DATA SHEET HoPE Solution In BGP MPLS VPN, since a PE device has to aggregate multiple VPN routes, a bottleneck is likely to occur if there are too many subscribers to be accessed by a PE with relatively less capacity. To solve this problem, Huawei Technologies brought forward the Hierarchy of PE (HoPE) solution. HoPE separates the PEs on an MPLS VPN network into different layers to form a hierarchical BGP MPLS VPN network. The PE at a different layer plays a different role. The PE at a higher layer requires more on routing and forwarding capacity and mainly interconnects the backbone network and accesses the VPN subscrbers at the edge. Such network can be infinitively nested; the scalability of BGP / MPLS VPN is also significantly improved. PE includes SPE, MPE and UPE. PEs at different levels adopt label switching among each other and can be directly connected via interfaces / sub-interfaces of different forms or through tunnels. UPE provides multiple interfaces to maintain the routes to the directly connected VPN Sites, but not maintain the routes to other remote sites. It also allocates an internal label for the routes to the directly connected sites and advertises them to SPE. SPE maintains all the routes in the VPN containing the direct Sites via UPE. These routes include the routes in local and remote sites. However, it advertises VPN routing / forwarding instance (VRF) default route with label to UPE only. When SPE and UPE belong to the same carrier, SPE-UPE protocol adopts MP-iBGP and SPE serves as RR. When SPE and UPE belong to different carriers, SPE-UPE protocol adopts MP-eBGP and UPE normally uses private AS number. Quidway Series Intelligent Multi-Service Modular Branch Router Quidway -09 Quidway -09 series routers are enterprise branch routers with modular structure. routers not only integrate Fast Ethernet (FE) interfaces, AUX port, synchronous/asynchronous serial interfaces or channelized E1/T1, but also abundant optional SICs (Smart Interface Cards) and MIMs (Multifunction Interface Modules). Quidway -09 modular routers feature higher cost effectiveness and superior expandability. Together with Quidway routers and switches, Quidway -09 routers can provide overall end-to-end network solutions for users like telecommunication carriers, ISP, finance, taxation, public security and railway organisations. Quidway -09 Rear view The Quidway -09 is a typical desktop router with rich functions and a high performance/cost ratio. In addition, it can be hung on a wall or in a mounting box. Quidway -10/11/12/13/14 Quidway -1x series routers are modular rack-mounting routers. Beside one or two fixed Fast Ethernet interface, AUX interface, synchronous/asynchronous serial port, or E1/T1 port, the routers provide sufficient Smart Interface Cards (SIC) and Multifunctional Interface Modules (MIM), offering comprehensive network solutions for carrier, enterprise and SMB users. In addition, Quidway -1x series routers provide a AC or DC power supply host, applicable to the telecom network environment such as telecom management network and charging network. Quidway -1x series routers adopt the VRP platform. They support Dynamic VPN, BIMS (Branch Intelligent Management System) and EAD (Endpoint Access Defense) features and applications of ADSL, GE, ATM plus Ethernet switching interface modules. In addition, they are scalable and cost-effective and can fully satisfy the application demands of enterprises. Quidway -10 Rear View Quidway -11 Rear View Quidway -12 Rear View Diagram for HoPE Solution with Quidway Series Routers There are five Quidway -1x router models: -10, -11, -12, -13, and -14. Huawei-3Com Co., Ltd. Add : East of Liuhe Road, Zhijiang Science Park, Hangzhou 310053, P.R.China Tel : +86-571-86760000 Fax : +86-571-86760353 Website : www.huawei-3com.com Version No. : GE-082130-20060301-BR-V2.0 Copyright 2005-2006 by Huawei-3Com Co., Ltd. All product photography in this literature is intended for reference only. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any company or person and product names may be trademarks of their respective companies. While every effort is made to ensure the information given is accurate, Huawei-3Com Co., Ltd. does not accept liability for any errors or mistakes which may arise. Specifications and other information in this document may be subject to change without notice. Quidway -30/31 Quidway -3x series routers are modular convergence routers oriented to enterprise users, applicable to government departments, the financial industry, the electric power supply industry and enterprise branches. Quidway -3x series routers adopt VRP platform, provide abundant software features, back-up schemes and QoS Quidway -13 Rear View 12 1
Quidway -14 Rear View Quidway -30 Rear View Quidway -31 Rear View features. They also support dumb terminal access servers, POS access, SNA/DLSw and VoIP. DVPN, BIMS and EAD features. In addition, they have good scalability and can fully satisfy the application demands of enterprises. Quidway -3x series routers, with their modular structure, can provide integrated FE and flexible configuration modes. Quidway -40/80 Quidway -40/80 routers are oriented to enterprise users, serving as convergence layer routers in large networks or core routers in medium-sized networks. Quidway -40/80 routers adopt 32-bit microprocessor technology in modular structure. Compared with -3x series routers, they have higher processing capability and larger access density. Quidway -40/80 series routers adopt VRP platform, which supports DVPN, BIMS, EAD features and applications of ADSL, GE or ATM interface modules. In addition, they have good scalability and can fully satisfy the application demands of enterprises. There are two Quidway -40/80 router models: - 40 and -80. Product Features Quidway routers inherit the four design advantages of Huawei Quidway NetEngine high-end router: High performance, high quality, high reliability and high security. In addition, they are integrated with the service capabilities of Huawei Quidway middle/low-end routers and Huawei applications experience. Quidway routers therefore meet all requirements for network performance, service integration, high reliability, high security and tri-play solutions for rapid information development. Multi-service integrated Enhanced hardware encryption: IPsec DES, 3DES, and AES128/192/256 are supported on routers. The hardware encryption module - HNDE can provide as high as 110Mbps encryption throughput and 1000 encrypted tunnels. Comprehensive VPN and security features: The traditional VPN, such as L2TP and GRE VPN as well as the Dynamic VPN, MPLS/BGP VPN and MPLS L2 VPN (Martini, Kompalla, CCC, SVC, etc) are all supported on. Other security features, such as RADIUS, ASPF (Application Specific Packet Filtering), EAD (Endpoint Access Defense), Portal and PKI/CA certificate also ensure the customer enjoys secure and resilient network connectivity and application. VoIP and VoFR integrated: With an embedded voice service in the routers, provides a flexible and cost-effective