Quidway NetEngine40E Universal Swtiching Router System Description

Quidway NetEngine40E Universal Switching Router System Description

Document Version 03 (2006-07-20)

Product Version VRP5.30

Huawei Technologies Co., Ltd. provides customers with comprehensive technical support and service. Please feel free to contact our local office or company headquarters.

Huawei Technologies Co., Ltd.

Address: Administration Building, Huawei Technologies Co., Ltd., Bantian, Longgang District, Shenzhen, P. R. China Postal Code: 518129 Website: http://www.huawei.com

Copyright © 2006 Huawei Technologies Co., Ltd.

All Rights Reserved.

No part of this manual may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.

Trademarks

and other Huawei trademarks are the trademarks or registered trademarks of Huawei

Technologies Co., Ltd. in the People’s Republic of China and certain other countries.

All other trademarks and trade names mentioned in this document are the property of their respective holders.

Notice

The information in this manual is subject to change without notice. Every effort has been made in the preparation of this manual to ensure accuracy of the contents, but all statements, information, and recommendations in this manual do not constitute the warranty of any kind, express or implied.

Quidway NetEngine40E Universal Switching Router System Description

Table of Contents

Chapter 1 Features ...... 1 1.1 General Service Capacity...... 3 1.2 High-Density LPUs ...... 3 1.3 Perfect QoS Mechanism...... 4 1.4 Excellent Security Design...... 5 1.5 Powerful Forwarding Capacity...... 5 1.6 Compatibility and Expansion Capacity ...... 6 1.7 Carrier-Class Architecture ...... 6 1.8 High Reliability...... 7

Chapter 2 System Architecture and Boards Overview ...... 9 2.1 Hardware Architecture Overview...... 9 2.1.1 LCD...... 10 2.1.2 Ventilation and Heat Dissipation System...... 11 2.1.3 Board Cage...... 12 2.1.4 Power Supply...... 12 2.2 System Structure...... 16 2.2.1 Physical System Architecture...... 16 2.2.2 System Logical Architecture...... 17 2.3 Software Architecture ...... 18 2.3.1 Software Architecture...... 18 2.3.2 VRPv5 Architecture...... 19 2.4 Boards...... 19 2.4.1 SRU ...... 19 2.4.2 SFU...... 20 2.4.3 Backplane ...... 21 2.4.4 LPU...... 21 2.4.5 NetStream SPU ...... 24

Chapter 3 Link Features...... 26 3.1 Switched Link Features...... 26 3.1.1 Supporting VLAN ...... 26 3.1.2 Supporting Port Binding ...... 26 3.1.3 Supporting MSTP...... 26 3.2 Routed Ethernet Link Features...... 26 3.2.1 Supporting Ethernet Trunk ...... 26 3.2.2 Supporting Sub-interface ...... 26 3.3 POS Link Features ...... 26 3.3.1 Supporting PPP/HDLC...... 26 Commercial in Confidence i

Quidway NetEngine40E Universal Switching Router System Description

3.3.2 Supporting IP Trunk ...... 26 3.4 CPOS Link Features ...... 26 3.5 ATM Link Features ...... 26 3.5.1 Supporting the Creation of PVC...... 26 3.5.2 Supporting IPoA...... 26 3.5.3 Supporting SDH and SONET...... 26 3.5.4 Supporting the ATM Sub-interface ...... 26 3.6 RPR Link Features ...... 26 3.6.1 Supporting RPR Fairness Algorithm ...... 26 3.6.2 Protection Mechanism...... 26

Chapter 4 Primary Service Features ...... 26 4.1 IPv4/MPLS Forwarding...... 26 4.1.1 IPv4 Features...... 26 4.1.2 MPLS...... 26 4.2 Routing Protocols ...... 26 4.2.1 Unicast...... 26 4.2.2 Multicast...... 26 4.3 Tunnel Management ...... 26 4.4 L2VPN...... 26 4.4.1 VLL ...... 26 4.4.2 VPLS...... 26 4.4.3 PWE3...... 26 4.5 MPLS/BGP L3VPN...... 26 4.6 Traffic Engineering ...... 26 4.6.1 MPLS TE ...... 26 4.6.2 CR-LDP ...... 26 4.6.3 RSVP-TE ...... 26 4.7 QoS...... 26 4.7.1 Traffic Policing ...... 26 4.7.2 Queue Scheduling ...... 26 4.7.3 Congestion Management ...... 26 4.7.4 Traffic Shaping...... 26 4.7.5 Traffic Classification...... 26 4.7.6 QPPB...... 26 4.7.7 VPN QoS ...... 26 4.8 Network Security ...... 26 4.8.1 AAA...... 26 4.8.2 Protocol Security Authentication ...... 26 4.8.3 Mirroring...... 26 4.8.4 Sampling...... 26 4.8.5 MAC Address Limit ...... 26

Commercial in Confidence ii

Quidway NetEngine40E Universal Switching Router System Description

4.8.6 URPF...... 26 4.9 Network Availability ...... 26 4.9.1 Redundancy of Key Modules ...... 26 4.9.2 High Availability of the LPU...... 26 4.9.3 IP/MPLS Fast Reroute ...... 26 4.9.4 GR ...... 26

Chapter 5 Maintenance and Network Management System ...... 26 5.1 Maintenance Functions & Features ...... 26 5.1.1 System Configuration Mode...... 26 5.1.2 System Management & Maintenance ...... 26 5.1.3 System Service and Status Tracking ...... 26 5.1.4 System Test and Diagnosis ...... 26 5.1.5 On-Line Debugging...... 26 5.1.6 On-Line Upgrade ...... 26 5.1.7 Others ...... 26 5.2 Network Management ...... 26 5.2.1 NetStream...... 26 5.2.2 Traffic Statistics...... 26 5.3 Network Management System...... 26

Chapter 6 Networking Applications ...... 26 6.1 Application on the Provincial Backbone Network...... 26 6.2 Application on the MPLS L2VPN Network ...... 26 6.3 Application on the MPLS L3VPN Network ...... 26 6.4 Application of RPR in MAN...... 26

Chapter 7 Technical Specifications...... 26 7.1 Physical Specifications...... 26 7.2 System Configuration ...... 26 7.3 Specifications of System Features and Service Performances...... 26 7.3.1 System Feature Specifications...... 26 7.3.2 Service Performance Specifications...... 26 7.4 LPU Interface Attribute ...... 26 7.4.1 Ethernet LPU ...... 26 7.4.2 POS LPU ...... 26 7.4.3 CPOS LPU...... 26 7.4.4 ATM LPU ...... 26 7.4.5 RPR LPU ...... 26

Chapter 8 Compliant Standards ...... 26 8.1 Standards and Telecom Protocols...... 26 8.2 Electromagnetic Compatibility Standards ...... 26 8.3 Security Standards ...... 26

Commercial in Confidence iii

Quidway NetEngine40E Universal Switching Router System Description

8.4 Environmental Standards ...... 26

Chapter 9 Acronyms and Abbreviations...... 26

Commercial in Confidence iv

Quidway NetEngine40E Universal Switching Router System Description

Chapter 1 Features

Note: For ease of reading, the capacity/rate related units such as Mbit/s, Gbit/s, and Tbit/s are all shortened as M, G, and T in this manual.

Huawei Quidway NetEngine40E Universal Switching Router (hereafter referred to as the NE40E) is an edge router with 10G capacity. Developed on the basis of Huawei proprietary Versatile Routing Platform (VRP), the NE40E can provide rich edge features, tunnels and queues, and kinds of high-density Line Processing Units (LPU). It features large capacity, high performance and high reliability. Figure 1-1, Figure 1-2and Figure 1-3 show the front-view, side-view and rear-view appearance of the NE40E.

Figure 1-1 The NE40E front-view appearance

Commercial in Confidence Page 1 of 1

Quidway NetEngine40E Universal Switching Router System Description

Figure 1-2 The NE40E side-view appearance

Figure 1-3 The NE40E rear-view appearance

Commercial in Confidence Page 2 of 2

Quidway NetEngine40E Universal Switching Router System Description

1.1 General Service Capacity

Based on distributed hardware processing, the NE40E has powerful processing capacities as a high-end router. The NE40E can provide various network services such as Multi-Protocol Label Switching (MPLS) VPN, MPLS TE and multicast VPN. In addition, it can provide rich layer 2 service features, such as L2VPN, Virtual Private LAN Service (VPLS), Virtual Leased Line (VLL) and VLAN.

1.2 High-Density LPUs

Table 1-1 shows the high-density LPUs that the NE40E supports.

Table 1-1 LPUs supported by the NE40E

LPU type LPU name Remark 5/10-port Optical Interface LPU (SFP - optical module)

1-port 10G Ethernet LAN Optical Interface LPU (10 - km)

1-port 10G Ethernet LAN Optical Interface LPU (40 - km)

1-port 10G Ethernet WAN Optical Interface LPU (10 - km)

1-port 10G Ethernet WAN Optical Interface LPU (40 - km) Ethernet 1-port 10G Ethernet WAN Optical Interface LPU (80 - LPU km) 1-port 10G Ethernet LAN Optical Interface LPU (XFP - optical module) 1-port 10G Ethernet WAN Optical Interface LPU (XFP - optical module) 2-port 10G Ethernet LAN Optical Interface LPU (XFP - optical module) 24/48-port 10M/100M/1000M Ethernet Electrical - Interface LPU 24/48-port Gigabit Ethernet Optical Interface LPU - (SFP optical module)

Commercial in Confidence Page 3 of 3

Quidway NetEngine40E Universal Switching Router System Description

LPU type LPU name Remark 1-port OC-192c/STM-64c POS Optical Interface LPU - (XFP optical module)

1-port OC-192c/STM-64c POS Optical Interface LPU - (2 km)

1-port OC-192c/STM-64c POS Optical Interface LPU - (40 km)

1-port OC-192c/STM-64c POS Optical Interface LPU - (80 km)

POS Optical 4-port OC-48c/STM-16c POS Optical Interface LPU - LPU (SFP optical module) 2-port OC-48c/STM-16c POS Optical Interface LPU - (SFP optical module) Enhanced 1-port OC-48c/STM-16c POS Optical Interface LPU - (SFP optical module) Enhanced 4-port OC-12c/STM-4c POS Optical Interface LPU - (SFP optical module) 4/8-port OC-3c/STM-1 POS Optical Interface LPU - (SFP optical module) Enhanced 2-port OC-3c/STM-1 CPOS Optical Interface LPU CPOS (SFP optical module) Boards of Optical LPU 4-port OC-3c/STM-1 CPOS Optical Interface LPU the NE80 (SFP optical module) A board of ATM Optical 8-port STS-3c/STM-1 ATM Optical Interface LPU the LPU (SFP optical module) NE40/80

RPR Optical 1-port OC-192c/STM-64c RPR LPU (XFP optical - LPU module) SFP: Small Form-Factor Pluggable; XFP: 10 Gigabit Small Form-Factor Pluggable.

1.3 Perfect QoS Mechanism

The NE40E provides the following QoS scheduling and buffer mechanisms:

z Priority Queue (PQ) and Weighted Round Robin (WRR) / Weighted Fair Queuing (WFQ): guarantee the fair dispatching and ensure that high-precedence services are served first.

z Three-stage switching network based on the Combined Input and Output Queuing (CIOQ): avoids head of line blocking.

z Flow-based dispatching: facilitates MPLS TE and supports the Diff-Serv and Inter-Serv.

Commercial in Confidence Page 4 of 4

Quidway NetEngine40E Universal Switching Router System Description

z Four precedence dispatching queues: prevent the high-precedence traffic from being interfered.

z Hardware-based QoS functions: ensure line speed forwarding even when QoS is enabled. The perfect QoS mechanism can meet the requirements of the IP Telephony Network (IPTN). It can guarantee the delay, jitter, bandwidth and packet drop ratio of different services. It also guarantees the launch of carrier-class services such as the Voice over IP (VoIP).

1.4 Excellent Security Design

The NE40E takes multiple security measures to protect the data of Service Provider (ISP) networks and end users. The measures can prevent denial-of-service attacks, illegal accesses, and overload of the control plane. The security of the NE40E boasts of separating the data plane from the control plane. The NE40E provides the following security features:

z Three user authentication modes: local authentication , RADIUS authentication and HWTACACS authentication

z Four authorization modes: direct authorization, local authorization, HWTACACS authorization and if-authenticated authorization.

z Two accounting modes: none-accounting and remote accounting.

z Hardware-based packet filtering and mirroring without affect on forwarding capacities

z Multiple authentication methods (plain text authentication, MD5) for upper-layer routing protocols like OSPF, IS-IS, RIP, BGP-4

z Access Control List (ACL) on the forwarding plane and control plane

z Powerful Forwarding Capacity The NE40E supports distributed IP/MPLS forwarding and various routing protocols such as RIP, OSPF, IS-IS, BGP-4 and multicast routing protocol. The NE40E accomplishes full-duplex wire speed forwarding (IPv4 and MPLS) on all the interfaces. The device supports up to 8 10G-interfaces. The switching capacity can reach 640 G, the forwarding capacity of the system can be 200 Mpps, and the backplane capacity can achieve 2 T.

1.5 Powerful Forwarding Capacity

The NE40E supports distributed IP/MPLS forwarding and various routing protocols such as RIP, OSPF, IS-IS, BGP-4 and multicast routing protocol. The NE40E accomplishes full-duplex wire speed forwarding (IPv4 and MPLS) on all the interfaces. The device supports up to 8 10G-interfaces. The switching capacity can

Commercial in Confidence Page 5 of 5

Quidway NetEngine40E Universal Switching Router System Description

reach 640 G, the forwarding capacity of the system can be 200 Mpps, and the backplane capacity can achieve 2 T.

1.6 Compatibility and Expansion Capacity

The NE40E provides powerful compatibility and expansion capacity. It supports smooth expansion as follows:

z The NE40E is compatible with all LPUs of the 10G NE5000E and NE40E core routers. It is compatible with the high-density low-speed LPUs of the NE80 and NE40 routers through Fabric Adapter (FAD) boards.

z The capacity of the backplane of the NE40E is 2 T, which reserves enough bandwidth for future smooth expansion.

z The NE40E forwards services through the Network Processor (NP), which is flexible in programming. You can add some services by installing relevant software.

z Designed with separated Traffic Management (TM) from the Packet Forwarding Engine (PFE), the NE40E supports two PFEs, namely Application Specific Integrated Circuit (ASIC) and NP, in order to satisfy various applications. The characteristics of ASIC PFE and NP PFE are as follows:

z ASIC : high speed, stable and reliable performance, and low cost.

z NP: flexible service processing, powerful Quality of Service (QoS) capability and convenient upgrade capability.

1.7 Carrier-Class Architecture

The NE40E chassis adopts carrier-class design with hot swappable boards. The chassis dimensions are 442 mm × 660 mm × 980 mm (width × depth × height). It can be mounted in an N68-22/N68-18 cabinet or a 19″ standard cabinet. The NE40E provides the following features in maintainability:

z The backplane is installed from the rear of the chassis, which facilitates its installation and maintenance.

z There is a cabling trough over the board cage, which facilitates the cable layout, board installation and maintenance.

z The fan modules can operate independently and support hot swap.

z Two fan modules help in heat dissipation for the board cage. The NE40E provides a powerful monitoring system. The Main Processing Unit (MPU) manages and maintains the whole system, such as the boards, fans, Liquid Crystal Display (LCD) modules, and power distribution modules. With module level shielding and a whole steel sheet for each panel, the NE40E realizes the Electromagnetic Compatibility (EMC) isolation between boards.

Commercial in Confidence Page 6 of 6

Quidway NetEngine40E Universal Switching Router System Description

1.8 High Reliability

The NE40E fully meets the high reliability requirements for carrier-class and high-end products. Table 1-2 lists its reliability specifications.

Table 1-2 Reliability specifications of the NE40E

Item Description

Availability 0.99999768 Mean Time Between Failures (MTBF) 24.59 years Mean Time To Repair (MTTR) 0.5 hours Downtime 1.22 minutes/year

The NE40E provides the following features to ensure high reliability.

Table 1-3 Reliability features of the NE40E

Item Description Hot swappable boards, power modules and fans 1 + 1 redundancy of the Main Processing Unit (MPU) integrated on Switch and Route Processing Unit (SRU) 3 + 1 load balancing redundancy of the Switch Fabric Units (SFU) with the SFU module integrated on SRUs Redundancy backup of power modules, fans, clocks and bus Reboots automatically when abnormities occur and recovers within two minutes Protection Resets a board when abnormities occur on the against System board and recovers within one minute abnormity protection Stateful Switchover mechanism Automatically restores the interface configuration Provides protection against over-current and over-voltage for power and interface modules Provides protection against mis-insertion Power alarm Provides the alarm prompt, alarm indication, monitoring running status query and alarm status query Voltage and environment Provides the alarm prompt, alarm indication, temperature running status query and alarm status query monitoring

Commercial in Confidence Page 7 of 7

Quidway NetEngine40E Universal Switching Router System Description

Item Description Applies the distributed hardware forwarding Separates the control channel from the service channel to provide a Reliability non-blocking control channel design Possesses perfect system/board fault detection, LEDs, and NMS alarm function Supports in-service patching Supports version backoff Reliable Supports in-service upgrade of the BOOTROM upgrade The backplane provides 8BCP check Support Error Checking and Correction (ECC) RAM Supports data hot backup between active and Data backup standby units Synchronizatio Supports the synchronization between interface n configuration boards and Switch Fabric Units (SFUs) Automatically selects and boots correct applications Fault tolerance Supports the automatic upgrade and restoration of the BootROM design program Supports the backup of configuration files to the remote FTP server

Automatically selects and runs correct configuration files Provides the abnormity monitoring for system software, such as automatic restoration and log record Provides password protection for the system operation Supports the level protection for commands by the configuration of subscriber levels and command levels Operation Supports the configuration terminal locking by commands in case of security invalid usage Provides the protection and prompt for improper operation, such as the operation and confirmation prompts for some commands which may degrade the system performance

Operation and Applies the generic integrated NMS platform which is independently Maintenance developed by Huawei Center NSF BGP, IS-IS, OSPF, LDP. (Nonstop Forwarding)

Commercial in Confidence Page 8 of 8

Quidway NetEngine40E Universal Switching Router System Description

Chapter 2 System Architecture and Boards Overview

2.1 Hardware Architecture Overview

The NE40E is composed of an integrated chassis (with a backplane), power modules, ventilation and heat dissipation system, and boards. The height of the NE40E chassis is 22 U. The dimensions are 442 mm x 660 mm x 980 mm (width × depth × height). The NE40E can be mounted in a 19-inch standard cabinet or an N68-22/N68-18 cabinet.

z The inner height of an N68-22 cabinet is 46 U and the dimensions are 600 mm x 800 mm x 2200 mm (width × depth × height).

z The inner height of an N68-18 cabinet is 37 U and the dimensions are 600 mm x 800 mm x 1800 mm (width × depth × height). The appearance and components of the NE40E are shown in Figure 2-1.

