Falcon Overview. Incl. Release 4 New Features

Transcription

1 Falcon Overview Incl. Release 4 New Features 1/6/2011

2 Table of Contents Falcon Models Falcon Design Basics Applications and Services Configuration and Management CLI Web Interface MetroView for HP Openview Alcatel-Lucent 5620SAM GNE others Future 1/6/2011 2

3 Falcon Models 1/6/2011 3

4 Falcon Models Falcon Falcon+ 1/6/2011 4

5 Falcon Models (2) FalconT FalconT+ 1/6/2011 5

6 Falcon Models (3) Falcon SE Falcon SET 1/6/2011 6

7 Falcon Models (5) µfalcon µfalcon-f 1/6/2011 7

8 Falcon Models - Overview Model 10/100/1000BaseT Ports SFP Powerlink Ports SFP Ports (regular) E1/T1 Ports Falcon Falcon FalconT FalconT Falcon SE Falcon SET µfalcon µfalcon-f* 4*10/100BaseT 1*100BaseFX fixed optics; 1*1000BaseX SFP - - 1/6/2011 * To be released 8

9 Falcon Design Basics 1/6/2011 9

10 Falcon Chassis Mgmt Out-band 8x E1/T1 (RJ48) 4x PowerLink 1G SFP Ports 8x 10/100/1000 Copper ports 2x 1G SFP Ports 2x PowerLink 1G SFP Ports 19, 1U, 245mm deep (ETSI compatible) Optional redundant power supplies, hot-swappable, AC and/or DC, with integrated fan 16 Gbps platform, non-blocking, wire speed Field-replaceable parts: power supply/fan module(s), auxiliary module* Optional auxiliary module with dry contacts (in/out) and synchronization (only for Falcon SE/SET)* Applications: Ethernet Demarcation Device / CPE, MDU, E1-Ethernetconvergence, mobile backhaul, cell site aggregation, PDH/SDH replacement * To be released 1/6/

11 Falcon Basic Features MEF compliant: MEF9, MEF14, MEF8 Traffic policing and shaping, including hierarchical policing OAM 802.3ah (Link OAM), 802.1ag (Service OAM) Service monitoring and management 802.1ag/ITU-Y.1731 with hardware support (frame delay, delay variation and loss) Enhanced security: ACL (hardware based), RADIUS, TACACs+, CPU protection, SNMPv3, SSH, etc. Future proof software (control & management plane) and firmware (data plane) remotely upgradeable Green Ethernet support to reduce power output at RJ45 connectors 1/6/

12 µfalcon Overview Dedicated Gigabit Ethernet Demarcation Device / NTU 4* 10/100/1000BaseT ports 2* 1000BaseX SFP ports Supports EPL, EVPL and E-LAN services Same features as in Falcon Fan-less design with integrated AC or DC power supply 1/6/

13 µfalcon-f Overview Dedicated 100 Mbps Ethernet Demarcation Device / NTU 4* 10/100BaseT ports 1* 1000BaseX SFP port 1* fixed 100BaseFX port with 25km laser Supports EPL, EVPL and E-LAN services Same features as in Falcon Fan-less design with integrated AC or DC power supply Cost-effective solution for 100 Mbps services 1/6/

14 Falcon Architecture Falcon Frame Processing Overview: The Falcon hardware design combines a powerful 16 Gbps, non-blocking switching core, together with Field- Programmable Gate Arrays (FPGA) to create a highly flexible platform for traffic management and service delivery 1/6/

15 Quality of Service (QoS) Mechanism The Falcon QoS integrates a set of techniques to determine how frames pass through the switch: Classification Performed in the Classifier block on the ingress side Classifier looks at frame header to decide to which Class of Service to assign the frame Class of service is the queue number to which the frame is sent on egress Classification is based on L2 to L4 frame header fields Rate Limiting Controls traffic flow rate by policing and shaping using the following techniques: Per port policing on ingress side Per port storm control on ingress side Per flow frame rate policing on ingress side Per flow policing on ingress and egress side (PowerLink ports) Per port shaping on egress side Scheduling Performed in the Scheduler block on the egress side Egress scheduler supports both Strict Priority scheduling and Weighted Fair Queuing (WFQ) Each egress port has 5 queues 1/6/

16 QoS Mechanisms The Falcon can use two mechanisms for rate policing and SLA assurance: Single leaky bucket Frames within CIR (marked green) are passed through Frames above CIR limit and exceeding CBR (marked red) are discarded Dual leaky bucket Frames within CIR (green) are passed through Frames above CIR but within EIR (yellow) are entered into another bucket and forwarded as best effort traffic Frames exceeding the EIR (red) are discarded 1/6/