tri-play solution for customers. Based on the H.323 or SIP, routers provide multiple interface modules for VoIP applications, such as FXS/FXO/ISDN BRI voice and E1/T1 digital voice. QoS ensured: Quality of Service is enhanced in series routers. NetStream monitoring and RCR (Resilient Controllable Routing) provide traffic flow analysis to optimize the network; DAR (Deeper Application Recognition) recognize and classify the L4-L7 application and protocols flows, ensuring high QoS for different applications. Routing and switching integrated: routers provide 8-port and 16-port 10/100Mbps LAN switching modules, which provide more cost-effective solutions for customers. Easy maintenance and efficient deployment Quidway routers provide more customized management solutions. One serial number for one device: Every AR router is sealed with a unique serial number, which eases the locating of any network problem and network management. Auto-config can automatically detect and configure all its interfaces upon first use and starts Telnet, FTP, or Web service. Easy Deployment: Based on BIMS (Branch Intelligent Management System), Auto-config and Serial Number per device, zero-touch with a central management system is realized. Configuration Rollback: If any error occurs when configuration is being deployed, the device will inform the NMS, the configuration file will rollback, which will ensure the future reliability of configuration deployment. NetStream provides network traffic accounting and resource usage for both ISPs and enterprise customers. HWping enhances the ping function, which can detect the state of and service type of DLSw, DHCP, FTP, HTTP, or SNMP servers, realizes the service status monitoring and network quality analyzing. Serial-Port Server Function: A serial-port connection line can be used to connect the asynchronous port of the router (8/16-port ASE) with the Console port of the managed device. A PC can log in to the router through Telnet to control the managed device. This approach has the same effect as the control by directly connecting the serial port of the PC to the Console port of the managed device. routers also provide RMON, SSHv2 (Secure Shell Protocol Version2) and SNMPv3 (Simple Network Management Protocols Version 3) for secure management. Quidway -40 Rear View Quidway -80 Rear View Cost-effective architechure and abundant interface modules Quidway routers integrate multiple interfaces on the board, not only 10/100M Ethernet port, but also syn/asyn serial port, channelized E1/PRI or channelized T1/PRI on different routers. Quidway routers also support two kinds of modules, SIC (Smart Interface Card) and MIM (Multifunctional Interface Modules) providing more cost-effective choices for customers. Quidway routers support high speed interface, such as copper and fiber Gigabit Ethernet, ATM 155M, Channelized POS (155M), meeting the requirements of industry or enterprise central equipment. Software Specification Network Interconnection Protocol VPN Network Layer Protocol and Application Routing Protocol Transmission layer protocol Application Layer Protocol and Application Security Characteristics QoS Application Voice Application Reliability Functions Management Ethernet (802.1q VLAN), PPP, MP, SLIP, FR, LAPB, X.25,ISDN, HDLC, ATM L2TP VPN, GRE VPN, IPSec VPN, MPLS/BGP VPN, MPLS L2VPN, DVPN IP (TCP/IP), IPX, DLSw, IP Fast Switch, DHCP Client / Server /Relay. Static Routing, OSPF,RIPv1 / v2, BGP-4,IS-IS,Policy Routing, IGMP,MSDP,PIMDM,PIM-SM, MBGP TCP, UDP Telnet, Dumb Terminal, Terminal Server, FTP,TFTP, Callback, SNMPv1/v2/v3,RMON, POS, RTU AAA RADIUS, SSHv2, ASPF, NAT, IPSec, IKE, Encryption card, Huawei-TACACS, RSA, CA, EAD PQ, CQ, WFQ, CBWFQ, CAR, GTS, WRED, LR VOIP, VOFR, IP Fax, IPHC, GK Client, ISDN BRI, E1 Voice, T1 Voice, H.323, SIP VRRP, Backup Center GUI-based management 2 3
