H3C MSR Presentation
Network Produce Department
Date: 20070915 Security Level: Confidential H3C Technologies Co., Limited.
H3C MSR Presentation Network Produce Department Date: 20070915 - - PowerPoint PPT Presentation
H3C MSR Presentation Network Produce Department Date: 20070915 Security Level: Confidential H3C Technologies Co., Limited. Agenda Trend of Multiple Service Integration MSR Routers Introduction MSR Routers Features MSR Router
Date: 20070915 Security Level: Confidential H3C Technologies Co., Limited.
www.h3c.com
2
www.h3c.com
3
Voice Over IP Application Data Application Backup Center
Enterprise Network
Storage Security Video Over IP Application
www.h3c.com
4
Routing Switching
Router Firewall Voice Gateway VPN Gateway Access Server Switch
Security VPN Voice QoS NAT IPv6 MPLS TE OAA Cutting edge technologies
www.h3c.com
6
AR 18-2X/3X
AR 28-09/1X AR 28-3X/40/80
AR 46-20/40/80
MSR 20 MSR 30 MSR 50
www.h3c.com
7
MSR 30 Series MSR 50 Series MSR 20 Series
Higher Performance: MSR 20:160Kpps MSR 30:180-220Kpps MSR 50:600Kpps Embedded Security; High-density analog and digital voice Open Application Architecture Service integrated Win-Win solution with partner Compatible with MIM/FIC
Abundant New & High Performance Modules
www.h3c.com
8
www.h3c.com
9
SIC SIC SIC SIC CF USB USB
FIC FIC FIC FIC FIC FIC DFIC
GE GE
ESM Power+POE Power
DSIC
ESM
Enhanced Service Module Improved Encryption Function Voice Processing Card POE GE Combo Port Support USB Memory Disk Future Service Extension CF Card Double Width SIC Flexible & Increased Port Density Double Width FIC(DFIC) (DMIM for MSR 30) Flexible & Increased Port Density
www.h3c.com
10
MSR50-40 MSR50-60 SIC/DSIC 4/0; 2/1; 0/2 4/0; 2/1;0/2 FIC/DFIC 4/0; 2/1; 0/2 6/0; 4/1; 2/2; 0/3 VPM 4 4 ESM 2 2 OAP Support Support
Integrated Services: Security: Embedded security card (SNDE & ANDE) to ensure abundant VPN tunnels & high performance firewall Voice: High-density analogue/digital voice to meet different IP demand. Services Density: Maximum density for both connectivity and service modules Slots support new modules & compatible with existing interfaces Expansibility: Open Application Platform: can integrate WAN optimization, IPS/IDS, Network analysis in the future; Enhanced Reliability: Dual internal power, hot swappable.
SIC SIC SIC SIC CF USB USB
FIC FIC FIC FIC FIC FIC DFIC
GE GE
ESM Power+POE Power
DSIC
ESM
www.h3c.com
11
CF SIC SIC SIC SIC USB
Power MIM
CF
Power MIM MIM MIM
SIC SIC SIC SIC
MI M MI M
CF
Power
GE GE
MIM MIM
SIC SIC SIC SIC
MIM MIM MI M MI M
USB GE USB USB GE GE USB USB GE
MSR30-20 MSR30-40 MSR30-60
MIM MIM ESM ESM ESM ESM ESM ESM
Integrated Services: Security: Embedded security card (SNDE & ANDE) to ensure higher VPN tunnels and throughput; Voice: High-density analogue/digital voice Services Density: Slots support new modules & compatible with existing interfaces Double width modules Expansibility: Open Application Platform: can integrate WAN optimization, IPS/IDS, Network analysis in the future; Enhanced Reliability: Redundant power design,
