HUAWEI

Q u i d w a y ® N e t E n g i n e 8 0 C o r e R o u t e r

HUAWEIT e c h n o l o g i e s

The Quidway NetEngine80 Core Router (abbreviated as NE80) is a high-end router oriented to the carrier-class operation

network and the backbone core network. It provides a switching capacity of up to 128 Gbit/s, and a backplane capacity of

256 Gbit/s. The NE80 provides 16 slots for line processing units (LPUs), and the interfaces can operate at rates of 64kbit/

s to 2.5Gbit/s. This meets the requirements of the networking and expansion of the backbone devices.

The NE80 adopts distributed network processor (NP) forwarding and non-blocking switching techniques. Its carrier-class

reliability, line rate forwarding performance, perfect Quality of Service (QoS) mechanism, multi-service processing capability,

and good scalability enable the NE80 to act as the backbone device on the network. The NE80 can implement IPv6

function based on the hardware through smooth software upgrade.

The NE80 is promoting the development of the Internet backbone network and IP MAN in terms of bandwidth, security and

services. In cooperation with other Huawei products or network products from other vendors, it provides an integrated

solution for users.

Figure 1-1 Quidway ® NetEngine 80

Introduction

HU

AW

EI

TE

CH

NO

LO

GI

ES

Q u i d w a y ® N e t E n g i n e 8 0

C o r e R o u t e r

1

2.1 The Fifth Generation Router

The NE80 is a fifth generation router, and is the first one that has been commercially deployed in the industry. It adopts a

high-performance network processor, and inherits the distributed processing architecture of the fourth generation router,

effectively integrating the flexibility of software and high performance of hardware.

The NE80 implements full-duplex line rate forwarding on all interfaces and offers stable running in complex routing

environments.

The NE80 possesses rapid service upgrading and scalability, maximizes users' investment return and promotes the

development of IP networks in the direction of bandwidth, security, serviceability and intelligence.

2.2 IPv4/IPv6 Dual Protocol Stacks

The NE80 supports IPv4 and IPv6 protocol stacks. It supports universal IPv4 routing protocols, IPv6 routing protocols,

multicast routing protocols and static route.

The NE80 also supports such transition techniques from IPv4 networks to IPv6 networks as manually configured tunnel,

automatically configured tunnel, 6to4 tunnel, Network Address Translation-Protocol Translation (NAT-PT) through hardware,

and IPv6 Provider Edge (6PE).

2.3 Multiple Services

The NE80 provides multiple services such as Multi-Protocol Label Switching Virtual Private Network (MPLS VPN), MPLS

Traffic Engineering (TE), line rate Network Address Translation (NAT), Multicast and so on.

Due to its great service scalability, the NE80 can be used to construct a sustainable future multi-service IP network.

The NE80 also plays an important role in the operable and manageable IP broadband network solution provided by

Huawei.

2.4 Superior QoS Capability

The NE80 provides superior QoS capability. It implements intelligent service sensing and provides traffic classification

technique based on layer 1, 2, 3 and 4, advanced queue scheduling algorithm and the algorithm for congestion avoidance.

It supports multiple QoS techniques such as Int-Serv and Diff-Serv. Besides, it precisely guarantees the bandwidth, delay,

jitter and packet loss ratio required by different users and services and allows carrier-class services such as Voice over IP

(VoIP). Thus, it meets the requirement of the multi-service IP carrier network.

Product Features

2

2.5 Excellent Security Protection

The NE80 adopts various security measures to avoid malicious attacks from complex network environments. For user

access, it supports two user authentication modes, namely local authentication and AAA server authentication, preventing

illegal configuration on devices. The NE80 supports users to use Secure Shell (SSH) to log on and implements safe

transmission of configuration information. This can avoid the possibility of the third party's illegal interception during the

configuration through Telnet. Its packet filtering mechanism, based on bidirectional Access Control List (ACL), can prevent

illegal intrusions and malicious packet attacks. It provides authentication methods for key protocols such as OSPF, IS-IS,

RIP, and so on. In addition, the NE80 provides other measures such as unicast Reverse Path Forwarding (uRPF), policy

routing, NAT, port mirroring, traffic sampling, and traffic statistics (NetStream).

