Quidway AR28 Series Intelligent Multi-service Modular Branch Routers

Transcription

1 IP Your Future Product Description Quidway AR28 Series Intelligent Multi-service Modular Branch Routers

2 Contents Quidway AR Quidway AR28-10/11/12/13/ Quidway AR28-30/ Quidway AR28-40/ Features and Benefits...4 Software Specifications...5 Hardware Specifications...6 Safety and Compliance Applications Copyright 2006 by Huawei Technologies Co., Ltd. All Rights Reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. >>

3 Quidway AR28 Series Intelligent Multi-service Modular Branch Routers The Quidway AR28 series intelligent multi-service modular branch routers not only integrate Fast Ethernet (FE) interfaces, AUX port, synchronous/ asynchronous serial interfaces or channelized E1/T1, but also abundant optional SICs (Smart Interface Cards) and MIMs (Multifunction Interface Modules). These routers feature higher cost-effectiveness and better expandability. Quidway AR28-09 The Quidway AR28-09 is an enterprise branch router with modular structure. It can provide overall end-to-end network solutions for users like telecommunication carriers, ISP, finance, taxation, public security and railway. The AR28-09 is a typical desktop router with rich functions and high performance/cost ratio. In addition, it can be hung against the wall or in the outdoor mounting box. AR28-09 front view AR28-09 rear view Quidway AR28-10/11/12/13/14 The Quidway AR28-1x series routers are modular rack-mounting routers. Beside one or two fixed Fast Ethernet interface, AUX interface, synchronous/asynchronous serial port, or E1/T1 port, the routers provide sufficient Smart Interface Cards (SIC) and Multifunctional Interface Modules (MIM), offering comprehensive network solution for carrier, enterprise and SMB users. In addition, the AR28-1x series routers provide a DC power supply host, applicable to the telecom network environment such as telecom management network and charging network. The AR28-1x series routers adopt Huawei-3Com VRP platform. They support Dynamic VPN, BIMS (Branch Intelligent Management System) and EAD (Endpoint Access Defense) features and applications of ADSL, GE, ATM and Ethernet switching interface modules. In addition, they are scalable and cost-effective and can fully satisfy the application demand of enterprises. >>

4 There are five models of AR28-1x routers: AR28-10, AR28-11, AR28-12, AR28-13, and AR AR28-10 Front View AR28-10 Rear View AR28-11 Front View AR28-11 Rear View AR28-12 Front View AR28-12 Rear View AR28-13 Front View AR28-13 Rear View AR28-14 Front View AR28-14 Rear View Quidway AR28-30/31 The Quidway AR28-3x series routers are modular convergence routers oriented to enterprise users, applicable to government departments, financial industry, electric power industry, and enterprise branches. The AR28-3x series routers adopt VRP platform, provide abundant software features, backup schemes and QoS features as well as support dumb terminal access server, POS access, SNA/DLSw and VoIP. DVPN, BIMS and EAD features are also supported. In addition, they have good scalability and can fully satisfy the application demand of enterprises. The AR28-3x series routers, with their modular structure, can provide integrated FE and flexible configuration modes. >>

5 AR28-30 Front View AR28-30 Rear View AR28-31 Front View AR28-31 Rear View Quidway AR28-40/80 The Quidway AR28-40/80 routers are oriented to enterprise users, serving as convergence layer routers in large network or core routers in medium-sized networks. The AR28-40/80 routers adopt 32-bit microprocessor technology in modular structure. Compared with AR28-3x series routers, they have higher processing capability and larger access density. The AR28-40/80 series routers adopt VRP platform, which support DVPN, BIMS, EAD features and applications of ADSL, GE or ATM interface modules. In addition, they have good scalability and can fully satisfy the application demand of enterprises. There are two models of AR28-40/80 routers: AR28-40 and AR AR28-40 Front View AR28-40 Rear View AR28-80 Front View AR28-80 Rear View >>

