Ruijie RG-S8600 Series Multi-Service Core Routing Switch Datasheet

Size: px

Start display at page:

Download "Ruijie RG-S8600 Series Multi-Service Core Routing Switch Datasheet"

Gavin Andrews
5 years ago
Views:

2 Contents Contents... ii 1 Product Overview Product Features Unique modularized operating system RGOS Strong processing capability CSS security system Carrier-grade reliability design High-performance MPLS service processing Virtualization technology Comprehensive IPv6 solution IPFIX traffic transparency solution Various application support technologies Technical Parameters Typical Applications IPv4/IPv6 Campus Core Networks Secure gateway of campus network Ordering Information Chassis and management engine Power system Line card For More Information Innovation Beyond Network

1 Product Overview The RG-S8600 is a next-generation high-density multi-service IPv6 core routing switch launched by Ruijie Networks Co. Ltd for 100Gigabit platforms.

3 1 Product Overview The RG-S8600 is a next-generation high-density multi-service IPv6 core routing switch launched by Ruijie Networks Co. Ltd for 100Gigabit platforms. The RG-S8600 is capable of meeting the future application requirements for networking. It supports next-generation Ethernet 100G interfaces. Three types of hosts are available with 14 horizontal slots, 10 vertical slots, and 6 vertical slots to select from, namely, the RG-S8614, RG-S8610, and RG-S8606-Bseries. The RG-S8600 series high-density multi-service IPv6 core routing switches provide backplane bandwidths of 24T/16T/8T and are scalable to larger bandwidths in the future. The L2/L3 packet forwarding rates of 14400Mpps/9600Mpps/4800Mpps can provide users with high-speed non-blocking data exchange through high-density ports. The RG-S8600 series high-density multi-service IPv6 core routing switches provide an overall security protection system and distributed service integration platform to meet higher requirements of security and services on future networks. From left to right: RG-S8606-Bseries, RG-S8610 and RG-S8614 Innovation Beyond Network 1

4 2 Product Features 2.1 Unique modularized operating system RGOS The RG-S8600 adopts the industry-leading unique modularized OS, the RGOS, launched by Ruijie Networks Co. Ltd as its system platform. The modularized design fully integrates network functions such as IPv6, MPLS, routing, and security on the basis of system stability to build intelligent and integrated IP core networks. 2.2 Strong processing capability The RG-S8600 series core routing switches are designed for 100Gigabit platforms. Each line card meets requirements of line speed forwarding through high-density Gigabit/10Gigabit ports. 2.3 CSS security system The CSS security system is a concept that fully integrates network security features and intelligently protects core devices and networks. 1. Security monitoring The Network Foundation Protection Policy (NFPP) adopts the threaten-based security processing mode and combines network attack detection and prevention. It distributes security policies before network attacks are waged to isolate attack sources through hardware. 2. Security defense The CPU Protect Policy (CPP) technology is an industry-leading hardware CPU protection technology. The CPP technology automatically differentiates traffic of multi-layer protocol packets such as IPv4/IPv6 destined for the CPU and limits the traffic speed to prevent abnormal packets from attacking the CPU and consuming resources. In this way, it can ensure the stability of CPUs of core devices in IPv4/IPv6 L3 network and L2 network environments. The RG-S8600 can provide standard, extended, MAC, time, and expert level ACL80 and support ACL functions in IPv4/IPv6 dual stack based on a series of ACL technologies of Innovation Beyond Network 2