2.6 Carrier-Class Reliability Design

Key parts of the NE80 are all designed in redundant hot backup manner, including route processing system, the switch

fabric, clock module, power supply system and internal management bus. This can implement status-based hot switchover

and non-stop route forwarding. All parts of the NE80 are hot swappable. The NE80 provides hot patch function, and thus

can implement smooth upgrade of the device software. It also supports dynamic routing protocols, MPLS traffic engineering,

IP/MPLS fast reroute, IP Trunk, Ethernet Trunk, Resilient Packet Ring(RPR) self-healing and Virtual Router Redundancy

Protocol (VRRP), thus effectively guaranteeing the fast and reliable running of the whole network.

3

HU

AW

EI

TE

CH

NO

LO

GI

ES

3.1 Software Specifications

Item Description

Performance Forwarding capability of IPv4 packets: wire speed forwarding for various interfaces

Forwarding capability of IPv6 packets: wire speed forwarding for various interfaces

Packet forwarding rate reaches 96Mpps per chassis

IPv4 Routing Protocols Support for static routing, RIP, OSPF, IS-IS, and BGP4

Upgradeable for IPv6 protocol suite

IPv6 Routing Protocols Support for IPv4 and IPv6 dual stacks

Support for basic transition technologies from IPv4 to IPv6: manually configuration

tunnels, automatic configuration tunnels, 6to4 tunnels, NAT-PT(based on hardware), etc

Support for IPv6 static routing and dynamic routing protocols such as BGP4+, RIPng,

OSPFv3, and ISISv6

Supports ICMPv6 MIB, UDP6 MIB, TCP6 MIB, IPv6 MIB, etc

Multicast Support for Internet Group Management Protocol (IGMP)

Support for Protocol Independent Multicast-Dense Mode (PIM-DM)

Support for Protocol Independent Multicast-Sparse Mode (PIM-SM)

Support for Multicast Source Discovery Protocol(MSDP)

Support for Multi-protocol Border Gateway Protocol (MBGP)

MPLS VPN Support for wire-speed IP/MPLS forwarding, and support the applications of LER

and LSR

Support for L2/L3 MPLS VPN, can be deployed as provider (P) or provider edge (PE)

router

Support for MPLS TE and FRR

Support for Layer two tunneling protocol (L2TP)

Support for Generic Routing Encapsulation (GRE)

Support for HoPE (Hierarchy of PE)

Support for multi-role host

Support Multicast VPN

All above feature conform to the corresponding IETF standards, can inter-operation

with other vendors

Specifications

4

QoS Support for bi-directional traffic policing CAR, Traffic Shaping

Support for PQ/CQ/WFQ/CBQ, LLS/LLQ/NLS

Support for RED/WRED/SARED

Support for MPLS QoS

NAT Support for NAT service board, which delivers wire-speed NAT capability

(bi-directional 2G)

NAT functionality support 1M simultaneous sessions

Support for application layer gateways (ALGs), such as FTP, ICMP

High Availability Feature High Reliability in the system architecture

Support for IP Fast Rerouting

Support for MPLS Fast Rerouting

Support for Nonstop Forwarding(NSF)

Support for Self-Constrain Standing Routing (SCSR)

RPR self-healing ring for a MAN or long-haul National network

System Security 2 kinds of user authentication modes: local authentication and Radius

authentication(to authenticate user identity and authorization)

3 kinds of route protocol authentication modes: clear text authentication

(OSPF, IS-IS, and RIP), MD5, and HMAC-MD5 authentication

(IS-IS, OSPF and BGP)

Basic ACL and enhanced ACL: based on source/destination IP address,

DSCP, IP protocol type, source/destination port number

Support for static black hole/reject route function

Support for NetStream

Support for Port Mirroring

Support for Unicast Reverse Path Forwarding (uRPF)

Network Management Support for the inter-operation with Huawei's IPTN(IP Telecom Network)

operation Framework

Support for the inter-operation with Huawei's carrier-class MPLS VPN

Management System

Support for HGMP(Huawei Group Management Protocol)