6 Features and Benefits The AR28 routers inherit the design advantages of Huawei Quidway NetEngine high-end router in four highs--high performance, high quality, high reliability and high security. Moreover, they are integrated with the service capabilities of Huawei Quidway AR middle/low-end routers. Therefore, the AR28 routers meet requirements for network performance, service integration, high reliability, high security and triple-play solution from rapid informationized development. Cost-Effective Architechure and Abundant Interface Modules The AR28 routers integrated multiple interfaces on the board, not only 10/100M Ethernet port, but also syn/ asyn serial port, channelized E1/PRI or channelized T1/PRI on different routers. The AR28 routers also support two kinds of modules, SIC (Smart Interface Card) and MIM (Multifunctional Interface Modules), proivde more cost-effective choices for the customers. The AR28 routers support high speed interface, such as copper and fiber Gigabit Ethernet, ATM 155M, Channelized POS (155M), fullfil the requirement of industry or enterprise central equipment. Multi-Service Integrated Enhanced hardware encryption: IPsec DES, 3DES, and AES128/192/256 are supported on AR28 routers. The hardware encryption module-hnde can provide as high as 110Mbps encryption throughput and 1000 encrypted tunnels. Comprehensive VPN and Security Features: Not only traditional VPN, such as L2TP and GRE VPN, but also Dynamic VPN, MPLS/BGP VPN and MPLS L2 VPN (Martini, Kompalla, CCC, SVC, etc) are supported on AR28 routers. Other security features, such as RADIUS, ASPF (Application Specific Packet Filtering), EAD (Endpoint Access Defense), Portal and PKI/CA certificate also ensure the customer with secure and resilient network connectivity and application. VoIP and VoFR Integrated: By embedded voice service in the routers, the AR28 provide a flexible and costeffective triple-play solution for the customers. Based on the H.323 or SIP, the AR28 routers provide multiple interface modules for the VoIP applications, such as FXS/FXO/ISDN BRI voice and E1/T1 digital voice. QoS Ensured: Quality of Service is enhanced on the AR28 series routers. NetStream monitoring and RCR (Resilient Controllable Routing) provide traffic flow analysis to optimize the network; DAR (Deeper Application Recognition) recognize and classify the L4-L7 application and protocols flows, ensure the QoS for the different applications. Routing and Switching Integrated: The AR28 routers provide 8-port and 16-port 10/100Mbps LAN switching modules, which provide more cost-effective solutions for the customers. Easy Maintenance and Efficient Deployment The AR28 routers provide more customized management solutions. >>

7 One Serial Number for One Device: Every AR28 router is sealed with a unique serial number, which can ease the locating of the network problem and network management. Auto-Config: can automatically detect and configure all its interfaces upon its first use and starts Telnet, FTP, or Web service. Easy Deployment: Based on BIMS (Branch Intelligent Management System), Auto-config and Serial Number for each router, realize the branch devices zero-touch and centralized management by the central management system. Configuration Rollback: If there is any error occurred when the configuration deploying, the device will inform the NMS, the configuration file will get rollback, which can ensure the reliability of configuration deployment. NetStream: provides network traffic accounting and resource usage for both ISPs and enterprise customers. HWping: enhances the ping function, which can detect the state of and service type of DLSw, DHCP, FTP, HTTP, or SNMP servers, realizes the service status monitoring and network quality analyzing. Serial-port Server Function: A serial-port connection line can be used to connect the asynchronous port of the router (8/16-port ASE) with the Console port of the managed device. A PC can log in to the router through Telnet to control the managed device. This approach has the same effect as the control by directly connecting the serial port of the PC to the Console port of the managed device. The AR28 routers also provide RMON, SSHv2 (Secure Shell Protocol Version2) and SNMPv3 (Simple Network Management Protocol version 3) for the secure management. Software Specifications Network Interconnection Protocol VPN Network Layer Protocol and Application Routing Protocol Transmission Layer Protocol Application Layer Protocol and Application Security Characteristics QoS Application Voice Application Reliability Functions Ethernet, PPP, MP, SLIP, FR, LAPB, X.25, ISDN, HDLC, ATM L2TP VPN, GRE VPN, IPSec VPN, MPLS/BGP VPN, MPLS L2VPN, DVPN IP, IPX, DLSw, IP Fast Switch, DHCP Client / Server /Relay. Static Routing, OSPF, RIPv1 / v2, BGP-4, IS-IS, Policy Routing, IGMP, MSDP, PIM-DM PIM-SM, MBGP TCP, UDP Telnet, Dumb Terminal, Terminal Server, FTP, TFTP, Callback, SNMPv1/v2/v3, RMON POS, RTU AAA RADIUS, SSHv2, ASPF, NAT, IPSec, IKE, Encryption card, Huawei-TACACS, RSA CA, EAD PQ, CQ, WFQ, CBWFQ, CAR, GTS, WRED, LR VOIP, VOFR, IP Fax, IPHC, GK Client, ISDN BRI, E1 Voice, T1 Voice, H.323, SIP VRRP, Backup Center >>

