1 / 58

H3C MSR Presentation

H3C MSR Presentation. Network Produce Department. Date: 20070915. Security Level: Confidential. H3C Technologies Co., Limited. Trend of Multiple Service Integration MSR Routers Introduction MSR Routers Features MSR Router Position and Migration MSR Routers Applications. Agenda.

mcdonalda
Download Presentation

H3C MSR Presentation

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. H3C MSR Presentation Network Produce Department Date: 20070915 Security Level: Confidential H3C Technologies Co., Limited.

  2. Trend of Multiple Service Integration MSR Routers Introduction MSR Routers Features MSR Router Position and Migration MSR Routers Applications Agenda

  3. What enterprises focus most • Intelligent and Secure • Application recognition • Anti-virus • Admission control • Business support • Voice/Video on IP • High Performance/Price ratio • Reduce operation cost • Availability and Expandability • Easy to management • Expandable and upgradeable • Increase productivity

  4. More application, More device needed Security Voice Over IP Application Video Over IP Application Enterprise Network Backup Center Data Application Storage One more Application, one more device need to be added to the enterprise networks.

  5. Cutting edge technologies New Option: Multiple Service Integration Routing Switching Security VPN Voice QoS NAT IPv6 MPLS TE OAA Multiple Service Routers Access Server Router Switch Firewall Voice Gateway VPN Gateway

  6. Agenda • Trend of Multiple Service Integration • MSR Routers Introduction • Products Overview • Hardware Structure • Highlighted Modules • MSR Routers Features • MSR Router Position and Migration • MSR Routers Applications

  7. Mid & Low End Routers Family Flexibility MSR 50 MSR 30 MSR 20 AR 46-20/40/80 AR 28-3X/40/80 AR 28-09/1X Large Enterprise Branch AR 18-2X/3X Enterprise Headquarter Enterprise Branch SMB Performance

  8. H3C New Multiple Services Routers Higher Performance: MSR 20：160Kpps MSR 30：180－220Kpps MSR 50：600Kpps Embedded Security; High-density analog and digital voice MSR 50 Series MSR 30 Series Multiple Service Routers Compatible with MIM/FIC of AR Series Abundant New & High Performance Modules Open Application Architecture Service integrated Win-Win solution with partner MSR 20 Series Open Architecture; Embedded Application ; Concurrent Services at wire-speed;

  9. Hardware Architecture High Speed Modules & Interfaces Powerful CPU & Memory Embedded Encryption Module Voice Process Module Software Architecture Comware V5 Platform Comprehensive and Versatile platform Novel Architecture Flexible architecture ensures adaptability to merge and tailor services Application Services Data, Voice, Security, Management Multiple Service Concurrence

  10. Power VPM VPM VPM VPM ESM ESM DSIC Power+POE USB USB GE GE FIC FIC FIC FIC FIC DFIC FIC CF SIC SIC SIC SIC Modular Design (e.g. MSR50) POE Voice Processing Card Enhanced Service Module Improved Encryption Function GE Combo Port CF Card Support USB Memory Disk Future Service Extension Double Width FIC(DFIC) （DMIM for MSR 30) Flexible & Increased Port Density Double Width SIC Flexible & Increased Port Density

  11. Power VPM VPM VPM VPM ESM ESM DSIC Power+POE USB USB GE GE FIC FIC FIC FIC FIC DFIC FIC CF SIC SIC SIC SIC MSR 50-40/50-60 (e.g. MSR50-60) Flagship Products of High Performance & High Density Integrated Services： Security: Embedded security card (SNDE & ANDE) to ensure abundant VPN tunnels & high performance firewall Voice: High-density analogue/digital voice to meet different IP demand. Services Density: Maximum density for both connectivity and service modules Slots support new modules & compatible with existing interfaces Expansibility: Open Application Platform: can integrate WAN optimization, IPS/IDS, Network analysis in the future; Enhanced Reliability: Dual internal power, hot swappable. 50-60 MSR50-60

  12. Power Power Power VPM VPM VPM VPM VPM VPM VPM USB USB USB USB USB USB ESM ESM ESM ESM ESM ESM MIM MIM MIM MIM MIM MIM MIM MIM MIM MIM MIM MIM MIM MIM GE GE GE GE GE GE CF CF CF SIC SIC SIC SIC SIC SIC SIC SIC SIC SIC SIC SIC MSR 30-20/30-40/30-60 30-20 MSR30-20 30-40 Integrated Services： Security: Embedded security card (SNDE & ANDE) to ensure higher VPN tunnels and throughput; Voice:High-density analogue/digital voice Services Density: Slots support new modules & compatible with existing interfaces Double width modules Expansibility: Open Application Platform: can integrate WAN optimization, IPS/IDS, Network analysis in the future; Enhanced Reliability: Redundant power design, MSR30-40 30-60 MSR30-60

