ZXR10M6000 - libertyport.com · Carrier-ClassRouter ProductDescription(M6000-16&-8) Version: 2.00.20 ... ZTE CORPORATION or its licensors may have current or pending intellectual

ZXR10 M6000Carrier-Class Router

Product Description (M6000-16&-8)

Version: 2.00.20

ZTE CORPORATIONNo. 55, Hi-tech Road South, ShenZhen, P.R.ChinaPostcode: 518057Tel: +86-755-26771900Fax: +86-755-26770801URL: http://support.zte.com.cnE-mail: [email protected]

LEGAL INFORMATIONCopyright © 2014 ZTE CORPORATION.

The contents of this document are protected by copyright laws and international treaties. Any reproduction or

distribution of this document or any portion of this document, in any form by any means, without the prior written

consent of ZTE CORPORATION is prohibited. Additionally, the contents of this document are protected by

contractual confidentiality obligations.

All company, brand and product names are trade or service marks, or registered trade or service marks, of ZTE

CORPORATION or of their respective owners.

This document is provided “as is”, and all express, implied, or statutory warranties, representations or conditions

are disclaimed, including without limitation any implied warranty of merchantability, fitness for a particular purpose,

title or non-infringement. ZTE CORPORATION and its licensors shall not be liable for damages resulting from the

use of or reliance on the information contained herein.

ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications

covering the subject matter of this document. Except as expressly provided in any written license between ZTE

CORPORATION and its licensee, the user of this document shall not acquire any license to the subject matter

herein.

ZTE CORPORATION reserves the right to upgrade or make technical change to this product without further notice.

Users may visit the ZTE technical support website http://support.zte.com.cn to inquire for related information.

The ultimate right to interpret this product resides in ZTE CORPORATION.

Revision History

Revision No. Revision Date Revision Reason

R2.0 2014-02-15 Third edition.

R1.1 2013-08-30 Second edition.

R1.0 2013-07-05 First edition.

Serial Number: SJ-20140211164601-003

Publishing Date: 2014-02-15 (R2.0)

SJ-20140211164601-003|2014-02-15 (R2.0) ZTE Proprietary and Confidential

ContentsAbout This Manual ......................................................................................... I

Chapter 1 Product Positioning and Characteristics ............................... 1-11.1 Product Positioning ............................................................................................ 1-1

1.2 Highlighted Features .......................................................................................... 1-2

Chapter 2 Product Architecture ................................................................ 2-12.1 Hardware Architecture ........................................................................................ 2-1

2.1.1 Product Architecture ................................................................................. 2-1

2.1.2 Boards..................................................................................................... 2-3

2.2 Software Architecture ......................................................................................... 2-7

Chapter 3 Features..................................................................................... 3-13.1 Security Features ............................................................................................... 3-1

3.2 Network Availability ............................................................................................ 3-4

3.3 Routing Protocols............................................................................................... 3-6

3.3.1 Unicast Routing Protocols......................................................................... 3-6

3.3.2 Multicast Routing Protocols....................................................................... 3-7

3.4 QoS and Traffic Engineering ............................................................................... 3-8

3.5 MPLS and VPN Service.................................................................................... 3-13

3.6 IPv4 and IPv6 Features .................................................................................... 3-15

3.7 Broadband User Access ................................................................................... 3-16

3.8 Accurate User Positioning Technology ............................................................... 3-18

3.9 BRAS Hot Standby........................................................................................... 3-19

3.10 User and Service Management ....................................................................... 3-22

3.11 Clock Synchronization..................................................................................... 3-25

Chapter 4 Typical Applications ................................................................. 4-14.1 MPLS VPN Application ....................................................................................... 4-1

4.2 MPLS VPLS Application ..................................................................................... 4-2

4.3 IP MAN Application ............................................................................................ 4-2

4.4 Data Center Application ...................................................................................... 4-3

Chapter 5 Interfaces................................................................................... 5-15.1 Maintenance Interfaces ...................................................................................... 5-1

5.2 Service Interfaces .............................................................................................. 5-2

Chapter 6 Link Characteristics.................................................................. 6-1

I


6.1 Ethernet Link Features ....................................................................................... 6-1

6.2 FR Link Features................................................................................................ 6-1

6.3 POS Link Features ............................................................................................. 6-2

6.4 CPOS Link Features........................................................................................... 6-3

6.5 TDM Link Characteristics .................................................................................... 6-4

Chapter 7 Technical Specifications .......................................................... 7-17.1 Physical Specifications ....................................................................................... 7-1

7.2 Performance Specifications................................................................................. 7-1

7.3 Power Consumption Specifications...................................................................... 7-2

7.4 Reliability Specifications ..................................................................................... 7-2

7.5 Configuration Specifications................................................................................ 7-2

Chapter 8 Environmental Requirements .................................................. 8-18.1 Power Supply..................................................................................................... 8-1

8.2 Operating Conditions.......................................................................................... 8-2

8.3 Transportation Conditions ................................................................................... 8-4

8.4 Storage Conditions............................................................................................. 8-5

Chapter 9 Protocols and Standards ......................................................... 9-19.1 Security Standards ............................................................................................. 9-1

9.2 Environmental Standards.................................................................................... 9-1

9.3 EMC Standards.................................................................................................. 9-2

Figures............................................................................................................. I

Tables ............................................................................................................ III

Glossary .........................................................................................................V

II


About This ManualPurpose

This manual describes the ZXR10 M6000 hardware architecture, software architecture,functions, applications, link characteristics, technical specifications, environmentalrequirements, protocols and standards.

Intended Audience

This manual is intended for network planning engineers.

What Is in This Manual

This manual contains the following chapters:

Chapter Summary

1, Product Positioning and

Characteristics

Describes the positioning and highlighted features of the ZXR10

M6000.

2, Product Architecture Describes the overview, hardware architecture and software

architecture of the ZXR10 M6000.

3, Features Describes the functions and features of the ZXR10 M6000.

4, Typical Applications Describes the typical applications of the ZXR10 M6000.

5, Interfaces Describes the maintenance interfaces and service interfaces of the

ZXR10 M6000.

6, Link Characteristics Describes the link characteristics, modes and functions supported

by the ZXR10 M6000.

7, Technical Specifications Describes the physical specifications, performance, power

consumption, reliability, and configuration specifications of the

ZXR10 M6000.

8, Environmental

Requirements

Describes the environmental conditions required for the ZXR10

M6000 operation, transportation, and storage.

9, Protocols and Standards Describes the protocols and standards that the ZXR10 M6000

complies with.

Conventions

This manual uses the following typographical conventions:

Typeface Meaning

Italics Variables in commands. It may also refer to other related manuals and documents.

I


Typeface Meaning

Bold Menus, menu options, function names, input fields, option button names, check boxes,

drop-down lists, dialog box names, window names, parameters, and commands.

Constant

width

Text that you type, program codes, filenames, directory names, and function names.

[ ] Optional parameters.

{ } Mandatory parameters.

| Separates individual parameters in a series of parameters.

Danger: indicates an imminently hazardous situation. Failure to comply can result in

death or serious injury, equipment damage, or site breakdown.

Warning: indicates a potentially hazardous situation. Failure to comply can result in

serious injury, equipment damage, or interruption of major services.

Caution: indicates a potentially hazardous situation. Failure to comply can result in

moderate injury, equipment damage, or interruption of minor services.

Note: provides additional information about a certain topic.

II


Chapter 1Product Positioning andCharacteristicsTable of Contents

Product Positioning ....................................................................................................1-1Highlighted Features ..................................................................................................1-2

1.1 Product PositioningThe ZXR10 M6000 series routers are new-generation Broadband Multi-Service Gateway(BMSG) products with large capacity and high performance. This series of routers aredesigned for carriers' backbone networks, Metropolitan Area Networks (MANs), mobilebearer networks, Internet Data Centers (IDC), government networks and enterprisenetworks.

The ZXR10 M6000 series products include ZXR10 M6000-16 and ZXR10 M6000-8. Forthe overview of the products, see Figure 1-1.

1-1


ZXR10 M6000 Product Description (M6000-16&-8)

Figure 1-1 ZXR10 M6000 Series Products

ZXR10 M6000 series routers can be used on networks of different scales.

l On MANs: used as high-end SRs, large-capacity BRASs/BMSGs and IPRAN corerouters.

l On enterprise networks: used as core routers, egress routers and vertical backbonenodes.

l On backbone bearer MANs: used as core service control/service gateway nodes.

1.2 Highlighted FeaturesBroadband Multi-Service Integration Platform

The ZXR10 M6000 provides service accesses for both important customers and publiccustomers on the same platform. In addition, the ZXR10 M6000 implements the ServiceRouter (SR) and Broadband Remote Access Server (BRAS) functions, which reducesthe requirements for the size of equipment rooms, customer expenses and networkconstruction costs.

Large Capacity and High Performance

With distributed and modularized system architecture, the ZXR10 M6000 uses the largestcapacity switching matrix and the highest performance packet processor on the data planein the telecommunication's industry. It also uses high-performance dual-core CPUs and

1-2


Chapter 1 Product Positioning and Characteristics

large capacity storage devices, which provide optimal performance and good flexibility.The ZXR10 M6000 can be used to establish a future-oriented network platform.

l The ZXR10 M6000 uses the nonblocking switching architecture that featurescentralized control and distributed processing. The ZXR10 M6000 supports 960Gbps single-stage SFUs, and each slot supports a maximum throughput of 100Gbps. A fully configured ZXR10 M6000 supports at most sixteen 100 Gbps interfacesand 4 MB routing table entries.

l The ZXR10M6000 uses high-performance network processors, guaranteeing the wirespeed capacity of each slot. The ZXR10 M6000 provides high service expansioncapabilities that are convenient for adding new services.

Flexible and Various Service SupportThe ZXR10 M6000 can provide multiple services flexibly because of the following features:

l The ZXR10 M6000 provides various physical interfaces, for example, 100 GBEthernet interfaces, 40 GB Packet Over SONET/SDH (POS) interfaces, 10 GBEthernet Local Area Network (LAN) interfaces, 10 GB Ethernet Wide Area Network(WAN) interfaces, GE interfaces, FE interfaces, 10 GB POS interfaces, 2.5 GB POSinterfaces, 622 MB POS interfaces, channelized 155 MB POS interfaces and E1/C3interfaces. The ZXR10 M6000 can also be upgraded to support 400 GB interfacessmoothly to fully meet various requirements of customers.

l The ZXR10 M6000 supports multiple routing protocols and Multi Protocol LabelSwitching (MPLS), for example, the IPv4/IPv6 static route, Routing InformationProtocol (RIP)/Routing Information Protocol next generation (RIPng), Open ShortestPath First (OSPF) v2/v3, Intermediate System-to-Intermediate System (IS-IS) v4/v6,BGP4/BGP4+, Internet Group Management Protocol (IGMP) v1/v2/v3, MulticastListener Discovery (MLD) v1/v2/v3, Protocol Independent Multicast - Dense Mode(PIM-DM), Protocol Independent Multicast - Sparse Mode (PIM-SM), PIM-SourceSpecific Multicast (SSM), Multicast Source Discovery Protocol (MSDP), LabelDistribution Protocol (LDP), OSPF-Traffic Engineering (TE), IS-IS-TE, and ResourceReSerVation Protocol (RSVP)-TE.

l The ZXR10 M6000 supports multiple access modes, for example, the SmartGroup,Virtual Local Area Network (VLAN), QinQ, SuperVLAN, Permanent Virtual Circuit(PVC), SuperPVC, Internet Protocol over Ethernet (IPoE) and Point to Point Protocolover Ethernet (PPPoE).

l The ZXR10 M6000 supports a sophisticated user positioning technology, forexample, the PPPoE+, Dynamic Host Configuration Protocol (DHCP) option82,Virtual Broadband Access Server (VBAS) and QinQ

l The ZXR10 M6000 supports various VPNs, for example, the BGP/MPLS VPN, VirtualPrivate Wire Service (VPWS), Virtual Private LAN Service (VPLS), E-LINE, E-LANand Virtual Private Dialup Network (VPDN).

l The ZXR10 M6000 supports the QoS mechanism, including traffic classification,traffic marking, traffic limitation, shaping, congestion management and avoidance.The QoS operations can be performed for traffic on physical ports and sub-interfaces,user traffic, and service traffic. In addition, QoS operations can be performed for IPv4

1-3



unicast and multicast forwarding, IPv6 unicast and multicast forwarding, L3 VPNforwarding and L2 VPN forwarding.

l The ZXR10 M6000 supports the PPPoE multicast. Customized management canbe performed for each user. Three functions are provided: permit, prohibit and pre-view. The maximal number of multicast groups received by users can also be re-stricted. The sophisticated multicast security control function includes the authentica-tions for set-top box accounts, lines and Medium Access Control (MAC) addresses.The ZXR10 M6000 also monitors illegal multicast sources to provide high assurancefor Internet Protocol Television (IPTV) service operation.

l The ZXR10 M6000 supports the IPv4/IPv6 dual protocol stacks and IPv4/IPv6transition mechanisms in all applications, for example, the manual universaltunneling, automatic 6To4 tunneling and 6PE.

l The ZXR10 M6000 provides the "SmartGroup + VLAN aggregation + rate limit +address binding" technology that implements link protection, user address binding,network segment sharing and bandwidth restriction functions.

Carrier-Class Reliability

The carrier-class reliability features of the ZXR10 M6000 are described as follows:

l The ZXR10 M6000 uses a distributed modularized system. The switching andcontrolling functions are separated. Graceful Restart (GR) is supported for allprotocols, which ensure the Nonstop Forwarding (NSF) when the control plane isrestarted, and thus the Nonstop Routing (NSR) function can be implemented.

l The data forwarding plane, control plane and system management plane areindependent of each other. The routing engine and management engine are alsoseparated. By using the distributed hardware wire speed forwarding function, routerscan be monitored in real-time during large routing information interaction.

l The ZXR10 M6000 supports hot swapping for all hardware boards and equipmentcomponents. Switch boards, protocol processing modules, system main controlmodules, power supply modules, fan modules and clock modules are configuredin redundancy mode, which ensures that the system availability can meet thecarrier-class 99.999% criteria.

l The ZXR10 M6000 provides a modularized ZXROS operation system platform thatshields hardware, which causes the application layer to be independent of hardware.

l The ZXR10 M6000 supports the none-top online system upgrading of the ISSU.l The ZXR10 M6000 supports multi-link binding and load sharing.l The ZXR10 M6000 supports the advanced Fast Reroute (FRR) technology to prevent

failures from affecting the system on both the node and the line levels, and thus ensurethe network stability.

l The ZXR10 M6000 supports the BFD for Everything function, and binds the BFD withmultiple route protocols, VRRP, VRRP Track, LDP RSVP and TE. With this function,failures can be resolved quickly.