8 Hardware Specifications Module Feature Fixed Interfaces BootROM SDRAM Flash Forwarding Rate Dimension (W x H x D) Weight Input Voltage Maximum Power Specifications of AR28-09 Router 2 SIC slots, 1 MIM slot Description 1 10/100Mbps Ethernet interface 1 Synchronous/Asynchronous serial interface 1 AUX port 1 Console port 512 KB 128 MB 32 MB 70 Kpps 376.2mm x 79.4mm x 287.9mm (including the rubber feet) 2.5 kg AC:100V to 240V, 50/60Hz 50 W Operating Temperature 0 C to 40 C Operating Humidity 10% to 90%, non-condensing Module Slots Fixed Interfaces BootROM Specifications of AR28-1x Series Routers Feature AR28-10/11 AR28-12/13/14 2 SIC slots, 1 MIM slot 1 S/A, 1 10/100M FE (for AR28-10) 2 10/100M FE 1 AUX, 1Console 512 KB 2 S/A, 2 10/100M FE (for AR28-12) 1 CE1, 2 10/100M FE (for AR28-13) 1 CT1, 2 10/100M FE (for AR28-14) SDRAM Default 128 MB (Max. 128 MB) Default 128 MB (Max. 256 MB) Flash 32 MB Forwarding Rate 80 Kpps 90 Kpps Dimensions (W x H x D) Weight Input Voltage Maximum Power 442mm x 44.4mm x 315mm 6 kg AC: 100V to 240V, 50/60Hz DC: -48V to -60V 60 W Operating Temperature 0 C to 40 C Operating Humidity 10% to 90%, non-condensing >>

9 Module Slots Fixed Interfaces BootROM SDRAM Flash Forwarding Rate Specifications of AR28-30/31 Series Routers Feature AR28-30 AR28-31 Dimensions (W x H x D) Weight Input Voltage Maximum Power 3 Slots for MIM 1 10/100Mbps Ethernet 2 10/100Mbps Ethernet 1 AUX port 1 Console port 512 KB Default 128 MB (Max. 256 MB) 32 MB 100 Kpps 442mm x 44.3mm x 413mm 8 kg AC: 100V to 240V, 50/60Hz 80 W Operating Temperature 0 C to 40 C Operating Humidity 10% to 90%, non-condensing Specifications of AR28-40/80 Series Routers Feature AR28-40 AR28-80 Module Slots 4 Slots for MIM 8 Slots for MIM Fixed Interfaces BootROM SDRAM Flash Forwarding Rate 1 AUX port 1 Console port 512 KB Default 128 MB (Max. 256 MB) 32 MB 120 Kpps Dimensions (W x H x D) 442mm x 44.3mm x 413mm 442mm x 88.2mm x 413mm Weight 8 kg 14 kg Input Voltage AC:100V to 240V, 50/60Hz Maximum Power 80 W 120 W Operating Temperature 0 C to 40 C Operating Humidity 10% to 90%, non-condensing >>