5 VLAN.10Gigabit line speed data forwarding can be implemented even when thousands of ACLs are configured. The LPM L3 switching technology directly stores the statically and dynamically learnt IPv4/IPv6 routes as network segments in the hardware forwarding table, with one destination network segment using one forwarding entry. Data packets to IP addresses of unknown network segments are directly forwarded by using the hardware default routes. This greatly reduces hardware storage space, avoids overuse of CPU caused by storage overflow, and ensures normal operation of devices. The RG-S8600 delivers various security protection capabilities through hardware, including protection against DDoS attacks, detection of illegal data packets, scanning prevention, and anti source IP address spoofing, to avoid impacts on performance of the entire device caused by traditional software implementation. The RG-S8600 supports broadcast packet suppression and can effectively control the impacts of illegal broadcast traffic on devices. It supports binding modes based on combinations of IPv4/IPv6, VLAN, MAC, and ports to enhance user access control. 3. Security management The RG-S8600 series support management of users by levels. Different levels of users have different configuration rights. The products support the safe SNMPv3 network management protocol, safe remote login SSH V2, and restricted IP address Telnet login. In addition, the products support authentication of user IDs through IEEE 802.1x, AAA/Radius, and TACACS. 4. Security isolation The RG-S8600 series support plain-text or MD5 cipher-text authentication of OSPF, RIPv2, and BGPv4 packets and support VPN functions such as MPLS VPN and VPWS to ensure isolation of routing information. The RG-S8600 series also support IGMP source port check, source IP address check, IGMP filtering, and so on. These products can effectively control illegal multicast sources and improve network security. PVLAN (port protection) is used to isolate information exchange between users, without occupying VLAN resources. Functions such as port MAC address lock, MAC address filtering, and port MAC address access number control can shield access by illegal hosts and prevent illegal data packets from entering networks. 2.4 Carrier-grade reliability design 1. No single-point failure design Innovation Beyond Network 3

6 The RG-S8600 adopts a passive backplane to avoid single-point failure in the chassis. All key parts, such as the engine, power, fans, and crossbar adopt redundancy design. During double engine switchover, 10Gigabit data services can be forwarded without interruption and network stability is effectively ensured. All boards and power modules support hot swaping, posing no impact on services on other boards. 2. Resilient Ethernet technology The RG-S8600 supports the Rapid Ethernet Ring Protection protocol (RERP) technology, combining the high reliability of SDH and economy and large bandwidth of Ethernet connections. It supports IPv4/IPv6 routing protocols and MPLS functions on the RERP network and can switch over upon failures in less than 50 ms while ensuring 10Gigabit line speed services and ensure that real-time services such as audio and video services are not affected by network convergence. The RG-S8600 supports REUP technology. It supports IPv4/IPv6 routing protocols and MPLS functions and therefore can ensure service switchover within milliseconds in dual-link upstream network topology. 3. High reliability guarantee of routing protocols The RG-S8600 supports the graceful restart technology of OSPF/IS-IS/BGP and provides switchover within milliseconds. It supports ECMP/WCMP and can help users use multiple links, increasing the transmission bandwidth. The RG-S8600 can back up data transmitted through failed links without delay or packet loss to implement traffic load balancing and redundancy backup. In addition, the RG-S8600 supports protection mechanisms such as dynamic routing protocols, cross-board port aggregation, and VRRP, ensuring high speed and reliable operation of the entire network. 2.5 High-performance MPLS service processing The RG-S8600 series products fully support MPLS functions, including standard MPLS forwarding, L3 VPN functions based on BGP/MPLS, VPWS P2P L2 VPN functions, and VPLS P2MP L2 VPN functions. The RG-S8600 series products support high-performance MPLS service processing. The products support MPLS line speed processing, meeting high performance requirements of a large volume of core devices on MPLS networks without causing processing bottlenecks. Innovation Beyond Network 4