  13. Power Power VPM VPM Serial USB ESM ESM ESM MIM MIM FE FE FE FE CF SIC SIC SIC SIC SIC SIC VCPM MSR 30-16/30-11 MSR30-16 30-16 MSR30-11 30-11

  14. Power Power Power VPM VPM USB USB USB USB ESM ESM ESM ESM FE FE FE FE FE FE CF CF CF SIC SIC SIC SIC SIC SIC SIC SIC MSR 20-20/20-21/20-40 MSR20-20 Integrated Services： Security：On-board encryption or ANDE/SNDE; Voice：Analogue/digital voice access to meet low density VoIP demand (only 20-40)support digital voice; Services Density: Integrated high density switching interfaces Slots support new modules & compatible with existing interfaces MSR20-21 MSR20-40

  15. Agenda • Trend of Multiple Service Integration • MSR Routers Introduction • Products Overview • Hardware Structure • Highlighted Modules • MSR Routers Features • MSR Router Position and Migration • MSR Routers Applications

  16. Hardware System StructureMulti-service Concurrent Wire Speed Operation CPU Enhanced Security Engine Optional Embedded Service Engine PoE Power & Control MIM/FIC slot PCI Bus（2Gbps） Internal service PCI Bus（2Gbps） WAN Interface Module High Density Voice Module High Density Switch Module Open Application Platform (OAP) Voice Process SIC Slot Engine Voice TDM Bus • NBUS architecture • Future Expansion

  17. Hardware System StructureInterface & Configuration Current Structure Traditional Structure CPU DDR SDRAM CPU SDRAM Flash Flash Internal service PCI Bus（2Gbps） PCI Bridge FE×2 SIC Slot Engine Interface Engine WAN Interface MIM/FIC slot PCI Bus （2Gbps） • DDR SDRAM • USB Interface • GE Interface on board • CF Card CF USB Up to 2 GE×2 (SFP) 256MB Up to 1GB MIM/FIC Slot SIC Slot

  18. Data Path Voice Path Data Path Voice Path DSP DSP DSP DSP Local TDM Switching Local TDM Switching VE1/VT1 Interface VE1/VT1 Interface Hardware System Structure Voice Current Structure Traditional Structure CPU SIC CPU Voice Coder/Decoder DSP Matrix VE1/VT1 Interface 2K×2K Local TDM Switching PCI Bridge DSP Control Path Voice Path FSX/FXO/E1/T1 Interface Internal Service PCI Bus（2Gbps） MIM/FIC slot PCI Bus（2Gbps） Voice TDM Bus • Local TDM Switching • Built-in DSP Matrix MIM/FIC MIM/FIC

  19. Hardware System Structure Security Traditional Structure Current Structure CPU CPU Built-in Encryption Accelerator Embedded Hardware Encryption card （ANDE/SNDE ） PCI Bridge IPSec Engine Internal Service PCI Bus (2Gbps） MIM/FIC slot PCI Bus（2Gbps） • Hardware Acceleration • Integration with Third-Party Security Software USB Anti-virus/ Network Traffic Analysis Secure KEY in the future OAP

  20. Hardware System StructureSwitching CPU PoE Power & Control ＋ Internal service PCI Bus (2Gbps） SIC Slot Engine MIM/FIC slot PCI Bus（2Gbps） • More Options: SIC/DSIC/MIM/DMIM/FIC/DFIC • POE Support L2 LSW Module L3 LSW Module (future) SIC- 4LSW SIC- 9LSW MIM/FIC Slot SIC Slot

  21. Hardware System StructureOAP-Open Application Platform • Linux Platform • Pentium M 1.4GHz CPU • Compatible Hardware • High Performance CPU Internal service PCI Bus (2Gbps） The 2nd Data Plane MIM/FIC slot PCI Bus（2Gbps） MIM/FIC Slot • Anti-virus • Traffic Analysis • Voice Management • … Control Interface Data Interface Linux Server OS Interface CPU DRAM HD Interface OAP

  22. Agenda • Trend of Multiple Service Integration • MSR Routers Introduction • Products Overview • Hardware Structure • Highlighted Modules • MSR Routers Features • MSR Router Position and Migration • MSR Routers Applications

  23. MSR Cards & Modules • Embedded Cards: • Security Cards: • ESM-SNDE --- Enhanced Service Module-Standard Network Data Encryption • ESM-ANDE -- Advanced Service Module-Standard Network Data Encryption • Voice Cards: • VPM---Voice Processing Module • VCPM---Voice Co-Processing Module • Interface Cards: • SIC---Smart Interface Card • DSIC---Double Width Smart Interface Card • MIM---Multi-Functional Interface Module • DMIM---Double Width & Height Multi-Functional Interface Module • FIC---Flexible Interface Card • DFIC---Double Width Flexible Interface Card • OAP---Open Service Platform (FIC & MIM)