Commercial in Confidence Page 9 of 9

Quidway NetEngine40E Universal Switching Router System Description

1

2

3

9

4

8

5

7

6

(1) LCD (2) Fan module (3) Cable management bracket (4)Board cage (5) Air intake frame (6) Plastic panel of the power supply module (7) Power supply module (8) Handle (9) Rack-mounting ear Figure 2-1 Appearance of the NE40E

2.1.1 LCD

I. Introduction

Liquid Crystal Display (LCD) is used to display the information and status of the board, environment, fan module and power supply module. LCD supports two display modes: idle mode and menu query mode.

z Idle mode: default mode. It is used to display the normal state of the system.

z Menu query mode: It can support 3-class menus at most.

II. Appearance

The appearance of LCD is shown in Figure 2-2.

Commercial in Confidence Page 10 of 10

Quidway NetEngine40E Universal Switching Router System Description

Cancel

Menu Enter

Mute 2 1 RUN ALM RUN ALM FAN1 FAN2

(1) Liquid crystal display (2) Key Figure 2-2 Appearance of LCD

2.1.2 Ventilation and Heat Dissipation System

I. Fan Module

There are two fan modules behind the LCD in the NE40E, which achieve the air ventilation and heat dissipation of the boards.

z The fan modules can provide fan fault alarms.

z The main Monitorbus module on the SRU can control the speed of the fans based on the temperature in the board cage.

z The operation and failure indicators are on the liquid crystal panel.

z Each fan module has two centrifugal fans. Figure 2-3 shows the appearance of the fan module.

Figure 2-3 Appearance of the fan module

II. Ventilation and Heat Dissipation System

Ventilation and heat dissipation are performed on the board cage of the NE40E from bottom to top. Commercial in Confidence Page 11 of 11

Quidway NetEngine40E Universal Switching Router System Description

z The fans integrated on the power module are located at the bottom of the chassis.

z The air channels of the power module and the board cage are separated from each other.

z The air flows from the front of the power module to the back for ventilation and heat dissipation.

2.1.3 Board Cage

I. Board Cage

The NE40E has 12 slots. The slots are assigned to 8 LPUs, 2 SFUs, and 2 SRUs. As shown in Figure 2-4, the left is the entity diagram and the right is the schematic diagram.

Figure 2-4 The board cage of the NE40E

II. Board Distribution in the Board Cage

Table 2-1 shows the board distribution in the board cage.

Table 2-1 Board distribution

Slot Quantity Slot width Remark number

1–8 8 41 mm (1.6 inch) LPU 9, 10 2 36 mm (1.4 inch) SRU in 1 + 1 hot backup SFU in 3 + 1 hot backup with switching 11, 12 2 36 mm (1.4 inch) modules integrated on SRU.

2.1.4 Power Supply

The NE40E can operate with either DC power supply or AC power supply.

Commercial in Confidence Page 12 of 12

Quidway NetEngine40E Universal Switching Router System Description

I. DC Power Supply

The NE40E adopts the –48 V DC power module with a 19-inch 3U-height standard chassis architecture. Figure 2-5 shows the appearance of the power module. Figure 2-6 shows the plastic panel of the power supply.

Figure 2-5 Appearance of the DC input power module

PWR IN PWR OUT ALM PWR IN PWR OUT ALM PWR1 PWR2

Figure 2-6 Front view of the plastic panel of the power supply

The –48 V DC input power module has primary straight-through output and secondary -48 V DC regulated voltage output.

z The primary straight-through power provides protection against short-circuit.

z The secondary regulated voltage power provides protections against over-current, over-voltage, and short circuit. It also supports alarm. Figure 2-7 shows the front view of the –48V DC input power module.

Commercial in Confidence Page 13 of 13

Quidway NetEngine40E Universal Switching Router System Description

NEG(-) IN OUT FAIL 5 1 ON

RTN(+) 4 2

PGND OFF

3

(1) –48V power (2) RTN (+) (3) PGND (4) Power switch (5) Handle Figure 2-7 Front panel of the DC input power module

The parameters of the DC input power module are shown in Table 2-2.

Table 2-2 Parameters of the DC input power module

Item Parameter

Input voltage -72 V to -38 V

Maximum input current 79 A

Maximum output current 79 A

Maximum output power 3000 W

Rated current of air breaker 100 A

II. AC Power Supply

The AC power module is designed with a 19-inch 3U-height standard chassis architecture. Figure 2-8 shows the appearance of the power module.

Commercial in Confidence Page 14 of 14

Quidway NetEngine40E Universal Switching Router System Description

Figure 2-8 Appearance of the AC input power module

The AC input power module provides the -48 V DC output. It provides protections against output over-current, output over-voltage, and short circuit. It also supports alarm. Figure 2-9 shows the front panel of the AC input power module.

IN OUT FAIL L 5 1 ON

N 2 4 OFF E 3

(1) Live line (2) Neutral line (3) Earth line (4) Power switch (5) Handle Figure 2-9 Front panel of the AC input power module

The parameters of the AC input power module are shown in Table 2-3.

Table 2-3 Parameters of the AC input power module

Item Parameter

Input voltage 176 V to 275 V

Rated input voltage 200 V to 240 V

Rated output voltage -48 V DC ± 0.5 V DC

Maximum output current 62.5 A

Commercial in Confidence Page 15 of 15

Quidway NetEngine40E Universal Switching Router System Description

Item Parameter

Maximum output power 3000 W

2.2 System Structure

This section describes the system structure of the NE40E physically and logically.

2.2.1 Physical System Architecture

I. Introduction

Figure 2-10 shows the NE40E physical architecture, which includes the following subsystems:

z power distribution system

z functional host system

z heat dissipation system

z network management system Except the network management system, all other parts are in the integrated cabinet. The following takes the DC power module for an instance.

-48 V -48 V RTN

Integrated Power distribution system chassis

-48 V RTN -48 V RTN

-48 V -48 V

Monitorbus Functional host system Fan heat dissipation system

Ethernet

Network management subsystem

RTN: Return

Figure 2-10 The NE40E physical architecture

Both the power distribution subsystem and the fan heat dissipation subsystem are in 1+1 redundancy mode. The following only introduces the functional host system.

Commercial in Confidence Page 16 of 16

Quidway NetEngine40E Universal Switching Router System Description

II. Functional Host System

The functional host system processes the services. Besides, it monitors and manages the devices of the whole system, such as the power distribution system, the fan heat dissipation system and the network management system through network management interfaces. Figure 2-11 shows the block diagram of the functional host.

Monitoring Monitoring bus System monitoring unit bus Monitoring unit Management Management bus Management bus switching unit Management unit bus (1) MPU MPU (Active) POS/Ethernet Monitoring Physical Forwarding bus System monitoring interface unit unit unit Serial link Management group Management bus LPU1 bus switching unit (1) MPU MPU Monitoring System backplane (Slave) Monitoring Monitoring unit bus bus Switching network Management monitoring unit Management unit Management bus Switching network bus control unit POS/Ethernet Physical Forwarding interface unit unit Switching network Serial link Serial link group group LPU 8 SFU module (1): The link connects to management bus switching unit of another MPU

Main Processing Unit (MPU) is integrated on the SRU.

Figure 2-11 The NE40E functional host diagram

The functional host is composed of system backplane, SRU, LPU and SFU.

2.2.2 System Logical Architecture

As shown in Figure 2-12, the NE40E is logically divided into:

z Data plane

z Control and management plane

z Monitoring plane

Commercial in Confidence Page 17 of 17

Quidway NetEngine40E Universal Switching Router System Description

LPU MPU LPU

Monitoring Monitoring unit Monitoring unit plane System Monitoring monitoring unit Monitoring unit unit

Control & Management Management unit management unit System plane control unit

Management Management unit Switching network unit control unit

Forwarding Forwarding unit Switching unit Data plane network SFU Forwarding Forwarding unit unit LPU LPU

Figure 2-12 The NE40E logical architecture

z The data plane is responsible for high speed processing and non-blocking switching of data packets. It encapsulates/decapsulates packets, completes IPv4/MPLS forwarding processing, QoS and inner high speed switching, and makes various statistics.

z The control and management plane controls and manages the system, and is the central nerve of the whole system. Specifically, the control and management unit processes the protocols and signals, configures and maintains the system status, reports and controls the system status.

z The monitoring plane is responsible for the environment monitoring. It detects the voltage, controls power-on and power-off of the system, monitors the temperature and controls the fan. In this way, the security and stability of the system are ensured. It can isolate the fault promptly in the case of the unit failure to guarantee the running of the other parts.

2.3 Software Architecture

2.3.1 Software Architecture

The NE40E operates on the latest versatile routing platform of Huawei -- VRPv5 (VRP version5). The VRPv5 employs the modular design and supports the distributed architecture. In this way, the security and reliability of the system are enhanced.

Commercial in Confidence Page 18 of 18

Quidway NetEngine40E Universal Switching Router System Description

2.3.2 VRPv5 Architecture

The VRPv5 consists of:

z System service plane It provides such functions as task and memory management, timer, software loading and patching on the basis of the operating system. In this way, it facilitates system upgrade and scaling.

z Versatile control plane It is the core of the VRP datacom plane and the basis of the security and QoS. It supports link management, IPv4 protocol stack, routing protocol processing, MPLS, MPLS VPN and traffic engineering (TE). Its core function is to control the data forwarding plane and carry out various functions of the device.

z Data forwarding plane It processes data forwarding under the control of versatile control platform. The VRPv5 supports software forwarding and hardware forwarding. The data forwarding plane is the task executor of the NE5000E.

z Service control plane It controls and manages the system based on the requirements of a user, mainly including authentication, accounting and access control.

z System management plane It manages user interfaces and Input/Output. It is the basis of network management and maintenance.

2.4 Boards

2.4.1 SRU

The Switch and Route Processing Unit (SRU) is an integrated unit of multiple functional modules. It is integrated including system control and management, SFU, the system clock source, and the maintenance and management unit. The SRU implements the functions as described below, while the function and hardware implementation of each module is independently.

I. As the Core Unit for System Control and Management

As the core unit for system control and management, the SRU implements the following functions of the Control Panel of the System:

z Carry out routing protocols. The SRU is in charge of packet broadcast, packet filtering, and download of routing policies from the policy server.

z Manage and communicate the boards. The LANSWITCH module integrated on the SRU can carry out the outer band communications among boards. Through the outer band management bus, it can manage the LPU, SFU and the slave SRU, and implement their communications.

Commercial in Confidence Page 19 of 19

Quidway NetEngine40E Universal Switching Router System Description

z Configure data. The SRU carries out system data configuration and startup files, charging, software upgrade and running logs storage. The CF card on the SRU panel is used to store logs of the system and supports hot swap. The CF card inside the SRU is used to store system files and do not support hot swap.

z Manage and maintain the system. The management interfaces (serial or network interfaces) on the SRU carry out management and maintenance of the system

II. As a Part of the SFU

Two SFU modules integrated on SRUs with two SFUs form four switching planes in 3 + 1 redundancy backup to carry out the functions of the switching plane and load balancing of the planes.

III. As the System Clock Unit

The SRU provides LPUs with reliable synchronous SDH interface clock signals. It can provide the downstream devices with 2.048 MHz synchronous clock signals, and can receive 2.048 MHz or 2.048 Mbit/s external reference clock signals.

IV. As the Clock Unit of Synchronous Switching

The SRU can keep the operating clocks of the SFU and the LPU synchronous.

V. As the System Maintenance Unit

The SRU periodically collects the running data of system units through the Monitorbus and generates control information based on the running state. For example, the SRU periodically detects whether each board is in position and adjusts the rotating speed of the fan module. At the same time, the SRU can implement local or remote test or on-line upgrade of system units through the JTAG bus.

Note: The main control module, clock module, and LAN Switch module of a board improve the system reliability by using 1 + 1 hot backup.

2.4.2 SFU

As the switching network unit of the NE40E, the Switch Fabric Unit (SFU) supports service data exchange for the whole system. Working in 3 + 1 redundancy backup with two SFU modules integrated on SRUs, the SFU can support wire-speed switching of 160G users’ service traffic.

Commercial in Confidence Page 20 of 20

Quidway NetEngine40E Universal Switching Router System Description

There is a control channel on the SFU to supply voltage detection, current detection and temperature detection. It also can supply over-voltage protection, over-current protection and over-heat protection.

2.4.3 Backplane

The backplane is used to connect kinds of high-speed data signals and control signals between the functionality boards. There are total 12 slots on the backplane.

2.4.4 LPU

I. Function

The LPU board consists of Physical Interface Card (PIC), Line Processing Unit (LPU), and Fabric Adaptor (FAD). They work jointly to implement the expedited procession and forwarding of the service data, the maintenance and management of the link protocol and the service forwarding table. The main functions for each module are described as shown in Table 2-4.

Table 2-4 Description of the main functions of each module of the LPU

Module Function Description name

z Processing and encapsulation of multiple link protocols (such as Ethernet II, and PPP) z Traffic classification of packet and packet filtering for user traffic policing and ACL LPU module z Data buffer management and scheduling z Data forwarding based on the forwarding table z Identifying control protocol packet and forwarding the packet to the active CPU through the non-line-speed interface

z Traffic management: data queuing and buffer according to the input data traffic classification, and buffered data scheduling based on the congestion of switching network FAD module z Switching network interface adaptor. Completes the translation from the parallel port SPI4.2 to the high-speed serial port z A part of the switching network: traffic control according to the queuing state to ensure no data loss in the network Physical interface card supports the physical interface processing of PIC card the service interface, including optical/electro conversion, physical layer control

The NE40E provides four types of LPUs:

z Ethernet LPU

z POS LPU

z CPOS LPU

Commercial in Confidence Page 21 of 21

Quidway NetEngine40E Universal Switching Router System Description

z ATM LPU

z Resilient Packet Ring (RPR) LPU

Note: The interface attributes of LPUs are shown in LPU Interface Attribute.

II. Ethernet LPU

The NE40E supports the Ethernet LPUs shown in Table 2-5.

Table 2-5 Ethernet LPUs supported by the NE40E.

LPU name Remark

5/10-port Gigabit Ethernet Optical Interface LPU (SFP optical module) - 1-port 10G Ethernet LAN Optical Interface LPU (10 km) - 1-port 10G Ethernet LAN Optical Interface LPU (40 km) - 1-port 10G Ethernet WAN Optical Interface LPU (10 km) - 1-port 10G Ethernet WAN Optical Interface LPU (40 km) - 1-port 10G Ethernet WAN Optical Interface LPU (80 km) - 1-port 10G Ethernet LAN Optical Interface LPU (XFP optical module) - 1-port 10G Ethernet WAN Optical Interface LPU (XFP optical module) - 2-port 10G Ethernet LAN Optical Interface LPU (XFP optical module) - 24/48-port 10M/100M/1000M Ethernet Electrical Interface LPU - 24/48-port Gigabit Ethernet Optical Interface LPU (SFP optical - module)

Note: SFP and XFP are pluggable.

The 10G Ethernet optical interface LPUs can be classified into WAN and LAN ones.

z WAN LPU needs to adapt Synchronous Digital Hierarchy (SDH) /Synchronous Optical Network (SONET) when dealing with data packets. Therefore, the interface of a WAN LPU can connect with the interface of another WAN card or the SDH/SONET transmission equipment for Ethernet WAN interconnection.

Commercial in Confidence Page 22 of 22

Quidway NetEngine40E Universal Switching Router System Description

z The LAN board implements optical/electro conversion in Ethernet MAC frame and transmits it by optical fiber. The interface of the LAN LPU, however, can only connect with the interface of another LAN LPU.

III. POS LPU

POS LPUs are used to connect the NE40E with SDH transmission devices or other devices. The NE40E provides the POS optical interface LPUs shown in Table 2-6.

Table 2-6 POS Optical Interface LPUs supported by the NE40E

LPU name Remark

1-port OC-192c/STM-64c POS Optical Interface LPU (XFP optical - module) 1-port OC-192c/STM-64c POS Optical Interface LPU (2 km) - 1-port OC-192c/STM-64c POS Optical Interface LPU (40 km) - 1-port OC-192c/STM-64c POS Optical Interface LPU (80 km) - 4-port OC-48c/STM-16c POS Optical Interface LPU (SFP optical - module)

2-port OC-48c/STM-16c POS Optical Interface LPU (SFP optical - module) Enhanced

1-port OC-48c/STM-16c POS Optical Interface LPU (SFP optical - module) Enhanced

4-port OC-12c/STM-4c POS Optical Interface LPU (SFP optical - module)

4/8-port OC-3c/STM-1 POS Optical Interface LPU (SFP optical - module) Enhanced

IV. CPOS LPU

The CPOS LPU of NE80 is compatible on the NE40E. You can select the SFP or ESFP Optical Modules of different distances according to the requirements. The NE40E provides the CPOS LPUs shown in Table 2-7.