1-4


Chapter 1 Product Positioning and Characteristics

Complete Security Guarantee

To guarantee network security of the device and prevent network failures caused byillegal access of unauthenticated users or Distributed Denial of Service (DDoS) attacks,the ZXR10 M6000 provides complete security service technologies, for example, accesscontrol, packet filtering and user authentication. All these methods ensure the equipmentsecurity to the largest extent.

The security features of the ZXR10 M6000 are described as follows:

l The ZXR10M6000 uses a full modularized hardware architecture, which is a hardwarebasis for guaranteeing equipment security.

l The ZXR10 M6000 uses an operating system with all rights reserved. This operatingsystem is highly modularized in architecture. The controlling plane and the forwardingplane are separated, which is a software basis for guaranteeing equipment security.

l The ZXR10 M6000 supports multiple authentications (plain text authentication andMessage Digest 5 Algorithm (MD5) authentication) for important protocols, forexample, the OSPF, BGP, IS-IS, RSVP and LDP to avoid packet attacks to thelargest extent.

l The ZXR10 M6000 uses a mechanism to avoid DDoS attacks. The traffic forwardedto the CPU are categorized into different priority queues, which guarantees thatthe protocol packets and customized data are forwarded with precedence. Eachqueue has different thresholds for different packet types. The ZXR10 M6000 usesthe Committed Access Rate (CAR) to restrict the rate of Internet Control MessageProtocol (ICMP) data packets to avoid CPUs from being overloaded.

l The ZXR10 M6000 uses multiple user access authentications, for example.local authentication, Remote Authentication Dial In User Service (RADIUS)authentication and Terminal Access Controller Access-Control System Plus(TACACS+) authentication.

l Access Control List (ACL) based security authentication is used to further enhance thesecurity for equipment access control, to prevent accessed users from being attackedand attacking other users and networks.

l The ZXR10 M6000 supports the enhanced ACL-based packet filtering securitymechanism.

l The Unicast Reverse Path Forwarding (URPF) can prevent attacks from spoofed IPaddresses.

l The Transfer Control Protocol (TCP) session control mechanism is used to preventillegal terminals from accessing the ZXR10 M6000.

l The ZXR10M6000monitors whether illegal DHCPs andmulticast source servers existon networks.

l The ZXR10 M6000 binds IP addresses with MAC addresses, and user accounts withMAC addresses, to prevent the dedicated user addresses and user accounts frombeing used illegally respectively.

1-5



Graphical Unified Management System

The ZXR10M6000 supports a graphical unified management system, which provides easyservice deployment tools.

l The ZXR10 M6000 uses the ZTE NetNumen Unifies Management System, graphicaluser interface (GUI) and hierarchical password setting. By setting hierarchicalpasswords, routers can operate securely. The ZXR10 M6000 provides multiplemanagement interfaces, for example, the Console and the Mng interfaces, andsupports in-band and out-of-band network management information channels.

l The ZXR10 M6000 supports a complete and convenient VPN service managementsystem that provides a graphical service wizard, a simple configuration method and alarge customer self-management function, which brings convenience for users to useVPN services.

l The ZXR10 M6000 supports QoS traffic analysis in the planning stage, configurationand deployment in the implementation stage, and QoS policy execution resultanalysis. With flexible deployment and modularized configuration, the QoS can beeasily and quickly implemented on the entire network.

Individualized Service Customization

ZTE provides individualized service customization function to achieve a win-win result withcustomers.

1-6


Chapter 2Product ArchitectureTable of Contents

Hardware Architecture................................................................................................2-1Software Architecture .................................................................................................2-7

2.1 Hardware Architecture

2.1.1 Product Architecture

Overview

The ZXR10 M6000 uses a rack-based, all-in-one rack and modularized architecture. Allboards and components support hot swapping.

The primary components of the ZXR10 M6000 include sub-racks, Liquid Crystal Display(LCD) modules, fan subracks, air inlet panel, backplane, power supply modules,Management Process Units (MPUs), Switch Fabric Units (SFUs) and service line cards.

The sub-rack consists of two side plates, a bottom plate, a top plate and guide tracks. Thesub-rack is a front board. The size of the ZXR10 M6000 is 19 inch in width, and it can beinstalled in either a standard IEC 297 or a ETSI cabinet.

ZXR10 M6000-16 Overview

For the overview of the ZXR10 M6000-16, see Figure 2-1.

2-1



Figure 2-1 ZXR10 M6000-16 Components

1 mm = 0.0394 in.1. LCD module2. Upward cable tray3. Boards4. Downward cable tray

5. Air filter6. Air filter for power modules7. Power module8. Fan module

9. Lever10. Mounting flange11. Fan module

ZXR10 M6000-8 Overview

For the overview of the ZXR10 M6000-8, see Figure 2-2.

2-2


Chapter 2 Product Architecture

Figure 2-2 ZXR10 M6000-8 Overview and Components

1 mm = 0.0394 in.1. LCD module2. Cable tray3. Vertical board area4. Horizontal air filter

5. Vertical air filter6. Horizontal board area7. Air intake panel8. Power supply module

9. Vertical fan module10. Handle11. Mounting flange12. Horizontal fan module

2.1.2 Boards

MPU

As the core control node of the ZXR10 M6000, the Main Processing Unit (MPU) managesand maintains the entire rack. After the MPU receives the related routing information sentby line cards, it runs the dynamic routing protocol to receive and send routing information,and calculate the routing table to provide basis for packet forwarding. In addition, the MPUuses different processes to process the routing information of different types, and forms aglobal routing table finally. By using the internal gigabit Ethernet bus, it delivers the globalrouting table to each line card and service card.

2-3



The active and standby MPUs communicate with each other through the dedicated internalcommunication tunnels. A dedicated circuits on the active MPU monitors the operation ofthe CPU in real time. If serious faults such as Error Check and Correction (ECC) errors orthe breakdown of Ethernet switching chip occur, the operations are switched to the standbyMPU.

The MPU consists of the operation maintenance management and protocol processingmodule, Ethernet switching module and clock processing module. It manages the systemclock source, control plane, systemmaintenance plane and environment monitoring plane.

l Operation maintenance management and protocol processing module

As the key module of the MPU, this module provides the following functions:

à It processes all protocol packets and signaling messages, controls andannounces system status. It improves the reliability of the protocol controlplane by separating the forwarding plane from the control plane, and the routingprotocol control plane from the configuration operation management plane. Byusing this method, the ZXR10 M6000 can be better managed.

à It is responsible for the out-of-band communication between all boards inthe entire system. The local switching module is integrated on the board,providing modules with none-stop out-of-band communication between boardsto implement the inter-board control, maintenance and information exchangefunctions. It separates the inter-board communication service and data service,guaranteeing the reliability of the information exchange operations performedbetween boards.

à It is responsible for the configuration and maintenance management of thesystem. It provides a serial port and a RJ45 interface for management andmaintenance, and CF card and USB interfaces for data storage.

l Ethernet Switch Unit

The Ethernet Switch Unit (ESU) provides control communication tunnels between theMPU, service line cards and the SFU. All the connected boards can then be managed.

l Clock Processing Module

It provides precise and reliable synchronous clock for all line cards, ensuring that theoperations of the switch fabric and service boards are synchronized. It supports 2 MBITS, 2 MHz, GPS and line clock as references. Level-III or level-II precision can beprovided through configuration.

l Monitoring and Alarm Unit

The environment monitoring and alarm unit collects the information of the rackoperating status and raises alarms if errors occur. It transmits the information to thecontrol system through the internal Ethernet. All the information is displayed on theLCD screen in real time.

2-4



SFU

The Switch Fabric Unit (SFU) of the ZXR10 M6000 is the core unit of the data switchingplane. It enables the non-block fast switching of the system service data. By usinga high-performance switching fabric and integrating the bandwidth capacity extensionsolution, the SFU implements multicast tunnel management, intelligent monitoring andglobal queue management. For the position of an SFU in the system, see Figure 2-3.

Figure 2-3 SPU Position in System

The SFU of the ZXR10 M6000-8S is in 3+1 redundancy configuration mode. The SFU ofthe ZXR10 M6000-5S is in 1+1 redundancy configuration mode.

The SFU provides the following functions:

l Large switching capacity.l Board configuration and monitoring.l Ethernet communication.l Online EPLD and Flash updates.l SJTAG test.l Board recognition and status signals exchange.l Power supply management.

The features of the ZXR10 M6000 SFU are described as follows:

l The SFU of the ZXR10 M6000 uses the switching fabric that is oriented to high-speedapplication. It can provide up to 960 Gbps board switching capacity.

l To ensure the reliability and redundancy of the switching system, the SFU uses theN+1 load sharing and redundancy design. All SFUs can operate at the same time. Ifone SFU breaks down, adequate switching capacity can still be provided.

2-5



l High-performance control processors are installed in the SFU. Gigabit Ethernet linksare used as channels between the SFU and the MFU, which meets the bandwidth andprocessing capability requirements for information interaction when the managementplane, control plane and forwarding plane are separated. Important management andcontrol information will not be lost.

l The SFU provides a monitoring and test bus that is independent from services,and it is powered on independently. It can monitor the power, voltage, current, andtemperature. In addition, it can control the hot swapping, resetting and poweringinformation.

Packet Forwarding Unit

Fast service processing and forwarding, the maintenance and management of thelink protocols and service forwarding tables are performed by a service line card thatconsists of the physical Line Interface Unit (PIU), packet forwarding module, trafficmanagement module, switch fabric interface module and CPU control module. The PIU isan independent module, and the other modules are integrated on the Packet ForwardingUnit (PFU).

Depending on PIU types, PIUs can be categorized as ETC, POS interface unit, and otherPIUs.

For the position of the PIU and PFU in the system, see Figure 2-3.

l PIU

As an external interface of a wire speed router, the PIU accesses services to interfacesof different rates and types. The PIU provides one or multiple high-speed networkinterfaces.

The PIU converts signals from physical links to data frames on the link layer and viceversa. After the PIU receives data frames, it converts the data frames into datagrams,and sends the datagrams to the packet processing board. The forwarding engine findsthe destination ports, and forwards these datagrams at a high rate.

l PFU

One PFU can process different services at the same time, for example, the POS orthe Ethernet service. You can aggregate multiple low-speed services to one PFU tosave slots.

l The PFU provides the following functions:

à In the receiving direction

The PFU extracts IP packets from link-layer frames and performs time-to-live(TTL) and checksum checks for the header of each IP packet. In additions, itfilters addresses and searches for routers based on the header of each IP packet,edits the header of each IP packet, caches IP packets, and schedules queues.

à In the sending direction

2-6



The PFU removes the switching flag of each IP packet from the switching fabric,and sends it out after converting IP packets into link-layer frames.

Service Processing Unit

The Service Processing Unit (SPU) processes complicated services and protocols, suchas the Network Address Translation (NAT), IP Security Protocol (IPSec), Deep PacketInspection (DPI), NETFLOW and CGN.

For the position of an SPU in the system, see Figure 2-3.

The ZXR10 M6000 uses multiple SPUs configured in load sharing mode to improve theservice and protocol processing capability.

2.2 Software ArchitectureThe software system of the ZXR10 M6000 is based on the ZXROSTMTM software platformdeveloped by ZTE with all rights reserved. It can be used on all types of networks in anyhigh-performance and complicated commercial environment. For the architecture of thesoftware, see Figure 2-4.

Figure 2-4 Software Architecture

Features

The ZXROSTM platform is a multitask-based distributed real-time network operatingsystem, providing unified IP protocol support for all ZTE equipment.

ZXROS provides a mature and steady architecture, in terms of service demands of users,it is concerned more about the operation and maintenance costs, service extendibility andapplication requirements, as listed below:

l Encapsulation

à Multiple operating systems and the smooth upgrading of the operating systemsare supported.

2-7



à Use the unified product configuration style, which facilitates operations andmaintenances.

l Monitoring

à Monitor processes and memory exceptions.

à Monitor the operating status of the power supply module, fan, voltage, current,and environmental temperature.

à Locate failures fast to guarantee product reliability.

l Modularized components

à All software services based on the ZXROS platform can be extended oruninstalled easily. New services can be developed based on the originalarchitecture.

à On-demand services can be customized.

l The extension of carrier-class Ethernet services based on the unified platform

à Implement multiple connection modes, for example, the E-LINE, E-LAN andE-TREE.

à Support L2/L3 VPNs and the H-VPLS, meet the requirements for hierarchicalservices. Multicast services in VPNs are supported. By using the unified networkmanagement system, VPNs can be deployed rapidly, and thus video servicesand IPTV services can be deployed.

à Support the IEEE 1588v2 and the synchronization of the Ethernet clock modes.Delays and jitters in voice services can be avoided.

2-8


Chapter 3FeaturesTable of Contents

Security Features .......................................................................................................3-1Network Availability ....................................................................................................3-4Routing Protocols .......................................................................................................3-6QoS and Traffic Engineering.......................................................................................3-8MPLS and VPN Service ...........................................................................................3-13IPv4 and IPv6 Features ............................................................................................3-15Broadband User Access...........................................................................................3-16Accurate User Positioning Technology......................................................................3-18BRAS Hot Standby...................................................................................................3-19User and Service Management ................................................................................3-22Clock Synchronization..............................................................................................3-25

3.1 Security FeaturesAnti-DDOS AttackTo avoid network storms, Ping of Death attacks and TCP syn flooding attacks, the ZXR10M6000 implements a flexible traffic control mechanism on the control plane. Using thismechanism, the influence on CPUs brought by those attacks can be avoided, and thusservice operations are not interrupted.

