17

Huawei Technologies Co., Ltd. - Comten · forwarding engine, and the mature, stable VRP¤ routing software of Huawei, ... The measures can prevent DOS attacks, illegal accesses, and

Embed Size (px)

Citation preview

Huawei Technologies Co., Ltd.Add: Bantian, Longgang District

Shenzhen 518129 P.R.China

Tel : +86-755-28780808

http: //www.huawei.com

Version No.: M3-080030-20041010-C-1.0Copyright © 2004 by Huawei Technologies Co., Ltd.

All Rights Reserved.No part of this document may be reproduced or transmitted in any

form or by any means without prior written consent of Huawei Technologies Co., Ltd.

Huawei Technoiogies

Quidway NE5000E Terabit

Core Router

Quidway NE5000E Terabit

Core Router

Introduction................................................................................2

Product Features...................................................................3

Powerful Scalability

Terabit Capacity and 10G/40G interface

IPv4/IPv6 Dual Protocol Stacks

Superior QoS Processing

Security Guarantee

Specifications...........................................................................5

Software Specifications

Hardware Specifications

Modules..........................................................................................8

Applications...............................................................................9

Application in the National Backbone Network

Application in the Provincial Backbone Network

Application In an IPv6 Backbone Network

Application in the MPLS L3 VPN Network

1

Quidway NetEngine 5000E terabit core router is a super-large capacity core router which can be

applied in the national backbone network, provincial backbone network and other super large networks.

Adopting a series of advanced technologies such as 10G/40G interface, three-stage switching fabric,

optical shelf interconnecting for multi-chassis stack, network processors (NP) and ASIC Chipsets for

forwarding engine, and the mature, stable VRP® routing software of Huawei, NE5000E can provide

unprecedented performance, preeminent scalability and high reliability, IPV4/V6 dual protocol stacks,

superior QoS features and abundant security functionality. With the excellent hardware and software

architectures, NE5000E can meet the availability requirements and the multi-service demands of the

carrier-class networks.

Figure 1-1 NE5000E

Introduction

2

Quidway NE5000E Terabit

Core Router

Exploiting the thinking derived from Fifth Generation router, NE5000E take use of two kinds of forwarding

engine, one based on ASIC and the other based on NP, to leverage the requirement from both

uncompromising performance and flexible service.

A single chassis supports the non-blocking, full-wire-speed switching of up to 64 10G-interfaces or 16

40G-interfaces in then near future. The throughput capacity can reach 2.56Tbps, and the forwarding

performance of the system can be 1600Mpps with single chassis.

NE5000E provides the abundant high-performance interfaces to meet the internetworking requirements.

It provides 16 Line Processing Units (LPU).

NE5000E has a wide LPU family: 1* 10GE port LPU, 1* 10G POS port LPU, 4*2.5G POS ports LPU,

4*10G POS ports LPU, 4*10GE ports LPU, high density GE (20/24/48) ports LPU and so on.

IPv4/IPv6 Dual Protocol Stacks

NE5000E supports bothIPv4 and IPV6 protocol stacks and can work in the IPv4/IPv6 dual-stack mode.

Product Features

Powerful Scalability

NE5000E supports maximal 64 chassis stack to scale the system capacity up to 160Tbps without

service interruption. It is characterized by:

NE5000E have three choices for the multi-chassis stack: back-to-back 2-chassis-system, 4-chas-

sis-system and 64-chassis-system.

Back-to-back 2-chassis system needn't additional fiber shelf for the interconnection which is nec-

essary for other else choice. This method support 2 chassis to comprise a routing gear. So back-

to-back is a relatively economic & simply method to scale the capacity.

4-chassis-system and 64-chassis-system respectively support maximal 4 and 64 chassis inter-

connection and additional fiber shelves are necessary for them. With them carrier can scale these

system seamlessly from 1 to 4 and from 5-64.

Terabit Capacity and 10G/40G interface

3

Provide all IPv6 features and solutions for smooth transition from IPv4 networks to IPv6 networks.

Support three IPv6 over IPv4 tunnel techniques: manually configured tunnel, automatic tunnel,

and 6to4 tunnel.

Superior QoS processing

NE5000E can effectively control Bandwidth, delay, jitter, and packet loss by its QoS features; the

buffering mechanism on both upstream and downstream results in a low packet drop rate. In addition,

NE5000E also features that:

MPLS QoS is independent of IP QoS by individual queuing management mechanisms.

PQ and WRR/WFQ not only guarantee the fair dispatching but also ensure that high-precedence

services are served first.

Three-stage switching fabric is based on the Combined Input and Output Queuing (CIOQ), which

guarantees the non-blocking switching.

Flow-based dispatching facilitates the MPLS TE and supports the Diff-Serv and Inter-Serv.

Four precedence queues per physical port prevent the high-precedence traffic from being interfered.

Independent Traffic Management processing module based on ASIC and NP provides the stable

QoS performance.