Table 2-7 CPOS LPUs supported by NE40E

LPU name Remark

2-port OC-3c/STM-1 CPOS Optical Interface LPU (SFP optical module) Boards of NE80 4-port OC-3c/STM-1 CPOS Optical Interface LPU (SFP optical module)

Commercial in Confidence Page 23 of 23

Quidway NetEngine40E Universal Switching Router System Description

V. ATM LPU

The ATM LPU carries out the functions of the lowest two network layers: physical layer and link layer. The SONET/SDH frame bearers ATM cells and the AAL5 encapsulates data packets, such as IP packets. The ATM LPU is used to de-encapsulate the encapsulated data and encapsulate the packets to be sent and forward them to the network. The NE40E provides the ATM LPUs shown in Table 2-8.

Table 2-8 ATM LPUs supported by the NE40E

LPU name Remark

LPU of the NE40/NE80. The NE40E is 8-port STS-3c/STM-1 ATM Optical compatible with the LPUs through the Interface LPU (SFP optical module) FAD.

VI. RPR Optical Interface LPU

The RPR optical interface LPU can implement the access function of the RPR ring network, and provides efficient and reliable RPR networking solutions. The NE40E provides the RPR LPUs shown in Table 2-9.

Table 2-9 RPR LPUs supported by the NE40E

LPU name Remark

1-port OC-192c/STM-64 RPR Optical - Interface LPU (SFP optical module)

2.4.5 NetStream SPU

The processing of the NetStream Service Processing Unit (SPU) is shown in Figure 2-13.

z The LPU establishes NetStream flows based on the source IP address, destination IP address, source port number, destination port number, type of IP protocol, IP ToS and inbound interface information, and sends the flow to the NetStream SPU.

z The NetStream SPU takes the statistics, encapsulates it in UDP packets and sends the packets to the LPU for forwarding.

z The statistics can be used for accounting, network planning and analysis, network monitoring, application monitoring and analysis, and user monitoring and analysis.

Commercial in Confidence Page 24 of 24

Quidway NetEngine40E Universal Switching Router System Description

MPU

Configuration management Entry information Configuration Statistics information Debugging information information Alarm information LPU NetStream SPU Encapsulate Extracted packet PS information information SFU FS Extract Statistics packets Forwarding Forwarding packets

Packets Packets Flow statistics (FS) packets

Figure 2-13 The processing of NetStream services

The NE40E supports NetStream SPU.

Commercial in Confidence Page 25 of 25

Quidway NetEngine40E Universal Switching Router System Description

Chapter 3 Link Features

The NE40E can provide multiple kinds of interfaces to set up the following links with the peer devices:

z Ethernet link

z POS link

z CPOS link

z ATM link

z RPR link

3.1 Switched Ethernet Link Features

The NE40E provides various switched Ethernet interfaces such as FE electrical interface, GE optical interface and 10 GE optical interface. They can support services in VLAN, VPLS, QoS and MPLS VPN at the UNI side.

3.1.1 Supporting VLAN

The switched Ethernet links have the following features:

I. Supporting VLAN Interface

After setting up a VLAN, you can create VLAN interface (Vlanif). A VLAN interface is a virtual interface with layer 3 (IP layer) features. You can configure IP addresses and enable routing protocols on the VLAN interface to make it equivalent to the routed Ethernet interface. You can also add several switched Ethernet interfaces to the VLAN. The NE40E supports VLAN configurations and display in batches.

II. Supporting Port Isolation In VLAN

You can configure a port in a VLAN as an isolated port. Layer 2 forwarding is forbidden between isolated ports, but it is allowed between an isolated port and a non-isolated port in a VLAN.

III. Supporting VLAN Aggregation

Inter-VLAN routing is involved in the communication between VLANs. If each VLAN interface is configured with an IP address, a great many IP address resources will be used up. You can aggregate a group of VLANs into a super VLAN. The VLANs in the super VLAN are called branch VLAN. A super VLAN corresponds with a routing interface in

Commercial in Confidence Page 26 of 26

Quidway NetEngine40E Universal Switching Router System Description

the IP layer. Besides, the IP addresses of all branch VLANs in the super VLAN are in the same IP network segment to improve the utilization of the IP addresses.

IV. Supporting VLAN Trunk

Trunk is a point-to-point link between two routers. The corresponding ports on the connected routers are called trunk ports. One VLAN trunk can transfer several VLAN data flows and allow the VLAN to contain the interfaces of many routers. It can dynamically add, delete or modify the VLAN of the VLAN Trunk to maintain the consistency of the VLAN configuration in the whole network. It can also be combined with other manufacturers’ devices for networking.

V. Supporting VLAN Translation

VLAN translation/mapping is to map an external VLAN ID into an internal VLAN ID. This function is used for communications between devices with different VLAN IDs.

VI. Supporting VLAN Stacking/VLAN Mapping

VLAN stacking and VLAN mapping are used to configure VLAN tags for packets. During configuration, you can set a VLAN tag (inside-vlan) required based on the original VLAN tag (outside-vlan).

VII. Supporting Q-in-Q

The NE40E provides Q-in-Q ports. Double tags can be configured through Q-in-Q ports. That is, a new tag is added to the frame based on the original tag. In this way, up to 4096 x 4096 VLANs can be supported to meet the requirements of the MAN.

3.1.2 Supporting Port Binding

You can bind several switched Ethernet interfaces into a channel to improve the bandwidth and reliability. One port failure cannot interrupt services. Both FE and GE ports can implement port binding.

3.1.3 Supporting MSTP

The Multiple (MSTP) is used on the loop network. It can interdict some redundant paths with a certain algorithm to prune loop networks into no-loop tree-shape networks. This avoids the increment and endless cycling of packets in the loop network.

Commercial in Confidence Page 27 of 27

Quidway NetEngine40E Universal Switching Router System Description

3.2 Routed Ethernet Link Features

The NE40E provides such routed Ethernet interfaces as FE electrical interface, GE optical interface and 10 GE optical interface. These interfaces support IPv4, MPLS, QoS and Multicast services.

3.2.1 Supporting Ethernet Trunk

Adopting port trunking technology, the Ethernet-Trunk can bind multiple physical ports into a logical Eth-Trunk. This can improve bandwidth, enhance reliability and implement load sharing. The Ethernet-Trunk conforms to the IEEE 802.3ad standard Control Protocol (LACP). The Ethernet-Trunk can bind at most 16 physical Ethernet ports. Like a common Ethernet port, the bound Ethernet-Trunk supports various services.

3.2.2 Supporting Sub-interface

GE interfaces and FE interfaces can be configured with sub-interfaces. The VLAN encapsulation configured on the sub-interface can be used for VLAN termination.

3.3 POS Link Features

3.3.1 Supporting PPP/HDLC

The physical layer of the POS link adopts the Synchronous Optical Network (SONET) defined by the ANSI or the Synchronous Digital Hierarchy (SDH) defined by the ITU-T. The NE40E provides POS interfaces of 155 Mbit/s, 622 Mbit/s, 2.5 Gbit/s and 10 Gbit/s. In the link layer, POS supports two kinds of protocols:

z Point-to-Point Protocol (PPP)

z High-level Data Link Control (HDLC ) PPP protocols of the POS interface support Link Control Protocol (LCP) and Internet Protocol Control Protocol (IPCP), and support two authentication modes of Password Authentication Protocol (PAP) authentication and Challenge Handshake Authentication Protocol (CHAP).

3.3.2 Supporting IP Trunk

Adopting IP trunk technology, you can bind multiple physical POS interfaces into a logical trunk interface as shown in Figure 3-1. You can configure the trunk interface to implement routing protocols and MPLS and VPN services. The physical POS interfaces that are bound together are called trunk members. All configurations on the trunk logical interface also act on the trunk members. The trunk members use the IP address of the logical Trunk interface.

Commercial in Confidence Page 28 of 28

Quidway NetEngine40E Universal Switching Router System Description

The IP trunk technology helps to:

z Increase bandwidth: The bandwidth of the Trunk interface is the bandwidth sum of total members.

z Enhance reliability: If a member link fails, the traffic of this link is shifted to other available link automatically. This can improve the reliability of the whole Trunk.

z Carry out load sharing: Different flows pass through different trunk members.

Trunk

Figure 3-1 IP trunk

The NE40E can:

z Support inter-board IP trunk

z Support IP trunk of channels with different rates

z Support dynamic establishment and removing of IP-trunk interfaces

z Bind a physical channel to a trunk through the command line on a physical interface

3.4 CPOS Link Features

The CPOS interface can divide the bandwidth finely by making full use of features of SDH. In networking, the CPOS interface can reduce the demand for quantity of low speed physical ports of a router and enhance their convergence capabilities, as well as increase the dedicated line access ability of a router. CPOS is mainly used to improve aggregation capacity of the router on low speed access. STM-1 CPOS is suitable for aggregating multiple E1/T1s. At present, the NE40E supports to divide CPOS to multiple E1s and supports IP binding on E1s.

3.5 ATM Link Features

3.5.1 Supporting the Creation of PVC

The ATM interface supports creating PVC. PVC supports:

z AAL5 SNAP encapsulation mode

z CBR services

z UBR services

z VBR-NRT services and VBR-RT services

z Forwarding OAM F5 Loopback cells to detect the state of the PVC

Commercial in Confidence Page 29 of 29

Quidway NetEngine40E Universal Switching Router System Description

3.5.2 Supporting IPoA

IP over ATM (IPoA) is a kind of technology to bear IP services on the ATM network. It inherits the fundamentals of TCP/IP protocol and only regards the ATM network as a kind of physical sub network. For IP protocols, the ATM network is equivalent to the physical sub network such as the Ethernet. Using IPoA, you can directly run IP network protocols and network applications in the ATM network. With the NE40E, you can set up address mapping between PVC and the IP address of the peer device in two ways:

z Static mapping

z Inverse Address Resolution Protocol (InARP)

3.5.3 Supporting SDH and SONET

The NE40E supports:

z SONET and SDH encapsulation modes on ATM interfaces

z SONET and SDH overhead byte configurations

3.5.4 Supporting the ATM Sub-interface

The NE40E supports the ATM sub-interface. The ATM interface supports multiple virtual connections at the same time, and the peer networks of virtual connections are in different network segments. In this case, you need to create sub-interfaces on the interface to support communications with different peers. You can configure multiple PVCs on one sub-interface.

3.6 RPR Link Features

The NE40E supports RPR networking. Based on the packet-based optical transport technology, RPR provides kinds of services access. Integrating the broad bandwidth and fast self-healing capability of the optical network, RPR provides cost-effective services for the carriers over the current optical network. The RPR network has a topology structure with two bi-directional rings. One ring is called “ringlet 0” in which packets are sent clockwise; the other is called “ringlet 1” in which packets are sent counter-clockwise. The two rings can transmit and control packets at the same time.

Commercial in Confidence Page 30 of 30

Quidway NetEngine40E Universal Switching Router System Description

Ringlet 0 data packets and control packets on the ringlet 0

Ringlet 1 data packets and control packets on the ringlet 1

Figure 3-2 RPR network structure

As shown in Figure 3-2, each node of the RPR network is connected to two pairs of fibers for ringlet 0 and ringlet 1 transmission and receiving. In the RPR network, the unicast traffic only travels between its source node and destination node, thus improving the bandwidth utilization.

3.6.1 Supporting RPR Fairness Algorithm

RPR controls network congestion through RPR Fairness Algorithm (RPR-FA). If a node experiences congestion, it sends an RPR fairness packet to its upstream node through the counter-clockwise ring. The fairness packet also serves to maintain the link state. According to the information in the packet, the upstream node adjusts its transmission rate to eliminate congestions. RPR-FA only controls the transmission of packets with low precedence. The packets with high precedence are not controlled by RPR-FA and can be sent as long as there are enough transit buffers. RPR automatic switch is implemented with four kinds of control packets:

z Topology and Protection packet (TP), can be broadcast on the whole ring.

z Topology Checksum (TC) packet, can only be sent or received between adjacent nodes.

z Attribute Discovery (ATD) packet, is used to update the site information in the topology database except the topology discovery and checksum.

z Link Round Trip Time (LRTT) packet, is used to detect the delay of high-preference control frames among all nodes on the network

3.6.2 Protection Mechanism

In the RPR network, if a node fails, the protection mechanism can make the traffic pass through the failed node. If a line fails, the protection mechanism can transfer the traffic to the ring in the opposite direction (in wrapping mode), or change the direction of the Commercial in Confidence Page 31 of 31

Quidway NetEngine40E Universal Switching Router System Description

traffic (in steering mode). The protection mechanism can implement RPR forward performance monitoring, event detection, fast self-healing and fast recovery of service in case of the node or fiber failure. Thus, the network can detect events and respond to them appropriately to ensure continuous services.

I. Pass-Through

Some node failures may stop layer 3 forwarding temporarily, but the MAC layer can still forward packets. You can set the node in pass-through mode by shutting down the RPR interface. In this case, all packets that reach this node are forwarded in transparent mode and this node is invisible in the RPR network, as shown in Figure 3-3.

Failed node

Figure 3-3 Pass-Through mode

II. Wrapping and Steering

When failures like fiber cut occur, the system adopts two self-healing modes, namely wrapping and steering. In the wrapping mode, the traffic that is transmitted on the ringlet 0 from A to B is sent to the node adjacent to the failed line, and then to B on the ringlet 1. As shown in Figure 3-4. In the steering mode, the traffic that is previously on the ringlet 0 is directly redirected to the ringlet 1 for transmission. As shown in Figure 3-5.

Commercial in Confidence Page 32 of 32

Quidway NetEngine40E Universal Switching Router System Description

Path after wrapping

A

Wrap

Line failed

B Wrap

Figure 3-4 The RPR network in wrapping modes

A

Path after steering

Line failed B

Figure 3-5 The RPR network in steering modes

The wrapping mode and steering mode in RPR have their respective advantages and disadvantages. The wrapping mode implements fast switchover without data loss, but wastes the bandwidth. The steering mode needs neither loopback nor wrapping, and thus does not waste the bandwidth, but it implements a slow protection and has data loss. The RPR designed by Huawei combines the advantages of these two modes, and adopts the wrapping and steering modes in succession. Providing the failure protection switchover within 50ms, it implements non-stop services without bandwidth waste to achieve the best performance.

Commercial in Confidence Page 33 of 33

Quidway NetEngine40E Universal Switching Router System Description

Chapter 4 Primary Service Features

The NE40E provides service features of high-end routers, and conforms to related international standards to ensure flexibility, reliability and expansibility. This chapter describes primary service features of the NE40E. Detailed service features are listed in Specifications of System Features and Service Performances.

4.1 IPv4/MPLS Forwarding

4.1.1 IPv4 Features

The IPv4/IPv6 dual-protocol stacks support the following IPv4 features:

z Basic TCP/IP protocols such as ICMP, IP, TCP, UDP, Socket (TCP/UDP/Raw IP), and ARP.

z Static DNS and specified DNS servers.

z FTP Server/Client and TFTP Client.

z DHCP Relay Agent and DHCP Server.

z Ping, tracert and HWPing. HWPing can detect the status of ICMP, TCP, UDP, DHCP, FTP, HTTP and SNMP services and the response time taken to test the services.

z IP policy routes. It directly specifies the next hop based on the attribute of packets without searching routes.

4.1.2 MPLS

The NE40E supports the following MPLS features:

z Basic MPLS functions and forwarding services, and Label Distribution Protocol (LDP) signaling protocol. MPLS signaling protocol distributes labels, sets up Label Switched Path (LSP) and transfers parameters used for setting up LSP.

z MPLS Ping and Tracert: use MPLS echo requests and MPLS echo replies to test the availability of an LSP.

z LSP-based traffic statistics.

z LSP loop detection mechanism.

z MPLS Class of Service (CoS), and mapping of the ToS field of IP packets into the EXP field of MPLS packets.

z Static configuration of LSP and label forwarding based on traffic classification.

z MPLS TRAP function. The NE40E can work as a Label Edge Router (LER) or a Label Switch Router (LSR). The LER is used at the edge of the MPLS network to connect with other networks and

Commercial in Confidence Page 34 of 34

Quidway NetEngine40E Universal Switching Router System Description

to classify services, distribute labels, encapsulate or strip off multi-layer labels. The LSR is the core switch of the MPLS network, and it provides label switching and label distribution functions. The NE40E can run MPLS on the POS, RPR, ATM, Ethernet, and VLAN interfaces.

4.2 Routing Protocols

4.2.1 Unicast

The NE40E supports the following unicast routing features:

z IPv4 routing protocols: Routing Information Protocol RIP (RIP), Open Shortest Path First (OSPF), Intermediate System-to-Intermediate System (IS-IS), and Border Gateway Protocol Version 4 (BGPv4)

z Manually configured static routes to simplify network configuration and improve network performance

z Large-capacity routing table to support MAN operation effectively

z Routing policy

4.2.2 Multicast

To save network bandwidth and reduce network load, the NE40E supports multicast with QoS guarantee and wire-speed forwarding. The NE40E supports the following multicast features:

z Multicast protocols: Internet Group Management Protocol (IGMP), Protocol Independent Multicast-Dense Mode (PIM-DM) and Protocol Independent Multicast-Sparse Mode (PIM-SM), Multicast Source Discovery Protocol (MSDP), and Multi-protocol Border Gateway Protocol (MBGP).

z PIM-SSM: If the multicast source is specific, a host can join the multicast source directly, without having to register to the Rendezvous Point (RP).

z Anycast RP: Multiple RPs can exist in a domain and they are configured as MSDP peers. A multicast source can choose the nearest RP for register, and the receiver can also choose the nearest RP to join its share tree. This way implements load balancing of the RPs. When a certain RP fails, its previous registered sources and receivers will choose another RP instead. By this, the RP implements the redundancy backup.

z Multicast static routes.

z 10G RPR board supports multicast.

z When receiving, importing and advertising multicast routes or forwarding IP packets, the multicast routing module can use routing policies to filter the routes or filter and forward the packets.

z Multicast VPN: The NE40E adopts Multicast Domains (MD) scheme to implement centralized processing.

Commercial in Confidence Page 35 of 35

Quidway NetEngine40E Universal Switching Router System Description

z Addition and deletion of Dummy entries.