Hardware Specification Hardware Specifications of Quidway AR 28-09 Routers Description Module Fixed Interfaces SDRAM Forwarding Rate Dimensions (W X H X D) Weight Maximum Power Operating Temperature Operating Humidity Specification Hardware Specifications of Quidway AR 28-1x Series Routers 2 SIC slots, 1 MIM slot 1 10/100Mbps Ethernet Interface 1 Synchronous/Asynchronous serial Interface 1 AUX Port 1 Console Port 128MB 70Kpps 376.2 X 79.4 X 287.9 mm (including the rubber feet) 2.5kg 50W 0 to 40 o C 10 to 90%, non-condensing Description AR 28-10/11 AR 28-12/13/14 Module Slots 2 SIC slots, 1 MIM slot Fixed Interfaces 1 S/A, 2 S/A, 2 10/100M FE (for -12) 1 10/100M FE (for -10) 1 CE1, 2 10/100M FE(for -13) 2 10/100M FE 1 CT1, 2 10/100M FE(for -14) 1 AUX,1Console SDRAM Default 128MB(Max. 128MB) Default 128MB(Max. 256MB) Forwarding Rate 80Kpps 90Kpps Dimensions (W X H X D) 442 mm x 44.4 mm x 315mm (19'' Rack) Weight 6kg DC:-48V to -60V Maximum Power 60W Operating Temperature 0 to 40 o C Operating Humidity 10 to 90%, non-condensing Hardware Specifications of Quidway AR 28-30/31 Routers Description AR 28-30 AR 28-31 Module Slots 3 Slots for MIM Fixed Interfaces 1 10/100Mbps Ethernet 2 10/100Mbps Ethernet 1 AUX Port 1 Console Port SDRAM Default 128MB(Max. 256MB) Forwarding Rate 100Kpps Dimensions (W X H X D) 442 X 44.3 X 413 mm (19'' Rack) Weight 8kg Maximum Power 80W Operating Temperature 0 to 40 o C Operating Humidity 10 to 90%, non-condensing Hardware Specifications of Quidway*AR 28-40/80 Series Routers Description AR 28-40 AR 28-80 Module Slots 4 Slots for MIM 8 Slots for MIM Fixed Interfaces 1 AUX Port 1 Console Port SDRAM Default 128MB(Max. 256MB) Forwarding Rate 120Kpps Dimensions (W X H X D) 442 X 44.3 X 413 mm (19'' Rack) 442 X 88.2 X 413 mm (19'' Rack) Weight 8kg 14kg Maximum Power 80W 120W Operating Temperature 0 to 40 o C Operating Humidity 10 to 90%, non-condensing Hosts and Modules Table 1 Series Routers Host configurations AR 28-09 Quidway AR 28-09 Router Host, 1 MIM Slot, 2 SIC Slots, 1 10/100BASE-TX Port and 1 Sync/ Async Serial Port, AC 220V AR 28-10 Quidway AR 28-10 Router Host, 1 MIM Slot, 2 SIC Slots, 1 10/100BASE-TX Port, 1 Sync/Async Serial Port, AC 220V AR 28-10-DC48 Quidway AR 28-10 Router Host, 1 MIM Slot, 2 SIC Slots, 1 10/100BASE-TX Port, 1 Sync/Async Serial Port, DC 48V AR 28-11 Quidway AR 28-11 Router Host, 1 MIM Slot, 2 SIC Slots, 2 10/100BASE-TX Port, 1 Sync/Async Serial Port, AC 220V AR 28-11-DC48 Quidway AR 28-11 Router Host, 1 MIM Slot, 2 SIC Slots, 2 10/100BASE-TX Port, 1 Sync/Async Serial Port, DC 48V RT-AR 28-12-AC-OVS Quidway AR 28-12 Router Host, 1 MIM Slot, 2 SIC Slots, 2 10/100BASE-TX Ports, 2 Sync/Async Serial Ports, AC 220V RT-AR 28-12-DC-OVS Quidway AR 28-12 Router Host, 1 MIM Slot, 2 SIC Slots, 2 10/100BASE-TX Ports, 2 Sync/Async Serial Ports, DC 48V RT-AR 28-13-AC-OVS Quidway AR 28-13 Router Host, 1 MIM Slot, 2 SIC Slots, 2 10/100BASE-TX Ports, 1 CE1/PRI Port, AC 220V RT-AR 28-13-DC-OVS Quidway AR 28-13 Router Host, 1 MIM Slot, 2 SIC Slots, 2 10/100BASE-TX Ports, 1 CE1/PRI Port, DC 48V RT-AR 28-14-AC-OVS Quidway AR 28-14 Router Host, 1 MIM Slot, 2 SIC Slots, 2 10/100BASE-TX Ports, 1 CT1/PRI Port, AC 220V RT-AR 28-14-DC-OVS Quidway AR 28-14 Router Host, 1 MIM Slot, 2 SIC Slots, 2 10/100BASE-TX Ports, 1 CT1/PRI Port, DC 48V AR 28-30 Quidway AR 28-30 Router Host, 3 MIM Modular Slots, 1 10/100BASE-TX Port (RJ45), AC220V AR 28-31 Quidway AR 28-31 Router Host, 3 MIM Modular Slots, 2 10/100BASE-TX Ports (RJ45), AC220V AR 28-40 Quidway AR 28-40 Router Host, 4 MIM Modular Slots, AC220V AR 28-80 Quidway AR 28-80 Router Host, 8 MIM Modular Slots, AC220V RT-SDRAM-128 128MB SDRAM for -30/31/40/80 RT-SDRAM-256 256MB SDRAM for -12/13/14 4 5