Support for SNMP V1,V2 and V3 and RMON

Support for SSH

5

HU

AW

EI

TE

CH

NO

LO

GI

ES

Item Description

Power supply AC input

DC inputSingle input 4 + 1 Dual-input 2+2

redundancy redundancy

Output power 4250 W

Input voltage AC 150 V to 280 V

Consumption under full configuration < 1800 W

Weight < 400 kg

Dimensions (W x D x H) 600 mm x 800 mm x 2200 mm

Long-term operating temperature 5˚C to 45˚C

Short-term operating temperature 0˚C to 55˚C

Relative temperature 10%RH to 95%RH

Amplitude Within 5000 m

Switching capacity 128G non-blocking switching, dual backup

Backplane capacity 256G

Maximum configuration of LPUs 16

Forwarding performance 96Mpps per system, 6Mpps per slot

Slot number 20, including two main control unit slots (1:1), two switch fabric slots

(1:1), and 16 service slots

3.2 Hardware Specifications

AC input

6

4.1 Routed Ethernet LPU 4 ports Fast Ethernet Electrical Interface (RJ45) and 4 ports Optical Interface (SFP) line card

16 ports Fast Ethernet Electrical Interface (RJ45) Line Card

32 ports Fast Ethernet Electrical Interface (RJ45) Line Card

16 ports Fast Ethernet Optical Interface (SFP) Line Card

8 ports Fast Ethernet Optical Interface (SFP) Line Card

4 ports Gigabit Ethernet GBIC Interface Line Card

4.2 POS LPU 4 ports POS OC-3c/STM-1 Optical Interface Line Card (Multi-mode, 1300nm 2km-MTRJ)

4 ports POS OC-3c/STM-1 Optical Interface Line Card (Single-mode, 1300nm 15km-MTRJ)

8 ports POS OC-3c/STM-1 Optical Interface Line Card (Multi-mode, 1300nm 2km-MTRJ)

8 ports POS OC-3c/STM-1 Optical Interface Line Card (Single-mode, 1300nm 15km-MTRJ)

2 ports POS OC-12c/STM-4c Optical Interface Line Card (Multi-mode, 1300nm 500m-SC)

2 ports POS OC-12c/STM-4c Optical Interface Line Card (Single-mode, 1300nm 15km-SC)

1 port POS OC-48c/STM-16c Optical Interface Line Card (Single-mode, 1300nm 2km-LC)

1 port POS OC-48c/STM-16c Optical Interface Line Card (Single-mode, 1300nm 15km-LC)

1 port POS OC-48c/STM-16c Optical Interface Line Card (Single-mode, 1300nm 40km-LC)

1 port POS OC-48c/STM-16c Optical Interface Line Card (Single-mode, 1550nm 70km-LC)

2 ports Channelized POS OC-3/STM-1 SFP Interface Line Card

4 ports Channelized POS OC-3/STM-1 SFP Interface Line Card

1 port Channelized POS OC-48/STM-16 Optical interface line card(single-mode 1300nm 2km-LC)

1 port Channelized POS OC-48/STM-16 Optical interface line card(single-mode 1300nm 15km-LC)

4.3 RPR LPU 1 port OC-48C/STM-16C RPR Interface Card (Single-mode, 1300nm 2km-LC)

1 port OC-48C/STM-16C RPR Interface Card (Single-mode, 1300nm 15km-LC)

1 port OC-48C/STM-16C RPR Interface Card (Single-mode, 1300nm 40km-LC)

1 port OC-48C/STM-16C RPR Interface Card (Single-mode, 1550nm 70km-LC)

Line Processing Units

7

HU

AW

EI

TE

CH

NO

LO

GI

ES

4.4 ATM LPU 2 ports OC-12c/STM-4 ATM SFP Interface Line Card

8 ports OC-3c/STM-1 ATM Optical Interface Line Card (Multi-mode, 1300nm 2km- MTRJ)

8 ports OC-3c/STM-1 ATM Optical Interface Line Card (Single-mode, 1300nm15km- MTRJ)

4.5 Service Provider Unit (SPU) Network address translation processing card

NetStream service processing board

NAT PIM card

NATPT PIM card

L2TP PIM card

GRE PIM card

Layer 2 tunneling protocol board (SPUB1 plus L2TP PIM card)

Generic routing encapsulation board (SPUC plus GRE PIM card)

4.6 Low-speed TDM LPU 8 ports E1 Interface Line Processing Card (RJ45) Unchannelized (8xE1)

4.7 Multi-service LPU 4 ports Fast Ethernet Electrical Interface (RJ45), 4 ports Optical Interface (SFP) line card (E8FB) and 4 ports OC-

3c/STM-1 Optical Interface (Multi-mode, 1300nm 2km-MTRJ) line card

8

As a device in the backbone network, the NE80 has the features of the carrier-class devices. It has the following typical

applications currently.