4.3 Tunnel Management

Tunnel management is used to:

z Advertise the status of a tunnel to the services using the tunnel

z Check the policy configured on the tunnel based on the destination IP address Tunnel policy is to select a tunnel based on the destination IP address.

z All the services using the tunnel select the proper tunnel based on the tunnel policy.

z If no tunnel policy is set, the tunnel management module selects the tunnel on the basis of the default policy. The NE40E supports two kinds of tunnel policies:

z For sequential tunnel policies, you can set the sequence to select a tunnel and the number of load balancing. To the same destination, the tunnel in the front of the queue that is Up is selected, no matter whether it is selected or not by other services. The tunnels at the back of the queue are not selected generally, unless load balancing is required or the tunnels before it are Down.

z VPN tunnel binding associates a VPN peer with an MPLS TE tunnel on the PE of the VPN backbone network. The data from the VPN to the peer is transmitted through the special TE tunnel. The TE tunnel bound carries only the specified VPN services. In this way, QoS of the VPN service can be ensured.

4.4 L2VPN

The NE40E provides Layer 2 VPN services based on MPLS. It supports Martini MPLS L2VPN, Kompella MPLS L2VPN, CCC MPLS L2VPN, and SVC MPLS L2VPN to implement VLL services.

4.4.1 VLL

I. Martini MPLS L2VPN

Martini MPLS L2VPN uses “VC-Type + VC-ID” to identify a VC. VC-Type indicates the type of this VC (ATM, Ethernet, VLAN or PPP). VC-ID is used to identify a VC uniquely. Every VC-ID of a same VC-Type on a PE must be unique. PE connecting two CEs interchanges VC labels through LDP and binds the corresponding CEs through VC-ID. When an LSP is set up to connect two PE routers successfully and the label exchange and binding of both sides are completed, a VC will be set up. Then CE routers can transmit Layer 2 data over the VC. In order to exchange VC labels between PEs, Martini draft extends LDP by adding FEC type in VC FEC. Moreover, because the two PEs exchanging VC labels may be not Commercial in Confidence Page 36 of 36

Quidway NetEngine40E Universal Switching Router System Description

connected directly, the LDP must use remote peer to create sessions to transfer VC FEC and VC labels.

II. Kompella MPLS L2VPN

Different from Martini MPLS L2VPN, Kompella MPLS L2VPN does not operate on the connection between CEs directly. It allocates different VPNs in the whole SP network and numbers each CE in VPN. To set up connections between two CEs, you only need to configure an ID for the local CE and an ID for the remote CE on the PE, and then set the ID of the local CE as the Circuit ID (for instance, ATM VPI or VCI) for this link. In label allocation, Kompella MPLS L2VPN adopts label block to assign labels for various links at a time. User can specify a local CE range, which indicates how many CEs can be connected with this CE. System will assign a label block for this CE. The size of this label block is equal to the CE range. In this way, users can distribute some extra labels for VPN for future use. This may waste some label resources, but can reduce VPN deployment and configuration workload in expansion. Kompella BGP L2VPN can support inter-AS VPN solutions.

III. CCC MPLS L2VPN

Circuit Cross Connect (CCC) is a way of realizing MPLS L2VPN through static configuration. Different from common MPLS L2VPN, CCC MPLS L2VPN adopts 1-layer label to transfer user data, and so it can use LSP exclusively. CCC LSP is used to transfer the data of this CCC connection only. It cannot be used for other MPLS L2VPN connections, BGP/MPLS VPN or carrying common IP packets. For the CCC connection, the static LSP in the PE routers need not be configured. If two PE routers are not directly connected, transit static LSP must be configured on the intermediate routers.

IV. SVC MPLS L2VPN

Static VC (SVC) is similar to Martini MPLS L2VPN but SVC can transfer Layer 2 VC and link signaling information without using the LDP. VC label information is configured manually.

4.4.2 VPLS

I. VPLS Services

The VPLS network structure is shown in Figure 4-1. Several virtual switches (VSs) can be created on a PE. VSs on different PEs form an L2VPN. LANs at the user end can

Commercial in Confidence Page 37 of 37

Quidway NetEngine40E Universal Switching Router System Description

access the L2VPN through VSs. In this way, users can expand their own LAN over WAN. VPLS can be regarded as the VS across public networks. Like L3VPN, it establishes LSP tunnels on public networks for traffic exchange.

VLAN1 VLAN1 VS1 VS1

VLAN2 VS2 VS2 VLAN2 PE PE

VS1 VS2 PE

VLAN1 VLAN2

Figure 4-1 VPLS network structure

VPLS requires users to access through Ethernet links. It directly forwards packets according to VLAN ID. For communication with remote users, a Virtual Channel (VC) that can transverse public network is established between PEs, and the VC is associated with the VLAN ID. Users communicate with each other over the layer2 tunnel through the VC. VLAN ID is used to identify users’ VPN. While establishing the VC, PE allocates two labels to the VC. The exterior label is the MPLS LSP label of public network and is allocated by LDP. The inner label is the VC label and is allocated by Remote LDP Session negotiation on the loopback interface. Common VPLS has the following characteristics:

z Supports two kinds of VC encapsulation, that is, Ethernet and VLAN.

z Suppresses broadcast traffic: Local PEs do not forward the broadcast traffic from remote PEs.

II. Q-in-Q VPLS

Q-in-Q is a tunnel protocol based on IEEE 802.1Q encapsulation. It encapsulates the VLAN tag of private networks into the VLAN Tag of public networks. Packets carry two layers tags to transverse ISPs’ backbone networks, thus saving VC resources and providing users with a relatively simple L2VPN tunnel.

Commercial in Confidence Page 38 of 38

Quidway NetEngine40E Universal Switching Router System Description

III. HVPLS

VPLS needs PEs to forward the Ethernet frame by the well-connected Ethernet emulation circuit or Pseudo-Wire (PW). So, one PE must be connected with other PEs in the same VPLS. If the VPLS has N PEs, the VPLS has N x (N-1)/2 connections. Hierarchical Virtual Private LAN Service (HVPLS) is the networking solution used to realize the well-connection in VPLS. Figure 4-2 shows the HVPLS model.

CE basic VPLS full mesh

AC SPE PW SPE PW PW UPE

PW SPE AC

CE Figure 4-2 HVPLS model

z UPE. The device directly connected with CE is called Underlayer PE, and also named UPE for short. UPE only needs to be connected with one of PEs in the basic VPLS. UPE supports the basic brigde, the route and the MPLS encapsulation. If one UPE is connected with many CEs, only the UPE needs to forward the data frame to reduce the burden on SPE.

z SPE. The device connected with UPE and located in the internal of the basic VPLS is called Superstratum PE, and also named SPE for short. SPE is connected with all other devices in the internal of the basic VPLS. UPE connected with SPE likes a CE. The PW established between UPE and SPE is considered the AC of SPE. SPE needs to learn the MAC addresses of sites on the side of UPE and the MAC addresses of the UPE interfaces connected with SPE.

4.4.3 PWE3

Pseudo-Wire Emulation Edge to Edge (PWE3) is an end-to-end L2 service carrier technology. In Packet Switched Network (PSN), PWE3 simulates ATM, Frame Relay (FR), Ethernet, low-speed TDM and SONET/SDH as possible as it can.

I. Classifications of PW

PW can be classified into: Commercial in Confidence Page 39 of 39

Quidway NetEngine40E Universal Switching Router System Description

z Static PW and dynamic PW in terms of implementation

z Single-hop PW and multi-hop PW in terms of networking

z LDP-PW and RSVP-PW in terms of signaling

II. Interconnectivity of Heterogeneous Media

PWE3 can support:

z Interconnectivity of homogenous media and heterogeneous

z Cell relay of data with different encapsulations At present, the data of PWE3 cell relay that the NE40E supports includes:

z ATM AAL5 SDU VCC transport

z Ethernet

z HDLC

z ATM n-to-one VCC cell transport

z IP Layer 2 transport

z ATM one-to-one VCC cell mode

III. ATM Cell Relay

ATM Cell Relay is a technology to load ATM cell on the PWE3 virtual circuit. Label encapsulation for ATM relay through PSN is shown in Figure 4-3.

MPLS Label Stack

PSN Transport Header Outer Label

MPLS PSN tunnel Pseudo-wire Header Inner Label identified by outer label Control Word (sequencing & protocol info)

Layer 1/2 Payload Layer 2 connection e.g ATM VCC/VPC MPLS Pseudo-wire identified by inner label PSN Tunnel L2 PE Pseudo-wire PE L2

Connection or 'port' carried On pseudo-wire

Figure 4-3 Diagram of ATM relay through PSN

PSN label of external layer identifies PSN tunnel, while PW Header of internal layer identifies PW. ATM cell relay loads services as follows on PSN:

z PW payload is ATM cell

z PW payload is AAL5 SDU

Commercial in Confidence Page 40 of 40

Quidway NetEngine40E Universal Switching Router System Description

ATM cell relay can be used to move the former ATM network through PSN, with no new ATM device and no change of ATM CE configuration. ATM CE takes ATM cell relay as TDM leased line, and relays cells through PSN for ATM interconnection.

4.5 MPLS/BGP L3VPN

The NE40E implements BGP MPLS L3VPN, and thus provides carriers with end-to-end VPN solutions. Operators can provide VPN service for the users as a new value-added service. The NE40E can serve as a P or PE router to carry out functions as follows:

z As a PE router, it supports the user’s CE to use multiple interfaces to connect to the PE in multiple modes, such as using Ethernet, POS, ATM, VLAN, and so on.

z It supports static and dynamic routing protocols, such as BGP, RIP and OSPF, between CE and PE.

z It supports multiple instances of the VPN routing table.

I. Supporting Carrier’s Carrier

It is possible for the customer of the BGP/MPLS IP VPN service provider to serve as a service provider. In this case, the BGP/MPLS IP VPN service provider is called the provider carrier or the Level 1 carrier. The customer is called the customer carrier or the Level 2 carrier. This networking model is called carrier’s carrier. In this model, the Level 2 SP serves as a CE of the Level 1 SP. To keep good extensibility, the Level 2 carrier adopts the operating mode similar to the stub VPN. That is, the CE of the Level 2 carrier only advertises the routes (internal routes) of the VPN where it resides to the PE of the Level 1 carrier. It does not advertise its customers’ routes (external routes). PEs in the Level 2 carrier exchange external routes by using BGP. This can greatly reduce the number of routes maintained by the Level 1 carrier network.

II. Supporting Inter-AS VPN

The NE40E supports the three inter-AS VPN solutions represented in RFC 2547bis presents, which are:

z VPN Instance to VPN Instance: ASBRs manage VPN routes in between by using sub-interfaces, which is also called Inter-Provider Backbones Option A.

z EBGP Redistribution of labeled VPN-IPv4 routes: ASBRs advertise labeled VPN-IPv4 routes to each other through MP-EBGP, which is also called Inter-Provider Backbones Option B.

z Multihop EBGP redistribution of labeled VPN-IPv4 routes: PEs advertise labeled VPN-IPv4 routes to each other through Multihop MP-EBGP, which is also called Inter-Provider Backbones Option C.

Commercial in Confidence Page 41 of 41

Quidway NetEngine40E Universal Switching Router System Description

III. Supporting Multicast VPN

The NE40E supports multicast in MPLS/BGP VPN.

IV. Supporting HoVPN

In BGP/MPLS VPN solutions, the key device, PE, functions in two aspects:

z Providing access functions for users. To do this, a PE needs a great number of interfaces.

z Managing and advertising VPN routes and processing user packets. Therefore, a PE needs large-capacity memory and high forwarding capability. This will make the PE become a bottleneck. To solve this problem, Huawei initiates Hierarchy of VPN (HoVPN) solution. In HoVPN, functions of a PE are distributed to multiple devices. Acting as different roles in a hierarchical architecture, the devices fulfill functions of a centralized PE together. Basic architecture of HoVPN is shown in Figure 4-4. The device which is directly connected with users is called Underlayer PE or User-end PE (hereafter referred to as UPE). The device which is connected with UPE in the internal network is called Superstratum PE or Service Provider-end PE (hereafter referred to as SPE). Multiple UPEs and the SPE compose the hierarchical PE, functioning together as a traditional PE.

VPN1 site

HoVPN PE VPN1 site

VPN2 site UPE1 SPE MPLS network VPN1 site UPE2

VPN2 site

PE VPN2 site

Figure 4-4 Basic architecture of HoVPN

Note: In the networking of HoVPN, functions of PE are implemented hierarchically. Therefore, the solution is also called Hierarchy of PE (HoPE).

Commercial in Confidence Page 42 of 42

Quidway NetEngine40E Universal Switching Router System Description

The UPE and SPE carry out the following functions:

z The UPE implements the user access. It maintains the routes of VPN Sites which are directly connected with it. It does not maintain the routes of other remote Sites in the VPN, or only maintains their summary routes. The UPE assigns interior layer label to the routes of the directly connected sites, and advertises the label to the SPE through VPN routes with MP-BGP.

z The SPE manages and advertises VPN routes. It maintains the routes of all the VPNs that are connected through UPEs, including the routes of local and remote Sites. The SPE does not advertise routes of remote sites to UPEs. It only advertises the default routes of VPN-instances or summary routes to UPEs with the label. Different roles result in different requirements for the SPE and UPE:

z SPE: large capacity of routing table, high forwarding performance, few interface resources

z UPE: small capacity of routing table, low forwarding performance, high access capability The HoVPN takes advantage of the performance of SPEs and access capability of UPEs. The HoPE is the same as the traditional PE in appearance. It can exist together with common PEs in an MPLS network. HoVPN supports the embedding of HoPE:

z A HoPE can act as a UPE, and compose a new HoPE with another SPE.

z A HoPE can act as an SPE, and compose a new HoPE with multiple UPEs.

z Multiple embedding processes are supported. The embedding of HoPE can infinitely extend a VPN network in theory.

V. Supporting RRVPN

RRVPN (Resource Reserved VPN) is a tunnel multiplex technology. It can provide end-to-end QoS guarantee for VPN users. In MPLS VPN services, operators often need to provide end-to-end QoS guarantee for a wide variety of services for VPN users, such as, voice, video and online. To satisfy users, you can use MPLS TE tunnel with guarantee of QoS. However, if sevices of Expedited Forwarding, (EF) Assured Forwarding (AF) and Best-Effort (BE) are transmitted in the tunnel at the same time, they will interfere with each other. In addition, you can establish the special MPLS TE tunnel with various QoS guarantee for each pair of CEs. However, this solution tends to result in wasting resources since the backbone network needs a great number of LSP sessions.

Commercial in Confidence Page 43 of 43

Quidway NetEngine40E Universal Switching Router System Description

RRVPN is a solution to above problems.

4.6 Traffic Engineering

Network congestion is the main problem that reduces performance of the backbone network. Usually the network congestion is due to insufficient network resources or unbalanced load of network resources. Traffic engineering is used to solve the partial network congestion due to unbalanced load.

4.6.1 MPLS TE

MPLS TE is a technology integrating TE technology into MPLS. By means of MPLS TE, you can create LSP tunnel along a specified path bypassing the congested nodes. This can reserve network resources and balance the network traffic load. In case of resource shortage, MPLS TE helps to preempt the bandwidth resource of LSP tunnel with low priority to satisfy the requirements of broad-bandwidth LSPs and important users. In addition, MPLS TE ensures network communications with path backup and fast reroute technologies when the LSP fails or a network node is congested. The NE40E supports two kinds of Class Type (CT): CT0 and CT1 which correspond to the Assured Forwarding (AF) type and the Expedited Forwarding (EF) type in QoS respectively. Their corresponding bandwidth constraints are BC0 and BC1, and each of them supports eight kinds of priority (from 0 to 7). In other words, the NE40E supports 16 kinds of TE-Class. For general TE tunnels (Non-MPLS DiffServ-Aware TE tunnels), they are mapped to the AF type in CT0 mode. MPLS TE uses Constraint-based Shortest Path First (CSPF) to compute the shortest path to a certain node. The NE40E uses the CR-LDP or RSVP-TE protocol to set up an LSP.

4.6.2 CR-LDP

Constraint-Based Routing using LDP (CR-LDP) is the expansion of the common LDP. It is used in MPLS TE to set up an explicit path from an ingress node to an egress node and to reserve resources on this path. There are two ways to set up an LSP based on CR-LDP:

z Strict Explicit Route

z Loose Explicit Route Traffic parameters of the LSP can be adjusted according to the following three parameters:

z peak rate Commercial in Confidence Page 44 of 44

Quidway NetEngine40E Universal Switching Router System Description

z committed rate

z service granularity

4.6.3 RSVP-TE

Resource Reservation Protocol (RSVP) is designed for the Integrated Service model and is used on each node on a path for resource reservation. The NE40E supports the following two reservation styles:

z Fixed-Filter (FE) style: It reserves resources for every sender separately. It does not allow other senders in a same session to share the resources.

z Shared-Explicit (SE) style: It reserves resources for senders of the same session, and allows them to share the resource.

4.7 QoS

The NE40E realizes the QoS features of integrated services (including real-time services). In particular, the NE40E provides perfect support to Diff-Serv, including:

z traffic classification

z traffic policing

z traffic shaping

z queue management and queue scheduling. The NE40E can implement all the six groups of PHB such as EF, AF1 to AF4 and BE. With the NE40E, network operators can provide users with differentiated QoS guarantee, and make the Internet an integrated network that can carry data, voice and video services simultaneously.

4.7.1 Traffic Policing

The NE40E allows to set such parameters as the committed rate, the peak rate, the committed burst size, and maximum burst size for every kind of traffic according to the Service Level Agreements (SLA). To the traffic beyond the SLA, the device processes them in three ways: pass, drop or markdown. Traffic policing does not influence the forwarding performance of the device because a hardware coprocessor is used internally to implement the Committed Access Rate (CAR).

4.7.2 Queue Scheduling

By default, each port of the NE40E LPU is configured with eight priority queues and each queue can be separately configured with a queue scheduling algorithm. The

Commercial in Confidence Page 45 of 45

Quidway NetEngine40E Universal Switching Router System Description

NE40E uses the “PQ + WFQ” algorithm to carry out queue scheduling, and can be configured with queue scheduling modes in eight levels (1 to 8):

z The level-N (N < 8) queue scheduling is strictly based on the priority of the service. Real-time services are processed with resolute scheduling preference, and so their delays are very low.

z The last level is a time range-based scheduling model which fully meets the requirement for bandwidth guarantee.

z For different queues, the NE40E inside adopts the WFQ algorithm to carry out queue scheduling based on weight.