17 Speed & Interface Requirement Wide range of user and network interfaces (copper, fiber, E1/T1) to ensure connectivity Falcon Specifications 8* 10/100/1000 copper ports and up to 6* SFP ports on user side 2-8* 1G SFP ports on network side, supporting broad range of SFPs single-mode, CWDM, DWDM, single-fiber, multimode, copper Native 100 Mbps SFP (currently SE and SET models) Jumbo packet support (9.6KB) on all ports Ethernet over n*e1/t1 1/6/

18 User / Network Separation Requirement Separation of the customer network from the carrier network Falcon Specifications 802.1Q VLANs Provider Bridging (Q-in-Q): S- VLAN per customer port, C- TAG+port, destination MAC, Ethertype HW based ACLs (including filter, redirect, packet-rate limit) QoS mapping and remarking (p-bits, DSCP) Tunneling of L2 protocols Private VLANs 1/6/

19 SLA Enforcement Requirement Granular SLA enforcement Falcon Specifications Ingress per port policing Ingress per service trtcm policing Hierarchical policing Ingress/Egress per port shaper Flexible HW based QoS selection 4+1 queues per port (1 is reserved for CPU/ management traffic), Strict- Priority or WFQ scheduling 1/6/

20 SLA Monitoring Requirement Proactive SLA monitoring, fault isolation Falcon Specifications 802.1ag, ITU Y.1731 (MEF17) Accounting: Service based counters Mirroring: port based (ingress/egress), HW ACL based, VLAN based Mirrored traffic sent to analyzer port Port counters Syslog 1/6/

21 SLA Monitoring (2) 802.1ag and ITU Y.1731 Main Functions Continuity Check Loopback Link Trace RDI, AIS Delay Measurement: two-way, (one-way) PDV Measurement: one-way, two-way Loss Measurement Delay, PDV and loss measurements are hardware supported and NOT influenced by CPU load or internal processing delay, to give precise measurements! Proactive loss and delay measurement per service (with automatic traps when SLA is breached) 1/6/

22 SLA Monitoring (3) Requirement Monitor port and link status Falcon Specifications LLDP (802.1ab) Copper port TDR SFP digital diagnostics SNMP trap threshold Future protection switching when Rx falls below threshold Link fault traps Port statistics 1/6/

23 Redundancy / Availability Requirement Link-level and devicelevel redundancy and load sharing, high availability Falcon Specifications Link aggregation (802.3ad) HW based link protection (sub 100µSec) STP/RSTP/MSTP Multi ring operation ITU-T G.8031 Ethernet Protection Switching with sub 50mSec endto-end protection on network level; ITU-T G.8032 Ethernet Ring Protection Switching (Rel. 6) Optional redundant, load-sharing, hot-swappable power supplies Dedicated HW CPU queues (for management and BPDU traffic) 1/6/

24 Service Scalability Requirement High service scalability Falcon Specifications 4K service VLANs Per user-priority service support 8K MAC addresses, learning disable per VLAN and per port Support for IPv4 and IPv6 1/6/

25 Security Requirement Security Falcon Specifications Flexible HW based storm control 802.1x Granular HW filtering and policing for CPU traffic SNMPv3, SSH, HTTPS support CPU protection: HW based ACL with policing RADIUS authentication Enable/Disable management interfaces (incl. console port) TACACS+ User access levels 1/6/

26 User Access Levels 1/6/

27 User Access Levels (2) Service providers can define different access levels for operations and customers Up to 15 privilege levels Example: Superuser: full read/write access NOC admin: read/write access, but cannot change some default settings or features that aren t used / approved NOC operator: full read, limited write access Field engineer: access only to those features necessary to set up Falcon Field technician: Can only set IP, gateway and basic settings to allow NOC to configure the device 1/6/

28 User Access Levels (3) User access levels can be offered to customers as a service: to allow the customer to have live access to statistics and monitoring information to allow the customer to change certain configurations, without affecting the service level agreements and operation of the Falcon as demarcation device Examples: Customer has read access to certain status and statistics screens to check SLA and to monitor / identify problems Customer can change some user port QoS assignments, for example destination MAC or C-VLAN, in order to accommodate changes in his corporate network Customer can operate the copper link diagnostics. 1/6/

29 Multicast Services Requirement Support for multicast services Falcon Specifications 8K IPv4/IPv6 multicast groups HW based forwarding IGMP snooping (IPv6 MLD support on roadmap) 1/6/