7 2.6 Virtualization technology The RG-S8600 supports the Virtual Switch Unit (VSU). It can replace two core-layer switches on traditional networks with the VSU. The VSU and convergence-layer switches are linked through aggregated links and make multiple physical devices into one logically unified virtual device so that the physical devices can work in a unified manner to reduce network size and improve network reliability. 2.7 Comprehensive IPv6 solution The RG-S8600 line card can process IPv6 services through hardware in a distributed way and support line speed forwarding of 10Gigabit IPv6 services. The RG-S8600 has passed IPv6 network access authentication as required by the Ministry of the Information Industry within the PRC, representing the maturity and commercial use of IPv6 functions. The RG-S8600 fully supports the IPv6 protocol family and addressing structures. It supports IPv6 features such as Neighbor Discovery (ND), ICMPv6, Path MTU Discovery, DNSv6, and DHCPv6. The RG-S8600 fully supports IPv6 unicast routing protocols such as IPv6 dynamic routing protocols, RIPng, OSPFv3, IS-ISv6, and BGP4+ and IPv6 multicast features such as MLD v1/v2, MLD Snooping, PIM-SM/DMv6, and PIM-SSMv6. It can provide users with perfect IPv4/IPv6 solutions. The RG-S8600 supports a variety of transitional technologies (from IPv4 to IPv6), including tunneling technologies such as IPv6 manual tunnels, 6to4 tunnels, ISATAP tunnels and IPv4 over IPv6 tunnels. Therefore, it can ensure smooth transition from IPv4 networks to IPv6 networks. The RG-S8600 supports various IPv6 management features, including SNMP v6, Ping /Traceroute v6, IPv6 TACACS+/ RADIUS, Telnet/SSH v6, and NTP v6 and can meet the requirement of device management on pure IPv6 networks. 2.8 IPFIX traffic transparency solution The RG-S8600 series switches have led the industry in supporting the latest generation international traffic monitoring standard, the IP Flow Information Export (IPFIX).This is in line with the development trend of international standards. The IPFIX multi-service module adopts the high-performance NP platform and can monitor 10Gigabit service traffic. Innovation Beyond Network 5

8 Working with Ruijie traffic analysis system, the IPFIX technology can take statistics and detect abnormalities of all traffic on the network and export various network traffic analysis reports, including the traffic usage report, history report, interface report, resolvable host addresses, traffic analysis, and variable display. These reports can help the administrator to rapidly analyze problems with the network when abnormalities occur on the network and provide objective and accurate policy-making references for network capacity planning, network application monitoring, and failure diagnosis to actually implement visibility of network traffic. The IPFIX multi-service module is an independent service flexibly built in Ruijie switches. The module adopts an independent hardware platform and can ensure normal forwarding of data services on core devices when multiple service modules are maintained or faulty, thus ensuring high reliability of core devices. 2.9 Various application support technologies 1. Perfect QoS technologies Flexible traffic classification: In addition to traffic classification based on IP Precedence, 802.IP, and DSCP, traffic can also be classified on the basis of expert-level ACL, IP extended ACL, IP standard ACL, and MAC extended ACL. Multiple queuing technologies: hardware queues, SP, RR, WRR, DRR, SP+WRR, and SP+DRR. Congestion management and control technologies: WRED, CAR, LR (In/Out), and Traffic Shaping (TS). 2. Multiple multicast technologies These technologies include IGMP snooping, IGMP, PIM (SSM, SM, DM), and DVMRP. These technologies can ensure reasonable bandwidth occupation when multicast services are provided on the network. Meanwhile, functions such as IGMP source port check, source IP check, and IGMP filtering are supported to shield illegal multicast sources. 3. Distributed service integration system The line card processes services such as hardware IPv6, policy routing, IPFIX traffic monitoring, and various line cards that support POE functions. Innovation Beyond Network 6