10 AR28 Series Routers Host Configurations AR28-09 AR28-10 AR28-10-DC48 AR28-11 AR28-11-DC48 RT-AR28-12-AC-OVS RT-AR28-12-DC-OVS RT-AR28-13-AC-OVS RT-AR28-13-DC-OVS RT-AR28-14-AC-OVS RT-AR28-14-DC-OVS AR28-30 AR28-31 AR28-40 AR28-80 RT-SDRAM-128 RT-SDRAM-256 AR28-09 router host, 1 MIM slot, 2 SIC slots, 1 10/100BASE-TX port and 1 Sync/ Async serial port, AC 220V AR28-10 router host, 1 MIM slot, 2 SIC slots, 1 10/100BASE-TX port, 1 Sync/ Async serial port, AC 220V AR28-10 router host, 1 MIM slot, 2 SIC slots, 1 10/100BASE-TX port, 1 Sync/ Async serial port, DC 48V AR28-11 router host, 1 MIM slot, 2 SIC slots, 2 10/100BASE-TX port, 1 Sync/ Async serial port, AC 220V AR28-11 router host, 1 MIM slot, 2 SIC slots, 2 10/100BASE-TX port, 1 Sync/ Async serial port, DC 48V AR28-12 router host, 1 MIM slot, 2 SIC slots, 2 10/100BASE-TX ports, 2 Sync/ Async serial ports, AC 220V AR28-12 router host, 1 MIM slot, 2 SIC slots, 2 10/100BASE-TX ports, 2 Sync/ Async serial ports, DC 48V AR28-13 router host, 1 MIM slot, 2 SIC slots, 2 10/100BASE-TX ports, 1 CE1/PRI port, AC 220V AR28-13 router host, 1 MIM slot, 2 SIC slots, 2 10/100BASE-TX ports, 1 CE1/PRI port, DC 48V AR28-14 router host, 1 MIM slot, 2 SIC slots, 2 10/100BASE-TX ports, 1 CT1/PRI port, AC 220V AR28-14 router host, 1 MIM slot, 2 SIC slots, 2 10/100BASE-TX ports, 1 CT1/PRI port, DC 48V AR28-30 router host, 3 MIM modular slots, 1 10/100BASE-TX port (RJ45), AC220V AR28-31 router host, 3 MIM modular slots, 2 10/100BASE-TX ports (RJ45), AC220V AR28-40 router host, 4 MIM modular slots, AC220V AR28-80 router host, 8 MIM modular slots, AC220V 128MB SDRAM for AR28-30/31/40/80 256MB SDRAM for AR28-12/13/14 AR28 Optional MIM Interface Module Configurations Ethernet WAN Interface Modules RT-1FE 1-port 10/100BASE-TX module, RJ45 RT-2FE 2-port 10/100BASE-TX module, RJ45 RT-1SFX 1-port 100BASE-FX Ethernet single mode optical interface module (1310nm, 15km, SC) RT-1MFX 1-port 100BASE-FX Ethernet multi-mode optical interface module (1310nm, 2km, SC) RT-1GBE 1-port 10/100/1000BASE-T Ethernet electrical interface module, RJ45 RT-2GBE 2-port 10/100/1000BASE-T Ethernet electrical interface module, RJ45 RT-1GEF 1-port 1000BASE-X optical interface module (SFP, LC) >>

11 RT-2GEF 2-port 1000BASE-X optical interface module (SFP, LC) Serial Modules RT-8ASE 8-port asynchronous serial interface module, RJ45 RT-16ASE 16-port asynchronous serial interface module, RJ45 RT-2SAE 2-port enhanced Sync/Async interface module RT-4SAE 4-port enhanced Sync/Async interface module RT-8SAE 8-port enhanced Sync/Async interface module Channelized and Fractional E1/T1 Modules RT-1E1 1-port E1/CE1/PRI module RT-2E1 2-port E1/CE1/PRI module RT-4E1 4-port E1/CE1/PRI module RT-8E1(75) 8-port E1/CE1/PRI module (75ohm) RT-8E1(120) 8-port E1/CE1/PRI module (120ohm) RT-1E1-F 1-port E1 module-fractional RT-2E1-F 2-port E1 module-fractional RT-4E1-F 4-port E1 module-fractional RT-8E1(75)-F 8-port E1 module-fractional (75ohm) RT-8E1(120)-F 8-port E1 module-fractional (120ohm) RT-1T1 1-port T1/CT1/PRI module RT-2T1 2-port T1/CT1/PRI module RT-4T1 4-port T1/CT1/PRI module RT-8T1 8-port T1/CT1/PRI module RT-1T1-F 1-port T1 module-fractional RT-2T1-F 2-port T1 module-fractional RT-4T1-F 4-port T1 module-fractional RT-8T1-F 8-port T1 module-fractional DSL Modules RT-1ADSL 1-port ADSL over POTS module, RJ11 RT-2ADSL 2-port ADSL over POTS module, RJ11 RT-1ADSL-I 1-port ADSL over ISDN interface module, RJ11 RT-2ADSL-I 2-port ADSL over ISDN interface module, RJ11 RT-1G.SHDSL 1-port G.SHDSL interface module, RJ11 RT-2G.SHDSL 2-port G.SHDSL interface module, RJ11 RT-4G.SHDSL 4-port G.SHDSL interface module, RJ11 RT-1SHL-4W 1-port four wire G.SHDSL interface module ISDN and Modem Modules RT-4BS 4-port ISDN-BRI module, S/T RT-2FCM 2-port fast connect modem module, RJ11 RT-4FCM 4-port fast connect modem module, RJ11 RT-6FCM 6-port fast connect modem module, RJ45 >>