30 MEF Compliance Requirement MEF and standard compliance Falcon Specifications MEF 9 / MEF 14 with EPL, EVPL, EPLAN, EVPLAN, EPTree, EVPTree support MEF 8 (CES over Ethernet) ITU-T G.8031 and G.8032 (with Rel. 6) IEEE 802.1Q, 802.1ag, 802.1ad, 802.3ad, 802.3ah and more 1/6/

31 Legacy TDM/PDH Support Requirement Transporting TDM services over Ethernet Falcon Specifications Optional 8* E1/T1 ports for TDM over Ethernet (MEF 8 CES over Ethernet) Synchronous Ethernet support (SE and SET models) with G.823/824 sync interface compliance and G.8264 SSM support IEEE 1588v2 hardware ready (Rel. 6 s/w upgrade) 1/6/

32 Legacy Support (2) Requirement Ethernet over TDM support Falcon Specifications Optional inverse multiplexing of Ethernet traffic over up to 8* E1/T1 interfaces software selectable Use of 2 FalconT or SET for up to 16* E1/T1 inverse muxing Bridging over E1/T1 1/6/

33 Falcon Applications and Services 1/6/

34 Ethernet Private Line (EPL) Example Firewall Internet HQ EPL EPL Branch Branch Simple configuration The port to the Internet is un-trusted The port to the branches is trusted No coordination with service provider for HQ to branch subnets Fractional bandwidth (Bandwidth Profile) to minimize monthly service charges 1/6/

35 Ethernet Virtual Private Line (EVPL) Example VLAN 178 VLAN 179 VLAN 180 ISP Service Multiplexing VLAN 2000 Customer 3 VLAN 2000 Customer 1 VLAN 2000 Customer 2 Efficient use of ISP router ports Easy configuration at ISP customer sites This port and VLAN 2000 (or even untagged) to ISP 1/6/

36 L2 VPN Multi-Site SLA Branch office A: CoS=6 CIR=EIR=5 Mbps Branch office B: CoS=6 CIR=EIR=5 Mbps CoS=3: priority data CIR=0; EIR=maximum CoS=0: Internet CIR=0; EIR=maximum Max. 50 Mbps Multi-Site SLA* Customers with two or more offices connecting to the same VPN and sharing one SLA Each office has its own CIR, but can burst to use any available bandwidth Branch office A Branch office B Headquarter Storage provider * To be released (or office C) 1/6/

37 L2 VPN Multi-Service SLA Internet: CoS=0 CIR=0; EIR=maximum VPN: CoS=3 CIR=EIR=5 Mbps Max. 20 Mbps Multi-Service SLA* Customer shares one SLA between VPN and Internet services Internet traffic can burst if VPN traffic is below CIR Headquarter VPN Internet * To be released 1/6/

38 Ethernet Virtual Private LAN (EVP-LAN) Example Service Multiplexing Credit Check, Inc. C D EVC 1 EVC 2 A B Instant Loans, Inc. Walk In Drive Out Used Cars, Inc. Redundant points of access (C and D) for critical availability, higher layer service at Credit Check Efficient use of Credit Check router ports Instant Loan (A) and Walk in Drive Out (B) cannot see each others traffic 1/6/

39 CoS-based Metro Ethernet SLA Internet CE ISP POP Service Multiplexed Ethernet UNI UNI CE Carrier Ethernet Network Point-to-Point EVC UNI UNI CE CE E-Line Virtual Private Line Service 4 Classes of Service CoS determined via 802.1p CoS ID Common type of SLA used with CoS-based IP VPNs Service Class Premium Silver Bronze Service Characteristics Real-time IP telephony or IP video applications Bursty mission critical data applications requiring low loss and delay (e.g. Storage) Bursty data applications requiring bandwidth assurances CoS ID 6, 7 4, 5 3, 4 Standard Best effort service 0, 1, 2 Bandwidth Profile per EVC per CoS ID CIR > 0 EIR = 0 CIR > 0 EIR UNI Speed CIR > 0 EIR UNI Speed CIR=0 EIR=UNI speed Service Performance Delay < 5ms Jitter < 1ms Loss < 0.001% Delay < 5ms Jitter = N/S Loss < 0.01% Delay < 15ms Jitter = N/S Loss < 0.1% Delay < 30ms Jitter = N/S Loss < 0.5% 1/6/

40 Circuit Emulation Services Defined in MEF 8 (CESoETH) Enables TDM Services to be transported across Carrier Ethernet network, re-creating the TDM circuit at the far end Runs on a standard Ethernet Line Service (E-Line) Carrier Ethernet Network TDM Circuits (e.g. T1/E1 Lines) Circuit Emulated TDM Traffic TDM Circuits (e.g. T1/E1 Lines) 1/6/

