| Ethernet
Switches
Quidway S8500 Series
10G Core Routing Switches
Overview
The Quidway S8500 switch series (S8500 for short)
is a new-generation 10G core routing switch platform
developed by Huawei geared towards applications
in enterprise campus network core layers and carriers'
IP metropolitan-area network (MAN) core or distribution
layers for its intelligent, scalable architecture,
as well as its converged, secure and reliable
performance.
To help carriers and enterprises accomplish their
inspiring business perspective with appropriate
investment and valuable consideration in IT infrastructure,
the S8500 series employs the unparalleled and
innovational 10G platform and flexible port density
interface modules to provide high speed links
for MAN, campus and data center networks, featuring
low cost, high performance and capabilities to
support abundant services. Configured maximally
576 GE-ports or 48 10GE-ports, the S8500 series
provides L3 and L2 forwarding performance of large
capacity, high density and modularization to support
the MPLS distributed wire-speed forwarding.
Integrated with multiple services categories,
powerful QoS guarantee, complete security management
mechanism and carrier-class high reliability,
the S8500 series demonstrates its coincidence
with customer's aspiration and continues to satisfy
their requirements for maximum network uptime,
comprehensive network security, and scalable and
flexible services.
Features
The S8500 series adopts numerous industry-leading
features to realize the promise of top-ranking
services, performance and availability with investment
protection for enterprise and service provider
IP communication markets, including:
Advanced System Structure
The S8500 series introduces the distributed system
architecture and powerful ASIC chips for high-speed
routing, as well the Crossbar technologies for
packet switching, which greatly improve the forwarding
performance and expansion capabilities of the
routing switch. Embedded in the main control module,
the Crossbar switching fabric provides a switching
capacity up to 720 Gbps and can be set to work
in the active/standby or load-sharing mode by
software configuration. Through several 10 Gbps
buses, the interface module is connected to the
Crossbar switching networks on the two main control
modules realizing the hot backup of dual main
controls and dual switching networks in the real
sense and greatly improving the system reliability.
Adopting the advanced system ASIC chip design,
the longest routing prefix mode and the packet-bypacket
forwarding mode, the S8500 series can effectively
combat network viruses like Worm.Blaster, get
more applicable to large-scale networks with multiple
services and complex visit flows and match more
exactly the Ethernet MAN development trend, while
keeping the wire-speed performance and relying
on the low cost.
High Capacity, High-Density, Wire-Speed
Forwarding
The S8500 series can provide 1.8T backplane bandwidth,
720 Gbps switching capacity and 428 Mpps forwarding
capability to support ultimate 576 GE ports or
48 10GE ports totally. In addition, the S8500
series provides flexible interface choices from
10/100/1000 Megabit to 10 Gigabit Ethernet and
combined interface boards to satisfy the customer's
requirements for high density and high throughput.
Ideal for powerful hardware platform upgrade
capabilities, the S8500 series has reserved a
large number of bus interfaces on the backplane
for future system expansion. The system switching
capacity can be smoothly expanded to terabits
to meet the ever-increasing bandwidth needs and
user investment protection.
Carrier-Class Reliability Design
The S8500 series adopts distributed processing
structure to support dual main control switching
units with all interface modules and power supply
modules hot swappable and passive backplane design.
The power system has dual power inputs following
the 1+1 redundant hot backup mechanism. All the
reliability designs ensure the system to meet
strict requirements for carrier-class network
reliability (up to 99.999%).
MPLS Distributed Wire-speed Supported
The S8500 series provides hardware based Multi-protocol
Label Switching (MPLS) to enable VPN services
within the enterprise and facilitates smooth integration
with wire-speed service provider core infrastructures
and Metro Ethernet deployments. More than featuring
the configuration of VPN IPv4 address & distribution
VPN-IPv4 information by BGP, the S8500 series
offers the comprehensive MIB functions through
supervising VPN VRF, VPN Interface, VPN VRF BGP
configuration table and VPN VRF Route ,VPN VRF
Route Target table.