12 Channelized E3/T3 Modules RT-1CE3 1-port E3/CE3 module RT-1CT3 1-port T3/CT3 module ATM Modules RT-1AMM 1-port OC-3 ATM module (multi-mode, SC, 2km ) RT-1ASM 1-port OC-3 ATM module (single mode, SC, 15km) RT-1ASL 1-port OC-3 ATM module (single mode, SC, 30km) RT-1A25 1-port 25Mbps ATM interface module, RJ45 RT-1AE3 1-port E3 ATM interface module RT-1AT3 1-port DS3 ATM interface module ATM IMA Modules RT-IMA-4E1(75) 4-port E1 ATM IMA interface module (75ohm) RT-IMA-4T1 4-port T1 ATM IMA interface module RT-IMA-4E1(120) 4-port E1 ATM IMA interface module (120ohm) RT-IMA-8E1(75) 8-port E1 ATM IMA interface module (75ohm) RT-IMA-8T1 8-port T1 ATM IMA interface module RT-IMA-8E1(120) 8-port E1 ATM IMA interface module (120ohm) Analog and Digital Voice Modules RT-2FXS 2-port analog line interface module, FXS RT-4FXS 4-port analog line interface module, FXS RT-2FXO 2-port analog trunk interface module, FXO RT-4FXO 4-port analog trunk interface module, FXO RT-2EM 2-port analog trunk interface module, E&M RT-4EM 4-port analog trunk interface module, E&M RT-2BSV 2-port ISDN BRI S/T voice module RT-E1VI 1-port E1 IP voice module RT-T1VI 1-port T1 IP voice module Hardware Encryption Modules RT-NDEC network data encryption module RT-HNDE high performance network data encryption module LAN Switching Modules RT-8LS 8-port 10/100BASE-TX L2 Ethernet switch module RT-16LS 16-port 10/100BASE-TX L2 Ethernet switch module POS Modules RT-1CPOS(E) 1-port channelized POS 155M to E1 interface module (SFP) RT-1CPOS(T) 1-port channelized POS 155M to T1 interface module (SFP) RT-POS+MM-2Km RT-POS bundle with SFP transceiver multi-mode-2km RT-POS+SM-15Km RT-POS bundle with SFP transceiver single mode-15km RT-POS+SM-40Km RT-POS bundle with SFP transceiver single mode-40km >> 10