41 Circuit Emulation Services TDM Line Service (T-Line): Application: Leased line replacement Customer Premises CESoETH Customer Premises TDM CES IWF Ethernet Metro Ethernet Network Ethernet CES IWF TDM Ethernet UNI E-Line Service Ethernet UNI TDM subscriber demarcation Service Provider Network TDM subscriber demarcation 1/6/

42 Circuit Emulation Services TDM Access Line Service (TALS): Application: Access to a remote network (e.g. PSTN) Customer Premises CESoETH TDM CES IWF Ethernet Metro Ethernet Network Ethernet CES IWF TDM PSTN Ethernet UNI E-Line Service Ethernet UNI TDM subscriber demarcation Service Provider Network TDM Network Interface 1/6/

43 Circuit Emulation Services MEF 18 provides an abstract test suite for Circuit Emulation Services over Ethernet based on MEF 8 MEF 8, together with MEF 18, provide a clear definition of the Circuit Emulation Services over Ethernet and, in addition, the procedures for pass/fail assessment of standard conformance 1/6/

44 Falcon SET 2G & 3G Backhaul over Fiber BTS Node B Synchronous Ethernet E1 Synchronous Ethernet Fiber Infrastructure Node B backhaul over synchronous Ethernet Optional redundant fiber link BTS backhaul using E1/T1 pseudowire encapsulation (MEF 8) Ready for LTE / 4G 1/6/

45 Falcon SE or Falcon SET Sync Ethernet & SDH (1) Router with CES over ETH support BSC BTS E1 Node B sync ETH E1 for clock Eth ADM SDH ADM Eth STM-1 Eth Synchronous Ethernet RNC IP and E1 traffic is handed over to SDH via GB Ethernet and transported over Ethernet E1 port is used for clock synchronisation E1 CES is aggregated onto STM-1 using router with CES over Ethernet (MEF 8) support IP traffic from Node Bs is fed to RNC using GB Ethernet 1/6/

46 Falcon SE or Falcon SET Sync Ethernet & SDH (2) BSC BTS E1 Node B sync ETH n*e1 Eth ADM SDH ADM STM-1 Eth Synchronous Ethernet RNC IP traffic is handed over to SDH via GB Ethernet E1 BTS traffic is handed over to SDH via E1 ports, with one of the E1 ports on the SDH serving as clock reference BTS (E1) traffic is fed to BSC using STM-1 IP traffic from Node Bs is fed to RNC using GB Ethernet 1/6/

47 SDH to NGN Migration n*e1 Eth ADM E1 ETH SDH ADM Synchronous Ethernet Falcon allows gradual migration or rollout of next generation Gigabit Ethernet networks Support for legacy E1/T1 over Ethernet High accuracy clock using synchronous Ethernet SDH-like <50ms ring redundancy using ITU-T G.8032 Ethernet Redundant Ring standard 1/6/

48 Falcon Configuration and Management 1/6/

49 Falcon Management Options CLI interface Hierarchical CLI Abbreviations History and more Web GUI HP Openview NNM plugin Various OS platforms supported, incl. MS Windows, Sun Solaris, Linux Alcatel-Lucent 5620 SAM GNE Alcatel-Lucent Lineview SNMP version 1, 2c, and 3 SSH and HTTPS support 1/6/

50 Basic CLI Configuration Overview VLAN Configuration Configure VLAN attributes for network ports: VLAN Awareness enabled PVID none Frame Type Tagged Set Management VLAN Delete VLAN 1 Add a new management VLAN with all network ports as members On points of the network where EMS/NMS is connected (e.g. NOC) Configure the access port PVID to match the management VLAN tag

51 Basic CLI Configuration (1) system restore defaults Network Ports (ports 15,16) vlan aware enable vlan pvid none vlan frame-type tagged vlan delete 1 Management VLAN vlan add Mgmt ip setup Management VLAN with EMS/NMS access (on port 1) vlan add ,15-16 Mgmt vlan pvid

52 QoS Basic CLI Configuration Overview QoS Basic Configuration Define QCL for CoS classification based on L2 priority bits Define the S-VLAN budget on the network ports

53 QoS Basic CLI Configuration (1) L2 Priority QCL qcl add 1 1 tag_prio 0-1 low qcl add 1 1 tag_prio 2-3 normal qcl add 1 1 tag_prio 4-5 medium qcl add 1 1 tag_prio 6-7 high S-VLAN Budget Example: configure S-VLAN 130 on network ports vlan add EVC130