5.1 Application in the National Backbone Network

Figure 5-1 Application in the national backbone network

The national backbone network is usually of mesh topology, connected to the international egress uplink, to provincial

backbones downlink and connected to other carriers' networks through NAP. As a core router, the NE80 has powerful

routing and fast forwarding capacity and can serve as the core node of the national backbone.

The NE80 supports IPv6, smooth upgrade, carrier-class availability, and good compatibility, and has been deployed in

mass quantities. Perfect QoS performance and mechanism make it fully meet the requirements of carrying multi-services

on the IP backbone network.

5 Applications

NAP

Xian

Chengdu

Wuhan

Provincial�network

Provincial�network

BeijingNE80

NE80

National backbone�networkNE80

NE80

NE80

NE80

NE80

NE80

Shenyang

Nanjing

Shanghai

Guangzhou

International egress

International egress

9

HU

AW

EI

TE

CH

NO

LO

GI

ES

HU

AW

EI

TE

CH

NO

LO

GI

ES

5.2 Application in the Provincial Backbone NetworkThe NE80 can be used to form the provincial backbone network where the NE40 serves as the city nodes to converge the

traffic of the MAN, dedicated line, narrowband access and IDC.

Figure 5-2 Application in the provincial backbone network

This solution is applicable to new establishment, expansion and reconstruction of the large ISP provincial backbone

networks. Usually, these ISPs have transmission resources and the advantages of service access and cost. In case of

transmission resources shortage, the link bandwidth should be reduced accordingly when the network topology does not

change. The devices residing at the convergence layer or higher layer have a line-rate forwarding capability. The entire

network supports MPLS VPN.

NE80NE80

NE80NE80

POS2.5G

City node

Leased lineconvergence

Narrowband access

Provincialbackbonenetwork

City node

POS2.5G

POS2.5G

NE40

NE40 NE40 NE40

NE40

NE40

MAN

GE GEFE

IDC

cPOScPOS

POS155M

10

5.3 Application in the MAN Backbone Network

Figure 5-3 Application in the MAN backbone network

The NE80 supports multiple routing protocols and MPLS VPN application and has high-class QoS performance. Therefore,

the NE80 is applicable for the core layer in the MAN.

The NE80 provides abundant types of ports. Specifically, the NE80 can provide a maximum of 64 GE ports or 256 FE

ports, 622M/155M POS interface and 155M ATM interface. The NE80 has powerful service access capability, and is

applicable for the MAN.

As a P/PE router, the NE80 provides perfect MPLS/VPN function. The NE80 at the core layer can be connected to the

NE40 router that supports L3VPN service at the convergence layer to establish a VPN, thus implementing the functions of

P and PE nodes.

The NE80 is developed according to the design of the 5th generation router, and has good scalability. It is suitable for the

MAN applications. As shown in the above figure, the NE80 can be used at colleges, enterprises, institutes and residential

areas to access the Internet through the GE/FE port. The NE80 also provides VPN and multicast services, supporting

applications of group user interconnection and video on the network. The NE80 can also internetwork with other NE

devices, serving as the PE node to support L3VPN service. The MAN formed by the NE80 has powerful service capacity,

routing and forwarding capacity, high-class QoS and good scalability, and can be smoothly upgraded to the IPv6 network.