4.7.3 Congestion Management

The NE40E adopts the Weighted Random Early Detection (WRED) congestion control mechanism.

z The congestion control mechanism can be configured on each port based on the priority of the queue.

z The NE40E uses a microsecond-level timer to trace the occupation of the shared memory with the first-order weighted iteration method.

z Consequently, the NE40E can timely sense the congestion and avoid network flapping. It drops the packets of different drop preferences at different probabilities within the same traffic stream. This can effectively avoid and control network congestion.

4.7.4 Traffic Shaping

The NE40E adopts the Generic Traffic Shaping (GTS) algorithm to buffer packets, to avoid the congestion of downstream devices and to reduce the drop of packets. The NE40E supports the shaping for services like EF and AF to smooth the transmission rate of Diff-Serv services to the downstream traffic.

4.7.5 Traffic Classification

Traffic classification is to classify the traffic on the basis of a certain rule and associate a certain behavior with the traffic of the same type to constitute a policy. Traffic policing, traffic shaping, congestion avoidance based on classes are carried out after traffic classification. If no QoS guarantee or traffic classification is required, or there are no rules to match packets after traffic classification, the device processes the packets with the Best-Effort (BE) service. The NE40E supports simple and complex traffic classification.

Commercial in Confidence Page 46 of 46

Quidway NetEngine40E Universal Switching Router System Description

I. Simple Traffic Classification

Simple traffic classification is to associate the packet with the precedence and the tagged color based on:

z DSCP value of the IP packet

z IP precedence

z EXP value of the MPLS packet

z 802.1p value of the VLAN packet In this way, the mapping between the external precedence and the internal precedence is carried out. Currently the NE40E supports traffic classification on:

z Physical interfaces and sub-interfaces

z Logical interfaces including vlan-if, ring-if and trunk interfaces

II. Complex Traffic Classification

Complex traffic classification is to classify packets to provide different services based on:

z The source and destination IP addresses

z The source and destination ports

z The protocol number Currently, the NE40E supports:

z Classifications based on the source MAC address prefix, the destination MAC address prefix, the protocol number carried over the link layer, the precedence of the packet with tag

z Classifications based on the IP precedence/DSCP/ToS value of the IPv4 packet, the source IP address prefix, the destination IP address prefix, the protocol number carried over the IP packet, the fragmentation tag, the TCP SYN label, the TCP/UDP source port number or range, the TCP/UDP destination port number or range The NE40E supports complex traffic classification on:

z Physical interfaces

z Logical interfaces including sub-interfaces, ring-if and trunk interfaces

4.7.6 QPPB

QoS Policy Propagation through the Border Gateway Protocol (QPPB) is a kind of technology to propagate the QoS policy through BGP. On the BGP receiver, you can:

z Set QoS parameters for BGP routes, such as IP precedence and traffic behavior, based on the attributes of the route.

Commercial in Confidence Page 47 of 47

Quidway NetEngine40E Universal Switching Router System Description

z Set the receiver to classify traffic based on QoS parameters, and set QoS policy for the classified traffic.

z Set the receiver to forward packets based on the QoS policy to realize QPPB. On the BGP receiver, you can set QoS parameters, such as IP precedence and traffic behavior, according to the following attributes of BGP routes:

z ACL

z AS path list

z Community attribute list

z Route cost

z Address prefix list In the complex network environment, the policy for route classification needs to be changed from time to time. QPPB can simplify the change of the policy on the BGP receiver. Using QPPB, you can change the routing policy on the BGP receiver by changing that on the BGP sender.

4.7.7 VPN QoS

As a QoS policy, VPN QoS can transmit private network routes through BGP, which extends QPPB application in L3VPN environment. It can be applied to VPN instances and VPNv4. When VPN QoS is applied to the private network route of a specific VPN instance, the inbound and outbound route policy should be applied to the VPN instance. If VPN QoS is applied to the private network route of all VPN instances, the inbound and outbound route policy should be applied to VPNv4 neighbors of BGP.

4.8 Network Security

The NE40E provides various network security features.

4.8.1 AAA

The NE40E implements a perfect AAA, performing authentication, authorization and accounting for access users on the policy basis. AAA supports three types of user authentication:

z Local authentication

z Remote Authentication Dial-In User Service (RADIUS) authentication

z Huawei Terminal Access Controller Access Control System (HWTACACS) authentication AAA supports four authorization modes:

z Direct authorization to users: It authorizes users to pass through directly.

Commercial in Confidence Page 48 of 48

Quidway NetEngine40E Universal Switching Router System Description

z Local authorization: It authorizes local users depending on the configured attributes of the user accounts.

z HWTACACS authorization: Users are authorized by the HWTACACS server.

z if-authenticated authorization: It authorizes users to pass through if they pass the authentication and the authentication mode is not “none”. AAA supports the following accounting modes:

z None-accounting: free services are provided

z Remote accounting: remote accounting through the RADIUS or HWTACACS server is supported

4.8.2 Protocol Security Authentication

PPP supports PAP and CHAP authentication modes. Routing protocols including RIPv2, OSPF, IS-IS, and BGP support plain text authentication and MD5 encrypted text authentication. SNMP supports SNMPv3 encryption and authentication.

4.8.3 Mirroring

Mirroring indicates that the system sends a copy of the packet on the current node to a specific packet analysis equipment from an observing port without interrupting services. Mirroring is divided into:

z port mirroring: requires that the system copy the received or to be sent packet on a port and send the copy to the specified port.

z traffic mirroring: combines port mirroring with traffic classification to copy the packets that meet the requirements. In this way, it can filter the packets to control packet analysis and improve the efficiency of packet analysis. At present, the NE40E supports inbound port/traffic mirroring as well as outbound port/traffic mirroring.

4.8.4 Sampling

Network services and applications are gradually increasing, which leads to higher requirements for traffic statistics and analysis. Using NetStream, the administrator can access the detailed records through their data network. The NE40E supports IPv4 unicast and multicast packets sampling on layer 3 physical interfaces such as FE, GE, POS, ATM and CPOS, including fixed/random sampling based on packets number and time. Also, the NE40E supports fixed IPv4 packets sampling on layer 3 logic interfaces such as IP-Trunk, Eth-Trunk, Eth-Trunk sub-interface, RPR and VLANIF.

Commercial in Confidence Page 49 of 49

Quidway NetEngine40E Universal Switching Router System Description

4.8.5 MAC Address Limit

As the basic function of L2 forwarding, MAC address learning is carried out automatically and easy to use. However, you need to use it cautiously to avoid attacks. The NE40E supports MAC address learning to limit:

z The maximum number of MAC addresses allowed to learn

z The speed of MAC address learning MAC address learning limit can be applied to the network in which access users are constant and the security is not ensured, for instance, cell access or intranet. When the number of access users reaches the threshold, the MAC addresses of new access users will not be learned. Broadcast is adopted for the traffic of the new users with a finite speed.

4.8.6 URPF

Unicast Reverse Path Forwarding (URPF) can avoid the source address-based network attacks. When a packet is sent to a URPF-enabled interface on the server, the URPF obtains the source address and the inbound interface of the packet. The URPF then takes the source address as the destination address to retrieve the corresponding inbound interface and compares the retrieved one with the inbound interface. If they do not match, the URPF considers the source address as fake and discards the packet. The URPF is applicable to the above environment and prevents such kind of network attacks.

4.9 Network Availability

4.9.1 Redundancy of Key Modules

The NE40E can work with a single SRU or two SRUs in redundancy. The SRU of the NE40E supports hot backup. If the device is configured with two SRUs for redundancy, the master SRU works in active state and the slave SRU is in standby state. In addition, users cannot access the management interface of the slave SRU, or configure commands on the console port or the AUX port. The slave SRU exchanges information (including heartbeat messages and data backup) only with the master SRU. The system supports active/standby switchover in two ways: automatic switchover and forced switchover. The automatic switchover may be triggered by serious faults or resetting of the master SRU. The forced switchover is triggered with console commands. You can forcedly prohibit the master/slave switchover of the SRU through the console command.

Commercial in Confidence Page 50 of 50

Quidway NetEngine40E Universal Switching Router System Description

The NE40E supports backup of management bus and 1 + 1 backup for the power supply. The LPU, the power supply and the fan module are hot swappable. These designs enable the system to recover or respond quickly when a severe abnormality is detected on the device or the network, thereby improving the Mean Time between Failure (MTBF) and minimize the impact of unreliable factors on normal service.

4.9.2 High Availability of the LPU

The NE40E implements backup of some key kinds of service interfaces through protocol extension. The NE40E provides Virtual Router Redundancy Protocol (VRRP) function on the Ethernet interface. With the extended VRRP, the NE40E enables two interfaces on one router or on different routers to back up each other, thus ensuring high reliability of the interfaces. The NE40E also provides redundancy backup of RPR-based interfaces through RPR protocol and RPR network technologies. The backup function allows the router to monitor and back up the running state of the interface when bearing LAN services, MAN services or WAN services. In this case, the status change of the interface that is backed up will not affect the routing table and the service at the interface can be restored quickly.

4.9.3 IP/MPLS Fast Reroute

I. IP Fast Reroute

Fast reroute (FRR) can reduce data loss due to network faults to the greatest degree with a maximum switch speed of 50ms. The NE40E provides the fast reroute function, which enables the system to monitor and store the real-time state of the service card and the port, and check the status of the port during forwarding. When an abnormality occurs on the port, the system can fast switch to the other route (if there is), thereby improving the MTBF and reducing the amount of lost packets.

II. LDP FRR

The traditional IP FRR cannot protect the MPLS traffic efficiently. Supporting LDP FRR, the NE40E provides a port-based protection solution. When LDP works in the downstream label distribution, sequential label control and liberal retention modes, LSR stores all label maps received. Only the label map from the next hop of the corresponding route of FEC can generate a label forwarding table. With this feature, if the liberal label map can generate a label forwarding table, the standby LSP is established. Commercial in Confidence Page 51 of 51

Quidway NetEngine40E Universal Switching Router System Description

When the network runs normally, use the normal LSP. If the outbound interface of LSP is down, adopt the standby LSP. In this way, you can ensure uninterrupted traffic during a short period before network convergence.

III. TE FRR

TE FRR is a technology used in the MPLS TE to implement local protection to the network. Only the interface the rate of which is up to 100 Mpps can support FRR. The switching rate of FRR can reach 50 ms, which reduces packets loss to a great extent in case of network fault. FRR is only a temporary measure. Once the protected LSP recovers or a new LSP is established, the traffic switches to the original LSP or the new LSP. After configuration of FRR for an LSP, when a certain link or node on the LSP goes invalid, the traffic is switched to the protected link while the ingress of the LSP manages to establish a new LSP.

IV. VPN FRR

The NE40E supports VPN FRR. When the link between a PE and NGN is disconnected or a PE is restarted, VPN FRR can switch the VPN service to the standby tunnel and PE rapidly. In this way, the traffic can recover in a short period.

4.9.4 GR

Graceful restart (GR) is a key technology for providing HA. Network administrators or faults may trigger GR. GR upon network faults does not delete the routing information in the routing/forwarding table or reset the LPU so that services are not interrupted.

Commercial in Confidence Page 52 of 52

Quidway NetEngine40E Universal Switching Router System Description

Chapter 5 Maintenance and Network Management System

The NE40E provides various maintenance functions such as software download, on-line upgrade, operation detection, diagnosis and real-time query. This greatly facilitates the system maintenance. The NE40E adopts Huawei Quidway network management system (NMS). It supports the Simple Network Management Protocol (SNMP) V1/V2c/V3 and the Client-Server architecture. The NE40E NMS can operate on multiple operating systems such as Windows NT/2000/XP and UNIX (SUN, HP, and IBM). The NE40E NMS provides graphic user interfaces in multiple languages.

5.1 Maintenance Functions & Features

5.1.1 System Configuration Mode

The NE40E provides two configuration modes, that is, command line configuration and NMS configuration. The command line configuration supports:

z Local configuration through the Console port

z Remote configuration through the AUX port with a Modem

z Remote configuration through Telnet The NMS configuration supports the SNMP-based NMS.

5.1.2 System Management & Maintenance

The NE40E provides the following system management and maintenance functions:

z Board-in-position detection, hot-swap detection, Watch Dog, board reset, control over running and debugging indicators, fan monitoring, power monitoring, active/standby switchover control, and version query.

z Local and remote software upgrading and data loading, upgrade backoff, backup, storage, and removal.

z Hierarchical user authority management, operation log management, on-line help and comment for command line.

z Multi-user operation.

z Collection of multi-layer information, including port information, Layer 2 information, and Layer 3 information.

z Hierarchical management, alarm classification and alarm filtering.

Commercial in Confidence Page 53 of 53

Quidway NetEngine40E Universal Switching Router System Description

5.1.3 System Service and Status Tracking

The NE40E can track the system service and status as follows:

z Monitor the change of the state machine of routing protocols.

z Monitor the change of the state machine of the MPLS LDP.

z Monitor the change of VPN-related state machine.

z Monitor the type of upstream protocol packets sent by the NP, and display details about the packets with the debugging function.

z Monitor and take account of abnormal packets.

z Display notification when processing of the abnormity takes effect.

z Make statistics on the resource used by each feature system.

5.1.4 System Test and Diagnosis

The NE40E provides debugging for running services. It can record in service key events, packet processing, packet resolution and state switchover at the specified moment. This is helpful in device debugging and networking. You can enable/disable the debugging of a specific service (such as a routing protocol) and a specific interface (such as the routing protocol information on the specified interface) through the console. The NE40E provides the trace function on system operation. It can record in service key events such as task switchover, task interruption, queue read-and-write, and system abnormity. When the system is restarted after a fault occurs, you can read the trace information for fault location. You can enable or disable the trace function through the console command. In addition, you can query the CPU usage of the SFU and the LPU in real time. The debugging and trace functions in the NE40E implement the information classification. The sensitive information of different classes is directed to different output destinations based on the user configuration. The output destinations include the console display, Syslog server, and SNMP Trap trigger alarm.

5.1.5 On-Line Debugging

The NE40E provides the port mirroring function which is used to map the specified traffic to a monitored port so that maintenance personnel can debug and analyze the running state of the network.

5.1.6 On-Line Upgrade

The NE40E provides on-line upgrade for system software. If the upgraded software fails, the system restarts and resorts to the original version. In addition, the NE40E

Commercial in Confidence Page 54 of 54

Quidway NetEngine40E Universal Switching Router System Description

provides the on-line patching function to upgrade some specific features only. If errors occur after the upgrade of a patch, the system can restore the original version. The NE40E supports on-line upgrade of the SRU and the LPU. To upgrade them, you need reset only the board to be upgraded. In addition, the NE40E supports the concurrent upgrade of multiple LPUs. After the upgrade, the system backs up the original version of the program. The on-line download of programs does not influence the normal operation of the system.

5.1.7 Others

The NE40E provides the following additional configuration features:

z Hierarchical protection for configuration commands, ensuring that the unauthorized users can not access the router.

z On-line help available if you type a “?”.

z Various debugging information for network troubleshooting.

z DosKey-like function for executing a history command.

z Fuzzy search for command lines. For example, you can enter the non-conflicting key words “disp” for the display command. For details about the command line features, refer to Quidway NetEngine40E Universal Switching Router Operation Manual or Quidway NetEngine40E Universal Switching Router Command Reference.

5.2 Network Management

5.2.1 NetStream

Supporting hardware-based NetStream, the NE40E can carry out statistics and sampling of unicast, multicast and broadcast traffic based on user-defined traffic classification rules. Users can define the sampling frequency, length and time as needed. According to certain policies, the NE40E can aggregate the statistics of streams with same attributes and generate the aggregated information. The NE40E supports ten kinds of aggregation. As the PE in the MPLS VPN, the NE40E supports statistics of IP packets that are sent to users after removing MPLS labels or before adding MPLS labels. The NE40E can output statistics in three ways: V5, V8 or V9. It can send the statistics result to two network management servers for backup. The NE40E also supports the software-based sampling function.

5.2.2 Traffic Statistics

The NE40E supports traffic statistics based on ports, interfaces or sub-interfaces. Commercial in Confidence Page 55 of 55

Quidway NetEngine40E Universal Switching Router System Description

5.3 Network Management System

The NE40E adopts Huawei iManager N2000 NMS. It supports SNMP V1/V2c/V3 and the Client-Server architecture. The NE40E NMS can operate on multiple operating systems such as Windows NT/2000/XP and UNIX (SUN, HP, and IBM). The NE40E NMS provides graphic user interfaces in multiple languages. The iManager N2000 NMS can be seamlessly integrated with the NMS of other Huawei fixed network telecom equipments, thus implementing the centralized management. The N2000 NMS can also be integrated with other universal NMSs in the industry, such as HP OpenView, IBM NetView, What’s up Gold and SNMPc. This makes it possible to perform the unified management on the devices of multiple vendors. The N2000 NMS provides real-time management on topology, fault, performance, configuration tool, equipment log, security and users, QoS policy, and VPN service. Besides, it can be used to download, save, modify, and upload configuration files, as well as upgrade the system software.

Commercial in Confidence Page 56 of 56

Quidway NetEngine40E Universal Switching Router System Description

Chapter 6 Networking Applications

This chapter introduces the location of the NE40E in the network and its several typical applications. The NE40E mainly serves as:

z The PE router at the edge node or core node of the MAN.

z Convergence router at the Point of Presence (POP) to support Layer 2, Asynchronous Transfer Mode (ATM), and Frame Relay (FR) services.

z Core router in the backbone network of large-scale enterprises.

z Central routing switch of the Internet Data Center (IDC). The NE40E has the following typical applications at present.

6.1 Application on the Provincial Backbone Network

As shown in Figure 6-1, the core layer of the provincial backbone network is composed of NE5000E/NE80E devices. The NE40E devices act as the city nodes to converge the traffic from the MAN, leased line convergence, narrowband access, and Internet Data Center (IDC).

