Full 100G stackable Layer 3 NMS switches

TL-CS6660-20CQ is a high-density 100G switch newly developed and launched by TP-LINK, which adopts a new generation of powerful hardware configuration and software platform, with powerful hardware forwarding capabilities and rich data center service features, which can meet the design requirements of data center Spine-Leaf network architecture. It is suitable for enterprises and operators to build data center networks for the cloud computing era, as well as the core layer of medium and large networks such as campuses. With the TP-LINK data center core switch TL-CS10808, you can also build a high-speed, high-stability 40G/100G fully connected network to meet the network requirements of data centers in the cloud era.

• 20 x 100G QSFP28 ports
• It supports 1+1 redundancy of dual hot-swappable power modules and AC/DC power supply
• It supports TP-LINK commercial cloud platform management
• Support PFC/ECN lossless network
• Supports VxLAN protocol*
• Supports BGP, OSPF, RIP dynamic routes, and static routes
• Stackable with up to 8 stacking units*
• DHCP server, DHCP relay, and DHCP snooping are supported
• Supports IPv6 protocols, such as RIPng, OSPFv3, IS-IS, and BGP4+
• Quaternary binding, ARP/IP/DoS protection, VLANs, QoS, and ACLs are supported
• The power modules TL-PSM550-AC(F) and TL-PSM550-DC(F) are sold separately

High-density full 100G port

The TL-CS6660-20CQ provides 20 x 100G QSFP28 ports.
All ports have wire-speed forwarding capabilities to meet the needs of different users.
A 100GE port supports port splitting and can be used as four 25GE interfaces. A 25GE port switch can be connected to a 25GE port switch through a QSFP28 to 4*QSFP+ DAC/AOC cable, which can smoothly upgrade from a 25G network to a 100G network and meet the requirements of high-speed transmission. *

Rich data center features
Supports no packet loss in data centers such as PFC and ECN to meet the requirements of high-performance computing services for low latency and no packet loss.
It supports the VxLAN protocol, can establish a flexible and easily scalable high-performance Layer 2 network architecture, and supports the dynamic migration of servers and virtual machines.

Strong business processing capabilities

Supports a wide range of IPv6 protocols, including static routes, RIPng, OSPFv3, IS-IS, and BGP4+.
It supports BGP and OSPF dynamic routing protocols, solves the problem of routing and routing after large and complex networks are divided into subnets, and simplifies network configuration.
It supports the RIP dynamic routing protocol to solve the routing problem of small and medium-sized networks after subnets are divided, simplifying network configuration.
Static routes are supported, and the administrator manually configures route entries to achieve simple, efficient, and reliable communication between different network segments.
DHCP servers are supported, which assign IP addresses to hosts in the network.
DHCP trunking is supported, and switches in different interfaces or subnets can also obtain IP addresses, reducing the number of DHCP servers.
Proxy ARP is supported, so that hosts in different physical networks on the same network segment can communicate normally.
IEEE 802.1Q VLAN, MAC VLAN, protocol VLAN, and private VLAN are supported, allowing users to flexibly divide VLANs according to different requirements.
GVRP is supported to implement dynamic distribution, registration, and attribute propagation of VLANs, reducing the amount of manual configuration and ensuring the correctness of configuration.
The VLAN VPN function encapsulates the outer VLAN tag for the user's private network packets at the public network access end, so that the packets carry two layers of VLAN tags across the public network.
It supports QoS, three priority modes based on port, 802.1P-based and DSCP-based, and four queue scheduling algorithms of Equ, SP, WRR, and SP+WRR.
ACLs are supported to filter packets by configuring matching rules, processing operations, and time permissions, providing flexible security access control policies.
It supports IGMP V1/V2 multicast protocols, MLD snooping, and IGMP snooping to meet the requirements of multi-terminal HD video surveillance and video conferencing access.

Complete security protection mechanism

Supports IP address, MAC address, VLAN, and port quaternary binding to filter data packets.
Supports ARP protection against ARP spoofing and ARP flood attacks, such as gateway spoofing and man-in-the-middle attacks, which are common in LANs.
IP source protection is supported to prevent illegal address spoofing, including MAC address spoofing, IP spoofing, and MAC/IP spoofing.
DoS protection is supported, and attacks such as Land Attack, Scan SYNFIN, Xmascan, and Ping Flooding are supported.
It supports 802.1X authentication, provides authentication functions for LAN computers, and controls the authorization status of controlled ports according to the authentication results.
Port security is supported, which stops learning when the number of MAC addresses learned on a port reaches the maximum number to prevent MAC address attacks and control port network traffic.
Support DHCP Snooping, effectively eliminate private DHCP servers, and ensure the legitimacy of DHCP servers.

Versatile reliability protection

Stacking is supported, and the stacked system is virtualized into a "distributed device", which can simplify management and improve system reliability.
Supports STP/RSTP/MSTP production tree protocols to eliminate Layer 2 loops and implement link backup.
Spanning tree security functions are supported to prevent devices in a spanning tree network from various forms of malicious attacks.
Static aggregation and dynamic aggregation are supported, effectively increasing link bandwidth, implementing load balancing, link backup, and improving link reliability.
It supports 1+1 redundant backup of two hot-swappable power modules to ensure that the equipment works stably without power for a long time.
It supports 220V AC and -48V DC power input, and supports over-current protection, over-voltage protection and over-temperature protection technology.
It supports hot-swappable fan modules, fan fault detection and alarms, and automatically adjusts fan speed according to temperature changes, better adapting to the data center environment.

Easy operation and maintenance

Supports rich management interfaces, such as Console, MGMT port, USB port, etc.
Supports TP-LINK cloud platform management, Web management, CLI command line (Console, Telnet), SNMP (V1/V2/V3) and other management and maintenance methods.
Support GRPC, provide a flexible programming interface for the user's secondary development. At the same time, it supports Telemetry technology, which can realize real-time, high-speed, and accurate data collection of equipment. *
Support HTTPS, SSL V3, TLSV1, SSHV1/V2 and other encryption methods, more secure management.
RMON, system logs, and port traffic statistics are supported, which is convenient for network optimization and transformation.
Supports cable detection, ping detection, and Tracert detection operations to easily analyze faulty network nodes.
It supports LLDP, which is convenient for the network management system to query and judge the communication status of the link.
CPU monitoring, memory monitoring, ping detection, Tracert detection, and cable detection are supported.
*Follow-up software upgrade support

Hardware specifications

Software Specifications