Security Guarantee

NE5000E takes multiple security measures to guard both the gear and the traffic through this gear.

The measures can prevent DOS attacks, illegal accesses, and control plane overload. The distributed

architecture separates the traffic plane from the control plane. And the security features include:

Supporting two kinds of user authentication modes for logging in: local authentication and RA-

DIUS/TACACS authentication;

Secure Shell (SSH) for the authentication and end-to-end encryption;

Integration with SSH based on Authentication, Authorization and Accounting (AAA);

4

Quidway NE5000E Terabit

Core Router

EACL (Enhanced ACL) -based packet filtering;

Hardware-based packet filtering and sampling for the high performance;

Multiple authentication methods (plain text authentication, MD5) for important routing protocols

(IS-IS, RIP, BGP-4, OSPF);

ACL on the forwarding plane and control plane;

Rate-limit for each interface/ACL entry;

Port mirroring of IP and MPLS traffic.

Specifications

Software Specifications

Performance Forwarding capability of IPv4 packets: wire speed forwarding for various interfaces

Forwarding capability of IPv6 packets: wire speed forwarding for various interfaces

Packet forwarding rate reaches 1600Mpps/single chassis system

Layer 2 Protocol LAN protocol: Ethernet_II, Ethernet_SNAP, Ethernet_SAP, LACP (IEEE 802.3ad) ,

802.3z, 802.3ae

WAN protocol: PPP, MP, HDLC,POS, ATM

Routing Protocol Static routing (IPv4/v6)

Dynamic routing protocol : OSPF�IS-IS�BGP-4�PIM�MSDP�MBGP

The maximal capacity of routing table can reach 3.2M entries, depending on the

configuration of memory

QoS Features Supports bi-directional traffic policing CAR, Traffic Shaping

Supports WFQ/PFQ/CBQ

Supports WRED

Supports 32k bi-directional classifation rules per line card

Supports MPLS QoS: Can classify MPLS packets by MPLS EXP, and support to set

the MPLS EXP

Support structured QoS command line (SQC)

5

Support modular QoS command line (MQC)

Security &

Authentication Supports AAA, and RADIUS/TACACS

Supports ACL, and packet filtering firewall

Support the hierarchical protection of command line to ensure that unauthorized

users cannot invade the router

Provide the record of user access log

MPLS VPN Support MPLS forwarding

Support L2/L3 MPLS VPN and VPLS , can be deployed as provider (P) or provider

edge (PE) router

Support MPLS traffic engineering (TE) and FRR

Multicast Multicast Source Discovery Protocol (MSDP)

Internet Group Management Protocol (IGMP)

Protocol Independent Multicast-Dense Mode (PIM-DM)

Protocol Independent Multicast-Sparse Mode (PIM-SM)

Network

Management Provide two modes for configuration: command line and NMS

Support the inter-operation with Huawei's carrier-class MPLS VPN Management

System

Support HGMP(Huawei Group Management Protocol)

Support SNMP V1,V2 and V3 and RMON

Support SSH

Maintenance Support automatic fault diagnosis function

Support implement remote configuration maintenance via AUX

Support online debug and upgrade

Reliability Main processing unit (MPU) redundancy 1:1

Switching fabric redundancy 3+1

Power module redundancy 1+1

Fan redundancy 1+1

Support all modules online insertion and removal

Support MPLS Fast Reroute (FRR)

Support Nonstop Forwarding(NSF)

Support self-constrain standing routing (SCSR)

6

Quidway NE5000E Terabit

Core Router

Description NE5000E

System

Architecture Hardware is composed of an integrated chassis (with a

backplane), power module, ventilation/heat-dissipation system,

and boards;

NP-based distributed forwarding;

CIOQ (Combined Input and Output Queuing) - based three-stage

switching fabric to guarantee the non-blocking switching

Support the optical shelf interconnecting to implement the seam-

less expansion

Main control slots 2

Switching fabric slots 4

Service slots 16

Throughput capacity 2.56Tbps switching capacity

Forwarding performance 1600Mpps

Dimensions (W * D * H) 442mm * 600mm * 1600mm

Weight 120 kg (chassis + power modules + fans + universal components)

10 kg (LPU)

4.3 kg (MPU)

4.5 kg (SFU)

Maximum power 5000W

DC-input power supply -48v input

Max attitude No performance degradation within 5000 meters

Operating Temperature - Normal: 5°C to 40°C (41 F to 104 F)

- Short term: -5°C to 50°C (23 F to 122 F) short term

Humidity - Normal: 5% to 85%

- Short-term: 5% to 90%

Hardware Specifications

7

10-port 10M/100M/1000M Compatible Ethernet Electrical Interface Card

10-port Gigabit Ethernet Single/Multi-Mode Optical Interface Card

20-port Gigabit Ethernet Single/Multi-Mode Optical Interface Card

1-port 10G Ethernet Single-Mode Optical Interface Card (LAN)

4-port 10G Ethernet Single-Mode Optical Interface Card (LAN)

1-port 10G Ethernet Single-Mode Optical Interface Card (WAN)

4-port 10G Ethernet Single-Mode Optical Interface Card (WAN)

4-port STM-16/OC-48c POS Interface Card

1-port STM-64/OC-192c POS Interface Card

4-port STM-64/OC-192c POS Interface Card

and so on.