Table 2 Optional MIM interface module configurations Ethernet WAN interface modules RT-1FE 1-port 10/100BASE-TX Module, RJ45 RT-2FE 2-port 10/100BASE-TX Module, RJ45 RT-1SFX 1-port 100BASE-FX Ethernet Single Mode Optical Interface Module (1310nm, 15km, SC) RT-1MFX 1-port 100BASE-FX Ethernet Multi-Mode Optical Interface Module (1310nm, 2km, SC) RT-1GBE 1-port 10/100/1000BASE-T Ethernet Electrical Interface Module, RJ45 RT-2GBE 2-port 10/100/1000BASE-T Ethernet Electrical Interface Module, RJ45 RT-1GEF 1-port 1000BASE-X Optical Interface Module (SFP, LC) RT-2GEF 2-port 1000BASE-X Optical Interface Module (SFP, LC) Serial modules RT-8ASE 8-port Asynchronous Serial Interface Module, RJ45 RT-16ASE 16-port Asynchronous Serial Interface Module, RJ45 RT-2SAE 2-port Enhanced Sync/Async Interface Module RT-4SAE 4-port Enhanced Sync/Async Interface Module RT-8SAE 8-port Enhanced Sync/Async Interface Module Channelized and fractional E1/T1 modules RT-1E1 1-port E1/CE1/PRI Module RT-2E1 2-port E1/CE1/PRI Module RT-4E1 4-port E1/CE1/PRI Module RT-8E1(75) 8-port E1/CE1/PRI Module (75ohm) RT-8E1(120) 8-port E1/CE1/PRI Module (120ohm) RT-1E1-F 1-port E1 Module-Fractional RT-2E1-F 2-port E1 Module-Fractional RT-4E1-F 4-port E1 Module-Fractional RT-8E1(75)-F 8-port E1 Module-Fractional (75ohm) RT-8E1(120)-F 8-port E1 Module-Fractional (120ohm) RT-1T1 1-port T1/CT1/PRI Module RT-2T1 2-port T1/CT1/PRI Module RT-4T1 4-port T1/CT1/PRI Module RT-8T1 8-port T1/CT1/PRI Module RT-1T1-F 1-port T1 Module-Fractional RT-2T1-F 2-port T1 Module-Fractional RT-4T1-F 4-port T1 Module-Fractional RT-8T1-F 8-port T1 Module-Fractional DSL modules RT-1ADSL 1-port ADSL over POTS Module, RJ11 RT-2ADSL 2-port ADSL over POTS Module, RJ11 RT-1ADSL-I 1-port ADSL over ISDN Interface Module, RJ11 RT-2ADSL-I 2-port ADSL over ISDN Interface Module, RJ11 RT-1G.SHDSL 1-port G.SHDSL Interface Module, RJ11 RT-2G.SHDSL 2-port G.SHDSL Interface Module, RJ11 RT-4G.SHDSL 4-port G.SHDSL Interface Module, RJ11 RT-1SHL-4W 1-port Four Wire G.SHDSL Interface Module ISDN and Modem modules RT-4BS 4-port ISDN-BRI Module, S/T RT-2FCM 2-port Fast Connect Modem Module, RJ11 RT-4FCM 4-port Fast Connect Modem Module, RJ11 RT-6FCM 6-port Fast Connect Modem Module, RJ45 Channelized E3/T3 modules RT-1CE3 1-port E3/CE3 Module RT-1CT3 1-port T3/CT3 Module ATM modules RT-1AMM 1-port OC-3 ATM Module (Multi-Mode, SC, 2km ) RT-1ASM 1-port OC-3 ATM Module (Single Mode, SC, 15km) RT-1ASL 1-port OC-3 ATM Module (Single Mode, SC, 30km) RT-1A25 1-port 25Mbps ATM Interface Module, RJ45 RT-1AE3 1-port E3 ATM Interface Module RT-1AT3 1-port DS3 ATM Interface Module ATM IMA modules RT-IMA-4E1(75) 4-port E1 ATM IMA Interface Module (75ohm) RT-IMA-4T1 4-port T1 ATM IMA Interface Module RT-IMA-4E1(120) 4-port E1 ATM IMA Interface Module (120ohm) RT-IMA-8E1(75) 8-port E1 ATM IMA Interface Module(75ohm) RT-IMA-8T1 8-port T1 ATM IMA Interface Module RT-IMA-8E1(120) 8-port E1 ATM IMA Interface Module (120ohm) Analog and digital voice modules RT-2FXS 2-port Analog Line Interface