Video server

P/LSR

Concergence layer

PE/LER

Hotel Residential area Offic building

Data center

To provincial backbone network

Core layercPOSinterworking

IP/MPLSVPN

P/LSR NE40

P/LSRP/LSR

NE80

NE40

NE80

NE80

NE80

GE

GEGE

(NAT)

PE/LER NE40

PE/LER NE40

11

HU

AW

EI

TE

CH

NO

LO

GI

ES

5.4 Application in the Optic MAN with RPR

Figure 5-4 Application in the optic MAN with RPR

The RPR technology boasts of fast self-healing resilient protection mechanism and highly effective bandwidth utility,

flexible and simple networking, which is suitable for newly constructed MAN. Shown in the above figure, the NE80 is

adopted to serve as the backbone layer router to form a core ring network, the NE40 is adopted to serve as the conver-

gence layer router to form an access ring, which intersects or is tangent with the core ring. The core ring realizes the

scheduling of the coarse-granularity traffic. One or two routers serve as the upstream node.

HU

AW

EI

TE

CH

NO

LO

GI

ES

NE40

NE40

NE40

NE40

NE40

NE40

NE40NE40

NE40

NE80

NE80

NE80

NE80

IP backbone

2.5G RPR

2.5G RPR

2.5G RPR

FE

FEGE

E3/T3

E1/T1

12

5.5 Application in the Carriers' Supporting Network

Figure 5-5 Application in the carriers' supporting network

This solution is applicable to an ISP that has optical network resources to construct new carrier supporting systems. The

specific description is as follows:

The core layer uses more than four NE80 routers. Part of them is fully meshed through the POS155/622 to establish the

national backbone network. The Internal Gateway Protocol (IGP) uses OSPF.

The provincial backbone is formed by the NE40 routers. The NE40 accesses the NE80 through the CPOS interface. The

bandwidth is in the range from 2 to155M. Each province is classified as an AS, which is a private AS.

The city node can select the NE40 series and connect customers or county nodes through n x E1 mode. The node is

connected to the provincial backbone router through the CPOS (2 to 10 Mbit/s). Each area is classified as the area 0 of

OSPF. The customer or county node is the STUB or NSSA area.

In the case of special requirements (such as video conference), it is recommended to add a Layer 3 switch at the Point

of Presence (PoP).

The entire network implements MPLS/VPN and the provincial backbone or higher support line rate forwarding.

City node City node

Nationalbackbonenetwork

Provincialbackbone network

Provincialbackbone network

POS155M

City node

cPOS

cPOS

cPOS

cPOS

cPOS

cPOS

NE80

NE80 NE80

NE80

NE40

NE40

NE40

NE40

NE40

NE40NE40

NE40NE40

NE40

13

HU

AW

EI

TE

CH

NO

LO

GI

ES

5.6 Application in the E-government Network

Figure 5-6 Application it the E-government network

The E-government network has the following features:

Physically wide coverage: Covers the WAN, MAN and LAN.

Security requirements for both internal network and external network.

A strict hierarchical structure.

The NE80 can be used to form a highly effective, safe, reliable and manageable E-government network platform in

combination with the Huawei's Quidway S8016 switch and other network devices.

The NE80 and the S8016 fully support MPLS VPN service, which enables the interconnection and isolation among

governmental departments through vertical networking and horizontal networking. In addition, with its abundant QoS

features, the NE80 support various services, such as data, voice and video on the government network, that is, a three-in-

one network solution.

HU

AW

EI

TE

CH

NO

LO

GI

ES

Provincialgoverment

Provincialdepartment

City govermentCity department City goverment City department

Goverment WebsiteGateway

County goverment

Public Enterprise

County govermentCounty govermentCounty goverment

Provincialgoverment MAN

Provincialgoverment MAN

Prefectue levelgoverrment MAN

Prefectue levelgoverrment MAN

14

5.7 Application in the MPLS L2/L3VPN Network

Figure 5-7 Application in the MPLS L2/L3VPN network

In this application, the NE80 works at the network core as a P router and can serve as a route reflector meanwhile. The

NE80 can also work as an ASBR router in the cross-domain VPN solution. The NE40 and the S8016 can work as PE

routers.