  24. Removable slot dividers New New New New New Double Width MIM(1U Height) MIM(0.5U Height) DSIC DMIM MSR Cards & Modules SIC Double Height Double Width FIC Double Width DFIC • ESM: only support encryption module now • VCPM/VPM is for voice processing ESM: VPN on board VCPM/VPM

  25. Newly Developed Module ESM Module VCPM/VPM Module SIC GE Module High Density Switching Module (SIC/MIM/DMIM/FIC/DFIC) Voice E1/T1 Module (SIC/MIM/FIC) OAP Module (MIM/FIC)

  26. New MSR Security Module－ESM IPSec Hardware Encryption Card: ESM-SNDE ESM-ANDE Features： • Embedded design, do not occupy the outside slots; • Protocols Supported: AH, ESP, AH+ESP Support UDP encapsulation • Hardware Algorithm • Encryption Algorithm（DES/3DES、AES 128/192/256） • Authentication Algorithm（HMAC-MD5、HMAC-SHA-1）

  27. New MSR Voice Module-VCPM & VPM • VCPM （Voice Co- Processing Module ） Integrated on-board or MIM/FIC Voice Module • Support 2K×2K TDM Local Switching • Release the CPU from the hard processing • VPM （Voice Processing Module）， Voice Encoder Large-Scale DSP Matrix • Voice Encoding & Decoding • Flexible Options • 8-Channel FAX/Voice DSP Modules • 16-Channel FAX/Voice DSP Modules • 24-Channel FAX/Voice DSP Modules • 32-Channel FAX/Voice DSP Modules

  28. New SIC GE Module • GE Copper or Fiber port on SIC, saving MIM & FIC • Support two GE Ethernet SIC cards on each product • Fiber module hot swap • Support SX,LX/LH,ZX interface Small Form Factor pluggable (SFP)

  29. Switching Ethernet Module RT-SIC-4FSW RT-DSIC-9FSW RT-MIM-16FSW RT-MIM-16FSW RT-DMIM-24FSW (24 FE+ 4 GE Combo) RT-FIC-16FSW (16 FE+ 2 GE Combo) RT-DFIC-24FSW (24 FE+ 4 GE Combo)

  30. New Switching Ethernet Module • L2 wire-speed forwarding • Port & VLAN • Duplex rate • VLAN Configuration • Routing between VLANs • Voice VLAN • Port Isolation • Port Convergence • MAC Address Management • Add/Erase MAC • MAC Address Learning • QoS & ACL • Port Mirroring • Stream Mirroring • CAR/WRED/MQC • Layer 2 Protocols • MSTP/RSTP/STP • GVRP • Security • 802.1X • Centralized MAC Authentication • Portal Authentication

  31. E1/T1 Voice Module RT-SIC-1VE1 RT-MIM-1VE1 RT-MIM-2VE1 RT-FIC-2VE1

  32. New E1/T1 Voice Module • Dedicated TDM switching • Supported on MSR20-40/30/50; • Supported Encode/Decode Protocols: • G711A/U • G729 • G723 • PSTN Signaling • R2 • PRI • Digital EM • Digital FXS & FXO signaling • IP Signaling • H.323 • SIP • FAX • Flexibility about the VPM chosen; • SIC-VE1/VT1 use the VCPM and VPM on the host board; • MIM/FIC-VE1/VT1 has integrated VCPM and two VPM slots on the module;

  33. MSR OAP (Open Application Platform) • General Linux Platform • Hardware Compatibility • Expansibility • Open hardware and software interface for second application development • Loose Coupling Method • Broad Partners Service can be integrated • Anti-virus • Traffic analysis • XE (future) • WAN Optimization (future) • … • Pentium M 1.4GHz CPU • GE Interface • USB Interface (Host mode) • CF Card • Support Hard Disk(80G) • Support Memory (512MB/1GB) • MIM & FIC modules

  34. Trend of Multiple Service Integration MSR Routers Introduction MSR Routers Features MSR Router Position and Migration MSR Routers Applications Agenda

  35. MSR Routers Features • New Comware V5 platform • OAA (Open Application Architecture) • Multiple Hardware Encryption Option • Flexible & High Density Voice Solution • Convergence of Routing & Switching • CF Card & USB Support • High Reliability

  36. IPv6 IPv6 – Pure IPv6 Network Internet Internet IPv6 Network IPv6 IPv6 IPv6 Network Comware V5 Platform-Fully Support IPv6 • Support Various Networking • Pure IPv6 Network • IPv4 Island Network • IPv6 Island Network • IPv6 & IPv4 Interconnection - IPV4 Island Network IPv6 Internet IPv4 Island IPv4 Island IPv6 Island IPv4 IPv4 - IPv6 Island Network Internet Internet - IPv6 & IPv4 Interconnection IPv6 Island IPv6 Island IPv6 Island IPv4 IPv4 IPv6 Island Internet Internet Protocol Translation IPv6 IPv6 Internet Internet

