Peyvand Azad Network

Certified partner in IRAN

Huawei Datacom
Product Quick Reference

Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net
[email protected]
HUAWEI TECHNOLOGIES CO., LTD.

Peyvand Azad Network

Certified partner in IRAN

Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net
[email protected]

Peyvand Azad Network

Certified partner in IRAN

Router

Product Quick Reference

Router Series

Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net
[email protected]

Peyvand Azad Network

Certified partner in IRAN

Huawei Datacom Product Quick Reference

Router Series

Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net
[email protected]

Peyvand Azad Network

Certified partner in IRAN

Contents
Quidway NetEngine 5000E Core Router............................................................1-6

Quidway NetEngine 40E Core Router.............................................................. 1-19

Quidway NetEngine 80 Core Router................................................................1-26
Quidway NetEngine 40 Core Router Series.....................................................1-34
Quidway NetEngine 20 High-end Router Series..............................................1-50
Quidway NetEngine 16E/08E/05 High-end Router Series.................................1-65
Quidway AR 46 Series Intelligent Service Central Routers...............................1-89
Quidway AR 28-40/80 Series Access Routers..................................................1-97
Quidway AR 28-30/31 Series Access Routers................................................ 1-100
Quidway AR 28-10/11 Series Access Routers................................................ 1-103
Quidway AR 28-09 Intelligent Service Branch Router.................................... 1-106
Quidway AR 18-30/31/32/33/34/35 Intelligent Service Access Routers.......... 1-113
Quidway AR 18-20/20S Series Ethernet Routers............................................ 1-117

Tel : (+98) 21 88 87 87 87
Quidway AR 18-1X Series Routers................................................................. 1-120
Fax:(+98)
21 88 78 62 97
www.peyvandazad.net
[email protected]

Ethernet
Switch

Quidway NetEngine 80E Core Router..............................................................1-12

Router Series
Peyvand
Azad Network
Certified partner in IRAN

Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net
[email protected]

Router Series
NE Router Product Series
Product Model

Feature

Quidway NetEngine 5000E

The top-class core router oriented towards the Internet

Core Router

backbone node, MAN core node and data interworking

node.
Comprehensively supports the MPLS, and various
services such as the L3 MPLS VPN, L2 MPLS VPN and
the CCC, which are suitable for high-performance P
application; supports high-capacity multicast wirespeed forwarding, and can be cooperated with features
such as the MPLS VPN and QoS.
Adopts high-performance components, and provides

Ethernet
Switch

wire-speed forwarding performance for the IP/MPLS

service; the switching capacity of the integrated system
is 2.56Tbps (non-blocking switching); the forwarding
performance of the integrated system is 1600Mpps.
The key hardware components are provided with
comprehensive redundancy, and all the components
are available with the hot swapping function. Provides
non-stop routing and non-stop forwarding functions
to ensure carrier class reliability of services. When the
active main control board fails, the standby board can
take over without any packet loss or affecting the
neighboring routers.

Quidway NetEngine 80E Core

The high-end core network product oriented towards the

Router

IP backbone network, IP MAN and various large-scale IP

networks.
Comprehensively supports the MPLS, and various
services such as the L3 MPLS VPN, L2 MPLS VPN and
CCC, which are suitable for high-performance P/PE
application; supports high-capacity multicast wirespeed forwarding, and can be cooperated with features
such as the MPLS VPN and QoS.
Adopts high-performance components, and provides
wire-speed forwarding performance for the IP/MPLS

> 1-

Router Series

service; the switching capacity of the integrated system

is 640Gbps (non-blocking switching); the forwarding
performance of the integrated system is 400Mpps.
The key hardware components are provided with
comprehensive redundancy, and all the components are
available with the hot swapping function. Provides nonstop routing and non-stop forwarding functions to ensure
carrier class reliability of services. When the active main
control board fails, the standby board can take over without
any packet loss or affecting the neighboring routers.
Quidway NetEngine 40E Core

The high-end service router oriented towards the IP

Router

backbone network, IP MAN and various large-scale IP

networks.
Integrates the powerful IP service processing capability
and the L3 Ethernet switching capability of the core
router, and provides richer services, more flexible
networking and more ideal performance cost.
Comprehensively supports the MPLS, and various
services such as the L3 MPLS VPN, L2 MPLS VPN and
CCC, which are suitable for high-performance P/PE
application; supports high-capacity multicast wire-speed
forwarding, and can be cooperated features such as the
MPLS VPN and QoS.
Adopts high-performance components, and provides wirespeed forwarding performance for the IP/MPLS service;
the switching capacity of the integrated system is 640Gbps
(non-blocking switching); the forwarding performance of
the integrated system is 400Mpps.
The key hardware components are provided with
comprehensive redundancy, and all the components are
available with the hot swapping function. Provides nonstop routing and non-stop forwarding functions to ensure
carrier class reliability of services. When the active main
control board fails, the standby board can take over without
any packet loss or affecting the neighboring routers.