Modules

NE5000E provides various types of LPUs

8

Quidway NE5000E Terabit

Core Router

Applications

Application in the National Backbone Network

NAP: Network Access Point

Figure 1-2 Application in the national backbone network

NAP

NE5000E

NE5000E

Nationalbackbone

lnternational egress

NE5000E

NE5000E

lnternational egress

Provincialbackbone

NE5000E/NE80E

NE5000E/NE80E

Provincialbackbane

NE5000E/NE80E

NE5000E

NE5000E

NE5000E/NE80E

The national backbone network applies the partial mash topology. It upstream connects to the

international egress, and downstream to junior provincial backbone networks. It also connects

with other ISP networks through NAPs. NE5000E can work as the core node of the national

backbone network because of its large capacity, high-density ports, and powerful routing and

high-speed forwarding capability.

9

This solution is applicable to establish, scale or reconstruct large ISP provincial backbone networks.

These ISPs have the Internet access services and cost advantages, as well as transmission

resources. In the case of transmission resources shortage, the link bandwidth can be reduced

accordingly without changing the network topology. The devices on the convergence layer or

above have the wire speed forwarding capability. The entire network supports MPLS VPN.

Application in the Provincial Backbone Network

As shown in Figure 1-3, the core layer of the provincial backbone network is composed of NE5000E

devices. The NE80/NE40 devices act as the city nodes, converging the traffic from the MAN,

leased line service, narrowband access, and Internet Data Center (IDC).

NE5000E

NE5000E

NE5000E

NE5000E

NE80/40NE80/40

IDC

10GE

NE40

Provincialbackbone

POS 10G

POS 10GPOS 10G

POS 2.5GPOS 2.5G

MAN Leased lineconvergence

Narrowbandaccess

NE40NE40NE40

City node City node

POS 10G

10GE

Figure 1-3 Application In the provincial backbone network

10

Quidway NE5000E Terabit

Core Router

PE: Provider Edge NAT -PT: Network Address Translation Protocol Translation

Figure 1-4 Application in an IPv6 backbone network

The IPv6 application on the backbone network does not impact the original IPv4 services such as

IPv4 forwarding and MPLS VPN. The application needs to solve two problems:

Interconnection between IPv6 islands

Interworking between IPv6 and IPv4 networks

Application In an IPv6 Backbone Network

NE5000E

NE5000E

NE5000ENE5000E

NE5000E

NE80/40 NE80/40

NE80/40

PE

PE

PE

L3

L2

L3

L2

IPV6 EDGE

IPv6 CORE

NAT-PT

IPv4internet

IPv6internet

IPv6/v4

IPv6

SOHO IPv6 SOHO IPv6

11

PE/NAT-PT

NE5000E brings forward the following solutions based on IPv6 techniques:

All the routers on the backbone network support the IPv4/IPv6 dual-stack. In this case, IPv4 ser-

vices are forwarded over IPv4, while IPv6 services are forwarded over IPv6. Both of the problems

can be solved.

The interconnection between IPv6 islands can be implemented through L3 tunnels, manually con-

figured tunnels or 6to4 tunnels. The core router needs only to support the IPv4 forwarding. The

interworking between IPv6 and IPv4 networks can be implemented by configuring the NAT-PT on

gateways.

The interconnection between IPv6 islands can be implemented through MPLS L2 tunnels by ap-

plying such MPLS L2 VPN techniques as VPLS and CCC. The core router needs only to support

the MPLS forwarding. The interworking between IPv6 and IPv4 networks can be implemented by

configuring the NAT-PT on gateways.

12

Quidway NE5000E Terabit

Core Router

In this application NE5000E routers serve as the Provider�P� routers/nodes/devices in the net-

work core. For an multi-AS VPN application, NE5000E can also act as a Customer Edge (CE)

device in the case that it is an Autonomous System Boundary Router (ASBR). The NE80/40 rout-

ers serve as the Provider Edge (PE) devices, providing the NAT and the Internet access.

Table 1-1 Application in the MPLS L3VPN network

Application in the MPLS L3 VPN Network

CE PE

NE80/40VPN1

P

NE5000E

NE5000E

CE

PE

NE80/40

VPN1

CECE

VPN3VPN2

VLAN VLAN

VLAN

S8016 VLAN

VLAN

VLAN

NE80/40

NE80/40

CE

VPN3

S8016

VPN2

CE

PE

P

MPLS CORE

MPLS EDGE

CE

VPN2

NE5000EPE

P

13