54 EPL CLI Configuration Configure VLAN attributes for access ports Set the port PVID to the service S-Tag vlan pvid Set S-VLAN member ports vlan add 130 1,15-16 EVC130

55 EVPL CLI Configuration Overview Configure VLAN attributes for access ports; for EVPL use PowerLink access ports (ports 1-4 of the Falcon+) VLAN awareness enabled PVID none Frame Type tagged Configure the services (implement the C-VLAN to S- VLAN mapping) Set S-VLAN member ports

56 EVPL CLI Configuration (1) Access port VLAN attributes port 1 vlan aware 1 enable vlan pvid 1 none vlan frame-type 1 tagged

57 EVPL CLI Configuration (2) Service configuration for mapping C-Tag to S-Tag Example: mapping C-Tag 30 to S-Tag 130 (tagging on ingress, untagging on egress) Set an ingress service for S-Tag 130 on port 1 service add 1 ingress EVC130-In Map C-Tag 30 into it (service EVC130-In was auto-assigned with service id upon execution of the above command) service classification vlan Add S-Tag 130 on it service action vlan-tag add 130 Set an egress service for S-Tag 130 on port 1 service add 1 egress EVC130-Eg Map S-Tag 130 into it (service EVC130-Eg was auto-assigned with service id upon execution of the above command) service classification vlan Remove S-Tag 130 service action vlan-tag remove

58 EVPL CLI Configuration (3) Set S-VLAN member ports (add port 1 the access port) vlan add 130 1,15-16 EVC130

59 Service Configuration Example Here we define a service characterized by VLAN tag (customer) 100, with priority bits value = 5. The customer is connected to port 1 of the Falcon. We want to associate this service to service provider tag 2000, by adding a tag with green priority unchanged and yellow priority 3. Red frames should be discarded. The VLAN EtherType for the service tag should be 0x88A8. The customer s ingress BW profile is: CIR = 400Mbps, CBS = 10kbytes, EIR = 700Mbps, EBS = 200kbytes In addition, frames arriving from the network and destined to that customer (marked with VLAN 2000) should have the service tag removed, with no need to rate limit or priority changes. For the ingress path: Falcon# service add 1 ingress customer1-ingress Added service 1 for port 1, ingress Falcon# service classification vlan Falcon# service vlan-ether-type add-value 1 0x88A8 Falcon# service action vlan-tag 1 add 2000 Falcon# service action vlan-priority 1 change yellow 3 Falcon# service action rate-limit committed 1 400m 10k Falcon# service action rate-limit excess 1 700m 200k For the egress path: Falcon# service add 1 egress customer1-egress Added service 257 for port 1, egress Falcon# service classification vlan Falcon# service action vlan-tag 257 remove 1/6/

60 Web Interface The Falcon offers a convenient web-based interface to configure services using a web browser: QCL QoS Control Lists combine one or more criteria to map incoming frames into different traffic classes based on L2-L4 parameters, such as VLAN-ID, CoS, TCP or UDP port numbers, etc. Port-based QoS is a quick way to get a basic, port-based configuration, with the possibility to select QCLs for more specific requirements The QCL Configuration Wizard helps in configuring the QCLs, offering a range of predefined services QCL Setup Policy Rules allows the user to quickly assign predefined QCLs to individual ports. 1/6/

61 Web GUI ACL Ports 1/6/

62 Web GUI ACL Wizard 1/6/

63 Web GUI DSCP Remarking 1/6/

64 SNMP, HP Openview NNM SNMP v1 v2c v3 HP Openview NNM Various OS platforms supported, incl. MS Windows, Sun Solaris, Linux 1/6/

65 Alcatel-Lucent Management Options Alcatel-Lucent Lineview management integration Alcatel-Lucent 5620 SAM integration via GNE Scripting support Service configuration scripts available for EPL, EVPL, E-LAN, etc. 1/6/

66 5620 SAM EPL Configuration 1/6/

67 5620 SAM EVPL Configuration 1/6/

68 5620 SAM E-LAN Configuration 1/6/

69 Falcon Future 1/6/

70 Falcon Roadmap Additional features and models 1588v2 timing support Utility module clock input/output, dry contacts Expansion of Line towards aggregation: MetroStar2 series of Gigabit to 10 Gigabit aggregation switches Provides full access/aggregation solution to migrate from SDH to Metro Ethernet Retains support for E1 CES services 1/6/

71 F Thank You! 1/6/2011