13 AR28 Optional SIC Interface Module Configurations RT-SIC-1SA RT-SIC-3AS RT-SIC-1BS RT-SIC-2BS RT-SIC-1BU RT-SIC-2BU RT-SIC-TPRI RT-SIC-EPRI RT-SIC-1T1-F RT-SIC-1E1-F RT-SIC-1AM RT-SIC-2AM RT-SIC-1FXO RT-SIC-2FXO RT-SIC-1FXS RT-SIC-2FXS RT-SIC-1FEA RT-SIC-1ETH 1-port Sync/Async serial port interface card 3-port asynchronous serial interface card 1-port ISDN-BRI card, S/T 2-port ISDN-BRI card, S/T 1-port ISDN-BRI card, U 2-port ISDN-BRI card, U 1-port T1/CT1/PRI interface card 1-port E1/CE1/PRI interface card 1-port T1 interface card-fractional 1-port E1 interface card-fractional 1-port analog modem interface card 2-port analog modem interface card 1-port analog trunk interface card, FXO 2-port analog trunk interface card, FXO 1-port analog trunk interface card, FXS 2-port analog trunk interface card, FXS 1-port 10/100BASE-TX Ethernet interface card 1-port 10BASE-T interface card Safety and Compliance Emissions / Agency Approvals CISPR 22 Class A or Class B FCC Part 15 Class A or Class B EN Class A or Class B ICES -003 Class A or Class B VCCI Class A or Class B AS/NZS CISPR 22 Class A or Class B EN EN Immunity Product conforms to: EN EN EN EN EN EN EN Safety Agency Certifications UL IEC ; all national deviations EN , ZB and ZC deviations CSA 22.2 No AS/NZS , Australia Huawei Datacom >> 11

14 Applications Corporation Network Application The following typical networking modes can be supported: DDN, frame relay or X.25 as the main link, PSTN or ISDN dial-up line as the backup link, and the networking diagram is shown as below: Internet Headquarters phone PBX FAX LAN Branch DDN/X.25/FR/E1 AR28-40 LAN AR28-09 phone PSTN/ISDN PBX FAX AR28-10 phone FAX LAN Branch office Figure 1 Implementing Integrated Networking of Enterprises Main points of networking: The AR28 series routers can be connected to the DDN, Frame Relay or X.25 through the SSI (Synchronous Serial Interface) or CE1 module, to PSTN through the ASI (Asynchronous Serial Interface) module via the modem pool, and to ISDN BRI through the BRI module. The main lines and backup lines are automatically swapped by the router. The backup modes may be dial-up backup or router backup. >> 12

15 "Integrated" Terminal Solution for Regional Banks Regional banks can use the terminal server services and SNA function of AR28 series routers to realize the coexistence of the SNA network and TCP/IP network, so as to provide new services based on IP and finally transit everything in IP network without changing the original system. DDN SNA server Automated Teller Machine AR28-09 Front End Processor AR28-80 Terminal server Business hall AR28-40 S3026 PSTN/ISDN Business hall SNA Client Pos machine AR28-09 S3026 DDN Supermarket ISDN Figure 2 Implementing "Integrated" Terminal Solution for Regional Banks Voice Solution In the headquarters, the AR28-80/40 routers serve as the voice gateway devices to implement VoIP function on the E1 line. In each branch, the AR28-09/10/11 router is used to connect PBX or telephone to transform the voice signals between the legacy circuit switching network and IP network, providing enterprises with voice solution of high quality and low cost. >> 13

16 SPC Exchange Network Center E1 Trunking GK AR28-40 IP/WAN FXO E&M AR28-09 AR28-09 PBX phone FAX FAX Figure 3 Voice Solution of AR28 Series Routers In the diagram, the GK system is optional. When the system is not on large scale, they can be interconnected by means of gateway fixed distribution mode, easy to manage. When the system is with complicated hierarchy and architecture, GK is required to perform integrated management. Secure VPN Application The AR28 series routers, serving as VPN gateways, support tunneling technologies such as L2TP or GRE and guarantee quality and security of information transmission on networks, integrating IPSec, NAT, firewall, and QoS technologies. Access VPN allows telecommuting employees to remotely access company network, so that they can continue on their tasks either at home or on business trip. These people are connected to the VPN server at the headquarters over the private tunnels with the VPN service provided by the local ISP. Intranet VPN provides a means for the overseas organizations, branches, and offices of a company to interconnect with headquarters. It ensures security of information transferred on Intranet VPN over public Internet by applying tunneling and encryption technologies. Extranet VPN allows business partners and clients to access the company headquarters without compromising security of the Intranet. >> 14