NE5000E /NE80E 10G POS NE5000E /NE80E 省骨干 网 POS 10G NE5000E /NE80E POS 10G NE5000E POS /NE80E 10G POS 10G NE40E City node City node NE40E

GE POS 155MGE FE

NE40E NE40E NE40E NE40E Leased line Narrow band MAN convergence IDC access

Figure 6-1 Application on the provincial backbone network

Commercial in Confidence Page 57 of 57

Quidway NetEngine40E Universal Switching Router System Description

This solution can be used to establish, expand or reconstruct provincial backbone networks of large Interim inter-switch Signaling Protocol (ISP). These ISPs own access services and low-cost advantages, as well as transmission resources. In the case of transmission resources shortage, the link bandwidth can be reduced accordingly without changing the network topology. The devices on the convergence layer or above have the wire-speed forwarding capability. The entire network supports MPLS VPN.

6.2 Application on the MPLS L2VPN Network

CE PE PE CE P

VPN1 ATM NE40E NE40E Network NE5000E /NE80E P P MPLS CORE CE PE PE NE5000E NE5000E /NE80E /NE80E NE40E ATM NE40E PE MPLS EDGE Network VPLS VPLS NE40E CE CE VPN1 VPN1

Figure 6-2 Application on the MPLS L2VPN network

In this application, the NE5000E/NE80E serves as the MPLS core device to provide the MPLS forwarding function, and acts as the ASBR for inter-domain communications. The NE40E acts as the PE device to provide VPN users with point-to-point VLL services and point-to-multipoint VPLS services.

Commercial in Confidence Page 58 of 58

Quidway NetEngine40E Universal Switching Router System Description

6.3 Application on the MPLS L3VPN Network

PE PE P CE CE NE40E NE40E NE5000E VPN2 PP/NE80E VPN1 NE5000 NE5000 E/NE80E E/NE80E MPLS CORE PE NE40E NE40E PE MPLS EDGE VLAN VLAN VLAN VPN1 S8016 VPN2 S8016 CE VLAN VLAN VLAN CE CE CE CE

VPN3 VPN3 VPN2

Figure 6-3 Application on the MPLS L3VPN network

In this application the NE5000E/NE80E routers serve as P routers in the network core. For the inter-domain VPN application, the NE40E can act as an ASBR as well as a CE device. As a PE device, the NE40E can also provide the NAT function for Internet access services.

6.4 Application of RPR in MAN

NE80E/ NE40E NE80E/ NE40E

10G RPR NE40E NE40E NE80E/ 2.5G RPR NE40E 2.5G RPR

NE40E NE80E/ NE40E NE40E

Figure 6-4 Application of RPR ring network in MAN

The RPR technology has the fast self-healing feature and can utilize the bandwidth efficiently. The RPR networking is flexible and simple, and is applicable to the setup of the MAN. In networking, the NE40E or NE80E serves as the core router to set up the core ring network. The NE40E serves as the router of the convergence layer to set up Commercial in Confidence Page 59 of 59

Quidway NetEngine40E Universal Switching Router System Description

the access ring networks that keep tangent with or intersect the core ring network. The core ring network implements large-granularity traffic scheduling and takes one or two routers as the upstream node. The NE40E provides high-density downstream GE interface and FE interfaces. These interfaces can be directly connected with the Ethernet switch or leased lines.

Commercial in Confidence Page 60 of 60

Quidway NetEngine40E Universal Switching Router System Description

Chapter 7 Technical Specifications

7.1 Physical Specifications

Table 7-1 Physical specifications

Item Description

External dimensions (Width x 442 mm x 660 mm x 980 mm (22U high) Depth x Height) Mounted in a 19-inch standard cabinet or an Installation N68-22/N68-18 cabinet. 120 kg (fully configured); 75 kg (empty) 4.8 kg (LPU) Weight 3.4 kg (SRU) 1.8 kg (SFU)

Maximum power 3000 W Rated voltage -48 V/-60 V DC input range voltage Maximum -72 V to -38 V voltage range Rated voltage 200 V to 240 V AC input range voltage Maximum 176 V to 275 V voltage range Long-term 0°C to 45°C Environmental Short-term -5°C to 55°C temperature Restriction on the temperature variation rate: Remark 30°C per hour Storage Temperature -40°C to 70°C Environmental Long-term 5% to 85% RH, non-condensing relative humidity Short-term 0% to 95% RH, non-condensing Storage relative humidity 0% to 95% RH, non-condensing Altitude for permanent work Within 3000 meters

Storage altitude No performance degradation within 5000 meters

Commercial in Confidence Page 61 of 61

Quidway NetEngine40E Universal Switching Router System Description

7.2 System Configuration

Table 7-2 System configuration list

Item Description Remark

Process unit Main frequency: 1 GHz - Boot ROM 1 MB - SDRAM 1 GMB It can be extended to 2 GMB. NVRAM 512 KB -

Flash 32 MB - The capacity can be extended. The CF card is used to store data file as mass storage device.

z The CF card on the SRU is CF card 512 MB used to store log and other information and supports hot swappable z The CF card in the SRU is used to store the system file and does not support hot swappable Switching capacity 640 G - Backplane capacity 2 T - Interface capacity 80 G - Forwarding 200 Mpps - performance Number of LPU slots 8 LPU (optional) Number of SRU slots 2 SRU Number of SFU slots 2 SFU Maximum port rate 10 Gbit/s - supported by LPU slots

Commercial in Confidence Page 62 of 62

Quidway NetEngine40E Universal Switching Router System Description

7.3 Specifications of System Features and Service Performances

7.3.1 System Feature Specifications

Table 7-3 NE40E system feature specifications

Feature Description

Ethernet_II IEEE802.1Q LAN protocol IEEE802.1p IEEE 802.1ad Link agregation control LACP (IEEE 802.3ad) PPP PAP and CHAP negotiation PPP, MP Link layer HDLC protocol ATM RPR Interworking Basic VLAN features VLAN aggregation VLAN trunk Dynamic learning between VLAN members Ethernet VLANIF switching Inter-VLAN routing VLAN translation VLAN Stacking/VLAN Mapping STP/RSTP/MSTP Q-in-Q Static routing Dynamic unicast routing protocols:

z RIP-1/RIP-2 z OSPF z IS-IS Network IPv4 routing Multicast protocols: protocols protocol z IGMP z PIM-DM z PIM-SM z MBGP z MSDP Routing policies

Commercial in Confidence Page 63 of 63

Quidway NetEngine40E Universal Switching Router System Description

Feature Description MPLS forwarding Basic MPLS LDP MPLS functions MPLS TE MPLS QoS VLL/PWE3 (Martini, Kompella) VPLS L2VPN Q-in-Q HVPLS

MPLS/BGP VPN (as the PE or the P device) VPN HoVPN Multicast VPN L3VPN Inter-VPN Carrier’s carrier RRVPN CHAP PAP AAA RADIUS HWTACACS SSH Port mirroring Security Other security Port traffic sampling features NetStream Traffic control at the LPU and the SRU uRPF Hierarchical protection with command lines to defense against unauthorized users’ login

1+1 backup of SRU; 3 + 1 load balancing and redundancy backup of SFU Redundancy 1+1 redundancy backup of the power module Reliability hot backup 1+1 backup of the system management bus and data bus 1+1 redundancy backup of the fan module Protocol-level GR: IS-ISv4, OSPF, BGP4 and GR LDP System-level GR

Commercial in Confidence Page 64 of 64

Quidway NetEngine40E Universal Switching Router System Description

Feature Description IP FRR LDP FRR TE FRR VPN FRR Other VRRP BFD Dampening control to support UP/DOWN of interfaces Simple traffic classification Traffic classification Complex traffic classification: based-on port; based on layer-2, layer-3 or layer-4 packets Traffic policing and traffic shaping based on Traffic srTCM or trTCM policing and Diff-Serv EF, AF services shaping GTS Congestion PQ/CQ/WFQ/CBQ, LLS/LLQ/NLS management Congestion QoS RED, WRED, SARED avoidance Policy-based Routing redirection, MPLS LSP explicit route route distribution IP precedence QPPB Specific traffic behavior BGP identifies and classifies the routes through BGP BGP traffic index to account the traffic on the accounting basis of classifications QoS that transmits the private network routes VPN QoS through BGP is an extension of QPPB in L3 VPN

Commercial in Confidence Page 65 of 65

Quidway NetEngine40E Universal Switching Router System Description

Feature Description Local configuration through Console Local or remote configuration through AUX Local or remote configuration by Telnet Local or remote configuration by SSH login Hierarchical protection of commands to defense against unauthorized users’ login Detailed debugging information for network faults diagnosis Provides network test tools such as tracert and Command ping line interface Telnet to log in and manage other routers FTP Server and Client functions to upload and download configuration files and applications TFTP Client functions to upload and download configuration files and applications Upload and download configuration files and applications through XModem protocol System logs Configuration Virtual file system management Time Zone Time service Summer Time NTP Server and NTP Client In-service upload On-line In-service upgrade service In-service patching Provides three types of information: alarm, log, and debugging Provides eight levels of information: emergency, Information alert, critical, error, warning, notification, processing informational, and debugging center Information can be output to the log host or user terminal; log information and alarm information can be output through the SNMP Agent or the buffer.

Network Supports SNMP V1/V2c/V3 management RMON

Commercial in Confidence Page 66 of 66

Quidway NetEngine40E Universal Switching Router System Description

7.3.2 Service Performance Specifications

Table 7-4 Service performance specifications

Technical and performance Attribute Service feature specifications Wire speed forwarding of IPv4 IPv4 forwarding IP unicast packets IPv4 route entries 3.2 M

Number of LSPs 1 M MPLS Fast ReRoute switching MPLS < 50ms time Forwarding delay < 50us IPv4 ACL number 16 k, can be extended to 128 k

Number of traffic classification 16 k/LPU, can be extended to 128 QoS rules k/LPU CAR granularity 16 k NetStream entries 16 k Number of multicast routes 8k Number of multicast static 256 routes Number of multicast 8 k forwarding table entries Forwarding rate 10 Gbit/s Multicast Forwarding delay < 50us Multicast duplication ability 1024 Number of (*,G) entries in the 8 k PIM-SM routing table Number of (S,G) entries in the 8 k PIM-SM routing table

7.4 LPU Interface Attribute

7.4.1 Ethernet LPU

The interface attributes of Ethernet LPUs are shown in the following tables.

Commercial in Confidence Page 67 of 67

Quidway NetEngine40E Universal Switching Router System Description

I. 1000 M Ethernet Electrical Interface LPU

Table 7-5 Attributes of 24-port / 48-port 10M/100M/1000M Ethernet Electrical Interface LPU

Description Attributes 1000Base-TX

Connector type RJ-45

10M/100M/1000M auto-sensing Duplex mode Half-duplex and full-duplex

Maximum transmission 100 m distance

Cable specification Category 5 UTP

Standard IEEE 802.3 z compliance

Frame format Ethernet_II, Ethernet_SAP, Ethernet_SNAP

Network protocol IP

II. 1000 M Ethernet Optical Interface LPU

Table 7-6 Attributes of 5/10/24/48-port Gigabit Ethernet LPU

Description Attributes 1000BASE-SFP

Connector type LC/PC

Optical interface Compliant with the SFP optical module selected (For the attributes attributes of the available optical modules, see Table 7-7.)

Duplex mode Full-duplex

Standard IEEE 802.3z compliance

Frame format Ethernet_II, Ethernet_SAP, Ethernet_SNAP

Network protocol IP

Commercial in Confidence Page 68 of 68

Quidway NetEngine40E Universal Switching Router System Description

Table 7-7 Attributes of 1000M SFP optical module

Description Description 1000 Mbit/s

Transmission 500 m 10 km 40 km 80 km 80 km distance

Center 850 nm 1310 nm 1310 nm 1550 nm 1550 nm wavelength

-9.5 Min. -9.5 dBm -4.5 dBm -2.0 dBm 0 dBm Transmit dBm power -2.5 Max. -3.0 dBm 3.0 dBm 5.0 dBm 5.0 dBm dBm

Receiver -17.0 -23.0 -20.0 dBm -22.5 dBm -30.0 dBm sensitivity dBm dBm

Overload power 0 dBm -3.0 dBm -3.0 dBm -3.0 dBm -9.0 dBm

Multi-m Single-mo Single-m Single-mo Optical fiber type Single-mode ode de ode de

III. 10G Ethernet Optical Interface LPU ( Fixed Optical Modules )

Table 7-8 Attributes of the 1-port 10G Ethernet LAN interface LPU

Description Attributes 10G Base LAN-LC

Maximum transmission 10 km 40 km distance

Connector type LC/PC LC/PC

Center wavelength 1310 nm 1550 nm

Transmit Min. -8.2 dBm -1 dBm power Max. 0.5 dBm 2 dBm

Receiving sensitivity -10.3 dBm -17.5 dBm

Overload power -1.0 dBm -1.0 dBm

Optical fiber type Single-mode Single-mode

Duplex mode Full duplex

Standard compliance IEEE 802.3ae

Frame format Ethernet_II, Ethernet_SAP, Ethernet_SNAP

Network protocol IP

Commercial in Confidence Page 69 of 69

Quidway NetEngine40E Universal Switching Router System Description

Table 7-9 Attributes of the 1-port 10G Ethernet WAN interface LPU

Description Attributes 10G Base WAN-LC

Maximum transmission 10 km 40 km 80 km distance

Connector type LC/PC LC/PC LC/PC

Center wavelength 1310 nm 1550 nm 1550 nm

Transmit Min. -8.2 dBm -1.0 dBm 4.0 dBm power Max. 0.5 dBm 2.0 dBm 8.0 dBm

Receiving sensitivity -10.3 dBm -17.5 dBm -24.0 dBm

Overload power -1.0 dBm -1.0 dBm -8.0 dBm

Optical fiber type Single-mode

Working mode Full duplex

Standard compliance IEEE 802.3ae

Frame format Ethernet_II, Ethernet_SAP, Ethernet_SNAP

Network protocol IP

IV. 10G Ethernet Optical Interface (XFP Optical Module)

Table 7-10 Specifications of the 1/2-port 10G Ethernet LAN/WAN LPU (XFP optical module)

Description

Parameter 1-port 10G 2-port 10G 1-port 10G Ethernet LAN Ethernet LAN Ethernet WAN LPU (XFP) LPU (XFP) LPU (XFP)

Silk-screen of LPU LPU LPU board name

Silk-screen of 1%10GBASE 2%10GBASE 1%10GBASE board attributes LAN-XFP LAN-XFP WAN-XFP

Dimensions (width 41 mm % 520 mm % 399 mm x depth x height)

Power About 200 W consumption

Board weight About 4.8 kg

Rate 10 Gbit/s

Slots available 1 to 16

Commercial in Confidence Page 70 of 70

Quidway NetEngine40E Universal Switching Router System Description

7.4.2 POS LPU

The interface attributes of OC-3c/STM-1 POS optical interface LPUs are shown in the following tables.

I. 155 M POS LPU

The interface attributes of POS optical interface LPUs are shown in Table 7-11.

Table 7-11 Attributes of the 4/8-port OC-3c/STM-1 POS optical interface LPU

Description Attribute OC-3c/STM-1 POS-SFP

Connector type LC

Connector number 4/8

Optical interface Compliant with the selected SFP optical module (For the attributes attributes of available optical modules, see Table 7-12)

Duplex mode Full duplex

Compliant STM-1 SDH/ OC-3c SONET, standard IETF RFC1619/1661/1662/2615

Link layer protocol PPP and HDLC

Network protocol IP

Table 7-12 Attributes of available SFP optical modules (interface rate: 155 Mbit/s)

Interface rate 2.5 Gbit/s

Transmission 2 km 15 km 40 km 80 km distance

Central wavelength 1310 nm 1310 nm 1310 nm 1550 nm

Transmit Min. -19.0 dBm -15.0 dBm -5.0 dBm -5.0 dBm power Max. -14.0 dBm -8.0 dBm 0 dBm 0 dBm

Receiver sensitivity -30.0 dBm -28.0 dBm -34.0 dBm -34.0 dBm

Overload power -14.0 dBm -7.0 dBm -9.0 dBm -10.0 dBm

II. 622 M POS LPU

The interface attributes of OC-12c/STM-4c POS optical interface LPUs are shown in Table 7-13.

Commercial in Confidence Page 71 of 71

Quidway NetEngine40E Universal Switching Router System Description

Table 7-13 Attributes of the 4-port OC-12c/STM-4c POS optical interface LPU

Description Attribute OC-12c/STM-4c POS-SC

Max. transmission distance 15 km 500 m

Connector type SC SC

Transmit Min. -15 dBm -20 dBm power Max. -8 dBm -14 dBm

Receiver sensitivity -29 dBm -26 dBm

Overload power 0 dBm 0 dBm

Central wavelength 1310 nm 1310 nm

Duplex mode Full duplex

OC-12c SDH/SONET Standard compliance IETF RFC 1661/1662

Link protocol PPP and HDLC

Network protocol IP

III. 2.5 G POS LPU

Table 7-14 Attributes of 1/2/4-port OC-48c/STM-16c POS LPU (SFP)

Description Attributes OC-48c/STM-16c POS-SFP

Connector type LC/PC

Connector number 1/2/4

Optical interface Compliant with the SFP optical module selected (For the attributes attributes of the available optical modules, see Table 7-15.)

