Huawei Quidway S8500 Switch Series

Quidway S8500 switchar är den nya generationen 10G core routing plattformen utvecklad av Huawei. Inriktad på applikationer på företags core nätverk och te.x. IP-stadsnät. Med intelligent skalbar arkitektur, och säkra och pålitliga prestanda.

S8500 använde den innovativa 10G plattformen och flexibel porttäthet för att erbjuda höghastighetsuppkoppling till alla större nätverk till en låg kostnad förenat med hög prestanda.

Anpassad för maximalt 576 GE-portar eller 48 10GE-portar ger S8500 L3 och L2 forwarding prestanda till hög kapacitet, hög täthet och modulering för att stödja MPLS wire speed forwarding.

Integrerad med flertalet olika tjänster, kraftfull ”Quality of Service” (QoS) garanti, komplett säkerhetshantering och hög pålitlighet av carrier-class.

Overview

The Quidway S8500 switch series (S8500 for short) is a new-generation 10G core routing switch platform developed by Huawei geared towards applications in enterprise campus network core layers and carriers IP metropolitan-area network (MAN) core or distribution layers for its intelligent, scalable architecture, as well as its converged, secure and reliable performance.

To help carriers and enterprises accomplish their inspiring business perspective with appropriate investment and valuable consideration in IT infrastructure, the S8500 series employs the unparalleled and innovational 10G platform and flexible port density interface modules to provide high speed links for MAN, campus and data center networks, featuring low cost, high performance and capabilities to support abundant services. Configured maximally 576 GE-ports or 48 10GE-ports, the S8500 series provides L3 and L2 forwarding performance of large capacity, high density and modularization to support the MPLS distributed wire-speed forwarding.

Integrated with multiple services categories, powerful QoS guarantee, complete security management mechanism and carrier-class high reliability, the S8500 series demonstrates its coincidence with customer´s aspiration and continues to satisfy their requirements for maximum network uptime, comprehensive network security, and scalable and flexible services.

Features

The S8500 series adopts numerous industry-leading features to realize the promise of top-ranking services, performance and availability with investment protection for enterprise and service provider IP communication markets, including:

Advanced System Structure

The S8500 series introduces the distributed system architecture and powerful ASIC chips for high-speed routing, as well the Crossbar technologies for packet switching, which greatly improve the forwarding performance and expansion capabilities of the routing switch. Embedded in the main control module, the Crossbar switching fabric provides a switching capacity up to 720 Gbps and can be set to work in the active/standby or load-sharing mode by software configuration. Through several 10 Gbps buses, the interface module is connected to the Crossbar switching networks on the two main control modules realizing the hot backup of dual main controls and dual switching networks in the real sense and greatly improving the system reliability.

Adopting the advanced system ASIC chip design, the longest routing prefix mode and the packet-bypacket forwarding mode, the S8500 series can effectively combat network viruses like Worm.Blaster, get more applicable to large-scale networks with multiple services and complex visit flows and match more exactly the Ethernet MAN development trend, while keeping the wire-speed performance and relying on the low cost.

High Capacity, High-Density, Wire-Speed Forwarding

The S8500 series can provide 1.8T backplane bandwidth, 720 Gbps switching capacity and 428 Mpps forwarding capability to support ultimate 576 GE ports or 48 10GE ports totally. In addition, the S8500 series provides flexible interface choices from 10/100/1000 Megabit to 10 Gigabit Ethernet and combined interface boards to satisfy the customer´s requirements for high density and high throughput.

Ideal for powerful hardware platform upgrade capabilities, the S8500 series has reserved a large number of bus interfaces on the backplane for future system expansion. The system switching capacity can be smoothly expanded to terabits to meet the ever-increasing bandwidth needs and user investment protection.

Carrier-Class Reliability Design

The S8500 series adopts distributed processing structure to support dual main control switching units with all interface modules and power supply modules hot swappable and passive backplane design. The power system has dual power inputs following the 1+1 redundant hot backup mechanism. All the reliability designs ensure the system to meet strict requirements for carrier-class network reliability (up to 99.999%).