The description of the mechanism is as follows:

l The traffic transmitted to CPUs is classified into multiple priority queues, whichensures that important protocol packets such as the BGP and the OSPF packets, andpackets customized by users have priority when they are transmitted and processed.Each queue has different thresholds for different types of packets.

l The ZXR10 M6000 performs CAR rate limit for the traffic transmitted to the ingressphysical interface.

l The ZXR10 M6000 performs CAR rate limit for customized packets based on “sourceaddress + protocol type + TCP/UDP port number + physical ingress interface”.

l For a special policy, the following configurations are allowed: set the number ofpackets transmitted to the CPU per second for processing and the priority of thepackets transmitted to the CPU.

l The mechanism supports the logic port-based exception detection function. Thesystem measures the rate on all logic ports that receive packets. If it detects thattraffic transmitted by a port reaches the threshold, it disables packet receivingoperation on the port and enables a proper delay, and then it enables the port to

3-1



continue to receive packets. Using this method, the impact on user services of otherports caused by violent attacks to one port can be avoided.

The ZXR10 M6000 can effectively ensure that important data packets with higher prioritycan be transmitted with precedence and packets with exceptions can be shielded againstby using the following technologies: data packet priority classification, differentiatedhandling, multiple queue transmission, port transmission policy and traffic flow rate limit.

Security Authentication and AuthorizationThe ZXR10 M6000 supports multiple security authentication and authorization modes.

l AAA

Based on different authentication requirements, you can configure different accessauthentication policies in the ZXR10 M6000 and perform the correspondingauthentication and authorization for different users.

The AAA provides three authentication modes.

à Local authentication

à Remote Authentication Dial In User Service (RADIUS) authentication

à Terminal Access Controller Access-Control System Plus (TACACS+)authentication

The AAA provides four authorization modes.

à Direct trust-based authorization: The system trusts the user and offers authoritywith no need of an account.

à Local authorization: The system implements authorization based on useraccounts configured locally.

à TACACS+ authorization: The TACACS+ can separate authentication andauthorization. The user authorization is implemented by the TACACS+ server.

à RADIUS authorization after authentication is completed: The RADIUS protocolauthentication and authorization cannot be separated.

l Protocol Security

Based on different requirements of protocol security authentications, the ZXR10M6000 implements the complete protocol security authentication for the followingprotocols: Secure Shell (SSH), PPP, routing protocols and SNMP.

The SSH protocol supports the following security authentication modes:

à MD5 cipher text authentication

à SHA1 cipher text authentication

The PPP supports the following security authentication modes:

à PAP authentication

à CHAP authentication

3-2


Chapter 3 Features

Different routing protocols support different security authentication modes.

à The RIPv2, OSPF, and IS-IS protocols support the plaintext authentication.

à The RIPv2, OSPF, IS-IS, and BGP protocols support the MD5 cipher textauthentication.

à The RIPng, OSPFv3, and BGP4+ protocols support the MD5 cipher text IPSecAH authentication.

à The RIPng, OSPFv3, and BGP4+ protocols support the SHA1 cipher text IPSecAH authentication.

The SNMP protocol supports the SNMPv3 encryption and authentication.

Unicast Reverse Path Forwarding (URPF)The ZXR10 M6000 supports the Unicast Reverse Path Forwarding (URPF) function,preventing the source address spoofing-based network attacks.

Note:

Source address spoofing is one of the frequently used Denial of Service (DoS) attacks.The attacker fabricates a source address (a legal network address) to access the attackeddevice to prevent it from providing services. The URPF can effectively defend against suchattacks.

The ZXR10 M6000 supports the following URPF features.

l Strict Reverse Path Forwarding (RPF) checkl Loose RPF checkl Loose RPF check that ignores the default routel ACL checkl IPv4 URPF and IPv6 URPF

Port MirroringThe ZXR10 M6000 supports flexible port/stream mirroring and remote mirroring functions.

In the ZXR10 M6000 system, the traffic that meets the corresponding requirements canbe duplicated to another port. Using this method, maintenance personnel can check andanalyze the data they are interested in. Port mirroring is an important troubleshooting andmonitoring method.

NetflowThe ZXR10 M6000 supports the Netflow that is a technology based on sampling and usedto monitor networks. The ZXR10 M6000 is compatible with two Netflow versions: Netflowv5 and Netflow v9. The ZXR10 M6000 supports the following Netflow features:

3-3



l Packets can be transmitted to the ZXR10 M6000 server in IPv4/UDP mode.l Active packet report mode.l The configuration of the aging time of both the active and the inactive buffer areas.l Multiple servers are supported. This version supports two servers.l Flow-based random sampling.l The configuration of interface traffic sampling rate.l IP stream sampling is supported on Ethernet interfaces, POS interfaces and their

sub-interfaces.l Sampling in the incoming and outgoing directions on an interface.l Service sampling of unicast, multicast and MPLS in one direction is supported.l Multiple traffic statistics functions, for example, Top N statistics.

3.2 Network AvailabilityIP-FRR/LDP-FRRThe switchover interval of the IP Fast ReRoute (IP-FRR) function can be within 50ms,which can reduce data loss to the largest extent when network failures occur.

The ZXR10 M6000 provides the following IP FRR functions:

l The routing protocol module provides loop-free active/standby routes based on loopavoidance policies, and synchronizes both the active and the standby routes to aninterface line card.

l The forwarding module forwards traffic based on the active route and checks the portstatus of the active route.

l If an exception occurs to a port, the ZXR10 M6000 quickly switches the traffic overto the standby router, reducing the number of packets that are lost because of theexception.

MPLS-FRRThe MPLS FRR is the technology that provides local protections for networks.

Once the LSP is configured with the FRR function, if a link or a node on the protected LSPfails, the traffic is switched over to the standby link.

The FRR only provides temporary protections. If the protected link recovers or a new LSPis established, the traffic is switched back to the original LSP or the new LSP.

Graceful RestartThe Graceful Restart (GR) function can minimize the impact of routing protocol restart.The purpose is to reduce route oscillation caused by router restart as much as possible.

When a routing protocol restarts, the restarted router synchronizes the routing informationto a neighbor router with the assistance of the neighbor router as soon as possible. Afterthe synchronization is completed, it updates the local routing information without resettingthe controlling layer.

3-4


Chapter 3 Features

Every routing protocol implements the GR uniquely, but they have the similar basicprinciple.

The following are the GRs supported by the ZXR10 M6000:

l BGP GRl OSPF GRl IS-IS GRl LDP GRl RSVP-TE GR

VRRP

The Virtual Router Redundancy Protocol (VRRP) implements the gateway backup functionon multiple access LANs (such as Ethernet) by providing a set of detection and electionmechanisms.

The VRRP provides continuous service for the accessed host equipment by backing up thegateway equipment on the LAN, which means that the VRRP backs up the route next-hopequipment of the accessed host equipment.

The ZXR10 M6000 supports the following VRRP features:

l Basic VRRP functions.l Binding of the VRRP and the BFD.l Binding of the VRRP and the PING.l Detecting designated port status through the VRRP.l Checking key routing information through the VRRP.l The VRRP group management function is supported. Protocol packets of multiple

VRRP groups can be received and sent in a unified method.

BFD

One important performance of a network device is to quickly detect faults between adjacentsystems, and thus create another path as soon as possible. The Bidirectional ForwardingDetection (BFD) protocol can provide this function.

Themain function of the BFD is to provide a low-loaded fast failure detectionmechanism forneighboring forwarding engines. The millisecond-level link detection and route switchoverfunction can be implemented by combining the BFD and the FRR.

The ZXR10 M6000 supports the following BFD features:

l BFD version 0 and version 1l BFD for BGPl BFD for OSPFl BFD for IS-ISl BFD for LDP LSPl BFD for TE tunnell BFD for PWl BFD for next-hop of static routing

3-5



l BFD for policy routingl BFD for VRRP

3.3 Routing Protocols

3.3.1 Unicast Routing ProtocolsThe ZXR10 M6000 supports all types of unicast routing protocols. The main features arelisted as follows:

l Static routing: Configured by administrators to simplify network configuration andimprove network performance.

l IPv4 routing protocols: BGP, OSPF, IS-IS and RIP.l IPv6 routing protocols: GP4+, OSPFv3, IS-ISv6 and RIPng.

BGPThe Border Gateway Protocol (BGP) is an inter-Autonomous System (AS) dynamic routingprotocol. It is used to exchange the routing information among different ASs. The BGPuses the TCP as the transmission protocol, and its port number is 179.

The BGP provides the following functions:

l Basic BGP functions, and enhanced functions, for example, session authentication,route damping, route reflector, confederation extended community, route aggregationand route filtering.

l BGP GRl The MP-BGP function. Different AFI types, including ipv4 unicast, ipv4 multicast, ipv4

labeled-unicast, ipv4 mdt, ipv6 unicast, ipv6 multicast, ipv6 labeled-unicast and vpnv4are supported.

l BFD for BGPl IP FRRl BGP MIB

OSPFThe Open Shortest Path First (OSPF) routing protocol exchanges routing informationamong all the routers within one AS. It is an Interior Gateway Protocol (IGP) based on linkstatus. Routers creates a link status database by announcing network interface statusthrough the OSPF, and generates the shortest path tree. Each OSPF router uses theseshortest paths to generate the OSPF routing table by using the Shortest Path First (SPF)algorithm. The OSPF provides the following functions:

l Basic OSPF functions, including the neighbor authentication, virtual link, stub,Not-So-Stubby Area (NSSA), Type-3 Link State Advertisement (LSA) aggregationand Type-5 LSA aggregation.

l OSP GR.l VPN access and advanced function, including the sham-link.

3-6


Chapter 3 Features

l OSPF-TE.l BFD for OSPF.l IP FRR.l OSPF MIB.

IS-ISDefined by the International Organization for Standardization (ISO), the IS-IS routingprotocol is defined to support the ConnectionLess Network Service (CLNS) routingprotocol. The IETF extended the IS-IS to carry the IP routing information. The IS-ISis a hierarchical link-state routing protocol. It uses a transmission protocol to send linkinformation. Similar to the OSPF routing protocol defined by the IETF, the IS-IS is also alink state-based IGP. The IS-IS provides the following functions:

l Basic IS-IS functions.l IS-IS GR.l IS-IS extended functions, for example, the hostname and overload-bit.l IS-IS VPN access.l BFD for IS-IS.l IS-IS-TE.l IP FRR.l IS-IS MIB.

RIPThe Routing Information Protocol (RIP) is a UDP-based dynamic routing protocol. Asthe earliest and simplest routing protocol promoted by IPv4 networks, it is implementedbased on distance vector algorithm of local networks. The RIP broadcasts the routingtable periodically, maintains the relationship with neighbor routers, and calculates its ownrouting table based on the received routing information. As the RIP runs easily, it is suitablefor small-scale network. The RIP provides the following functions:

l Basic RIPv1/v2 functionsl RIP VPN accessl RIP MIB

3.3.2 Multicast Routing ProtocolsThe ZXR10 M6000 supports all types of intra-domain, inter-domain and user access sideIPv4 and IPv6 multicast routing protocols. It supports controllable multicast and providesthe multicast with the QoS guarantee.

The multicast protocols and the main features supported by the ZXR10 M6000 are listedas follows:

l IPv4 user access side multicast routing protocols, including the IGMPv1, IGMPv2 andIGMPv3.

l IPv6 user access side multicast routing protocols, including the MLDv1 and MLDv2.l IPv4 intra-domain multicast routing protocols, including the PIM-DM and PIM-SM.

3-7



l PIM-SSM. When a multicast source is confirmed, a broadcast receiver can directlyjoin the multicast source without registering to the Rendezvous Point (RP).

l IPv6 inter-domain multicast routing protocols, including the PIM-SMv6 andPIM-SSMv6.

l Embedded-RP. For groups with the Embedded-RP, a multicast routing table can beformed without a designated RP.

l Anycast RP. Multiple RPsmay exist in amulticast domain. MSDP peers are set amongRPs. The multicast source can select the nearest RP for registration. The receivercan add the nearest RP and join its sharing tree. Hence, the RP load sharing can beimplemented. When an RP becomes invalid, another nearest RP is used.

l Static multicast. The static multicast can implement active/standby switchover withoutinterrupting the traffic.

l Multicast VPN. P network and C network can be in PIM-SM or PIM-SSM mode. Themulticast message encapsulation on the P network can be implemented in theGeneralRouting Encapsulation (GRE) or IP-in-IP mode.

l Supporting inter-domain multicast routing protocols, including the MSDP and MBGP.l Controllable multicast. The multicast sources and clients can be controlled by using

multicast routing policies.l Multicast routing incremental synchronization.l Distributed multicast. The generation of the multicast routing, switchover between the

Shortest Path Tree (SPT) and RPT, and the processing of multicast protocol packetscan be implemented on line cards, and then be synchronized to the main processingunit.

3.4 QoS and Traffic EngineeringWith the further development of IP networks, more and more new services not only requireIP networks for reliable information delivery, but also predictable information transport.Users hope that their networks can provide steady services in all circumstances.

However, more advanced switch and higher bandwidth can only lessen the pressure ofdata transmission bandwidth and QoS guarantee to some extent. The routing system oftraditional IP networks, for example, the internal gateway protocols (such as the OSPFand the RIP) and the external gateway protocols (such as the BGP4), can only providereachable services. It cannot adjust the entire network resources, and this algorithm maycause the aggregation of data traffic on the network transmission side on one link, onenode or one interface.

The purpose of traffic engineering is to optimize network performance. It can map traffic tophysical paths, and optimize network resources automatically at the same time to createnetwork engineering technology that meets special requirements of particular applicationprograms, and enables macro-adjustment and micro control.

The key point of traffic engineering is load balance and network recovery. Theimplementation of IP traffic engineering intends to implement the integration of thebest-effort traditional IP networks with the QoS mechanism.