Working mode Full-duplex

Standard STM-16c SDH/OC-48c SONET compliance RFC1619/1661/1662/2615

Link protocol PPP and HDLC

Network protocol IP

Commercial in Confidence Page 72 of 72

Quidway NetEngine40E Universal Switching Router System Description

Table 7-15 Attributes of 2.5G SFP (POS) optical module

Description Attributes 2.5Gbit/s

Transmission 2 km 15 km 40 km 80 km distance

Center 1310 nm 1310 nm 1310 nm 1550 nm wavelength

Transmit Min. -10.0 dBm -5.0 dBm -2.0 dBm -2.0 dBm power Max. -3.0 dBm 0 dBm 3.0 dBm 3.0 dBm

Receiver -21.0 dBm -21.0 dBm -30.0 dBm -30.0 dBm sensitivity

Overload power -3.0 dBm 0 dBm -9.0 dBm -9.0 dBm

Optical fiber type Single-mode Single-mode Single-mode Single-mode

IV. 10 G POS LPU( Fixed module )

Table 7-16 Attributes of 1-port OC-192c/STM-64c POS LPU

Description Attributes OC-192c/STM-64c POS-LC

Maximum 2 km 40 km 80 km transmission distance

Connector type LC LC LC

Transmit Min. -6.0 dBm 4.0 dBm 4.0 dBm power Max. -1.0 dBm 7.0 dBm 8.0 dBm

Receiver sensitivity -15.0 dBm -17.5 dBm -24.0 dBm

Overload power -1.0 dBm -1.0 dBm -8.0 dBm

Center wavelength 1310 nm 1550 nm 1550 nm

Optical fiber type Single-mode Single-mode Single-mode

Working mode Full-duplex

STM-64c SDH/OC-192c SONET Standard compliance RFC1619/1662/2615

Link protocol PPP and HDLC

Network protocol IP

Commercial in Confidence Page 73 of 73

Quidway NetEngine40E Universal Switching Router System Description

Table 7-17 Interface attributes of the 1-port OC-192c/STM-64c POS LPU (XFP optical module)

Description Attribute OC-192c/STM-64c POS -XFP

Connector type LC/PC

Optical interface Determined by the selected XFP optical module. (For the attribute selectable optical module, refer to Table 7-18.)

Working mode Full-duplex

Standard Conforms to the STM-64c SDH/OC-192c SONET standard and compliance supports RFC 2615 (1619) /1662

Link protocol PPP and HDLC

Network protocol IP

Table 7-18 Attributes of the XFP optical module (10 Gbit/s)

Description Attribute 10 Gbit/s

Maximum 2 km (confirms to SDH) transmission 40 km /7km (confirms to SONET) distance

Center wavelength 1310 nm 1550 nm

Transmitting Min. -6.0 dBm -1.0 dBm power Max. -1.0 dBm 2.0 dBm

Receiver sensitivity -15.0 dBm -15.0 dBm

Overload power -1.0 dBm -1.0 dBm

7.4.3 CPOS LPU

The interface attributes of the CPOS LPU are list in Table 7-19.

Table 7-19 Attributes of 2/4-port OC-3c/STM-1 CPOS LPU

Description Attributes CR01C1CFCR01C2CFCR01C4CF

Connector type LC/PC

Connector number 2/4

Commercial in Confidence Page 74 of 74

Quidway NetEngine40E Universal Switching Router System Description

Description Attributes CR01C1CFCR01C2CFCR01C4CF

Optical interface Compliant with the SFP optical module selected (For the attributes attributes of the available modules, see Table 7-20.)

Duplex mode Full-duplex

Standard STM-1 SDH/ OC-3c SONET, IETF RFC compliance 1619/1661/1662/2615

Link protocol PPP, MP

Network protocol IP

Table 7-20 Attributes of 155M SFP(CPOS)optical module

Description Attributes 155 Mbit/s

Maximum transmission 2 km 15 km 40 km 80 km distance

Center wavelength 1310 nm 1310 nm 1310 nm 1550 nm

Transmit Min. -19 dBm -15 dBm -5 dBm -5 dBm power Max. -14 dBm -8 dBm 0 dBm 0 dBm

Receiver sensitivity -30 dBm -28 dBm -34 dBm -34 dBm

Overload power -14 dBm -7 dBm -9 dBm -10 dBm

7.4.4 ATM LPU

The interface attributes of the ATM LPU are list in Table 7-21.

Table 7-21 Attributes of 8-port STS-3c/STM-1 ATM LPU

Description Attributes STS-3c/STM-1 ATM-SFP

Connector type LC/PC

Connector 8 number

Optical interface Compliant with the SFP optical module selected (For the attributes attributes of the available modules, see Table 7-22.)

Duplex mode Full-duplex

Commercial in Confidence Page 75 of 75

Quidway NetEngine40E Universal Switching Router System Description

Description Attributes STS-3c/STM-1 ATM-SFP

Standard OC-3c/STM-1, IETF RFC2684 compliance

Link protocol IPoA

Network protocol IP

Table 7-22 Attributes of 155M SFP (ATM) optical module

Description Attributes 155 Mbit/s

Maximum transmission 2 km 15 km 40 km 80 km distance

Center wavelength 1310 nm 1310 nm 1310 nm 1550 nm

Transmit Min. -19 dBm -15 dBm -5 dBm -5 dBm power Max. -14 dBm -8 dBm 0 dBm 0 dBm

Receiver -30 dBm -28 dBm -34 dBm -34 dBm sensitivity

Overload power -14 dBm -7 dBm -9 dBm -10 dBm

7.4.5 RPR LPU

Table 7-23 Attributes of 1-port OC-192c/STM-64c RPR LPU (XFP)

Description Attributes OC-192c/STM-64c RPR -XFP

Connector type LC/PC

Optical interface Compliant with the XFP optical module selected (For the attributes attributes of the available modules, see Table 7-24.)

Duplex mode Full-duplex

Standard STM-64c SDH/OC-192c SONET compliance RFC 2615 (1619)/1662

Link protocol RPR

Network protocol IP

Commercial in Confidence Page 76 of 76

Quidway NetEngine40E Universal Switching Router System Description

Table 7-24 Attributes of available XFP optical module (interface rate: 10 Gbit/s)

Interface rate 10 Gbit/s

Transmission distance 10 km 40 km 80 km

Central wavelength 1310 nm 1550nm 1550 nm

Min. -6 dBm -1 dBm 0 dBm Transmit power Max. -1 dBm 2 dBm 4 dBm

Receiver sensitivity -13.4 dBm -16 dBm -24 dBm

Overload power 0.5 dBm -1 dBm -7 dBm

Commercial in Confidence Page 77 of 77

Quidway NetEngine40E Universal Switching Router System Description

Chapter 8 Compliant Standards

8.1 Standards and Telecom Protocols

TELNET RFC 854 Telnet Protocol Specification RFC 857 Telnet Echo Option RFC 858 Telnet Suppress Go Ahead Option RFC 1091 Telnet Terminal-Type Option SNMP Introduction to Version 3 of the Internet-standard Network RFC 2570 Management Framework RFC 2571 An Architecture for Describing SNMP Management Frameworks Message Processing and Dispatching for the Simple Network RFC 2572 Management Protocol (SNMP) RFC 2573 SNMP Applications User-based Security Model (USM) for version 3 of the Simple RFC 2574 Network Management Protocol (SNMPv3) View-based Access Control Model (VACM) for the Simple RFC 2575 Network Management Protocol (SNMP) Coexistence between Version 1, Version 2, and Version 3 of the RFC 2576 Internet-standard Network Management Framework RFC 2578 Structure of Management Information Version 2 (SMIv2) RFC 2579 Textual Conventions for SMIv2 RFC 2580 Conformance Statements for SMIv2 RFC 1157 Simple Network Management Protocol (SNMP) Structure and identification of management information for RFC 1155 TCP/IP-based Management Information Base for Network Management of RFC 1213 TCP/IP-based internets:MIB-II RFC 1212 Concise MIB definitions RFC 1901 Introduction to Community-based SNMPv2 Protocol Operations for Version 2 of the Simple Network RFC 1905 Management Protocol (SNMPv2) Transport Mappings for Version 2 of the Simple Network RFC 1906 Management Protocol (SNMPv2)

Commercial in Confidence Page 78 of 78

Quidway NetEngine40E Universal Switching Router System Description

Management Information Base for Version 2 of the Simple RFC 1907 Network Management Protocol (SNMPv2) RFC 1215 A Convention for Defining Traps for Use with SNMP Structure of Management Information for Version 2 of the Simple RFC 1902 Network Management Protocol (SNMPv2) RMON RFC 2819 Remote Network Monitoring Management Information Base Remote Network Monitoring Management Information Base RFC 2021 Version 2 using SMIv2 NTP RFC 1305 Network Time Protocol (Version 3) BFD draft-ietf-bfd-bas Bidirectional Forwarding Detection e-02 draft-ietf-bfd-v4v BFD for IPv4 and IPv6(Single Hop) 6-1hop-02 draft-ietf-bfd-mul BFD for Multihop Paths tihop-02 SSH EK-VT100-UG-0 - 03 TFTP RFC 1350 The TFTP Protocol (Revision 2) FTP RFC 959 File Transfer Protocol (FTP) IFNET RFC 2233 The Interfaces Group MIB using SMIv2 RFC 1573 Evolution of the Interfaces Group of MIB-II ETHERNET RFC 826 Ethernet Address Resolution Protocol: Or converting network protocol addresses to 48.bit Ethernet address for transmission on Ethernet hardware(ARP) RFC 894 Standard for the transmission of IP datagrams over Ethernet networks RFC 1042 A Standards for the Transmission of IP Datagrams over IEEE 802 Networks IEEE 802.2 IEEE Standards for Local Area Networks:Logical Link Control(LLC)

Commercial in Confidence Page 79 of 79

Quidway NetEngine40E Universal Switching Router System Description

IEEE 802.3 IEEE Standards for Local Area Networks:Carrier Sense Multiple Access with Collision Detection(CSMA/CD) Access Method and Physical Layer Specifications PPP RFC 1332 The PPP Internet Protocol Control Protocol (IPCP). RFC 1334 PPP Authentication Protocols RFC 1471 The Definitions of Managed Objects for the Link Control Protocol of the Point-to-Point Protocol RFC 1570 PPP LCP Extensions RFC 1661 The Point-to-Point Protocol (PPP) RFC 1717 The PPP Multilink Protocol (MP) RFC 1877 PPP Internet Protocol Control Protocol Extensions for Name Server Addresses RFC 1915 Variance for The PPP Connection Control Protocol and The PPP Encryption Control Protocol RFC 1934 Ascend's Multilink Protocol Plus (MP+) RFC 1962 The PPP Compression Control Protocol (CCP) RFC 1990 The PPP Multilink Protocol (MP) RFC 1974 PPP Stac LZS Compression Protocol RFC 1994 PPP Challenge Handshake Authentication Protocol (CHAP). RFC 2364 PPP Over AAL5 RFC 2433 Microsoft PPP CHAP Extensions RFC 2484 PPP LCP Internationalization Configuration Option RFC 2516 Method for Transmitting PPP Over Ethernet (PPPoE). RFC 2759 Microsoft PPP CHAP Extensions, Version 2 RFC 2615 PPP over SONET/SDH HDLC RFC 1549 PPP in HDLC Framing ATM RFC 2225 Classical IP and ARP over ATM RFC 2226 IP Broadcast over ATM Networks RFC 2684 Multiprotocol Encapsulation over ATM Adaptation Layer 5 RFC 2515 Definitions of Managed Objects for ATM Managements VLAN IEEE Standard for Local and Metropolitan Area Networks. Virtual IEEE 802.1Q Bridged Local Area Networks

Commercial in Confidence Page 80 of 80

Quidway NetEngine40E Universal Switching Router System Description

MSTP IEEE 802.1d Spanning Tree Protocol(STP) IEEE 802.1w Rapid Reconvergence of Spanning Tree(RSTP) IEEE 802.1s Multiple Spanning Tree RPR IEEE 802.17 Resilient Packet Ring TCP/IP RFC 793 TRANSMISSION CONTROL PROTOCOL RFC 1323 TCP Extensions for High Performance RFC 896 Congestion Control in IP/TCP Internetworks RFC 768 User Datagram Protocol RFC 791 Internet Protocol DARPA Internet Program Protocol Specification RFC 1122 Requirements for Internet Hosts - Communication Layers RFC 1071 Computing the Internet Checksum RFC 1141 Incremental Updating of the Internet Checksum RFC 1624 Computation of the Internet Checksum via Incremental Update RFC 792 Internet Control Message Protocol RFC 950 Internet Standard Subnetting Procedure RFC 1256 ICMP Router Discovery Messages RFC 1918 Address Allocation for Private Internets RFC 1034 Domain Names-Concepts and Facilities RFC 1035 Domain Names-Implementation and Specification RFC 2131 Dynamic Host Configuration Protocol RFC 2132 DHCP Options and BOOTP Vendor Extensions RFC 1534 Interoperation Between DHCP and BOOTP IPv6 RFC 3513 IP Version 6 Addressing Architecture RFC 3587 An Aggregatable Global Unicast Address Format RFC 2460 IPv6 Specification RFC 2461 Neighbor Discovery for IPv6 RFC 2462 IPv6 Stateless Address Auto configuration Internet Control Message Protocol (ICMPv6) for the IPv6 RFC 2463 Specification RFC 3493 Basic Socket Interface Extensions for IPv6

Commercial in Confidence Page 81 of 81

Quidway NetEngine40E Universal Switching Router System Description

RFC 3542 Advanced Sockets API for IPv6 RFC 2464 Transmission of IPv6 Packets over Ethernet Networks RFC 1886 DNS Extensions to Support IP version 6 RFC 1981 Path MTU Discovery for IP version 6 RFC 3775 Mobility Support in IPv6 RFC 2893 Transition Mechanisms for IPv6 Hosts and Routers RFC 3056 Connection of IPv6 Domains via IPv4 Clouds RFC 2473 Generic Packet Tunneling in IPv6 Specification RFC 2765 Stateless IP/ICMP Translation Algorithm (SIIT) RFC 2766 Network Address Translation protocol Translation (NAT-PT) RFC 1887 An Architecture for IPv6 Unicast Address Allocation RFC 2081 RIPng Protocol Applicability Statement RFC 2373 IP Version 6 Addressing Architecture RFC 2472 IP Version 6 over PPP RFC 2878 PPP Bridging Control Protocol RFC 3513 Internet Protocol Version 6 (IPv6) Addressing Architecture draft-ietf-ngtran Intra-Site Automatic Tunnel Addressing Protocol (ISATAP) s-isatap-20.txt draft-ietf-ngtran Connecting IPv6 Domains across IPv4 Clouds with BGP s-bgp-tunnel-04 draft-ietf-l3vpn-b BGP-MPLS VPN extension for IPv6 VPN gp-ipv6 draft-kato-bgp-i pv6-link-local-00 BGP4+ Peering Using IPv6 Link-local Address .txt draft-ietf-ngtran s-bgp-tunnel-04. Connecting IPv6 Islands across IPv4 Clouds with BGP txt MPLS RFC 3031 Multiprotocol Label Switching Architecture RFC 3032 MPLS Label Stack Encoding Encapsulating MPLS in IP or Gereric Routing RFC 4023 Encapsulation(GRE) Russian Dolls BandWidth Constraints Model for Diffserv-aware RFC 4127 MPLS Traffic Engineering RFC 3036 LDP Specification RFC 3063 MPLS Loop Prevention Mechanism

Commercial in Confidence Page 82 of 82

Quidway NetEngine40E Universal Switching Router System Description

RFC 3215 LDP State Machine RFC 3212 Constraint-Based LSP setup using LDP (CR-LDP) RFC 3214 LSP Modification Using CR-LDP RFC 3478 Graceful Restart Mechanism for LDP RFC 3479 Fault Tolerance for the Label Distribution Protocol (LDP) RFC 3988 MTU Signalling Extensions for LDP Definitions of Managed Objects for the Multiprotocol Label RFC 3815 Switching, Label Distribution Protocol (LDP) Resource ReSerVation Protocol (RSVP) – Version 1 Functional RFC 2205 Specification RFC 2209 RSVP -- Version 1 Message Processing Rules RFC 3209 RSVP-TE Extensions to RSVP for LSP Tunnels RFC 3210 Applicability Statement for Extensions to RSVP for LSP-Tunnels RFC 2747 RSVP Cryptographic Authentication RFC 2210 The Use of RSVP with IETF Integrated Services RFC 2961 RSVP Refresh Overhead Reduction Extensions.txt Requirements for Support of Differentiated Services-aware RFC 3564 MPLS Traffic Engineering RFC 4090 Fast Reroute Extensions to RSVP-TE for LSP Tunnels draft-ietf-mpls-rs Encoding of Attributes for Multiprotocol Lable Switching(MPLS) vp-attributes-05 Label Switched Path(LSP) Establishment Using RSVP-TE Multiprotocol Label Switching(MPLS) Forwarding Equivalence RFC 3814 Class To Next Hop Label Forwarding Entry(FEC-To-NHLFE) Management Information Base(MIB) Multiprotocol Label Switching(MPLS) Label Switching RFC 3813 Router(LSR) Management Information Base(MIB) RFC 2702 Requirements for Traffic Engineering Over MPLS Multiprotocol Label Switching(MPLS) Traffic Engineering RFC 3812 Management Information Base RFC 3037 LDP Applicability Applicability Statement for Restart Mechanisms for the Label RFC 3612 Distribution Protocol (LDP) Time To Live (TTL) Processing in Multi-Protocol Label Switching RFC 3443 (MPLS) Networks Framework for Multi-Protocol Label Switching (MPLS)-based RFC 3469 Recovery

Commercial in Confidence Page 83 of 83

Quidway NetEngine40E Universal Switching Router System Description

draft-ietf-mpls-ls p-ping-version-0 Detecting MPLS Data Plane Failures 9.txt draft-ietf-mpls-ic ICMP Extensions for Multiprotocol Label Switching; mp-01.txt ITU-T Y.1710, - Y.1711, Y.1720 RIP RFC 2453 RIP Version 2 RFC 1058 Routing Information Protocol (RIP) RFC 1724 RIP Version 2 MIB Extension RFC 2082 RIP-2 MD5 Authentication RFC 2091 Triggered Extensions to RIP to Support Demand Circuits RFC2453 Rip Version 1 and Rip Version 2 Support RFC 2080 RIPng Support OSPF RFC 2328 OSPF Version 2 RFC 1587 The OSPF NSSA Option RFC 1765 OSPF Database Overflow RFC 2370 The OSPF Opaque LSA Option RFC 2740 OSPF for IPv6 RFC 2329 OSPF Standardization Report RFC 3630 Traffic Engineering Extensions to OSPF draft-ietf-ospf-lls OSPF Link-local Signaling -00 draft-ietf-ospf-o OSPF Out-of-band LSDB Resynchronization ob-resync-01 draft-ietf-ospf-re OSPF Restart Signaling start-01 draft-katz-yeung Ospf TE Support -ospf-traffic-09 draft-ietf-tewg-di OSPF DS-TE Support ff-te-proto-02 draft-rosen-vpns -ospf-bgp-mpls- BGP/MPLS VPN Support 05 draft-rosen-ppv pn-ospf2547-ar BGP/MPLS VPN Support on Area 0 ea0-01