MSR30-20 MSR30-40 MSR30-60 SIC/DSIC 4/0;2/1;0/2 4/0;2/1;0/2 4/0;2/1;0/2 MIM/DMIM 2/0 4/0;2/1 6/0;4/1;2/2 VPM 2 2 3 ESM 2 2 2 OAP
Support Support Support
www.h3c.com
12
CF SIC SIC SIC SIC USB
Power
MIM FE FE
MSR30-16
ESM ESM
MSR30-16 MSR30-11
SIC/DSIC 4/0;2/1;0/2 2/0 MIM/DMIM 1/0 1/0 (XMIM/MIM) VPM 2 ESM 1 OAP Support Support
SIC SIC Serial
Power
MIM FE FE
MSR30-11
ESM
www.h3c.com
13
CF SIC SIC CF
ESM Power
FE FE SIC SIC SIC SIC USB FE FE USB CF SIC SIC USB FE FE USB
MSR20-20 MSR20-21 MSR20-40 SIC/DSIC 2/0 2/0 4/0;2/1 FE 2 2+8 2 USB 1 1 2 ESM 1 1 2
Power Power ESM ESM ESM
Integrated Services: Security:On-board encryption or ANDE/SNDE; Voice:Analogue/digital voice access to meet low density VoIP demand (only 20-40)support digital voice; Services Density: Integrated high density switching interfaces Slots support new modules & compatible with existing interfaces
www.h3c.com
15
SIC2 SIC1 SIC4 SIC3
WAN Interface Module
Enhanced Security Engine
Voice Process SIC Slot Engine
Optional Embedded Service Engine
High Density Voice Module High Density Switch Module Open Application Platform (OAP)
MIM/FIC slot PCI Bus(2Gbps) Internal service PCI Bus (2Gbps) Voice TDM Bus
PoE Power & Control
www.h3c.com
16
CPU
WAN Interface PCI Bridge
MIM/FIC slot PCI Bus (2Gbps) Internal service PCI Bus (2Gbps)
USB Up to 2
SIC Slot Engine MIM/FIC Slot SIC Slot
SDRAM
Flash
GE×2 (SFP) Interface Engine DDR SDRAM
Flash CF
256MB Up to 1GB
Traditional Structure Current Structure
SIC1 SIC2 SIC3 SIC4
www.h3c.com
17
Data Path VE1/VT1 Interface Voice Path
Local TDM Switching
DSP DSP
Data Path VE1/VT1 Interface Voice Path
Local TDM Switching
DSP DSP
Voice Coder/Decoder DSP Matrix
Control Path Voice Path
CPU
DSP
FSX/FXO/E1/T1 Interface PCI Bridge
MIM/FIC slot PCI Bus (2Gbps) Voice TDM Bus Internal Service PCI Bus(2Gbps)
Traditional Structure Current Structure
2K×2K Local TDM Switching
VE1/VT1 Interface
MIM/FIC MIM/FIC SIC
www.h3c.com
18
CPU
IPSec Engine PCI Bridge
Embedded Hardware Encryption card (ANDE/SNDE ) Anti-virus/ Network Traffic Analysis MIM/FIC slot PCI Bus (2Gbps) Internal Service PCI Bus (2Gbps) Built-in Encryption Accelerator
Secure KEY in the future USB
Security Software
Traditional Structure Current Structure
www.h3c.com
19
MIM/FIC slot PCI Bus(2Gbps) Internal service PCI Bus (2Gbps) SIC Slot Engine
L2 LSW Module
MIM/FIC Slot
SIC Slot
SIC/DSIC/MIM/DMIM/FIC/DFIC
SIC- 4LSW SIC- 9LSW L3 LSW Module (future)
PoE Power & Control
www.h3c.com
20
CPU MIM/FIC slot PCI Bus (2Gbps) Internal service PCI Bus (2Gbps)
Control Interface
Linux Server MIM/FIC Slot
The 2nd Data Plane
OS Interface Data Interface
CPU DRAM HD Interface
www.h3c.com
22
Security Cards:
Voice Cards:
www.h3c.com
23
SIC DSIC DMIM FIC
New
Double Width
New
Double Height Double Width
New
Double Width Removable slot dividers DFIC MIM(0.5U Height) MIM(1U Height)
New
ESM: VPN on board VCPM/VPM