3-8


Chapter 3 Features

Flow Classification

The ZXR10M6000 provides a hardware-based flexible flow classification mechanism. Theclassification basis are as following:

l Interfaces, sub-interfaces or circuits that receive or send data.l Layer 2 VLAN ID, source MAC, destination MAC or 802.1p Class of Service (CoS)

information.l Layer 3 source IP address, destination IP address, IPP/Differentiated Services Code

Point (DSCP) or protocol information.l Layer 4 source port number and destination port number.

Once the traffic is classified, the device can implement the Committed Access Rate (CAR),congestion management and avoidance control for the traffic.

Access Rate Control

The hardware-based access speed control of the ZXR10 M6000 is also called HardwareRate Limiting (HRL), which ensures that other connections (such as NAT, Access ControlList (ACL) and WAN) are not affected. All interfaces configured with the access speedcontrol service can prevent controllable and reliable network access from being affectedby DoS attacks. Service providers can also use this service to provide services of differentlevels at different prices, which efficiently makes use of the bandwidth.

The ZXR10 M6000 supports the following three types of hardware-based access speedlimiting modes:

l Port rate limiting

This speed limiting mode can be used on the physical ingress or egress port thatrequires bandwidth limits, providing bidirectional speed limiting function (no matterwhat type of traffic is forwarded on this physical port).

Using this function, network administrators or service providers can limit the practicalspeed of each physical port. The network administrator now can allocate bandwidthbetween different users to guarantee that the uplink is fully used, and the serviceproviders can give key users bandwidth guarantee.

The uplink and downlink bandwidths can be configured respectively. Services canbe provided on one port to meet requirements of users for unbalanced uplink anddownlink bandwidths.

l Aggregate rate limiting

This speed limiting mode can provide bandwidth control for one protocol or trafficbased on traffic policies. It can define either a traffic policy for a subnet or a policy forthe aggregation traffic (incoming traffic or outgoing traffic) of an application.

Each traffic policy consists of multiple applications with flexible traffic control. Usingthis function, network administrators can limit the total amount of traffic of a particulartype or limit the traffic of a particular subnet.

l Per-flow rate limiting

3-9



Data flow is a group of packets consisting of network addresses, application portnumbers and protocol types of both the sender and the receiver. For different hostsand applications, different data flows are generated.

Per-Flow rate limiting sets bandwidth limit based on each flow, and the QoS speedlimiting is implemented per flow. If one flow exceeds the bandwidth limit, the networkadministrators can set a bandwidth limit for a particular IP flow. Using this method,the exceeding part can either be dropped or allocated with a lower priority.

One IP traffic can be allocated by an IP header, source address, destination address,source port, destination port and Type Of Service (ToS) byte. The ZXR10 M6000 canidentify any data flow based on IP packets.

Queuing Scheduling of Congestion Management

The ZXR10 M6000 supports the following basic queue scheduling algorithms:

l FIFO

The First In and First Out (FIFO) queue does not classify packets. If the packetreceiving rate is greater than the packet sending rate, the FIFO puts the packets intoa queue based on the arrival sequence of the packets. At the same time, packetsleaves the queue based on the sequence they enter. This is a best-effort service.

l PQ

The Priority Queue (PQ) classifies all packets up to four types based on theprevious configuration. Packets enter four queues of different priorities respectivelyin accordance with the FIFO policy. Packets in a queue with lower priority canbe transmitted only after packets in a queue with higher priority are transmitted.Transmission of packets in a queue with lower priority is preempted by packets in aqueue with higher priority when network congestion occurs.

This mechanism can guarantee that packets of important services (given higherpriority) are transmitted with precedence. However, if the rate of packets with higherpriority is always faster than the interface rate, packets with lower priority will neverbe transmitted.

l WFQ

Weighted Fair Queue (WFQ) is a stream-based queue scheduling algorithm. Packetsare divided into multiple streams, and each stream is assigned with an FIFO queue.

l CBWFQ

Class-Based Weighted Fair Queue (CBWFQ) classifies IP packets based on theDSCP, input port and five elements of an IP packet. Packets of different types enterdifferent Bandwidth Queuings (BQs). If a packet cannot be matched, the packetenters the system default queue.

The ZXR10 M6000 integrates multiple scheduling methods. Each port of a line card in thesystem is configured with the PQ, WFQ and the default queue.

3-10


Chapter 3 Features

In practice, for the PQ, priority scheduling is implemented. After offering the bandwidthrequired by the PQ, theWFQ implements the CBWFQ scheduling based on the percentageconfigured by the users. After the above two queue bandwidths are satisfied, the rest trafficis used by the default queue and is scheduled by the FIFO.

Users can select one scheduling method or a combination of multiple methods throughconfiguration to meet various user needs.

Congestion Management

The ZXR10 M6000 supports the following congestion management algorithms:

l RED

The Random Early Detection (RED) can be used as a mechanism to avoidcongestions at bandwidth bottleneck on networks.

l WRED

TheWeighted Random Early Detection (WRED) refers to the combination of weightedalgorithm determined by the IP priority with the RED algorithm.

The WRED provides a statistics tool to maintain effective link utilization. When thenumber of packets in the output buffer reaches the guard line, packets are randomlyselected to be dropped.

à No packets are dropped if the number of packets does not reach the minimalthreshold.

à All packets are dropped if the number of packets exceeds the threshold.

à If the number of packets in the buffer is between the lower threshold and upperthreshold, the dropping rate is a function of the average queue length. Theaverage queue length is an average value during the entire operation process.

As data packets are dropped randomly, packets in all flows are dropped at differenttime. This prevents the "global synchronization" phenomenon resulted from drop-tail.

Congestion management algorithm can be configured for each priority queue on the port.In accordance with the packet dropping policy, a device drops the packets of differentservice flows or the packets with different dropping levels of a service flow with differentstatistic possibilities. This can effectively avoid or control network congestion.

Traffic Engineering

Network congestion is a primary problem affecting backbone network performance. Thereason of the congestion may attribute to the inadequate network resources or unbalancednetwork resource load. The Traffic Engineering (TE) can solve the congestion problemcaused by unbalanced load.

The MPLS TE is a technology that combines the TE and the MPLS. With the MPLS TE,service providers can accurately control the path that traffic is forwarded to avoid thecongested nodes. This solves the problem that some paths are overloaded while some

3-11



others are idle. The MPLS TE can reserve resources to guarantee the QoS when an LSPtunnel is being established.

The ZXR10 M6000 supports the following MPLS TE features:

l OSPF TE and IS-IS TEl Constrained Shortest Path First (CSPF)l Basic RSVP-TE functions

The ZXR10 M6000 can establish and maintain a TE tunnel through the Path and Resvmessages.

l RSVP-TE FRR

With this feature, the Label Switch Routers (LSRs) can provide the RSVP-TE localprotection capability.

l DS-TE

Implementing the RFC functions, including the uni-CT and multi-CT DS-TE tunnel,and supporting the Maximum Allocation Model (MAM), Russian Dolls Model (RDM)and E-MAM bandwidth models.

l RSVP-TE GR

Implementing the GR function, Draft "Extensions to GMPLS RSVP Graceful Restart",and the recovery mechanism that are defined in the "fault recovery" section of theRFC.

l RSVP-TE MIB

Implementing the RFC functions.

l RSVP-TE extension function

RSVP-TE Make-Before-Break (MBB), re-optimization, priority preemption, abstractrefresh, automatic routing, FA, hot-standby and authentication.

l E-LSP

Control/Service Policy

To ensure the successful delivery of all services on networks, the following functions arerequired:

l Classify different services to different priority queues for transmission.l To control the use of network bandwidth, perform traffic shaping (rate limiting) for the

related services or traffic.l To control the user access to different services, configure an ACL, especially an

application-based ACL.l To provide a special route path for special users and services, configure a policy-based

route.l Provide a packet dropping mechanism (such as WRED) when congestion occurs.

3-12


Chapter 3 Features

The control/service policies above are very important for efficient network operations.Hierarchical implementation must be performed in practice, as different network layersplay different roles and accomplish different policy tasks on networks.

The interface module of the ZXR10 M6000 supports the hardware routing table function.The routing table and some ACL are stored in interface modules directly. All packets onthe router are directly forwarded by an asynchronous serial interface chip, which furtherlessens the load of CPUs and is faster than the flow-based L3 switching mode (The firstpacket in the flow is processed by a CPU. The interface module records the forwardingresult. Other packets of the flow and the repeated traffic are forwarded by the ASIC chip).This ensures the line-speed forwarding on the high-speed links of the backbone networkon devices.

3.5 MPLS and VPN ServiceMPLS ServiceThe Multiprotocol Label Switching (MPLS) is a multi-layer switching technology. Itcombines the L2 switching technology and the L3 routing technology, using labels toaggregate the information to be forwarded. It is implemented in a hierarchical routingarchitecture. It supports multiple upper layer protocols and can be implemented onmultiple physical platforms.

The MPLS simplifies the MPLS network management and optimizes the networkperformance.

The ZXR10 M6000 supports the following functional features of the MPLS:

l Basic functions and label forwarding services of the MPLS and the LDP signalingprotocol.

l MPLS GR function. When the MPLS protocol fails to operate, data with labels canstill be forwarded.

l MPLS Ping/Trace. The ZXR10 M6000 detects whether the LSP is available by usingthe MPLS echo requests and the MPLS echo reply messages.

l LDP FRR. When the LSP fails to operate, the traffic can be switched over rapidly.l MPLS LSP load sharing.l Processing of multi-layer labels.l LSP loop detection mechanism.l MPLS CoS. IP packets in the ToS domain can be mapped to MPLS packets in the

EXP domain.l MPLS TE, including the basic TE, FRR and DS-TE functions.

MPLS VPNThe MPLS VPN is a new VPN technology. It encrypts data for Internet Service Providers(ISPs). This technology allows the use of a non-exclusive dedicated IP addresses onVPNs. The MPLS forwarding operation is based on the marked value instead of thedestination address in packet heads.

3-13



The MPLS allows ISPs to provide VPN services by using a simple and flexible tunnelmechanism.

The VPN forwarding table contains labels corresponding to VPN-IP addresses. The datais delivered to related place through such labels. As the labels are used to replace theIP addresses, users can maintain its dedicated address architecture without requiring theNAT. The MPLS VPN has the following advantages:

l The configuration of a VPN connection is simple. It does not affect the backbonenetwork.

l Users do not need to change anything. The configuration is very simple when a userwants to join a VPN.

l The network can be extended greatly.l VPN users can use the original private addresses without any change. The VPN-ID

is used on the backbone network to maintain the uniqueness of a device on the entirenetwork.

l It is easy to provide value-added services.

The ZXR10 M6000 supports the MPLS/BGP-based L3 VPN. It provides users with virtualprivate network services by using the existing public network resources. The MPLS VPNservice of the ZXR10 M6000 supports the following features:

l The MPLS VPN can operate as a P, Provider Edge (PE) or Customer Edge (CE).l Dynamic (BGP, RIP, OSPF and IS-IS) and static (static route) VPN accesses.l Route Target (RT) rewriting and Site of Origin (SOO).l Multiple cross-domain VPNs.l VRF route restriction.l VPN FRR.l GR.

MPLS L2 VPN

The ZXR10 M6000 supports the Martini-mode MPLS-L2VPN. It identifies a Virtual Circuit(VC) by using the “VC-Type + VC-ID”.

l VC-Type identifies the type of this VC (an Ethernet or a VLAN).l VC-ID uniquely identifies a VC .l VC-ID for each VC of the same VC-Type must be unique on a PE.

The PE connecting two CEs exchanges VC labels by using the LDP and binds thecorresponding CE by using the VC-ID. When an LSP connecting two PEs is establishedsuccessfully, and label exchanging and binding of two parties are completed, a VC isestablished. These two CEs can transmit L2 data through this VC.

To exchange VC labels between PEs, the RFC standard extended the LDP, which addedthe VC Forwarding Equivalence Class (FEC) types. In addition, as two PEs exchangingVC labels may not be directly connected, the LDP must use a remote peer to establish asession through which VC FEC and VC labels are transmitted.

The L2 VPN service of the ZXR10 M6000 supports the following features:

3-14


Chapter 3 Features

l Use the LDP protocol as the basic signaling.l Support two L2 VPN services: the VPWS and VPLS .l Support L2VPN MIB.l Support FEC 129 coding.l The VPWS service supports Pseudo Wire (PW) Class configuration, heterogeneous,

Status Type/Length/Value (TLV), VCCV and control word configuration.l Support L2 VPN reflector for VPLS.l Support multi-segment PW (MS-PW).l Support L2 VPN GR.l Support MAC address filtering and restriction.

3.6 IPv4 and IPv6 FeaturesIPv4 FeaturesThe main IPv4 features supported by the ZXR10 M6000 are as follows:

l Basic TCP/IP protocol stack, including the ARP, IP, ICMP, TCP, UDP and socket.l TELNET client, TELNET server and SSH server (version 1 and version 2).l FTP client, FTP server and TFTP client.l IP policy-based routing. During sending and forwarding messages, the next hops can

be assigned directly based on the message attributes.l DHCP relay agent and DHCP server.

The ZXR10 M6000 also provides multiple IPv4 link detection and diagnosis technologies.The primary technologies are as follows:

l Common diagnosis functions, for example, Ping and Trace.l Automatic detection function of Ping. By using this function, the next hops of static

routes can be detected, and the priority of VRRP backup groups can be detected andcontrolled.

IPv6 FeaturesThe ZXR10 M6000 supports IPv6, IPv4/IPv6 dual protocol stack and multiple transitionaltechnologies from IPv4 to IPv6. The IPv6 features supported by the ZXR10 M6000 are asfollows:

l Basic IPv6 protocols, including the IPv6 protocol and the Neighbor Discovery Protocol(NDP).

l TCP6, UDP6 and socket IPv6.l TELNET6.l Path Maximum Transmission Unit (PMTU) discovery.l IPv6 link detection function, including the Ping6 and the Trace6.l IPv6 policy-based routing.l IPv4/IPv6 dual protocol stack, providing both the IPv4 and the IPv6 functions.l 6in4 tunnel, 4in6 manual tunnel and 6to4 automatic tunnel.l Network Address Translation-Protocol Translation (NAT-PT).