Commercial in Confidence Page 84 of 84

Quidway NetEngine40E Universal Switching Router System Description

RFC 1850 OSPF Version 2 Management Information Base (64%) ISIS RFC 1195 Use of OSI Is-Is for Routing in TCP/IP and Dual Environments ISO 10589 IS-IS Intra-domain Routing Protocol RFC 1142 OSI IS-IS Intra-domain Routing Protocol RFC 2104 HMAC:Keyed-Hashing for Message Authentication RFC 2763 Dynamic Name-to-systemID mapping support RFC 2973 Support IS-IS Mesh Groups RFC 2966 Route Leak Support RFC 3719 Recommendations for Interoperable Networks Using IS-IS RFC3784 ISIS TE Support RFC 3847 Restart Signaling for IS-IS Extending the Number of IS-IS LSP Fragments Beyond the 256 RFC 3786 Limit RFC 3787 Recommendations for Interoperable Networks Using IS-IS draft-ietf-isis-ad Policy Control Mechanism in ISIS Using Administrative Tags min-tags-01 draft-ietf-isis-ipv ISIS IPv6 Support 6-04 RFC 3277 IS-IS Transient Blackhole Avoidance RFC 3567 IS-IS Cryptographic Authentication draft-ietf-isis-wg Management Information Base for IS-IS -mib-16 draft-ietf-isis-sn p-checksum-02. Optional Checksums for IS-IS txt draft-ietf-isis-ipv Routing IPv6 with IS-IS 6-02.txt BGP RFC 1997 BGP Community Attribute RFC 2385 MD5 RFC 2796 BGP Route Reflection RFC 2439 BGP Route Flap Damping RFC 1771 (BGP-4) RFC 1772 BGP Basic Functions Support RFC 1997 Support BGP Community Attribute

Commercial in Confidence Page 85 of 85

Quidway NetEngine40E Universal Switching Router System Description

RFC 1998 An Application of the BGP Community Attribute RFC 2842 Capabilities Advertisement with BGP-4 RFC 2858 Multiprotocol Extensions for BGP-4 RFC 2918 Route Refresh Capability for BGP-4 RFC 3065 Support AS Confederation RFC 3392 Support BGP Capablities Advertisement RFC 2545 BGP Support IPV6 RFC 3107 Support BGP Carry Label for MPLS RFC 2547 BGP/MPLS VPNs RFC 1657 Basic BGP4 MIB RFC 1700 Assigned Numbers Key Management Considerations for the TCP MD5 Signature RFC 3562 Option Draft-ietf-idr-bgp BGP Core MIB 4-mib-10 Draft-ietf-idr-rou Support Cooperative Route Filtering Capability for BGP-4 te-filter-06.txt Draft-ietf-ppvpn- BGP/MPLS VPN Arch rfc2547bis-01 draft-ietf-idr-bgp -ext-communitie Extended Community Attribute s-05 Draft-ietf-idr-rest Support Graceful Restart Mechanism for BGP-4 art-08.txt Draft-ietf-idmr-b gp-mcast-attr-0 BGP Support the Multicast 0.txt Draft-chen-bgp- Support ORF Based on Prefix prefix-orf-01.txt draft-ramachan dra-bgp-ext-co Extended Community Attribute mmunities-04.tx t draft-kato-bgp-i pv6-link-local-00 BGP4+ Peering Using IPv6 Link-local Address .txt draft-ietf-idr-cap Capabilities Negotiation with BGP4 -neg-01.txt draft-ietf-idr-rest Graceful Restart Mechanism for BGP art-10.txt

Commercial in Confidence Page 86 of 86

Quidway NetEngine40E Universal Switching Router System Description

draft-ietf-mpls-b gp-mpls-restart- Graceful Restart Mechanism for BGP with MPLS 03.txt draft-ietf-ngtran s-bgp-tunnel-04. Connecting IPv6 Islands across IPv4 Clouds with BGP txt IGMP RFC 1112 Host Extensions for IP Multicasting RFC 2236 Internet Group Management Protocol, Version 2 RFC 3376 Internet Group Management Protocol, Version 3 Anycast Rendezvous Point(RP) mechanism using Protocol RFC 3446 Independent Multicast(PIM) and Multicast Source Discovery Protocol(MSDP) PIM draft-ietf-pim-sm Protocol Independent Multicast-Sparse Mode(PIM-SM) -v2-new-06.txt draft-ietf-pim-d Protocol Independent Multicast-Dense Mode(PIM-DM) m-new-v2-02.txt draft-ietf-pim-sm Bootstrap Router(BSR) Mechanism for PIM Sparse Mode -bsr-02.txt draft-ietf-ssm-ar Source-Specific Multicast for IP ch-01 draft-ietf-ssm-ov Source-Specific Multicast for IP erview-04 Protocol Independent Multicast-Sparse Mode(PIM-SM):Protocol RFC 2362 Specifications Protocol Independent Multicast—Sparse Mode (PIM-SM): RFC2117 Protocol Specification RFC 3973 Protocol Independent Multicast—dense mode (PIM-DM) draft-ietf-pim-v2 Protocol Independent Multicast Version 2 Dense Mode -dm-03 Specifications MSDP draft-ietf-msdp-s Multicast Source Discovery Protocol(MSDP) pec-13 draft-ietf-msdp-t MSDP Traceroute raceroute-06 draft-ietf-idmr-tr A “traceroute” facility for IP Multicast aceroute-ipm-07 RFC 3618 Multicast Source Discovery Protocol(MSDP) draft-rosen-vpn- Multicast in MPLS/BGP VPNs mcast-07

Commercial in Confidence Page 87 of 87

Quidway NetEngine40E Universal Switching Router System Description

RFC 2365 Administratively Scoped IP Multicast RFC 2710 Multicast Listener Discovery (MLD) for IPv6 RFC 3569 An Overview of Source-Specific Multicast (SSM) draft-rosen-vpn- Multicast in MPLS/BGP VPNs, Option 2 mcast-00.txt draft-holbrook-id mr-igmpv3-ssm- Using IGMPv3 and MLDv2 for Source-Specific Multicast 07.txt draft-raggarwa-l 3vpn-2547-mvp Base Specification for Multicast in BGP/MPLS VPNs. n-00.txt VPN draft-kompella-p pvpn-l2vpn-02.t Layer 2 VPNs Over Tunnels xt Layer 2 VPNs - Over Tunnels draft-rosen-ppv An Architecture for L2VPNs pn-l2vpn-00.txt draft-martini-l2ci rcuit-trans-mpls- Transport of Layer 2 Frames Over MPLS 10.txt Transport of Layer 2 Frames - Over MPLS draft-martini-l2ci Encapsulation Methods for Transport of Layer 2 Frames Over IP rcuit-encap-mpl and MPLS Networks s-04.txt RFC 2547 BGP/MPLS VPNs Draft-ietf-ppvpn- BGP/MPLS VPN Arch rfc2547bis-01 draft-ietf-ppvpn- mpls-vpn-mib-0 BGP/MPLS VPN Management Information Base Using SMIv2 4 draft-ietf-l2vpn-v Virtual Private LAN Services over MPLS pls-ldp-02 draft-ietf-l2vpn-v Virtual Private LAN Service pls-bgp-01 draft-ietf-pwe3-c Pseudowire Setup and Maintenance using the Label Switching ontrol-protocol-1 Distribution Protocol 5.txt

Commercial in Confidence Page 88 of 88

Quidway NetEngine40E Universal Switching Router System Description

draft-martini-pw e3-pw-switching Pseudo Wire Switching -00.txt draft-raggarwa-r Setup and Maintenance of Pseudowire using RSVP-TE svpte-pw-00.txt draft-ietf-pwe3-c PWE3 Control Word for use over an MPLS PSN w-00.txt draft-ietf-pwe3-v Pseudo Wire Virtual Circuit Connectivity Verification(VCCV) ccv-03.txt draft-ietf-pwe3-i IANA Allocations for pseudo Wire Edge to Edge ana-allocation-0 Emulation(PWE3) 7.txt RFC 3916 Requirements for Pseudo-Wire Emulation Edge-to-Edge (PWE3) draft-martini-l2ci Encapsulation Methods for Transport of Layer 2 Frames Over IP rcuit-encap-mpl and MPLS Networks s-08.txt draft-martini-l2ci rcuit-trans-mpls- Transport of Layer 2 Frames Over MPLS 14.txt draft-ietf-l2vpn-v Virtual Private LAN Services over MPLS pls-ldp-05.txt draft-ietf-pwe3-e Encapsulation Methods for Transport of Ethernet Frames Over thernet-encap-0 IP/MPLS Networks 8.txt draft-ietf-pwe3-e Encapsulation Methods for Transport of Ethernet Over MPLS thernet-encap-1 Networks 0.txt draft-ietf-l2vpn-l 2-framework-x.t L2 VPN Framework xt draft-ietf-l2vpn-r equirements-x.t Service Requirements for Layer 2 Provider Provisioned VPNs xt

draft-ietf-pwe3-o Pseudo Wire (PW) OAM Message Mapping am-msg-map-0 4.txt QoS RFC 1349 Type of Service in the Internet Protocol Suite Recommendations on Queue Management and Congestion RFC 2309 Avoidance in the Internet Thesis A Self-clocked Fair Queueing Scheme for Broadband Application Thesis Random Early Detection Gateways for Congestion Avoidance

Commercial in Confidence Page 89 of 89

Quidway NetEngine40E Universal Switching Router System Description

Definition of the Differentiated Services Field (DS Field) in the RFC 2474 IPv4 and IPv6 Headers RFC 2475 An Architecture for Differentiated Services RFC 2597 Assured Forwarding PHB Group RFC 2598 An Expedited Forwarding PHB RFC 3246 An Expedited Forwarding PHB (Per-Hop Behavior) RFC 1144 Compressing TCP/IP Headers for Low-Speed Serial Links RFC 2507 IP Header Compression RFC 2508 Compressing IP/UDP/RTP Headers for Low-Speed Serial Links Definition of Differentiated Services Per Domain Behaviors and RFC 3086 Rules for their Specification Supplemental Information for the New Definition of the EF PHB RFC 3247 (Expedited Forwarding Per-Hop Behavior) RFC 3260 New Terminology and Clarifications for Diffserv draft-ietf-mpls-di Requirements for support of Diff-Serv-aware MPLS Traffic ff-te-reqts-00.txt Engineering draft-ietf-mpls-di MPLS Support of Differentiated Services ff-ext-09.txt AAA RFC 2865 Remote Authentication Dial In User Service (RADIUS) RFC 2866 RADIUS Accounting RFC 2867 RADIUS Accounting Modifications for Tunnel Protocol Support RFC 2869 RADIUS Extensions RFC 2903 Generic AAA Architecture RFC 2904 AAA Authorization Framework RFC 2906 AAA Authorization Requirements RFC 2809 L2TP Compulsory Tunneling via RADIUS RFC 2168 RADIUS Authentication Client MIB RFC 2620 RADIUS Accounting Client MIB VRRP RFC 2338 Virtual Router Redundancy Protocol Definitions of Managed Objects for the Virtual Router RFC 2787 Redundancy Protocol

Commercial in Confidence Page 90 of 90

Quidway NetEngine40E Universal Switching Router System Description

8.2 Electromagnetic Compatibility Standards

z ETSI EN 300 386

z VCCI V-3/2002.4 Class A

z IECS-003 Class A

z AS/NZS CISPR 22 Class A

z CNS 13438 Class A

z IEC-1000

z IEC/EN-61000-3-2

z IEC/EN-61000-3-3

z EN 55022

z ITU-T K20

z GR-1089

z FCC Part 15 Class A

z EN 55024

z CISPR 22

z CISPR 24

z GB 9254

8.3 Security Standards

z EN 60950-1

z IEC 60950-1

z UL 60950-1

z GR-1089

8.4 Environmental Standards

z GR-63

z GB/T13543-92

z ETS 300 019-2

z GB2423-89

z IEC 60068-2

z GB 4789

z ISTA

Commercial in Confidence Page 91 of 91

Quidway NetEngine40E Universal Switching Router System Description

Chapter 9 Acronyms and Abbreviations

A AAA Authentication, Authorization and Accounting AAL5 ATM Adaptation Layer 5 AC Alternating Current ACL Access Control List AF Assured Forwarding ANSI American National Standard Institute ARP Address Resolution Protocol ASBR Autonomous System Boundary Router ASIC Application Specific Integrated Circuit ATM Asynchronous Transfer Mode AUX Auxiliary (port)

B BE Best-Effort BGP Border Gateway Protocol BGP4 BGP Version 4

C CAR Committed Access Rate CBR Constant Bit Rate CE Customer Edge CHAP Challenge Handshake Authentication Protocol CoS Class of Service CPU Center Processing Unit CR-LDP Constrained Route - Label Distribution Protocol

D DC Direct Current

Commercial in Confidence Page 92 of 92

Quidway NetEngine40E Universal Switching Router System Description

DHCP Dynamic Host Configuration Protocol DNS Domain Name Server DS Differentiated Services

E EACL Enhanced Access Control List EF Expedited Forwarding EMC EElectroMagnetic Compatibility

F FE FEC Forwarding Equivalence Class FIB Forward Information Base FIFO First In First Out FR Frame Relay FTP File Transfer Protocol

G GE Gigabit Ethernet GRE Generic Routing Encapsulation GTS Generic Traffic Shaping

H HA High availability HDLC High level Data Link Control HTTP Hyper Text Transport Protocol

I ICMP Internet Control Message Protocol IDC Internet Data Center IEEE Institute of Electrical and Electronics Engineers IETF Internet Engineering Task Force IGMP Internet Group Management Protocol

Commercial in Confidence Page 93 of 93

Quidway NetEngine40E Universal Switching Router System Description

IGP Interior Gateway Protocol IP Internet Protocol IPoA IP Over ATM IPTN IP Telephony Network IPv4 IP version 4 IPv6 IP version 6 IPX Internet Packet Exchange IS-IS Intermedia System-Intermedia System ISP Interim inter-switch Signaling Protocol International Telecommunication Union - Telecommunication ITU Standardization Sector

L L2TP Layer 2 Tunneling Protocol LAN Local Area Network LCD Liquid Crystal Display LCP Link Control Protocol LDP Label Distribution Protocol LER Label switching Edge Router LPU Line Processing Unit LSP Label Switched Path LSR Label Switch Router

M MAC Media Access Control MBGP Multiprotocol Border Gateway Protocol MD5 Message Digest 5 MIB Management Information Base MP Multilink PPP MPLS Multi-protocol Label Switch MSDP Multicast Source Discovery Protocol MSTP Multiple Spanning Tree Protocol MTBF Mean Time Between Failures MTTR Mean Time To Repair

Commercial in Confidence Page 94 of 94

Quidway NetEngine40E Universal Switching Router System Description

MTU Maximum Transmission Unit

N NAT Network Address Translation NLS Network Layer Signaling NP Network Processor NTP Network Time Protocol NVRAM Non-Volatile Random Access Memory

O OSPF Open Shortest Path First

P PAP Password Authentication Protocol PE Provider Edge PFE Packet Forwarding Engine PIC Parallel Interference Cancellation PIM-DM Protocol Independent Multicast-Dense Mode PIM-SM Protocol Independent Multicast-Sparse Mode POP Point Of Presence POS Packet Over SDH/SONET PPP Point-to-Point Protocol PQ Priority Queue PT Protocol Transfer PVC Permanent Virtual Channel PWE3 Pseudo Wire Emulation Edge-to-Edge

Q QoS Quality of Service

R RADIUS Remote Authentication Dial in User Service RAM Random-Access Memory

Commercial in Confidence Page 95 of 95

Quidway NetEngine40E Universal Switching Router System Description

RED Random Early Detection RFC Requirement for Comments RH Relative Humidity RIP Routing Information Protocol RMON Remote Monitoring ROM Read Only Memory RP Rendezvous Point RPR Resilient Packet Ring RSVP Resource Reservation Protocol RSVP-TE RSVP-Traffic Engineering

S SAP Service Advertising Protocol SCSR Self-Contained Standing Routing SDH Synchronous Digital Hierarchy SDRAM Synchronous Dynamic Random Access Memory SFU Switch Fabric Unit SLA Service Level Agreement SNAP SubNet Attachment Point SNMP Simple Network Management Protocol SONET Synchronous Optical Network SP Strict Priority SPI4 SDH Physical Interface SSH Secure Shell STM-16 SDH Transport Module -16 SVC Switching Virtual Connection

T TCP Transfer Control Protocol TE Traffic Engineering TFTP Trivial File Transfer Protocol TM Traffic Manager ToS Type of Service

Commercial in Confidence Page 96 of 96

Quidway NetEngine40E Universal Switching Router System Description

TP Topology and Protection packet

U UBR Unspecified Bit Rate UDP User Datagram Protocol UNI User Network Interface UTP Unshielded Twisted Pair

V VBR-NRT Non-Real Time Variable Bit Rate VBR-RT Real Time Variable Bit Rate VC Virtual Circuit VCI Virtual Channel Identifier VDC Variable Dispersion Compensator VLAN Virtual Local Area Network VLL Virtual Leased Line VPI Virtual Path Identifier VPLS Virtual Private LAN Service VPN Virtual Private Network VRP Versatile Routing Platform VRRP Virtual Router Redundancy Protocol

W WAN Wide Area Network WFQ Weighted Fair Queuing WRED Weighted Random Early Detection WRR Weighted Round Robin

Commercial in Confidence Page 97 of 97