ESM: only support encryption module now VCPM/VPM is for voice processing New
www.h3c.com
24
www.h3c.com
25
New
www.h3c.com
26
8-Channel FAX/Voice DSP Modules 16-Channel FAX/Voice DSP Modules 24-Channel FAX/Voice DSP Modules 32-Channel FAX/Voice DSP Modules New
www.h3c.com
27
New
Small Form Factor pluggable (SFP)
www.h3c.com
28
RT-SIC-4FSW RT-DSIC-9FSW RT-MIM-16FSW RT-MIM-16FSW RT-FIC-16FSW (16 FE+ 2 GE Combo) RT-DMIM-24FSW (24 FE+ 4 GE Combo) RT-DFIC-24FSW (24 FE+ 4 GE Combo)
www.h3c.com
29
New
www.h3c.com
30
RT-MIM-1VE1 RT-SIC-1VE1 RT-MIM-2VE1 RT-FIC-2VE1
www.h3c.com
31
New
www.h3c.com
32
interface for second application development
Service can be integrated
Anti-virus Traffic analysis XE (future) WAN Optimization (future) …
www.h3c.com
34
www.h3c.com
35
IPv4 Internet IPv6 Internet IPv4 Internet Protocol Translation IPv6 Island IPv6 Island IPv6 Internet IPv6 Internet IPv4 Island IPv4 Island IPv4 Internet IPv6 Island IPv6 Island IPv6 Island IPv4 Internet
IPv6 Internet IPv6 IPv6 IPv6 Internet IPv6 Network IPv6 Network
–Pure IPv6 Network
www.h3c.com
36
Compare to Comware V3.4, Comware 5 delivers more important features:
www.h3c.com
37
www.h3c.com
38
1 1 1
Configuration Router CPU Memory Flash Hard Disk CF Memory Flash Ethernet interface Serial MSP CPU USB Serial
Routing & Switching Part
Ethernet interface GE port
Independent Service Part Interface Connection Part
www.h3c.com
39
Protocols: IPSec AH, ESP Encryption arithmetic: DES, 3DES, AES128/192/256; Verification algorithm: HMAC-MD5-96, HMAC-SHA1-96
Built-in CPU Encryption accelerator High Performance Encryption Module
SNDE-High Performance embedded encryption cards ANDE-High Performance embedded encryption cards
www.h3c.com
40
Model 20-40 30-11 30-16 30-20 30-40 30-60 50-40 50-60
On-board VPM Slots
2 2 2 3 3 4 4 Interface SIC MIM FIC
Model SIC-1VE1 SIC-1VT1 RT-1VE1 RT-1VT1 RT-2VE1 RT-2VTI FIC-1VE1 FIC-1VT1 FIC-2VE1 FIC-2VTI
and VPM have to be installed
VPM should be installed on FIC/MIM, VCPM has been integrated on the module;
Router
MSR20-40 /MSR30-11 MSR30-16/20 MSR30-40 MSR30-60 MSR50-40 MSR50-60
supported
www.h3c.com
41
Module MSR20- 20/21 MSR20
MSR30-11 MSR30-16 MSR30-20 MSR30-40 MSR30-60 MSR50-40 MSR50-60
SIC-4FSW
DSIC-9FSW
MIM- 16FSW
24FSW
DFIC- 24FSW
www.h3c.com
42
Replace FLASH to store configuration file & log files More convenient to support versatile software features Removable storage satisfies the management & configuration of multiple client hosts Large memory capacity ensures more detailed log information
MSR 20 support 1 USB interface, MSR 30 & MSR 50 supports 2 USB interfaces Memory Disk to download & upload configuration files E-Token as a security key (Future) Wireless Application …etc (Future)
www.h3c.com
43
For MSR 30, external redundant power supply is adopted to ensure non-ceasing operation and reliability. For MSR 50, hot swappable dual power supplies are embedded in the chassis, satisfying carrier class reliability.