17 Headquarters Extranet VPN DDN/X.25/FR/E1 VPN tunnel Firewall AR28-09 AR46-80 Other companies Access VPN PSTN/ISDN DDN/X.25/FR/E1 VPN tunnel VPN tunnel SOHO Intranet VPN AR28-09 Branch Figure 4 Secure VPN Applications MPLS VPN Solution Typical MPLS VPN networking The legacy VPN adopting Permanent Virtual Circuit (PVC) and tunneling technologies has been proved successful. However, as the network grows larger, it is facing more and more problems on scalability, manageability and QoS. MPLS is the latest achievement on integrated routing/switching solution. It integrates the flexibility of IP routing technology and the simplicity of L2 switching. In addition, it has an outstanding advantage on VPN construction. A MPLS network can conveniently implement the IP-based VPN services to satisfy VPN scalability and manageability. Security measures can be taken on the MPLS VPN to isolate the VPNs. MPLS network also provides powerful QoS mechanism to guarantee the quality of VPN services such as bandwidth, transmission, and delay. >> 15

18 VPN1 CE VPN1 PE P P AR28 AR28 CE PE Carrier backbone networks P P PE AR28 VPN1 CE Figure 5 MPLS VPN Networking with AR28 Series Routers Users are provided with LAN (and even inter-as) MPLS VPN services. A VPN with all its sites belonging to an enterprise is called an Intranet, while a VPN containing sites of different enterprises are called an Extranet. The AR28 series routers provide MPLS VPN access to Intranet and Extranet and Internet egress for the VPN users. The AR28 series routers, serving as a Provider Edge (PE) router, is directly connected with the Customer Edge (CE) router to perform all the VPN-related functionalities. It exchanges routing information with other PEs through IBGP. A PE can be connected with more than one CE. MPLS VPN uses edge LSR (PE) to add Label to the IP packets. The LSR (P) at ISP side can judge the destination of the data according to the Label. Additional routing of the data inside a VPN is not required so that MPLS VPN can achieve high speeding forwarding and support large -scaled VPN network. HoPE Solution In BGP MPLS VPN, since a PE device has to aggregate multiple VPN routes, a bottleneck is likely to occur if there are too many subscribers to be accessed by a PE with relatively less capacity. To solve this problem, Huawei Technologies brought forward the Hierarchy of PE (HoPE) solution. HoPE separates the PEs on an MPLS VPN network into different layers to form a hierarchical BGP MPLS VPN network. The PE at different layer >> 16

19 plays different role. The PE at a higher layer requires more on routing and forwarding capacity and mainly interconnects the backbone network and accesses large VPN subscribers. A PE at a lower layer requires less on routing and forwarding capacity and mainly accesses the VPN subscribers at the edge. Such network can be infinitively nested; the scalability of BGP / MPLS VPN is also significantly improved. SPE MPLS backbone networks NE16/08/05 Province LSP GRE tunnel City MPE AR46 LSP GRE tunnel UPE AR28 VPN 1 VPN 2 Site1 Site2 VPN 1 VPN 2 Site1 Site2 VPN 1 VPN 2 Site1 Site2 VPN 1 VPN 2 Site1 Site2 Figure 6 HoPE Solution with AR28 Series Routers PE includes SPE, MPE and UPE. PEs at different levels adopt label switching among each other and can be directly connected via interfaces / sub-interfaces of different forms or through tunnels. UPE provides multiple interfaces to maintain the routes to the directly connected VPN Sites, but not maintain the routes to other remote sites. It also allocates internal label for the routes to the directly connected sites and advertises them to SPE. SPE maintains all the routes in the VPN containing the directly Sites via UPE. These routes include the routes in local and remote sites. However, it advertises VPN routing / forwarding instance (VRF) default route with label to UPE only. When SPE and UPE belong to the same carrier, SPE-UPE protocol adopts MP-iBGP and SPE serves as RR. When SPE and UPE belong to different carriers, SPE-UPE protocol adopts MP-eBGP and UPE normally uses private AS number. >> 17

20 Quidway AR28 Series Intelligent Multi-service Modular Branch Routers Huawei Technologies Co., Ltd. Add: Huawei Industrial Base, Bantian Longgang, Shenzhen , P.R.China Tel : http: // Version No: M C-2.0