9 3 Technical Parameters RG-S8614 RG-S8610 RG-S8606-Bseries Module Slots 14 (2 for management) 10 (2 for management) 6 (2 for management) Switching capacity 3.84T/24T 2.56/16T 1.28T/8T Packet forwarding rate L2: 2880Mpps/14400Mpps L2: 1920Mpps/9600Mpps L2: 960Mpps/4800Mpps L3: 2880Mpps/14400Mpps L3: 1920Mpps/9600Mpps L3: 960Mpps/4800Mpps L2 protocols L3 protocols (IPv4) IPv6 basic protocols IPv6 routing protocols IPv6 tunnel features MPLS features QoS High availability Security Management Other protocols IEEE802.3 (10Base-T), IEEE802.3u (100Base-T), IEEE802.3z (1000Base-X), IEEE802.3ab (1000Base-T), IEEE802.3ae (10GBase), IEEE802.3ak, IEEE802.3an, IEEE802.3x, IEEE802.3ad (LACP), IEEE802.1p, IEEE802.1x, IEEE802.1Q, IEEE802.1D (STP), IEEE802.1w (RSTP), IEEE802.1s (MSTP), IGMP Snooping, Jumbo Frame (9Kbytes), IEEE802.1ad (QinQ, selective QinQ), GVRP BGP4, IS-IS, OSPFv2, RIPv1, RIPv2, LPM Routing, PBR, Route-policy, ECMP, WCMP, VRRP, IGMP v1/v2/v3, PIM-SSM/SM/DM, MSDP, Any-RP ND, ICMPv6, Path MTU Discovery, DNSv6, DHCPv6, ICMPv6, ICMPv6 redirection, ACLv6, TCP/UDP for IPv6, socket for IPv6, SNMPv6, Ping/Traceroute v6, IPv6 TACACS+/RADIUS, Telnet/SSHv6, FTP/TFTP v6, NTPv6, IPv6 MIBs, VRRP IPv6, IPv6 ACL&QoS Static route, ECMP, PBR, OSPFv3, RIPng, BGP4+, MLDv1/v2, PIM-SMv6, PIM-DMv6, PIM-SSMv6, Route redistribution Manual tunnel, ISATAP, 6to4, IPv4 over IPv6, IPv6 multicast over IPv4 tunnels MPLS LER/MPLS LSR, LDP, LSP, MPLS L3 VPN, CSC, MPLS ping/trace, Cross-domain MPLS VPN, MPLS QOS, VPLS, VPWS IP precedence, 802.1P, DSCP, ToS, EXP, FIFO, PQ, CQ, SP, RR, WRR, DRR, SP+WRR, SP+DRR, WRED/RED, CAR, LR, GTS VSU, GR, In-Service Software Upgrade, RERP, REUP, RLDP, TPP, LD, Dual engines hot backup, NSF, Power supply redundancy, Passive backplane, Fan system redundancy, All modules support hot swap, Switching fabric redundancy NFPP, CPP, Anti-DDoS attack, Illegal packet detection, Data encryption, Anti-source IP spoofing, Anti-IP scanning. Standard/extended ACL, Ingress/Egress ACL,, Plain text authentication and MD5 authentication for OSPF/RIP/BGP, Telnet login and password mechanism for limited IP address, Broadcast suppression, DHCP snooping, Radius/TACACS Syslog, Reporting alarms and self-recovery after faults, SNTP/NTP, RMON group 1,2,3,9, SNMPv1/v2/v3c; Console/AUX/Modem/Telnet/SSH2.0, WEB management, FTP/TFTP, xmodem, SPAN/RSPAN/ERSPAN, IPFIX DHCP Client, DHCP Relay, DHCP Server, DNS Client, UDP helper, ARP Proxy Innovation Beyond Network 7

10 RG-S8614 RG-S8610 RG-S8606-Bseries Dimension (D x W x H) (mm) Power Supply MTBF 508 * * * * * * RG-PA1200E: 90 VAC 264 VAC, 47 63Hz, power: 1200W RG-PA2000: 90 VAC 264 VAC, 47 63Hz, power: 2000W RG-PD1200: 36 VDC to 72 VDC, power: 1200W RG-PA800IF: 90~290VAC, 45~65Hz, power: 800W > 200,000 hours Temperature Operation Temperature: 0ºC to 40ºC Storage Temperature: -40ºC to 70ºC Humidity Operation Humidity: 10%-90% RH Storage Humidity: 5%-90% RH Innovation Beyond Network 8