Newly developed FIC module & currently used FIC
maintenance and upgrade of the system. Power 2 AC INPUT Power 1
AC INPUT AC Power Source 2 AC Power Source 1
AC Power Source 1
RPS
www.h3c.com
45
AR 28-09 AR 28-1x/3X/40/80 AR 46 (RPU)
MSR 20 MSR 30 MSR 50 Investment Protection: Support the existing modules on AR routers Configuration Upgrade: More memory, flash, slots and fixed ports. USB/CF, subcard; New Comware V5 platform: IPv6, MPLS TE etc,
www.h3c.com
46
Performance (Kpps)
MSR2020
AR2809
$13000 $12000 $9500 $1495 $1995
2810 AR
$2495
AR2831
$2895 $8500 $5300 $3900
AR4640(RPU)
MSR50-40
AR4680(RPU)
MSR50-60
AR2811 AR2830
$1400 MSR2021 MSR2040 MSR3020 MSR3040 MSR3060 $1800
70 80 100 110 130 180 220 350 600
$3200
160
MSR3016 MSR3011 $2850 $2580
www.h3c.com
47
Entry level, Data connectivity
VoIP, VoFR, IPsec, Firewall, VPN; MPLS; SNA, IPX;
www.h3c.com
48
Router +VCPM+1/2VPM32+SIC-VE1+ Comware V5 standard
Router +SNDE/ANDE+ Comware V5 standard
Router +VCPM+1/2VPM32+SIC-VE1 +SNDE/ANDE + Comware V5 standard
Router +ADSL+ Comware V5 standard
www.h3c.com
50
MSR 20/30 MSR 20/30 MSR 50
www.h3c.com
51
NE Series
Bank MSR 50 Switch Switch MSR 20/30 Switch 155M/1000 M 100M 2M Firewall
www.h3c.com
52
IPv4 Internet IPv6 Internet
DDN/ATM/FR DSTN/ISDN
Branch(IPv4) Dial-in network (IPv4) Branch stack
IPv4 host IPv6 host
Dual-stacking server IPv6 over IPv4 IPv6 / IPv4 hybrid link IPv6 to IPv4 tunnel IPv6 link IPv4 link NAT-PT,DSTM
Dual-stacking server
www.h3c.com
53
PE PE PE PE H3C MSR 50 H3C MSR 50 H3C MSR 50 Internet Network management center in headquarters Accounting center in headquarters Network management in branch Network management in branch OA or accounting center in headquarters OA or accounting center in headquarters H3C MSR 20/30 H3C MSR 20/30 Branch node 1 Branch node 2 VPN of Network management VPN of accounting VPN of OA TE tunnel Logical services network OA center in headquarters MPLS Backbone
www.h3c.com
54
PBX PBX PBX PBX PBX H3C MSR 30/50 H3C MSR 50 GK GK E1 E1 AT0/E1 PBX PSTN /ISDN
Level
Center
Edge
Analog Phone / EHPONE GW E1
DDN/Frame Relay/IP H3C MSR 30/50 H3C MSR 30/50
Level
Center
H3C MSR 30/50 H3C MSR 30/50 H3C MSR 30/50 H3C MSR 30/50 DDN/Frame Relay /IP DDN/Frame Relay/IP DDN/Frame Relay/IP H3C MSR 30/50
www.h3c.com
55
00 `
Mobile User Branch SOHO Intranet
Firewall External Firewall MSR 30 MSR 30
MSR 30
MSR 50 CA VPN Server
Internet Server IDS Switching Modules : VLAN Isolation Port Access Authentication
Quidview Authentication Log Server
PSIN /ISDN LAC
www.h3c.com
56