3-15



l IPv6 Provider Edge (6PE).

3.7 Broadband User AccessThe ZXR10 M6000 is used on the service control layer. It provides broadband useraccesses, supports multiple access modes to meet the requirements of differentoperators and service providers. The user management mode provides multiple flexibleauthentication, authorization and accounting management modes.

The broadband access modes supported by the ZXR10 M6000 are IPoE and PPPoE.

IPoE Access

The IPoE service is an access authentication service. In IPoE services, users accessnetworks through Ethernet physical links. Fixed IP addresses can be configured, or IPaddresses can be obtained from the DHCP server. Three authentication modes are used:Web authentication, Option60 authentication and circuit authentication.

The IPoE has the following two access modes:

l DHCP+Web

In this access mode, after a user terminal obtains an IP address through a DHCPserver, the user terminal cannot access the network successfully. No matter whatURL address is entered by the user, the ZXR10 M6000 redirects the user to thespecified web authentication page. The user needs to enter the username and thepassword on the authentication page. The username and the password informationis sent to the ZXR10 M6000, and then the ZXR10 M6000 sends the informationto the RADIUS server for authentication. If the username and the password areauthenticated successfully, the ZXR10 M6000 modifies the user ACL, and then theuser can access the network successfully.

If the user is offline unexpectedly, for example, the user host system breaks down orthe network terminal is shut down, the ZXR10 M6000 can provide multiple detectionmethods to verify that the user host is operating properly.

The ZXR10 M6000 supports both the built-in DHCP server and the DHCP relay.

When a DHCP relay is obtaining an address, the communication is controlled by arelay device. During the address lease renewal period, the DHCP relay does notprocess renew packets from a DHCP client. The renew packets are sent to theDHCP server through the forwarding plane directly. The DHCP client and the servercommunicate directly. The DHCP relay only implements the forwarding function.

l DHCP Boot-strap Authentication

The DHCP boot-strap authentication supports two authentication modes:

à Circuit-based User Authentication

The flow of circuit-based subscriber authentication is described as follows:

3-16


Chapter 3 Features

1. A user starts the client, and then the flow for requesting an address from theDHCP server starts. When receiving the application message, the ZXR10M6000 obtains the circuit information of the interface that receives themessage. It searches for the corresponding user and domain name basedon the circuit information, and then searches for the authentication mode ofthe user based on the domain.

t If the authentication mode is local authentication, the ZXR10 M6000compares the obtained user information with the local user information.If the information is the same, the user is authenticated successfully, andan IP address is allocated to the user.

t If the authentication mode is RADIUS, it is necessary to configurethe user authentication information that is consistent with the circuitinformation on the RADIUS server. An address will be allocated afterthe user is authenticated successfully.

2. When receiving the DHCP Offer message replied by the ZXR10 M6000,the client replies with a DHCP Request message. After the ZXR10 M6000receives the Request message, it searches for the address allocationinformation of the user based on the hardware address of the user. If theinformation is found, the ZXR10 M6000 replies with an ACK message, andthen the user can get online successfully. If the information is not found, theuser needs to request an address again.

à Option60–based Extended User Authentication

The flow of Option60–based user authentication is described as follows:

1. A user starts the client, and then the flow for requesting an address fromthe DHCP server starts. When receiving a message, the ZXR10 M6000obtains the Option60 information from the message, and then it resolves theinformation in accordance with the configured Option60 resolution method.After that, the ZXR10 M6000 obtains the authentication mode based on thedomain name.

t If the authentication mode is local authentication, the ZXR10 M6000compares the obtained user information with the local user information.If the information is consistent, the user is authenticated successfully,and then the server allocates an IP address.

t If the authentication mode is RADIUS, it is necessary to configurethe user authentication information that is consistent with the circuitinformation on the RADIUS server. The flow is the same as that of localauthentication after the user is authenticated successfully.

2. When receiving the DHCP Offer message replied by the ZXR10 M6000,the client replies with a DHCP Request message. After the ZXR10 M6000receives the Request message, it searches for the address allocationinformation of the user based on the hardware address of the user. If theinformation is found, the ZXR10 M6000 replies with an ACK message, and

3-17



then the user can get online successfully. If the information is not found, theuser needs to request an address again.

PPPoE Access

The Point-to-Point Protocol over Ethernet (PPPoE) access is a link access technology thatis used to access the BroadbandRemote Access Server (BRAS) through the Point-to-PointProtocol (PPP). In this mode, a user communicates with the ZXR10 M6000 by using thePPPoE protocol. The ZXR10 M6000 is responsible for terminating PPPoE connections.

PPPoE is a data type of PPP data carried over the Ethernet. It provides a standard toconnect multiple hosts to a BRAS on a broadcast network.

PPPoE consists of the following two stages:

1. PPPoE Discovery Stage

The PPPoE Discovery Stage is to establish a connection between a host and a BRAS(discovering the MAC address of the BRAS) and provide a PPPoE Session ID. TheSession ID is used with the PPP dial until the session ends.

2. PPPoE Session Stage

The PPPoE session stage includes the negotiation of data link layer parameters (suchas authentication and the MRU) and the negotiation of network layer parameters (suchas IP address). The session stage includes the following three steps:

a. LCP establishment: The Link Control Protocol (LCP) is used to negotiate link layerparameters. It is responsible for establishing and maintaining a connection.

b. Authentication: There are two authentication modes, PAP and CHAP. The PAPauthentication is a two-way handshake authentication, and the passwords areplain text. The CHAP authentication is a three-way handshake authentication,and the passwords are cryptograph.

c. The Network Control Protocol (NCP) or the IP Control Protocol (IPCP) negotiation:The NCP includes the IPCP and the IPXCP. The IPCP is most widely usedin applications. It is used to negotiate the IP addresses of the point-to-pointcommunication devices.

3.8 Accurate User Positioning TechnologyThe user positioning technology is helpful in providing users with different levels ofservices. It can prevent the user account from being embezzled.

After obtaining the user link information by using the accurate user positioning technology,the ZXR10 M6000 saves the information in an RADIUS request message and sends themessage to the RADIUS server. If the link information is incorrect, the RADIUS serverreplies with an access rejection message. When receiving the access rejection message,the ZXR10 M6000 terminates the user's connection request.

The ZXR10 M6000 supports the following accurate user positioning technologies:

3-18


Chapter 3 Features

l PPPoE+l DHCP Option82l VBASl QinQ

PPPoE+PPPoE+ is shorted for the PPPoE Intermediate agent. A Digital Subscriber Line AccessMultiplexer (DSLAM) device is required to implement the PPPoE Intermediate agentfunction to modify the PPPoE protocol packets. It adds the user link information identifiersto the packets in the PPPoE discovery stage. The ZXR10 M6000 implements the LinkAccess Control (LAC) function to obtain the user link information identifiers. The PPPoE+is only suitable for PPPoE accesses.

DHCP Option82The DCHP Option82 is an application of a DHCP agent. In a DHCP application, a DSLAMdevice or a switch operates as a DHCP agent. The DHCP agent inserts a user lineidentifier in the TAG (82) of each DHCP discover message and DHCP request message.The messages are then sent to a DHCP server or a RADIUS server for authentication,authorization and accounting.

VBASThe Virtual BAS (VBAS) requires the coupling of the DSLAM and the BRAS. To create thecoupling of the DSLAM and the BRAS, configure the DSLAM corresponding to a VLAN onthe BRAS. During the PPPoE calling, the BRAS is mapped into the corresponding DSLAMbased on the user VLAN. The BRAS requests a user line identifier from the DSLAM, andthe DSLAM replies with a user line identifier as a response to the BRAS. To implement theVBAS function, the corresponding relation between VLANs and the DSLAM on the BRASmust be configured correctly.

QinQThe QinQ means to add a 802.1q protocol tag in front of another 802.1q protocol tag. Theinner tag identifies the customer network, and the outer tag identifies the service providernetwork. It provides user line identifiers by extending the tags. With the QinQ, the problemof insufficient VLANs (up to 4k) is solved.

3.9 BRAS Hot StandbyThe ZXR10 M6000 supports multiple hot standby technologies, for example, thePPPoE/IPoE, IP Host, PPPoE/IPoE access VPN and multicast, ensuring never-downnetwork services for users.

The hot standby technology means to synchronize the user information between an activedevice and a standby device. Users do not need to send connection requests again afterswitchover operations, and users do not experience network faults.

3-19



PPPoE/IPoE Service Hot Standby

For an example of PPPoE/IPoE service hot standby, see Figure 3-1.

Figure 3-1 PPPoE/IPoE service hot standby

The procedure of the PPPoE/IPoE service hot standby is described as follows:

1. A PPPoE/IPoE user is connected to two Broadband Multi-Service Gateway (BMSG)devices through a switch. The standby interfaces on the two BMSG devices run theVRRP protocol on the sub-interfaces to negotiate the active and standby relation. TheBFD linkage can be used to speed up fault detection. The active and standby relationbetween the BRAS sub-interfaces is implemented by associating with the VRRP.

2. The user sends a connection request by broadcasting PADI and DHCP Discoverymessages. The standby device BMSG-2 does not reply. The active device BMSG-1replies with a PADO/DHCP Offer message. The source MAC address of the messageis the virtual MAC address generated by the VRRP group.

3. The user accesses the ZXR10 M6000 through the BMSG-1. The BMSG-1 transmitsall user information to the BMSG-2 by using the SIBP protocol. The user informationincludes the Session ID, AAA information, access line information and QoS.

3-20


Chapter 3 Features

4. When the BMSG-1 has a fault or a link has a fault, the BMSG-2 becomes the activedevice and is in charge of user services. Services are then switched over to theBMSG-2 automatically. The BMSG-2 sends free ARP packets to the downlink torefresh the MAC forwarding table on the downlink switch. The MAC address is thevirtual MAC address the same as that of the backup group on the BMSG-1. The usertraffic is forwarded through the BMSG-2.

5. Different backup groups share a global address pool. If the fault occurs on the linkbetween the BMSG-1 and the switch, the user downlink traffic still goes down fromthe BMSG-1. If possible, it is recommended that a direct-connected link between theactive and the standby device is used to redirect the traffic. If there is no directlyconnected links between the active and the standby device, a tunnel can be used. Ifthe fault occurs to the BMSG-1, routes are disabled. The downlink traffic goes downfrom the BMSG-2.

6. The faulty state is not a normal state. It is recommended to configure the VRRPpreemption function. After the fault is removed, the BMSG-1 becomes the activedevice again, and the user traffic also recovers to the previous state.

IP Host Service Hot StandbyAn IP host user uses an IP address configured statically. Users do not need to sendconnection requests to the BMSG. The procedure of IP host service hot standby does notcontain Step 2 in the procedure of PPPoE/IPoE service hot standby.

PPPoE/IPoE Access VPN Service Hot StandbyAfter a connection is established, a user accesses a VPN instead of a public networkservice. This is the only difference between the PPPoE/IPoE access VPN service and theordinary PPPoE/IPoE service.

When a fault occurs to a link, the traffic from the active device to the standby device needsto be redirected through VPN routes. This is the difference of hot standby between thePPPoE/IPoE access VPN service and the ordinary PPPoE/IPoE service. Currently, thereare two solutions for the traffic redirection through VPN routes.

l Solution 1: Use a directly connected link between the active and the standbydevice. Configure sub-interfaces on the interconnected physical interfaces. Eachsub-interface corresponds to a VPN. When the downlink traffic arrives at the BMSG-1,redirect the traffic to the BMSG-2 by using the IP FRR.

l Solution 2: Use theMP-IBGP between the BMSG-1 and the BMSG-2 to allocate labelsfor the VPN. Advertise the VPN host routes to form FRR routes to the peer. When thetraffic arrives at the BMSG-2, the traffic can inherit the VPN information.

Multicast Service Hot StandbyThe BMSG-1 and BMSG-2 determine the active and standby relation by using the VRRP,see Figure 3-2. Both devices can receive the IGMP join requests sent by a user. However,only the BMSG-1 processes the IGMP request of the user and then synchronizes the usergroup information to the BMSG-2 by using the SIBP. The user group information is saved

3-21



on both devices. The devices send PIM Join packets to draw the multicast traffic. Themulticast user on the BMSG-2 is in the standby state, so the BMSG-2 does not copymulticast packets to the downlink.

Figure 3-2 Multicast Service Hot Standby

The BFD for the PIM is used for fast fault detection. After an active and standby switchoveroperation, users do not need to send new IGMP requests. The BMSG-2 sets the accessedmulticast users to the active state and copies multicast packets. After these operations,users can receive multicast packets sent by the BMSG-2.

3.10 User and Service ManagementThe ZXR10 M6000 supports terminal access and management, including access,authentication, accounting and address allocation.

Domain ManagementThe AAA function on the ZXR10 M6000 treats a domain as a complete control entity. Auser must belong to a domain when being authenticated. It means that a domain must bechosen for a user when the user is authenticated. After that, authentication, authorizationand accounting can be performed in accordance with the domain configuration.

All functions of the AAA module are implemented within the domain management entity.Different domains are independent from each other with different authentication andaccounting policies. All processes of authentication and accounting are implementedwithin the range of the domain. To implement the core control of the AAA module,users can configure authentication policies (local, none and radius), associate Radius

3-22


Chapter 3 Features

authentication and accounting server groups, and configure default templates. Anaccounting protection mechanism is also provided.

The primary functions provided by the domain management are as follows:

l Multiple authentication mechanismsl Multiple authorization policiesl Second accounting functionl VRF correlationl Multiple individualized servicesl authorization control

The authentication modes are as follows:

l Binding authenticationl PPP authenticationl 802.1X authentication

Service Access-List

The Service Access-List (SAL) maps users to domains. Users must belong to a particulardomain after the SAL operation. If the domain which a user belongs to is not configuredin the system, the user will be appointed to a domain by the SAL.