11 4 Typical Applications 4.1 IPv4/IPv6 Campus Core Networks 10Gigabit Virtualization Network 1. Virtualization Core architecture to ensure the failure recovery time within 50ms so there is not any influence on your business. 2. VSU can a provide redundancy link to increase reliability and ensure the stability of the entire network. 3. To deploy LACP at convergence layer to increase the uplink bandwidth and redundancy 4. The hardware ASIC of the RG-S8600 supports IPv6 and 10Gigabit IPv6 service forwarding, meeting the requirements of functioning as the core of IPv4/IPv6 networks. It fully supports IPv4/IPv6 unicast and multicast routing technologies and can help to build perfect IPv4/IPv6 networks. In addition, the RG-S8600 supports Innovation Beyond Network 9

12 tunneling technologies such as 6to4 and ISATAP and can implement smooth transition from IPv4 networks to IPv6 networks. 5. The RG-S8600 provides the most powerful security defense function in the industry. On the basis of the CSS, the RG-S8600 can provide professional security defense function through hardware against DDOS attacks, illegal data packet detection, and source IP spoofing. The core device supports IPFIX traffic monitoring technologies and can monitor 10Gigabit service traffic. The RG-S8600 supports CPP-CPU functions, realizing stability of the core CPU in IPv4/IPv6 network environment. It also supports NFPP, automatically detecting attacks and delivering policies. The RG-S8600 can meet the requirement of new safe and trustful campus networks. 6. The RG-S8600 provides high-performance fully distributed hardware policy routing functions and supports ECMP/WCMP. It can help users to use multiple links, increasing the transmission bandwidth and backing up data transmitted on failed links without delay or packet loss. In this way, it implements traffic load balancing and redundancy backup. 7. The RG-S8600 is designed for 100G platforms. It supports high-density 10Gigabit line speed forwarding and provides high speed connections through 10Gigabit backbone networks to ensure efficient running of services. In addition, it provides redundancy backup of links between backbone areas to improve network reliability. 4.2 Secure Gateway of Campus Network Secure Financial LAN Innovation Beyond Network 10

13 1. The RG-S8600 uses technologies such as VRRP and 802.1S to provide load balancing and redundancy backup between switches and core switches, meeting financial institutions high requirements of network stability. 2. The RG-S8600 provides the most powerful security defense function in the industry. It can provide professional security defense functions through hardware against DDOS attacks, illegal data packet detection, and source IP spoofing. It provides IPFIX traffic monitoring capabilities and CPP technologies through hardware, meeting the requirement of new safe and trustful financial networks 3. The RG-S8600 provides flexible traffic classification technologies and various congestion control QoS technologies and supports the latest generation DDR queuing technology, meeting the requirements of performance and bandwidth guarantee for important services on financial networks. 4. The RG-S8600 delivers strong route processing capabilities, meeting requirements of high performance on financial networks where routing design is complex. Innovation Beyond Network 11

14 5 Ordering Information The chassis, management engine, power supply, and line cards can be purchased respectively as required. 5.1 Chassis and Management Engine The chassis and the management engine need to be configured according to the requirement. Type Description RG-S8614 chassis and management engine RG-S8614-Chassis M8614-CM II MEM-CM-512 RG-S8614 Chassis Multi-service 100G Routing Switch, 14 Slots, Fan System S8614 Management Engine II, Support Redundancy and USB Interface S8600 Expansion Memory for Management Engine (512M) RG-S8610 chassis and management engine RG-S8610-Chassis M8610-CM II M8610-CM III MEM-CM-512 RG-S8610 Chassis Multi-service 100G Routing Switch, 10 Slots, Fan System S8610 Management Engine II, Support Redundancy and USB Interface S8610 Management Engine III, Support Redundancy and USB Interface S8600 Expansion Memory for Management Engine (512M) RG-S8606-Bseries chassis and management engine RG-S8606-Bseries M8606-CM II M8606-CM III MEM-CM-512 RG-S8606-Bseries Multi-service 100G Routing Switch, 6 Slots, Fan System S8606-Bseries Management Engine II, Support Redundancy and USB Interface S8606-Bseries Management Engine III, Support Redundancy and USB Interface S8600 Expansion Memory for Management Engine (512M) Innovation Beyond Network 12