Module, FXS RT-4FXS 4-port Analog Line Interface Module, FXS RT-2FXO 2-port Analog Trunk Interface Module, FXO RT-4FXO 4-port Analog Trunk Interface Module, FXO RT-2EM 2-port Analog Trunk Interface Module, E&M RT-4EM 4-port Analog Trunk Interface Module, E&M RT-2BSV 2-port ISDN BRI S/T Voice Module RT-E1VI 1-port E1 IP Voice Module RT-T1VI 1-port T1 IP Voice Module Hardware encryption modules RT-NDEC Network Data Encryption Module RT-HNDE High Performance Network Data Encryption Module LAN switching modules RT-8LS 8-port 10/100BASE-TX L2 Ethernet Switch Module RT-16LS 16-port 10/100BASE-TX L2 Ethernet Switch Module POS modules RT-1CPOS(E) 1-port Channelized POS 155M to E1 Interface Module (SFP) RT-1CPOS(T) 1-port Channelized POS 155M to T1 Interface Module (SFP) RT-POS+MM-2Km RT-POS Bundle with SFP Transceiver Multi-Mode-2km RT-POS+SM-15Km RT-POS Bundle with SFP Transceiver Single Mode-15km RT-POS+SM-40Km RT-POS Bundle with SFP Transceiver Single Mode-40km Table 3 Optional SIC interface module configurations RT-SIC-1SA 1-port Sync/Async Serial Port Interface Card RT-SIC-3AS 3-port Asynchronous Serial Interface Card RT-SIC-1BS 1-port ISDN-BRI Card, S/T RT-SIC-2BS 2-port ISDN-BRI Card, S/T RT-SIC-1BU 1-port ISDN-BRI Card, U RT-SIC-2BU 2-port ISDN-BRI Card, U RT-SIC-TPRI 1-port T1/CT1/PRI Interface Card RT-SIC-EPRI 1-port E1/CE1/PRI Interface Card RT-SIC-1T1-F 1-port T1 Interface Card-Fractional RT-SIC-1E1-F 1-port E1 Interface Card-Fractional RT-SIC-1AM 1-port Analog Modem Interface Card RT-SIC-2AM 2-port Analog Modem Interface Card RT-SIC-1FXO 1-port Analog Trunk Interface Card, FXO RT-SIC-2FXO 2-port Analog Trunk Interface Card, FXO RT-SIC-1FXS 1-port Analog Line Interface Card, FXS RT-SIC-2FXS 2-port Analog Line Interface Card, FXS RT-SIC-1FEA 1-port 10/100BASE-TX Ethernet Interface Card RT-SIC-1ETH 1-port 10BASE-T Interface Card 6 7
Data Sheet Safety and Compliance Emissions / Agency Approvals CISPR 22 Class A or Class B FCC Part 15 Class A or Class B EN 55022 Class A or Class B ICES -003 Class A or Class B VCCI Class A or Class B AS/NZS CISPR 22 Class A or Class B EN 61000-3-2 EN 61000-3-3 Immunity Product conforms to: EN 55024 EN 61000-4-2 EN 61000-4-3 EN 61000-4-4 EN 61000-4-5 EN 61000-4-6 EN 61000-4-11 Safety Agency Certifications UL 60950-1 IEC 60950-1; all national deviations EN 60950-1, ZB and ZC deviations CSA 22.2 No. 950-1 AS/NZS 60950-1, Australia "Integrated" Terminal Solution for Regional Banks Regional banks can use the terminal server services and SNA function of Quidway Series Routers to realize the coexistence of the SNA network and TCP/IP network, so as to provide new services based on IP and finally transmit everything in IP network without changing the original system. Back-up Line Leased Line Typical Applications Corporation Network Application The following typical networking modes can be supported: Leased Line, frame relay or X.25 as the main link, PSTN or ISDN dial-up line as the back-up link, and the networking diagram is shown as below: Main points of networking: Quidway Series Routers can be connected to the Leased Line, Frame Relay or X.25 through the SSI (Synchronous Serial Interface) or ce1 module, to PSTN through the ASI (Asynchronous Serial Interface) module via the Modem pool, and to ISDN BRI through the BRI module. The main lines and back-up lines are automatically swapped by the router. The back-up modes may be dial-up backup or router back-up. Diagram of Implementing Integrated Terminal Solution for Regional Banks Back-up Line Leased Line Diagram for Implementing Integrated Networking of Enterprises Diagram for Voice Solution of Quidway Series Routers 8 9