The SAL is a combination of the following sub-functions. The sub-functions processdifferent user authentication or access modes, providing flexible access control.

l Account resolution: A user account is in the format of user name plus domain name.Account resolution means to resolve the account to a user name and a domain name.

l Default domain function: If a user does not enter a domain name for authentication,the default domain function provides a shared default domain as a control entity forthe user.

l Domain name mapping function: This function replaces the domain entered by a userfor authentication with a specified domain. Using this method, a domain control entitycan have multiple domain names.

l Domain control function: To make the user access control more conveniently, the SALdomain control function can prohibit or permit the access of users in specific domains.

l Roaming domain function: This function is useful when the domain where a userlocates is not configured in the access point. However the ZXR10 M6000 requiresa domain to implement user access control. When the ZXR10 M6000 detects thatthe domain entered by a user is not configured in the local area, it uses the roamingdomain configured by the SAL as a control entity for the user.

Service Time Range Management

Broadband access services are becoming more and more comprehensive. Therequirements for user service control is also becoming higher. Operators require morecareful and intelligent management capabilities.

3-23



To meet the requirements, the ZXR10 M6000 provides time range management for threeservices: ACL, QoS and management domain. Administrators can apply different servicepolicies to different time ranges to provide users with diversified and differentiated services.

ACL and QoS time range management: If a user is authenticated, the system dynamicallyobtains the ACL or the QoS from the time range manager based on the time when theuser is authenticated, and then applies the ACL or the QoS to the user attributes. If theuser is online, it applies the corresponding ACL or the QoS to modify user attributes, thusimplementing different authorities in different time ranges.

Domain time range management: The basic domain function only prohibits or permitsaccesses. However, it is often necessary to control the access for different time ranges inpractical. By using the domain interval management, administrators can control differentaccesses in different time ranges in a domain.

RADIUS Client

The ZXR10 M6000 can operate as a RADIUS client to communicate with a RADIUSserver and implement remote authentication, authorization and accounting functions. Thedetailed functions are as follows:

l RADIUS server group management.

A server group forms a reliable server cluster. Load sharing or server backup amongservers can be implemented by configuring different policies for server groups.

l Two algorithms are supported to select a server, the First algorithm and theRound-robin algorithm.

à The First algorithm: If the current server operates properly, this server is used. Ifthe current server fails to operate properly, the next valid server is used.

à The Round-robin algorithm: Even if the current server operates properly, the nextvalid server is used.

l Switchover of the active and standby RADIUS servers.

If a fault occurs to the active RADIUS server, the system sends the authenticationand accounting requests to the standby RADIUS server automatically. The standbyRADIUS server processes the requests. If the active RADIUS server recovers, theZXR10 M6000 can switch over to the active RADIUS server again automatically.The service is not interrupted and no accounting information is lost during the entireprocedure.

l The Layer2 Tunnel Protocol (L2TP) accounting type defined in RFC.l The local accounting protection function.

After the user accounting information is sent from the ZXR10 M6000, if no ACKinformation is received, it is considered that the accounting failed, and the accountinginformation is saved in the local cache.

l RADIUS dynamic authorization.

3-24


Chapter 3 Features

A RADIUS server can adjust the user bandwidths dynamically or limit the accessesto specified resources.

A RADIUS server confirms a user based on the related information, for example, theuser account. When the user information (such as IP, ACL, QoS, uplink and downlinkbandwidth control) is modified in the database, themodifications are sent to the ZXR10M6000 through CoA-request packets.

The ZXR10 M6000 searches for the user based on the corresponding user circuitinformation contained in the request and changes the related service data of this user.During this procedure, the user can get online normally. PPP reset is not needed.

l Encapsulating, decapsulating and sending of user authentication and accountingpackets in accordance with the RADIUS protocol.

l Returning the user authorization information from the RADIUS server after the userauthentication is succeeded.

l The 802.1X protocol is supported and Extend Authentication Protocol (EAP) packetscan be transmitted transparently.

l Two-level accounting, meeting the requirements of accounting between different ISPs.l Two accounting types: Accounting-on and the Accounting-off.l Maintenance of the RADIUS request queue. Parallel sending is allowed.l A retransmission mechanism is used to ensure that information is sent.l Caching RADIUS accounting information.l Convenient track debugging and data statistics functions.l MIB interfaces defined in the RFC.

3.11 Clock SynchronizationThe purpose of clock synchronization is to make the clock frequencies and phases of allnodes on networks be controlled in the predefined tolerance range, preventing data errorscaused by inconsistent clocks. This saves the costs for establishing networks.

Clock synchronization consists of two types of information synchronization:

l Time (phase) synchronization: The frequencies between signals must be consistent,which means than the phase difference of the signals is always 0.

l Frequency synchronization: The signal frequencies are in a particular strict relation,and the corresponding valid instants appear at the same average speed to ensurethat all devices on the network run at the same speed.

The ZXR10 M6000 uses the synchronization Ethernet and the Precision Time Protocol(PTP) functions.

Synchronous Ethernet

The ZXR10 M6000 supports the synchronous Ethernet technology.

l On the sending side, the System Clock Module, Enhanced version (SCME) in theZXR10 M6000 system outputs a high-precision system clock to all Ethernet interface

3-25



cards in the system. The clock module on an Ethernet interface card uses thishigh-precision clock to send data.

l On the receiving side, the clock module on an Ethernet interface card restores theclock information and sends it to the SCME after frequency division. The SCMEjudges the qualities of the clock information reported on the interfaces and selects theinformation with the highest precision, and then it synchronizes the clock informationwith the chosen information.

To generate a high-precision system clock, synchronous Ethernet also can use ahigh-precision external clock (2 MBITS and 2 MHz) as a reference. The generated clockinformation is sent to all line cards. Furthermore, the clock abstracted by the GPS alsocan be used as a reference.

PTP

The ZXR10 M6000 supports the IEEE 1588v2 protocol. This protocol provides a precisetime synchronization solution: the Precision Time Protocol (PTP).

l The PTP supports time and frequency synchronization, and it can providesub-microsecond time synchronization precision.

l In the 1588v2 protocol, there are multiple PTP packet encapsulation modes, forexample, the UDP (IPv4 and IPv6) and the Ethernet.

l PTP packets can be multicast or unicast.

In communication relation, clocks can be master clocks and slave clocks. Any clock canprovide both the master clock function and the slave clock function. However, on a PTPcommunication subnet, only one master clock is required.

In the entire system, the best clock is the Grandmaster Clock (GMC). It provides the beststability, precision and certainty. Based on the features such as clock precision, level andthe Universal Time Coordinated (UTC) traceability, the Best Master Clock (BMC) algorithmis used to select the master clock on a subnet automatically.

Each network system of a specified range has only one GMC. Each subnet system hasonly one master clock. Slave clocks maintain synchronization with the master clock. Fora system containing only one subnet, the master clock is the GMC.

3-26


Chapter 4Typical ApplicationsTable of Contents

MPLS VPN Application...............................................................................................4-1MPLS VPLS Application .............................................................................................4-2IP MAN Application ....................................................................................................4-2Data Center Application..............................................................................................4-3

4.1 MPLS VPN ApplicationThe ZXR10 M6000 supports the MPLS VPN, see Figure 4-1. Besides the effective, secureand high performance price ratio virtual network services provided to business users,the ZXR10 M6000 provides broadband users with the MPLS VPN function. Carriers canallocate different users to different VPNs based on user properties or the ISPs to whichusers belong.

Figure 4-1 ZXR10 M6000 in a Typical MPLS VPN Network Architecture

On a core network, the ZXR10 M6000 provides different tunnels for different VPN users,reserves and schedules resources for different tunnels. This ensures different QoSs fordifferent VPN users.

The ZXR10 M6000 also provides the MPLS Operation, Administration and Maintenance(OAM) and Fast Reroute (FRR) functions. With these two functions, faults can be detectedfast, the active and standby server can be switched over fast, and thus the VPN servicescan operate uninterruptedly.

4-1



4.2 MPLS VPLS ApplicationThe ZXR10 M6000 enables that multipoint-to-multipoint private networks areinterconnected by using the VPLS solution, see Figure 4-2.

Figure 4-2 MPLS VPLS Application

The ZXR10 M6000 can either use the Label Distribution Protocol (LDP) or the BGP as thesignaling protocol to distribute VC labels. Using the VPLS solution, Ethernet connectionsare established between multiple sites by using the IP/MPLS network.

Compared with the dedicated line access mode, the VPLS solution is simpler and can beexpanded easier.

4.3 IP MAN ApplicationIn a point-to-point Metropolitan Area Network (MAN) multi-service bearer solution, theZXR10 M6000 plays an important role on both the core layer and the service control layer.

l Core layer

The ZXR10 M6000 uses a 40 G platform that can be upgraded smoothly. It supportsboth the IPv4 and the IPv6 protocol stacks.

l Service control layer

The BMSG device provides all-service control capabilities on the MAN. The ZXR10M6000 integrates the BRAS and SR functions and provides the DPI, SBC, AC, PW,clock synchronization and dual stack extension capabilities to implement serviceintegration and intelligent management and control.

l Aggregation layer

ZTE provides a variety of Ethernet switches and Packet Transport Network (PTN)transfer products, and thus offers differentiated solutions intended for flexible servicesand quick deployment.

4-2


Chapter 4 Typical Applications

For an example of the IP MAN application, see Figure 4-3.

Figure 4-3 IP MAN Application

4.4 Data Center ApplicationMulti-Level IDC Network Deployment

An Internet Data Center (IDC) can be deployed in multi-level mode. The level 1 IDCis deployed on a core node of the backbone network to meet nationwide resource andapplication support requirements. The level 1 IDC also operates as a local IDC.

A level 2 IDC is deployed to provide content hosting and group customer applications fora province or a city. As a supplement to the level 1 IDC, the level 2 IDC provides functionslike mirroring and content distribution.

For the deployment of multi-level IDCs, see Figure 4-4.

4-3



Figure 4-4 Multi-Level IDC Network Deployment

IDC Deployment in an Equipment Room

For the typical IDC deployment in an equipment room, see Figure 4-5.

4-4


Chapter 4 Typical Applications

Figure 4-5 IDC Deployment in an Equipment Room

An IDC network in an equipment room consists of the following layers:

l Network layer

The network layer further consists of the following layers:

à Core layer

The core layer forwards data between the data center and external networks ata high rate. Two ZXR10 M6000 routers are normally deployed on the core layer.These routers are of large-capacity, high-performance and high-reliability. Theyprovide 10GE ports and operate as network egresses.

à Aggregation layer

The aggregation layer aggregates a large number of ports. Two high-endswitches are normally deployed at the aggregation layer.

à Access layer

The access layer is accessed by a large number of servers. It provideshigh-density ports and supports the link binding and Super VLAN functions.

4-5



à Security control layer

Firewalls are deployed between the access layer and the aggregation layer. Theyprotect network access and server access.

l Server layer and backup/storage layer

Servers are deployed on the server layer. They can be grouped based on services orapplications. To improve the server reliability, multiple backup and storage methodsand distributed disaster recovery modes are used.

l Network management layer

The network management layer separates the data from management, and analyzesthe network performance and the traffic.

4-6


Chapter 5InterfacesTable of Contents

Maintenance Interfaces ..............................................................................................5-1Service Interfaces ......................................................................................................5-2

5.1 Maintenance InterfacesFor a description of the maintenance interfaces provided by the ZXR10 M6000, refer toTable 5-1.

Table 5-1 Maintenance Interfaces

Interface Specification Functions

Console RJ45 interface This interface is used to connect to the back-end

management terminal.

On the back-end management terminal, you can use

tools like HyperTerminal to maintain and operate

devices.

MGMT RJ45 interface This interface is used to download software and monitor

network interfaces.

AUX RJ45 interface This interface is used to connect to the modem for

remote management.

CLK IN/CLK

OUT/CLK

SMB This interface is used to connect to a 2.048MHz or

2.048Mbit/s clock source or output the 2.048MHz or

2.048Mbit/s clock information to downlink devices.

GPS IN/GPS OUT RJ45 interface This interface is used to connect to a GPS clock input

or output interface.

ALM IN/ALM OUT RJ45 interface Alarm input and output interface.

LAMP RJ45 interface Lamp interface.

USB USB interface This interface is used to connect to a Universal Serial

Bus (USB) device.

Different ZXR10 M6000 routers have different maintenance interfaces. For details, referto “Hardware Description (M6000-16&-8)”.

5-1



5.2 Service InterfacesAs an external interface of a router, a Physical Line Interface Unit (PIU) accessesservices of different types and rates to different interfaces. A PIU provides one or multiplehigh-speed network interfaces.

The ZXR10 M6000 provides the following service interfaces:

l Ethernet interfacel POS interfacel CPOS interfacel ATM interface

The ZXR10 M6000 provides multiple types of PIUs. For details, refer to “HardwareDescription (M6000-16&-8)”.

5-2


Chapter 6Link CharacteristicsTable of Contents

Ethernet Link Features ...............................................................................................6-1FR Link Features........................................................................................................6-1POS Link Features .....................................................................................................6-2CPOS Link Features ..................................................................................................6-3TDM Link Characteristics ...........................................................................................6-4

6.1 Ethernet Link FeaturesZXR10 M6000 Ethernet links support the following basic features:

l VLAN trunkl VLAN aggregationl VLAN internal port isolationl Ethernet sub-interfacesl VLAN aggregated sub-interfacesl Ethernet clock synchronization

The ZXR10 M6000 supports a SmartGroup. The SmartGroup refers to the aggregation ofmultiple ports into a group to share the load by the member ports.

The link aggregation supports the following basic features:

l The SmartGroup supports the binding of different interfaces on different boards.l Load sharing supports the per-packet mode and the per-destination modes.l The ZXR10 M6000 supports up to 64 SmartGroup interfaces.l Each SmartGroup interface supports up to 16 Ethernet interfaces.

6.2 FR Link FeaturesFrame Relay (FR) is a high-performance WAN protocol. It runs on both the physical layerand the data link layer of the Open System Interconnection (OSI) reference module.