15 5.2 Power System The power supply can be either AC or DC type. Type RG-PA1200E RG-PA2000 Description S8600 AC Power Supply Module (1200W, Support Redundancy, with 13A Power Cable and Attaching Plug, Length 3M) S8600 AC Power Supply Module (2000W, Support Redundancy, for POE Line Cards, with 13A Power Cable and Attaching Plug, Length 3M) RG-PD1200 S8600 DC Power Supply Module (1200W, Support Redundancy, Length 5M) RG-PA800IF S8600 AC Power Supply Module (800W, Support Redundancy, with 10A Power Cable and Attaching Plug, Length 1.5M), for RG-S8606-Bseries 5.3 Line Card Line cards need to be selected according to the requirement. Type Description Enterprise B series line cards, distributed IPv4 and IPv6 forwarding M GT/12SFP M SFP M SFP/12GT M GT/4SFP S8600 Interface Module, 24 Ports 10/100/1000BASE-T(RJ45), 12 Combo Ports 1000BASE-X(SFP, LC) S8600 Interface Module, 24 Ports 1000BASE-X(SFP, LC) S8600 Interface Module, 24 Ports 1000BASE-X(SFP, LC), 12 Combo Ports 10/100/1000BASE-T(RJ45) S8600 Interface Module, 48 Ports 10/100/1000BASE-T(RJ45), 4 Combo Ports 1000BASE-X(SFP, LC) M XFP24SFP/12GT-E S8600 Interface Module, 2 Ports 10GE(XFP), 24 Ports 1000BASE-X(SFP, LC), 12 Combo Ports 10/100/1000BASE-T(RJ45), Enhance Module M XFP M XFP M XFP S8600 Interface Module, 2 Ports 10GE(XFP) S8600 Interface Module, 4 Ports 10GE(XFP) S8600 Interface Module, 8 Ports 10GE(XFP) Innovation Beyond Network 13

16 Enterprise C series line cards, distributed IPv4, IPv6, and MPLS forwarding M XFP24SFP/12GT-EC S8600 Interface Module (EC), 2 Ports 10GE(XFP), 24 Ports 1000BASE-X(SFP, LC), 12 Combo Ports 10/100/1000BASE-T(RJ45), Enhance Module M GT/12SFP-EC M SFP/12GT-EC M GT/4SFP-EC M8600P-48GT/4SFP-EC M XFP-EC S8600 Interface Module (EC), 24 Ports 10/100/1000BASE-T(RJ45), 12 Combo Ports 1000BASE-X(SFP, LC) S8600 Interface Module (EC), 24 Ports 1000BASE-X(SFP, LC), 12 Combo Ports 10/100/1000BASE-T(RJ45) S8600 Interface Module (EC), 48 Ports 10/100/1000BASE-T(RJ45), 4 Combo Ports 1000BASE-X(SFP, LC) S8600 Interface Module (EC), 48 Ports 10/100/1000BASE-T(RJ45, PoE), 4 Combo Ports 1000BASE-X(SFP, LC) S8600 Interface Module (EC), 4 Ports 10GE(XFP) Multi-service modules M8600-VSU-02XFP M8600-MPLS M8600-NMM S8600 VSU Service Card, with 2 Ports 10GE(XFP) for VSU Mode Only S8600 MPLS Service Card S8600 IPFIX Service Card Innovation Beyond Network 14

17 6 For More Information For more information about the RG-S8600 Series Switches, please visit or contact your local Ruijie account representative. Innovation Beyond Network 15

Data Center Core Switch RG-S12000 Series Datasheet

Data Center Core Switch RG-S12000 Series Datasheet Ruijie Networks Co., Ltd. All rights reserved Contents 1 Product Pictures... 1 2 Product Overview... 2 3 Product Features... 4 4 Technical Parameters...