MPLS Distributed Wire-speed Supported

The S8500 series provides hardware based Multi-protocol Label Switching (MPLS) to enable VPN services within the enterprise and facilitates smooth integration with wire-speed service provider core infrastructures and Metro Ethernet deployments. More than featuring the configuration of VPN IPv4 address & distribution VPN-IPv4 information by BGP, the S8500 series offers the comprehensive MIB functions through supervising VPN VRF, VPN Interface, VPN VRF BGP configuration table and VPN VRF Route ,VPN VRF Route Target table.

VLL & VPLS Layer 2 VPN Solutions

With the availability of MPLS enhanced interface module, The S8500 series provides abundant distributed and wire speed L2 VPN processing capability, including Martini and Kompella mode with 4K VLL VC. In addition, MPLS-VPLS has also been developed to provide centralized VPLS processing capability, with 1K VPLS VSI and MAC address 128/VSI; the processing capacity of VPLS NP module reaches 3 Gbps and MAC table is 128K in total.

RPR Solution

The S8500 will offer 10G RPR interface module in Q1/2006. The RPR (Resilient Packet Ring) technology combines advantages of SDH network and Ethernet, such as fault self-healing and cost-effectiveness for SDH, high bandwidth, high flexibility and expansibility for Ethernet. In addition, as RPR is based on ring technology, it can provide advanced features like highly efficient bandwidth management, automatic topology discovery, QoS guarantee, etc.

Complete Security Mechanism

The S8500 series employs the 802.1x mode for access user authentication, secure SNMPv3 NM protocol and MD5 encrypted authentication of OSPFv2, RIPv2 and BGPv4 packets. By distinguishing different users of various service levels, the S8500 series has different configuration privileges and provides two user authentication modes: local authentication and RADIUS authentication with the standard RADIUS protocol and SSH for access safety. The rich traffic control mechanisms are supported including ACL based on source and destination IP address, MAC address and port number.

10 Gigabit Interfaces Supported

The S8500 series figures the industry leading 10 Gigabit Ethernet and OC-192 packet over SDH/SONET (PoS) up to 48 10GE or 12 10G PoS port density of the whole system to provide a pertinent solution for MAN applications to simplify the network architecture and reduce the network construction costs. With chassis size ranging from 2 (for S8502), 5 (for S8505), 8 (for S8508) to 12 (for S8512) and utmost 288 10/100/1000M Ethernet ports supporting IEEE 802.3af Power over Ethernet (PoE), the S8500 delivers a intelligent and economical solution for the enterprise campus aggregation network.

The S8500 series symbolizes the 10GE network practices by providing powerful QoS guarantee, rich services features such as ACL, strategic routing and security, wire-speed MPLS forwarding, IP VPN services and transparent LAN services.

Integrated IEEE 802.af PoE Supported

Coming with the centralized and manageable Power-over-Ethernet (PoE) power supply assembly, the S8500 series simplifies the customers´ power layout through supporting the integrated IEEE 802.3af PoE functions to the desktop access switch. By providing optional choices of the PoE Chassis, power module and surge protection device, the PoE system facilitates the enterprise campus and carrier´s network layout to be more expansible and scalable.

Flexible Network Address Translation (NAT) Deployment

The S8500 series supports the flexible Network Address Translation (NAT) deployment by providing the specific NAT processing module to achieve the application layer gateway service of FTP, ICMP, DNS, LDAP, H.225, H.245, SIP, etc. To ease the customer´s internal network IP management and speed up the campus network configuration, the NAT processing module provides NAT log, NAT blacklist and NAT/ NAPT of Internet access service for all VPN users.

Firewall and IPSec Function Supported

With the flooding of network attacks, security has been becoming a critical issue in the network industry. Concerning about customers´ demand in the network security, the S8500 switches provide SecBlade Firewall/VPN module to support rich firewall and IPSec function. SecBlade Firewall module supports ASPF, NAT-PAT, IPSec VPN encryption features, multiple certificate authentication, various network attack defending, real-time traffic analysis, internal network address security, email alarm, etc. SecBlade VPN module provides abundant VPN functions (such as L2TP VPN, GRE VPN, IPSec VPN, MPLS VPN and Huawei DVPN) and supports IPSec hardware encryption (such as DES, 3DES and AES).