The FR only implements the functions of the physical layer and the data link layer of the OSIreference module. The traffic control and error correction functions are implemented byintelligent terminals. Using this method, the processing duration of the devices is reduces,the network throughput is increased, and the communication delay is reduced.

The FR Local Management Interface (LMI) is an extension of the basic FR. It is thesignaling standard used between routers and FR switches, providing an FR managementmechanism. The LMI provides multiple features that can be used to manage complicated

6-1



networks, for example, the global addressing and the virtual circuit state messagefunctions.

The LMI provides the following functions:

l Link integrity verification.l Notification on an added Permanent Virtual Circuit (PVC).l Notification on a deleted PVC.l Notification on the PVC state (for example, the active state or the inactive state).

6.3 POS Link FeaturesPacket Over SONET/SDH (POS) transmits IP packets by using the high-speed transportchannels provided by the Synchronous Optical Network (SONET)/Synchronous DigitalHierarchy (SDH). The POS technology supports optical fiber mediums, and it is ahigh-speed and advanced WAN connection technology.

The POS is a series of protocols that use the Point-to-Point Protocol (PPP) to implementthe valid load mapping from IP packets to SONET frames. The POS is extendible. Withthe support of the current SONET system architecture, the POS overcome multipledisadvantages of the ATM. By using the High-level Data Link Control (HDLC) or the PPP,the POS provides a mechanism to transmit packets in the SONET Synchronous PayloadEnvelope (SPE) directly.

The ZXR10 M6000 provides POS interfaces of 155 Mbit/s, 622 Mbit/s, 2.5 Gbit/s and10Gbit/s rates. On the link layer, POS interfaces support the following protocols:

l PPPl HDLC

The PPP on a POS interface supports the following protocols:

l Link Control Protocol (LCP)l IP Control Protocol (IPCP)l MPLS Control Protocol (MPLSCP)l Multilink Protocoll Password Authentication Protocol (PAP)l Challenge Handshake Authentication Protocol (CHAP)

The ZXR10M6000 supports the creation of a POS sub-interface. Multiple logical interfaceson one POS link are supported. The POS sub-interfaces uses FR encapsulation on thelink layer, so that the device can be interconnected to peer devices on the network layerthat also support the POS FR encapsulation, or be interconnected to FR switches that alsosupport POS interfaces. The POS sub-interfaces support Peer-To-Peer (P2P) and P2MPmodes.

If the HDLC is the encapsulation for POS interfaces, multiple POS interfaces can be boundas a logical POSGROUP interface to support the IP binding.

You can configure the POSGROUP interface to implement multiple routing protocolsand MPLS VPN services. Each POS interface that is bound is called a member of

6-2


Chapter 6 Link Characteristics

the POSGROUP. All the configurations of the POSGROUP interface are applied to itsmembers.

The IP binding technology has the following features:

l The POSGROUP improves the link communication performance. The total bandwidthof a POSGROUP interface is the sum of the bandwidth of all members.

l Two load sharing modes are supported: per-packet and per-destination.l Up to 64 POSGROUP interfaces are supported.l Each POSGROUP interface supports up to 16 POS interfaces.

6.4 CPOS Link FeaturesFunctions

In the Synchronous Digital Hierarchy (SDH), synchronous multiplexing and flexiblemapping structures are used to add and drop low-speed signals in SDH signals. Sinceno multiplexer or demultiplexers are used, signal loss and investments on devices arereduced.

If an SDH signal is considered to be multiplexed by a number of low-speed signals,these low-speed signals are called channels. A CPOS, which means a channelized POSinterface, fully used the advantages of the SDH to divide bandwidth in a sophisticatedmode. By using this mode, the number of low-speed physical ports on the router isreduced while the aggregation of low-speed ports is improved, and the dedicated lineaccess capability of the route is improved.

Features

The ZXR10 M6000 provides 155Mbit/s CPOS interfaces. Each interface can provide 63E1 lines or 84 T1 lines. The channelized (multiplexed) mode supports au3 and au4.

A CPOS interface supports two frame formats: the SDH and the SONET. The former isthe default option.

On the link layer, the CPOS interface supports the following protocols:

l Point-to-Point Protocol (PPP)l High-level Data Link Control (HDLC)

The PPP protocol of the CPOS interface supports the following protocols:

l Link Control Protocol (LCP)l Internet Protocol Control Protocol (IPCP)l Multi-Protocol Label Switching Control Protocol (MPLSCP)l Multilink Protocol (MP)l Password Authentication Protocol (PAP)l Challenge Handshake Authentication Protocol (CHAP)

6-3



6.5 TDM Link CharacteristicsTime-division multiplexing (TDM) is a type of digital (or rarely analog) multiplexing inwhich two or more bit streams or signals are transferred appearing simultaneously assub-channels in one communication channel, but are physically taking turns on thechannel.

The following two digital TDM systems are widely used:

l The E1 recommended by the ITU-T

The E1 is used in Europe and China. The link data rate is 2.048 Mbps that is split into32 timeslots, with 64 kbps for each timeslot.

l The T1 recommended by the ANSI

The T1 is used in North America and Japan. The link data rate is 1.544 Mbps that issplit into 24 timeslots, with 64kbps for each timeslot, and 8kbps for the synchronizationand demultiplexing at the receiver.

The ZXR10 M6000 uses the PWP3F interface cards to implement the emulation andtransparent transmission functions of TDM services:

l The framer provides the four-channel OC3 access mode to implement SONET/SDHframing.

l The network processor implements the CES and the PWE3 functions.l The FPGA implements the HDLC/PPP function, preprocesses TDM transparent

transmission, performs channelization and recovers clocks.

6-4


Chapter 7Technical SpecificationsTable of Contents

Physical Specifications...............................................................................................7-1Performance Specifications........................................................................................7-1Power Consumption Specifications ............................................................................7-2Reliability Specifications .............................................................................................7-2Configuration Specifications .......................................................................................7-2

7.1 Physical SpecificationsFor the physical specifications of the ZXR10 M6000, refer to Table 7-1.

Table 7-1 Physical Specifications

DescriptionSpecification

M6000-16 M6000-8

Dimensions (width × height ×

depth)

442 mm ×1686.3 mm ×600

mm

442 mm ×1197.3 mm ×600

mm

Physical

parameters

Weight <210 kg <145 kg

Total slots 22 13Number of slots

Service slots 16 8

Heat dissipation Thermal load in full

configuration (BTU/h)

26559 12911

7.2 Performance SpecificationsFor the basic performance specifications of the ZXR10 M6000, refer to Table 7-2.

Table 7-2 Performance Specifications


M6000-16 M6000-8

Total switching capacity

(unidirectional)

5.76 Tbps 2.88 Tbps

Slot throughput 200 Gbps 200 Gbps

7-1



7.3 Power Consumption SpecificationsFor the power consumption specifications of the ZXR10 M6000, refer to Table 7-3.

Table 7-3 Power Consumption Specifications


M6000-16 M6000-8

Power supply condition AC: 200V–240V

DC: (-40V)–(-60V) (Rated voltage: -48V)

Power supply

Rated power for a power

module (full redundancy

configuration)

DC: 8000W (1+1)

AC: 2000W (4+4)

DC: 4000W (1+1)

AC: 2000W (2+2)

7.4 Reliability SpecificationsFor the reliability specifications of the ZXR10 M6000, refer to Table 7-4.

Table 7-4 Reliability Specifications

DescriptionItem

M6000-16 M6000-8

MTBF >400000 hours.

MTTR <30 minutes.

Reliability 99.999%.

Hot swapping All boards support hot swapping. Interface sub-modules do not support hot

swapping.

MPU redundancy 1:1.

Switch redundancy 3+1 2+1

Power supply redundancy AC: 4+4

DC: 1+1

AC: 2+2

DC: 1+1

7.5 Configuration SpecificationsFor the configuration specifications of the ZXR10 M6000, refer to Table 7-5.

Table 7-5 Configuration Specifications

DescriptionItem

M6000-16 M6000-8

Processor Dual-core

Single-core CPU speed: 1.5 GHz

7-2


Chapter 7 Technical Specifications

DescriptionItem

M6000-16 M6000-8

Flash Standard: 512 MB

Maximum: 1 GB

CF card 4 GB

BOOT Flash Standard: 16 MB

DDR2 SDRAM 4 GB (2 GB × 2), 2 dual inline memory module (DIMM) slots, maximum 8 GB (4 GB × 2)

Hard disk Standard: 32 GB

Maximum: 146 GB

7-3



This page intentionally left blank.

7-4


Chapter 8Environmental RequirementsTable of Contents

Power Supply .............................................................................................................8-1Operating Conditions..................................................................................................8-2Transportation Conditions...........................................................................................8-4Storage Conditions.....................................................................................................8-5

8.1 Power SupplyDC Power Supply

When you power on the ZXR10 M6000 using a DC power, note that:

l The DC power supply can power on the ZXR10 M6000 stably and reliably and it isbetter to install the power supply device close to the communication devices. Theshorter the lines between the power supply device and the communication devices,the less energy wasted during transmission and the less the installation costs.

l The output voltage of the power supply device is within the normal operating voltagerange of each communication device. Storage battery groups provide at least onehour of power supply.

l If the equipment room or multiple systems need to be powered on, multipleindependent power supply devices are required. If multiple communication devicesshare one power supply device, multi-level and multi-line control is required in casethat the entire power supply is interrupted if a fault occurs to one device. The powersupply device must meet the full-load power requirement when all systems operatetogether.

l Communication devices operate in 1+1 redundancy mode. The independent powersupply for the redundant device is required.

l In a large communication junction that includes multiple storeys, a power supplysystem is installed on each storey.

For the range of the DC voltage, refer to Table 8-1.

Table 8-1 DC Voltage Range

Item Range

–48V input end voltage range (-38V)–(-72V).

Impact current At least 150% of the rated current.

8-1



Item Range

Regulated voltage precision When the DC input voltage is 85% to 110% of the rated voltage

and the loaded current is 5% to 100% of the rated current, the

output voltage of the rectifier is any set value between –46.0V

and 56.4V, and the regulated voltage precision is equal to or less

than 1% of the rated voltage.

Overshoot at turn-on/turn-off Not greater than ±5% of the set value for DC output voltage.

Peak-to-peak noise voltage ≤200mV.

Dynamic response Recovery time is smaller than 200ms.

Overshoot is not greater than ±5% of the set value for DC output

voltage.

AC Power SupplyWhen you power on the ZXR10 M6000 using an AC power, note that:

l The AC power supply can power on the ZXR10 M6000 stably and reliably, and eachline of the power supply output to the device must be enough for the device to operatewith full configuration.

l For an environment that has multiple systems, distributed power supply mode is used.l A TN-S power distribution system is used.l It is recommend that the power supply device is connected to each device through

two lines. Thus, 1+1 redundancy power supply can be implemented.

For the range of the AC voltage, refer to Table 8-2.

Table 8-2 AC Voltage Range

Item Range

Power supply for a device -10% to 5% of the rated voltage.

Power supply for a power

module or building

-15% to 10% of the rated voltage.

Frequency -4% to 4% of the rated voltage.

Sine wave distortion rate Up to 5% of the rated voltage.

8.2 Operating ConditionsWeather RequirementsFor the weather requirements of the ZXR10 M6000 during operation, refer to Table 8-3.

Table 8-3 Weather Requirements of the ZXR10 M6000

Item Value

Temperature -5 ºC – 45 ºC

8-2


Chapter 8 Environmental Requirements

Item Value

Humidity 5% – 90% (noncondensing)

Altitude ≤5000 m

Noise <70dB

Atmospheric pressure 70k Pa–106k Pa

Temperature change rate ≤5 ºC/h

Solar radiation ≤700 W/s2

Thermal radiation ≤600 W/s2

Wind speed ≤1 m/s

Ingress protection (IP) code IP50

Air Cleanness Requirements

For the air cleanness requirements of the ZXR10 M6000 during operation, refer to Table8-4.

Table 8-4 Air Cleanness Requirements of the ZXR10 M6000

Item Unit Value

Suspended dust mg/m3 0.2

Deposited dust mg/(m2h) 1.5

Sand mg/m3 30

SO2 mg/m3 Average: 0.3

Maximum: 1.0

H2S mg/m3 Average: 0.1

Maximum: 0.5

NH3 mg/m3 Average: 1.0

Maximum: 3.0

Cl2 mg/m3 Average: 0.1

Maximum: 0.3

HCl mg/m3 Average: 0.1

Maximum: 0.5

HF mg/m3 Average: 0.01

Maximum: 0.03

O3 mg/m3 Average: 0.05

Maximum: 0.1

NOx mg/m3 Average: 0.5

Maximum: 1.0

8-3



OthersWhen the ZXR10 M6000 operates, note that:

l The environment in which the ZXR10 M6000 operates is free from rodents.l The ZXR10 M6000 routers are grounded reliably. The grounding resistance value in

joint grounding is less than 5Ω.l The displacement is less than 5 mm.l Quakeproof requirements and fire protection requirements comply with local laws.

8.3 Transportation ConditionsWeather RequirementsFor the weather requirements of the ZXR10 M6000 during transportation, refer to Table8-5.


Item Value

Temperature -40 ºC – +70 ºC

Humidity 0 – 95% (noncondensing)

Altitude ≤5000 m


Temperature change rate ≤3 ºC/min



Wind speed ≤30 m/s

Air Cleanness RequirementsFor the air cleanness requirements of the ZXR10 M6000 during transportation, refer toTable 8-6.

Table 8-6 Air Cleanness Requirements of the ZXR10 M6000

Item Unit Value

Suspended dust mg/m3 Not required


Sand mg/m3 100


Maximum: 1.0


Maximum: 0.5

8-4


Chapter 8 Environmental Requirements

Item Unit Value


Maximum: 3.0


Maximum: 0.3


Maximum: 0.5


Maximum: 0.03


Maximum: 0.1


Maximum: 1.0

OthersWhen the ZXR10 M6000 is being transported, note that:

l The acceleration is less than 40.0m/s2.l Packing boxes are intact.l Ensure that there is no moisture in the ZXR10 M6000 routers. Packing boxes must

be waterproof.l Packing boxes are not opened during transportation.l Move the ZXR10 M6000 routers carefully.