Voice Solution In the headquarters, Quidway -80/40 Router serves as the voice gateway devices to implement VoIP function on the E1 line. In each branch, Quidway -09/10/11 Router is used to connect PBX or telephone to transform the voice signals between the legacy circuit switching network and IP network, providing enterprises with voice solutions of high quality and low cost. In the diagram, the GK system is optional. When the system is not on a large scale, they can be interconnected by means of gateway fixed distribution mode, for easy management. When the system has complicated hierarchy and architecture, GK is required to perform integrated management. MPLS VPN Solution Typical MPLS VPN Networking The legacy VPN adopting Permanent Virtual Circuit (PVC) and tunneling technologies have been proved successful. However, as the network grows larger, it is facing more and more problems on scalability, manageability and QoS. MPLS is the latest achievement in integrated routing/switching solutions. It integrates the flexibility of IP routing technology and the simplicity of L2 switching. In addition, it has an outstanding advantage in VPN construction. A MPLS network can conveniently implement the IP-based VPN services to satisfy VPN scalability and manageability. Security measures can be taken on the MPLS VPN to isolate the VPNs. MPLS network also provides powerful QoS mechanism to guarantee the quality of VPN services such as bandwidth, transmission, and delay. Users are provided with LAN (and even inter-as) MPLS VPN services. A VPN with all its sites belonging to an enterprise is called an Intranet, while a VPN containing sites of different enterprises are called an Extranet. Quidway Series Routers provide MPLS VPN access to Intranet and Extranet and Internet egress for the VPN users. Quidway Series Routers, serving as a Provider Edge (PE) router, is directly connected with the Customer Edge (CE) router to perform all the VPN-related functionalities. It exchanges routing information with other PEs through IBGP. APE can be connected with more than one CE. MPLS VPN uses edge LSR (PE) to add Label to the IP packets. The LSR (P) at ISP side can judge the destination of the data according to the Label. Additional routing of the data inside a VPN is not required so that MPLS VPN can achieve high speed forwarding and support large-scaled VPN network. Diagram for Secure VPN Applications Secure VPN Application Quidway Series Routers, serving as VPN gateways, support tunneling technologies such as L2TP or GRE and guarantee quality and security of information transmission on networks, integrating IPSec, NAT, firewall, and QoS technologies. Access VPN allows telecommuting employees to remotely access the company network, so they can continue on their tasks either at home or on a business trip. These people are connected to the VPN server at the headquarters over the private tunnels with the VPN service provided by the local ISP. Intranet VPN provides a means for the overseas organizations, branches, and offices of a company to interconnect with headquarters. It ensures security of information transferred on Intranet VPN over public Internet by applying tunneling and encryption technologies. Extranet VPN allows business partners and clients to access the company headquarters without compromising security of the Intranet. Diagram for MPLS VPN Networking with Quidway Series Routers 10 11