  37. Comware 5-More features Compare to Comware V3.4, Comware 5 delivers more important features: Fully support MPLS TE Support IS-IS protocol extension; Support for backup ISP; Support for FRR (Fast Reroute) Establish LSP based on CR-LDP; Establish LSP based on RSVP-TE; Define the node which LSP can not pass;

  38. Open Application Architecture OAA — Open Application Architecture An open software and hardware interfaces and standard specifications An open platform that delivers these benefits to third parties: Develop a rich portfolio of applications Expand the depth of cooperation Promote a win-win situation

  39. Routing & Switching Part Configuration Memory Router CPU Flash Interface Connection Part Ethernet interface Serial Independent Service Part Serial Ethernet interface Memory MSP CPU Flash Hard Disk USB GE port CF Open Application Architecture Four Data-flow modes: Host modes Voice management; Redirection modes IPS; Mirroring modes IDS/XLOG; Pass-through modes Traffic Analysis; Wan Optimization; 1 1 1

  40. Flexible Hardware Encryption Support mainstream encryption algorithm Protocols: IPSec AH, ESP Encryption arithmetic: DES, 3DES, AES128/192/256; Verification algorithm: HMAC-MD5-96, HMAC-SHA1-96 Four Hardware Encryption Options Built-in CPU Encryption accelerator High Performance Encryption Module - MSR 30 supports MIM HNDE - MSR 50 supports FIC HNDE SNDE-High Performance embedded encryption cards ANDE-High Performance embedded encryption cards Multiple Encryption Methods

  41. Flexible & High Density Voice Solution • Voice Module Configuration • For SIC voice module, VCPM and VPM have to be installed on board. • For FIC/MIM voice module, VPM should be installed on FIC/MIM, VCPM has been integrated on the module; • High Density Voice supported on MSR

  42. Convergence of routing & switching • High Density Ethernet Switching Modules • Abundant L2 features: MSTP/802.1x/GVRP/802.1Q etc. • Some Modules with GE uplink port The switching module with PoE is available now.

  43. CF Card & USB Support MSR innovatively adopts CF card & USB interface Design • CF Card Replace FLASH to store configuration file & log files More convenient to support versatile software features Removable storage satisfies the management & configuration of multiple client hosts Large memory capacity ensures more detailed log information • USB Interface---Multiple Applications MSR 20 support 1 USB interface, MSR 30 & MSR 50 supports 2 USB interfaces Memory Disk to download & upload configuration files E-Token as a security key (Future) Wireless Application …etc (Future)

  44. High Reliability MSR 30 Series • Redundant Power Supply For MSR 30, external redundant power supply is adopted to ensure non-ceasing operation and reliability. For MSR 50, hot swappable dual power supplies are embedded in the chassis, satisfying carrier class reliability. • Hot-swappable Newly developed FIC module & currently used FIC on AR 46 support hot swap, convenient for the maintenance and upgrade of the system. RPS AC Power Source 1 MSR 50 Series Power 2 AC INPUT Power 1AC INPUT AC Power Source 2 AC Power Source 1

  45. Trend of Multiple Service Integration MSR Routers Introduction MSR Routers Features MSR Router Position and Migration MSR Routers Applications Agenda

  46. MSR Position and Migration Performance and Service Density MSR 50 Investment Protection: Support the existing modules on AR routers MSR 30 MSR 20 Configuration Upgrade: More memory, flash, slots and fixed ports. USB/CF, subcard; New Comware V5 platform: IPv6, MPLS TE etc, AR 46 (RPU) AR 28-1x/3X/40/80 AR 28-09

  47. MSR and AR Price and Performance Positioning Price MSR50-60 $13000 AR4680(RPU) $12000 MSR50-40 $9500 AR4640(RPU) $8500 MSR3060 $5300 $3900 MSR3040 $3200 MSR3020 AR2831 $2895 MSR3016 $2850 $2580 MSR3011 AR2811 AR2830 $2495 AR2810 MSR2040 $1995 $1800 MSR2021 $1495 AR2809 $1400 MSR2020 Performance (Kpps) 160 70 80 100 110 130 180 220 350 600

  48. Comware V5 package for MSR Comware V5 Standard Version VoIP, VoFR, IPsec, Firewall, VPN; MPLS; SNA, IPX; Comware V5 Basic Version Entry level, Data connectivity

  49. MSR Bundles for Different Applications The money can be saved from $550 up to $4200! The cost can be saved from 10% up to 40%!

  50. Trend of Multiple Service Integration MSR Routers Introduction MSR Routers Features MSR Router Position and Migration MSR Routers Applications Agenda

More Related