8.4 Storage ConditionsWeather RequirementsFor the weather requirements of the ZXR10 M6000 in storage, refer to Table 8-7.


Item Value

Temperature -40 ºC – +70 ºC

Humidity 0 – 95% (noncondensing)

Altitude ≤5000 m


Temperature change rate ≤1 ºC/min



Wind speed ≤30 m/s

8-5



Air Cleanness Requirements

For the air cleanness requirements of the ZXR10 M6000 in storage, refer to Table 8-8.

Table 8-8 Air Cleanness Requirements of the ZXR10 M6000 in Storage

Item Unit Value

Suspended dust mg/m3 0.2


Sand mg/m3 30


Maximum: 1.0


Maximum: 0.5


Maximum: 3.0


Maximum: 0.3


Maximum: 0.5


Maximum: 0.03


Maximum: 0.1


Maximum: 1.0

Others

When the ZXR10 M6000 is stored, note that:

l The environment in which the ZXR10 M6000 operates is free from rodents.l The floor is dry. There is no water on the surface of packing boxes.l Packing boxes are not exposed to direct sunlight for a long time.l Quakeproof requirements and fire protection requirements comply with local laws.

8-6


Chapter 9Protocols and StandardsTable of Contents

Security Standards .....................................................................................................9-1Environmental Standards ...........................................................................................9-1EMC Standards..........................................................................................................9-2

9.1 Security StandardsFor the security standards that the ZXR10 M6000 complies with, refer to Table 9-1.

Table 9-1 Security Standards

Standard Description

GB 4943 Safety of information technology equipment

IEC 60950 Safety of information technology equipment

IEC 60825 Safety of Laser Products

UL 60950 Safety of information technology equipment

EN 60950 Safety of information technology equipment

9.2 Environmental StandardsFor the environmental standards that the ZXR10 M6000 complies with, refer to Table 9-2.

Table 9-2 Environmental Standards


GB/T 2421-1999 Environmental testing for electric and electronic products Part 1: General

and guidance

GB2423 Environmental testing for electric and electronic products

IEC60749-4-2002 Semiconductor Devices - Mechanical and Climatic Test Methods - Part 4:

Damp Heat, Steady State, Highly Accelerated Stress Test (HAST) Dispositifs

IEC62429 Reliability growth – Stress testing for early failures in unique complex systems

ETSI 300 019 Environmental Engineering (EE); Environmental Conditions and

Environmental Tests for Telecommunications Equipment

9-1



9.3 EMC StandardsElectro-Magnetic Compatibility (EMC) means the compatibility that a device or a systemcan operate properly in an environment with electro-magnetic interference and does notmake electro-magnetic interference that other devices in the environment cannot bear.

For the EMC standards that the ZXR10 M6000 complies with, refer to Table 9-3.

Table 9-3 EMC Standards


GB 9254 Information technology equipment - Radio disturbance characteristics - Limits

and methods of measurement

GB/T 17618 Information technology equipment--Immunity characteristics--Limits and

methods of measurement

GB 17625.3 Electromagnetic compatibility--Limits--Limitation of voltage fluctuations and

flicker in low-voltage power supply systems for equipment with rated current

greater than 16 A

GB 17625.6 Electromagnetic compatibility - Limits - Limitation of emission of harmonic

currents in low-voltage power supply systems for equipment with rated current

greater than 16A

GB/T 17626.2 Electromagnetic compatibility-Testing and measurement techniques-

Electrostatic discharge immunity test

GB/T 17626.3 Electromagnetic compatibility-Testing and measurement techniques-Radiated,

radio-frequency, electromagnetic field immunity test

GB/T 17626.4 Electromagnetic compatibility - Testing and measurement techniques -

Electrical fast transient/burst immunity test

GB/T 17626.5 Electromagnetic compatibility - Testing and measurement techniques - Surge

immunity test

GB/T 17626.6 Electromagnetic compatibility - Testing and measurement techniques -

Immunity to conducted disturbances, induced by radio-frequency fields

GB/T 17626.11 Electromagnetic compatibility - Testing and measurement techniques - Voltage

dips, short interruptions and voltage variations immunity tests

GB/T 19286 Electromagnetic Compatibility Requirement and measurement methods for

Telecommunication Network Equipment

YD/T 950 Technical Specification and Testing Methods for Resistibility of

Telecommunication Equipment Installed in a Communications Centre to

Overvoltages and Overcurrents

ITU-T K.44 Resistibility tests for telecommunication equipment exposed to overvoltages

and overcurrents - Basic Recommendation

ITU-T K.43 Immunity requirements for telecommunication equipment

9-2


Chapter 9 Protocols and Standards


ITU_T K.20 Resistibility of telecommunication equipment installed in a telecommunications

centre to overvoltages and overcurrents

ITU_T K.21 Resistibility of telecommunication equipment installed in customer premises to

overvoltages and overcurrents

CISPR 22 Information technology equipment. Radio disturbance characteristics. Limits


CISPR 24 Information technology equipment - Immunity characteristics - Limits and


IEC61000-3-4 Electromagnetic Compatibility (EMC) - Part 3-4: Limits - Limitation of Emission

of Harmonic Currents in Low-Voltage Power Supply Systems for Equipment

with Rated Current Greater Than 16 A Compatibilite Electromagnetique

(CEM) - Partie 3-4: Limites - Limita

IEC61000-3-5 Electromagnetic Compatibility (EMC) - Part 3: Limits - Section 5: Limitation of

Voltage Fluctuations and Flicker in Low-Voltage Power Supply Systems for

Equipment with Rated Current Greater Than 16 A

IEC61000-4-2 Electromagnetic compatibility (EMC) - Part 4-2: Testing and measurement

techniques - Electrostatic discharge immunity test

IEC61000-4-3 Electromagnetic compatibility (EMC) - Part 4-3 : Testing and measurement

techniques - Radiated, radio-frequency, electromagnetic field immunity test

IEC61000-4-4 Electromagnetic compatibility (EMC)-Part 4:Testing and measurement

techniques-Section 4:Electrical transient/burst immunity test Basic EMC

publication


techniques - Surge immunity test


techniques; Immunity to conducted disturbances, induced by radio-frequency

fields

IEC61000-4-11 Electromagnetic compatibility (EMC) - Part 4: Testing and measuring

techniques - Section 11: Voltage dips, short interruptions and voltage

variations immunity tests

EN 300 386 Electromagnetic compatibility and Radio spectrum Matters (ERM);

Telecommunication network equipment; ElectroMagnetic Compatibility (EMC)

requirements

EN55022 Information technology equipment. Radio disturbance characteristics. Limits


EN55024 Information technology equipment - Immunity characteristics - Limits and


FCC Part 15 Radio frequency devices

9-3




9-4


FiguresFigure 1-1 ZXR10 M6000 Series Products................................................................ 1-2

Figure 2-1 ZXR10 M6000-16 Components................................................................ 2-2

Figure 2-2 ZXR10 M6000-8 Overview and Components ........................................... 2-3

Figure 2-3 SPU Position in System ........................................................................... 2-5

Figure 2-4 Software Architecture............................................................................... 2-7

Figure 3-1 PPPoE/IPoE service hot standby ........................................................... 3-20

Figure 3-2 Multicast Service Hot Standby ............................................................... 3-22

Figure 4-1 ZXR10 M6000 in a Typical MPLS VPN Network Architecture................... 4-1

Figure 4-2 MPLS VPLS Application........................................................................... 4-2

Figure 4-3 IP MAN Application.................................................................................. 4-3

Figure 4-4 Multi-Level IDC Network Deployment....................................................... 4-4

Figure 4-5 IDC Deployment in an Equipment Room.................................................. 4-5

I


Figures


II


TablesTable 5-1 Maintenance Interfaces ............................................................................. 5-1

Table 7-1 Physical Specifications .............................................................................. 7-1

Table 7-2 Performance Specifications ....................................................................... 7-1

Table 7-3 Power Consumption Specifications............................................................ 7-2

Table 7-4 Reliability Specifications ........................................................................... 7-2

Table 7-5 Configuration Specifications ...................................................................... 7-2

Table 8-1 DC Voltage Range..................................................................................... 8-1

Table 8-2 AC Voltage Range..................................................................................... 8-2

Table 8-3 Weather Requirements of the ZXR10 M6000 ............................................ 8-2

Table 8-4 Air Cleanness Requirements of the ZXR10 M6000.................................... 8-3


Table 8-6 Air Cleanness Requirements of the ZXR10 M6000.................................... 8-4


Table 8-8 Air Cleanness Requirements of the ZXR10 M6000 in Storage................... 8-6

Table 9-1 Security Standards .................................................................................... 9-1

Table 9-2 Environmental Standards .......................................................................... 9-1

Table 9-3 EMC Standards......................................................................................... 9-2

III


Tables


IV


GlossaryAAA- Authentication, Authorization and Accounting

ACL- Access Control List

AS- Autonomous System

BFD- Bidirectional Forwarding Detection

BGP- Border Gateway Protocol

BMC- Best Master Clock

BMSG- Broadband Multi-Service Gateway

BRAS- Broadband Remote Access Server

CAR- Committed Access Rate

CE- Customer Edge

CHAP- Challenge Handshake Authentication Protocol

CLNS- ConnectionLess Network Service

CoS- Class of Service

DDoS- Distributed Denial of Service

DHCP- Dynamic Host Configuration Protocol

DPI- Deep Packet Inspection

DSCP- Differentiated Services Code Point

V



DSLAM- Digital Subscriber Line Access Multiplexer

DoS- Denial of Service

EAP- Extend Authentication Protocol

ECC- Error Check and Correction

EMC- Electromagnetic Compatibility

ESU- Ethernet Switch Unit

ETC- Ethernet Transform Card

ETSI- European Telecommunications Standards Institute

FEC- Forwarding Equivalence Class

FIFO- First In and First Out

FR- Frame Relay

FRR- Fast Reroute

GMC- Grandmaster Clock

GPS- Global Positioning System

GR- Graceful Restart

GRE- General Routing Encapsulation

GUI- Graphical User Interface

HDLC- High-level Data Link Control

ICMP- Internet Control Message Protocol

VI


Glossary

IEC- International Electrotechnical Commission

IGMP- Internet Group Management Protocol

IGP- Interior Gateway Protocol

IPCP- IP Control Protocol

IPSec- IP SecurityProtocol

IPTV- Internet Protocol Television

IPoE- Internet Protocol over Ethernet

IS-IS- Intermediate System-to-Intermediate System

ISO- International Organization for Standardization

ISP- Internet Service Provider

L2TP- Layer2 Tunnel Protocol

LAN- Local Area Network

LCD- Liquid Crystal Display

LCP- Link Control Protocol

LDP- Label Distribution Protocol

LMI- Local Management Interface

LSA- Link State Advertisement

LSP- Label Switched Path

LSR- Label Switch Router

VII



MAC- Media Access Control

MAM- Maximum Allocation Model

MAN- Metropolitan Area Network

MD5- Message Digest 5 Algorithm

MLD- Multicast Listener Discovery

MPLS- Multiprotocol Label Switching

MPLSCP- MPLS Control Protocol

MPU- Management Process Unit

MRU- Maximum Receive Unit

MSDP- Multicast Source Discovery Protocol

NAT- Network Address Translation

NCP- Network Control Protocol

NDP- Neighbor Discovery Protocol

NSF- Non-Stop Forwarding

NSR- Nonstop Routing

NSSA- Not-So-Stubby Area

OAM- Operation, Administration and Maintenance

OSI- Open System Interconnection

OSPF- Open Shortest Path First

VIII


Glossary

P2P- Peer-to-Peer

PAP- Password Authentication Protocol

PE- Provider Edge

PIM-DM- Protocol Independent Multicast - Dense Mode

PIM-SM- Protocol Independent Multicast - Sparse Mode

PIU- Physical line Interface Unit

PMTU- Path Maximum Transmission Unit

POS- Packet Over SONET/SDH

PPP- Point-to-Point Protocol

PPPoE- Point to Point Protocol over Ethernet

PTN- Packet Transport Network

PTP- Precision Time Protocol

PVC- Permanent Virtual Circuit

PW- Pseudo Wire

RADIUS- Remote Authentication Dial In User Service

RDM- Russian Dolls Model

RED- Random Early Detection

RIP- Routing Information Protocol

RIPng- Routing Information Protocol next generation

IX



RP- Rendezvous Point

RPF- Reverse Path Forwarding

RSVP- Resource Reservation Protocol

RT- Route Target

SAL- Service Access-List

SCME- System Clock Module, Enhanced version

SDH- Synchronous Digital Hierarchy

SFU- Switch Fabric Unit

SONET- Synchronous Optical Network

SPE- Synchronous Payload Envelope

SPF- Shortest Path First

SPT- Shortest Path Tree

SPU- Service Processing Unit

SR- Service Router

SSH- Secure Shell

SSM- Source Specific Multicast

TACACS+- Terminal Access Controller Access-Control System Plus

TCAM- Ternary Content-Addressable Memory Unit

TCP- Transmission Control Protocol

X


Glossary

TDM- Time Division Multiplexing

TE- Traffic Engineering

TLV- Type/Length/Value

ToS- Type of Service

URPF- Unicast Reverse Path Forwarding

USB- Universal Serial Bus

UTC- Universal Time Coordinated

VBAS- Virtual Broadband Access Server

VC- Virtual Circuit

VLAN- Virtual Local Area Network

VPDN- Virtual Private Dialup Network

VPLS- Virtual Private LAN Service

VPWS- Virtual Private Wire Service

VRRP- Virtual Router Redundancy Protocol

WAN- Wide Area Network

WRED- Weighted Random Early Detection

XI


Documents

ZXR10M6000 - libertyport.com · Carrier-ClassRouter ProductDescription(M6000-16&-8) Version: 2.00.20 ... ZTE CORPORATION or its licensors may have current or pending intellectual