VLL & VPLS Layer 2 VPN Solutions
With the availability of MPLS enhanced interface
module, The S8500 series provides abundant distributed
and wire speed L2 VPN processing capability, including
Martini and Kompella mode with 4K VLL VC. In addition,
MPLS-VPLS has also been developed to provide centralized
VPLS processing capability, with 1K VPLS VSI and
MAC address 128/VSI; the processing capacity of
VPLS NP module reaches 3 Gbps and MAC table is
128K in total.
RPR Solution
The S8500 will offer 10G RPR interface module
in Q1/2006. The RPR (Resilient Packet Ring) technology
combines advantages of SDH network and Ethernet,
such as fault self-healing and cost-effectiveness
for SDH, high bandwidth, high flexibility and
expansibility for Ethernet. In addition, as RPR
is based on ring technology, it can provide advanced
features like highly efficient bandwidth management,
automatic topology discovery, QoS guarantee, etc.
Complete Security Mechanism
The S8500 series employs the 802.1x mode for
access user authentication, secure SNMPv3 NM protocol
and MD5 encrypted authentication of OSPFv2, RIPv2
and BGPv4 packets. By distinguishing different
users of various service levels, the S8500 series
has different configuration privileges and provides
two user authentication modes: local authentication
and RADIUS authentication with the standard RADIUS
protocol and SSH for access safety. The rich traffic
control mechanisms are supported including ACL
based on source and destination IP address, MAC
address and port number.
10 Gigabit Interfaces Supported
The S8500 series figures the industry leading
10 Gigabit Ethernet and OC-192 packet over SDH/SONET
(PoS) up to 48 10GE or 12 10G PoS port density
of the whole system to provide a pertinent solution
for MAN applications to simplify the network architecture
and reduce the network construction costs. With
chassis size ranging from 2 (for S8502), 5 (for
S8505), 8 (for S8508) to 12 (for S8512) and utmost
288 10/100/1000M Ethernet ports supporting IEEE
802.3af Power over Ethernet (PoE), the S8500 delivers
a intelligent and economical solution for the
enterprise campus aggregation network.
The S8500 series symbolizes the 10GE network
practices by providing powerful QoS guarantee,
rich services features such as ACL, strategic
routing and security, wire-speed MPLS forwarding,
IP VPN services and transparent LAN services.
Integrated IEEE 802.af PoE Supported
Coming with the centralized and manageable Power-over-Ethernet
(PoE) power supply assembly, the S8500 series
simplifies the customers' power layout through
supporting the integrated IEEE 802.3af PoE functions
to the desktop access switch. By providing optional
choices of the PoE Chassis, power module and surge
protection device, the PoE system facilitates
the enterprise campus and carrier's network layout
to be more expansible and scalable.
Flexible Network Address Translation
(NAT) Deployment
The S8500 series supports the flexible Network
Address Translation (NAT) deployment by providing
the specific NAT processing module to achieve
the application layer gateway service of FTP,
ICMP, DNS, LDAP, H.225, H.245, SIP, etc. To ease
the customer's internal network IP management
and speed up the campus network configuration,
the NAT processing module provides NAT log, NAT
blacklist and NAT/ NAPT of Internet access service
for all VPN users.
Firewall and IPSec Function Supported
With the flooding of network attacks, security
has been becoming a critical issue in the network
industry. Concerning about customers' demand in
the network security, the S8500 switches provide
SecBlade Firewall/VPN module to support rich firewall
and IPSec function. SecBlade Firewall module supports
ASPF, NAT-PAT, IPSec VPN encryption features,
multiple certificate authentication, various network
attack defending, real-time traffic analysis,
internal network address security, email alarm,
etc. SecBlade VPN module provides abundant VPN
functions (such as L2TP VPN, GRE VPN, IPSec VPN,
MPLS VPN and Huawei DVPN) and supports IPSec hardware
encryption (such as DES, 3DES and AES). |
