHCP relay agent, DHCP clients in a subnet can
communicate with a DHCP server in another subnet to obtain valid IP
addresses. In this way, DHCP clients in different subnets can share one
DHCP server. This method saves costs and helps implement centralized
management.

Network protocols TCP/IP protocol suite; secondary IP address configuration; ARP

(including gratuitous ARP); DHCP relay agent;

IP address forwarding Supports up to 8 K IP address forwarding entries

table

IP routing Supports static routing, RIP, OSPF, RIP ECMP, BGP

Multicast Supports IGMP, PIM-DM and PIM-SM

Reliability Supports VRRP

QoS Supports:
Bandwidth management
Priority configuration based on VLAN, port, IEEE 801.1P, ToS/Diffserv,
and CoS
Up to 8 sending queues per port
Traffic classification
QoS profile
Port mirroring
Priority marking for protocol packets sent by CPU

IGMP snooping IGMP snooping is a multicast constraining mechanism that runs on Layer
2 devices to manage and control multicast groups.

Password recovery Recovers Boot ROM and APP passwords

NTP NTP, built on TCP/IP, is used to distribute accurate time information on a
network.
Web network
management

Diagnostics and alarm Records and reports network faults for troubleshooting.
output
Fast startup In fast startup mode, a switch can complete a startup process within 60
seconds by skipping the power-on self test (POST) and directly running
the APP program. You can set the startup mode to fast or normal in the
boot ROM menu.

PoE update Supports global PoE software update

PoE profile Supported
Software upload and Supports software upload and upgrade through the XMODEM protocol,
upgrade FTP or TFTP.
The device supports the FTP server, FTP client and TFTP client.
System configuration Configuration methods supported: CLI, console port, telnet;
and management
Features and functions supported: SNMP, remote monitoring (RMON)
1/2/3/9 group MIBs, system logging, hierarchical alarming.
 3COM OS Switch 5500G

Features Description

Network maintenance Filtering, output and collection of alarm/debug information;

Diagnostic tools: Ping, Tracert;
Remote maintenance through Telnet and other ways

TACACS+ An enhanced version of TACACS protocol, which cannot work together

with XRN.
HGMP A cluster management protocol

GVRP

QinQ Supports double-tag feature

DHCP snooping

Unauthorized DHCP The DHCP relay agent has this feature added to detect unauthorized
server detection DHCP servers.

Multicast source check With the multicast-source-deny command, you can prevent a port from
being a multicast source port to stop users from sending multicast data.

Unknown multicast With this feature enabled in a VLAN, unknown multicast packets in the
drop VLAN are discarded to save network bandwidth.

IP-MAC-port binding After the IP address and MAC address of a host are bound to a port,
packets of the host can pass the port, while those of other hosts not
bound to the port cannot. Other ports are not affected by this
configuration.

VCT Virtual cable test

DLDP Device Link Detection Protocol

Traps sending when When the ARP/MAC address table is full, a trap is sent.
ARP/MAC address
table is full

IGMP snooping IGMP querier at layer2

querier

IGMP snooping group Supports filtering unnecessary IGMP packets such as report packets
policy

Guest VLAN

FTP disconnection Disconnects FTP connections through CLI

Port security Port security features
MSDP Multicast Source Discovery Protocol, which cannot work together with
XRN

DHCP server The device can act as a DHCP server.

Protocol based VLAN 802.1v, which supports IPV4 /IPX/appleTalk

IGMP group policy Supports filtering unnecessary IGMP packets

Port mirroring Includes remote port mirroring and local mirroring.
Remote port mirroring supports port mirroring across devices through
VLAN channel.
 3COM OS Switch 5500G

Version Updates

Feature Updates

Table 5 Feature updates

Version Number Item Description

V3.03.02 Hardware feature None
updates

Software feature New features:

updates 1) HTTPS
2) Auto VLAN
3) Support of RADIUS for line-rate
4) Attribute ignore feature
This feature can configure for RADIUS to ignore
the authentication attribute in the packet of
RADIUS Authentication Accept packet.
V3.03.02 Hardware feature None
updates

Software feature New features:

updates
1) SSHv1

2) MAC-based VLAN

3) Port auto-power-down

4) Hot patch

Please refer to the Operation and Command

Manuals.

V3.03.01p04 Hardware feature None

updates

Software feature New Features:

updates
1) Transparent transmission of IGMP protocol
packets
2) Separation of local ARP proxy and ARP proxy
through CLI
3) RSA, DSA negotiation order self-selection
4) Multicast prune delay configuration

V3.03.01p03 Hardware feature None

updates

Software feature New Features:

updates
Support for RFC4188 and RFC2674

V3.03.01p02 Hardware feature None

updates
Software feature None
 3COM OS Switch 5500G

Version Number Item Description

updates

V3.03.01p01 Hardware feature None

updates
Software feature New features:
updates
ARP source MAC consistency check:
The feature checks both the source MAC address
and sender MAC address of an ARP packet. If
they are identical, the switch refreshes the
corresponding ARP entry according to the packet.
If not, the switch will not refresh the ARP entry.
V3.03.00 Hardware feature None
updates

Software feature The following features are added to V3.03.00 on

updates the basis of V3.02.xx.
1) DHCP snooping security features, including
ARP detection and IP check
2) ARP proxy and local ARP proxy
3) VLAN mapping
4) Selective QINQ
5) VLAN ACL
6) IGMP snooping non-flooding
7) FTP banner
8) HTTP banner
9) Telnet copyright
10) Port speed auto-negotiation configurable
11) Port link delay (Link state change delay)
12) Manual addition of a host to a multicast group
13) Smart link
14) BPDU tunnel enhancement
15) Router port manual designation
16) Storm constrain
17) Layer-2 ACL (acl number 4000) support for
inner-VLAN range based match criteria
configuration.
18) Traffic-redirect action, which can untag and
redirect packets to the master port of a link
aggregation group (by default, no untag
operation is performed).
19) IPv6 management
20) DHCP snooping support for processing DHCP
NAK and decline packets
 3COM OS Switch 5500G

Version Number Item Description

21) Enhanced SFP

22) Local authentication application upon
HWTACACS authentication failures
23) XRN auto-stacking
24) Port isolation across stacking devices
25) EAP authentication for telnet users
26) Port security and/or mode
27) Support connecting to the Cisco OSPF P2MP
non-broadcast interface
28) RIP support for offset field modification of
specific subnets
29) SNMP support for cipher password copy
30) IGMPv3 snooping
31) Support for long domain names
32) SNMP mask configuration in MIB view
33) MAC authentication support for guest VLAN
34) Remote-ping test enhancement
35) DLDP recover
36) DHCP option 82 string function
37) HWTACACS support for super authentication
38) HGMP topology management and trace-MAC
39) EAD quick deployment
40) Web authentication
41) Web support for cluster configuration
42) Implementation of OSPF NSSA changes
defined in RFC3101