P�

MPLS Cpre�P� P�

CE�

MPLS Edge�

CE�VPN2�

PE�

VLAN� VLAN� VLAN� VLAN�

VLAN�VLAN�

S8016� S8016�

PE�

NE40�

NE40�

VPN1�

VPN1�

CE�VPN3�

CE�VPN3�

CE�VPN2�

CE�VPN2�

NE80�

NE80�NE40�

NE40�

NE80�

�

15

HU

AW

EI

TE

CH

NO

LO

GI

ES

5.8 Application in the IPv6 Backbone Network

Figure 5-8 Application in the IPv6 backbone network

In the IPv6 backbone, the former IPv4 services such as IPv4-forwarding and MPLS VPN should not be affected. So there

are two problems to be solved:

Interworking between IPv6 islands

Interworking between IPv6 and IPv4 islands

Both the NE80 and the NE40 support key technologies used in the IPv6 network. You can select these technologies to

make solutions.

All the routers in the backbone network support dual IPv4 and IPv6 protocol stacks, where IPv4 services are IPv4-

forwarded, and IPv6 services are IPv6-forwarded.

IPv6 islands can interwork through the Layer 3 tunnel technique. You can configure the tunnel manually or through the

6to4 tunnel technique. The core router only needs to support IPv4 forwarding and does not need upgrade. IPv4 networks

are interconnected with IPv6 networks through a gateway that supports NAT-PT.

NE40

NE40

NE80 NAT-PT

NE40

IPv6/�IPv4

PE

P

P

P

L3 L3

L2

PEPE/NAT-PT

NE40

DSLAM

SOHO�IPv6

MPLS�CORE

MPLS EDGE

SOHO�IPv6

NE80IPv6

IPv6�Internet

IPv4�Internet

16

Router Series

• Quidway NetEngine 5000E Terabit Switching Router

• Quidway NetEngine 80/80E Core Switching Router

• Quidway NetEngine 40/40E Series Universal Switching

Routers

• Quidway NetEngine 20/20E Series High-Performance Edge

Routers

• Quidway NetEngine 16E/08E/05 Series Multi-Service Edge

Routers

• Quidway AR 46 Series Enterprise Core Routers

• Quidway AR 28 Series Modular Branch Routers

• Quidway AR 18 Series Access Routers

LAN Switch Series

• Quidway S8500 Series 10G Core Routing Switches

• Quidway S8016 Multi-Service Backbone Routing Switch

• Quidway S6500 Series Gigabit Routing Switches

• Quidway S5516 Gigabit Routing Switch

• Quidway S5000 Series Gigabit Intelligent Layer 2 Ethernet

Switches

• Quidway S3900 Series Intelligent Routing Switches

• Quidway S3500 Series Intelligent Routing Switches

• Quidway S3000 Series Intelligent Layer 2 Ethernet Switches

• Quidway S2000 Series Enterprise Desktop Switches

Security & VPN Products

• Quidway Eudemon 1000/500/200/100 Series Firewalls

• Quidway Eudemon 2000 Series Session Border Conctrollers

• Quidway SecPath Series Security Gateways

VoIP Products and Solution

• Quidway A8010 Expert VoIP Gateway

• Quidway A8010 Mini-Expert VoIP Gateway

• Quidway A8010 VoIP GateKeeper

BRAS

• Quidway MA5200G Broadband Intelligent Access Server

• Quidway MA5200F Compact Broadband Intelligent

Access Server

Access Servers

• Quidway A8010 Expert Remote Access Server

• Quidway A8010 Mini-Expert Remote Access Server

WLAN Products and Solution

• Huawei C9012 WLAN Authentication Server

• Quidway W1006E WLAN Access Point

• Quidway W1003 WLAN Access Point

• Quidway W1003A WLAN Access Point

• Quidway WL100M WLAN Cardbus Adapter

• Huawei WG202 GPRS+WLAN Combo Card

Network Management Solution

• iManager N2000 Datacomm Management System

• iManager NSM VPN Manager

• iManager NSM QoS Manager

• iTellin AAA System

Huawei End-to-End Solutions

Addr:�HUAWEI�TECHNOLOGIES�CO.LTD.�BANXUEGANG�

INDUSTRIAL�PARK,�BUJI�LONGGANG,�SHENZHEN�518129,�P.R.C

Tel:�+86-755-28780808

Fax:�+86-755-28786576

http://datacomm.huawei.com

E-mail:�information@huawei.com

Version�No.:�M3-081030-20050324-C-2.0

Huawei Technologies Co., Ltd.

HUAWEIT e c h n o l o g i e s