> 1-

Router Series

Quidway NetEngine 80 Core

The high-end core network product oriented towards the

Router

IP backbone network, IP MAN and various large-scale IP

networks.
Comprehensively supports the MPLS, and various
services such as the L3 MPLS VPN, L2 MPLS VPN and
CCC, which are suitable for high-performance P/PE
application; supports high-capacity multicast wire-speed
forwarding, and can be cooperated features such as the
MPLS VPN and QoS.
Adopts high-performance components, and provides wirespeed forwarding performance for the IP/MPLS service;
the switching capacity of the integrated system is 128Gbps

Ethernet
Switch

(non-blocking switching); the forwarding performance of

the integrated system is 96Mpps.
The key hardware components are provided with
comprehensive redundancy, and all the components are
available with the hot swapping function. Provides nonstop routing and non-stop forwarding functions to ensure
carrier class reliability of services. When the active main
control board fails, the standby board can take over without
any packet loss or affecting the neighboring routers.

Quidway NetEngine 40 Core

The high-end network product oriented towards the large-

Router Series

sized enterprise network, industrial network, IP MAN and

IP backbone network.
Integrates the powerful IP service processing capability
and L3 Ethernet switching capability of the core router,
and provides richer services, more flexible networking
and more ideal performance cost.
Adopts high-performance components, provides wirespeed forwarding performance for the IP/MPLS service
at all the interfaces; the switching capacity of the
NE40-8 integrated system is 64Gbps, and the forwarding
performance is 48Mpps; the switching capacity of the
NE40-4 is 32Gbps and the forwarding performance is
24Mpps; the switching capacity of NE40-2 is 16Gbps

> 1-

Router Series

and the forwarding performance is 12Mpps.

Comprehensively supports the MPLS, and various
services such as the L3 MPLS VPN, L2 MPLS VPN and
the CCC, which are suitable for high-performance PE
application; supports high-capacity multicast wire-speed
forwarding, and can be cooperated with features such
as the MPLS VPN and QoS.
Quidway NetEngine 20 High-

The 5 th generation multi-service routers with high

end Router Series

performance oriented towards operators, industrial

networks and enterprise network can serve as the edge

equipment for the operator service network and as
small-sized PoP point, or as the centralized interworking
equipment with high performance for the operators
operation-supporting network, or as the central
equipment of enterprises in the enterprise network or the
high-performance convergent router for the enterprises.
Adopts the high-reliability modular design. All the
boards, fans and power supply modules support hot
swapping; provides the dual-power (1+1) module
that can be mutual backup, and the design mode of
passive backplane; provides the software hot patching
technology to implement the fully smooth upgrading,
thus effectively ensuring the high-speed and reliable
running in the whole network. The integrated system
realizes the non-stop running for 7 X 24 hours.
Adopts the high-performance components, to provide
wire-speed forwarding performance for the IP/MPLS
service at all the interfaces; the switching capacity of the
NE20 router series is 8Gbps (non-blocking switching),
the forwarding performance of the integrated system
is 4.5Mpps; the switching capacity of the integrated
NE20E router series is 40Gbps and the forwarding
performance is 6Mpps.
Has a powerful service capability, supports VPN in
multiple modes (L2TP, GRE, MPLS VPN), available

> 1-

Router Series

with a wealth of NAT functions; provides such

interworking functions as Ethernet/VLAN, PPP/MP,
PPPoE, Frame Relay, HDLC, ATM, X.25, HDLC and
LAPB.
Quidway NetEngine 16E/08E/05

Oriented towards the carrier-class operation network

High-end Router Series

and the enterprise-class core network, available with

the powerful dedicated-line access and VPN service
capability, this series provides rich service functions,
along with the perfect QoS and security feature,
applicable to the internal network and service network
of operators, governments, education, finance, electrical
power and other enterprises.
The redundancy design of main control board; the

Ethernet
Switch

active/standby switching realizes zero packet-loss

rate; 2+1 or 1+1 power hot backup; interface backup
and port binding realize the high reliability of links;
VRRP ensures the reliability between devices; the main
control board and the interface board support hot
swapping; the integrated system realizes the non-stop
running for 7 x 24 hours.
Distributed forwarding architecture, the highperformance CPU cooperates with the IP
TurboEngineTM technology of independent intellectual
property rights, the integrated forwarding performance
of NE16E exceeds 4.8Mpps, the integrated NE08E
forwarding performance exceeds 2.4Mpps and the
integrated NE05 forwarding performance exceeds
1.6Mpps.
Powerful service capability, supporting dedicatedline access, PPPOE access, PPPOA access, PPPOEOA
access, Ethernet VLAN access, Portal, Web
authentication, DHCP RELAY, DNS, DLSW, supporting
such VPN services as L2TP, GRE, IPSEC, FR, L3 MPLS
VPN, L2 MPLS VPN; provides tunnel integration and
VPN interworking, providing the secure and multilevel MPLS VPN solution.

> 1-

Router Series
Quidway NetEngine 5000E Core Router
Product Overview
The Quidway NetEngine 5000E core router (hereinafter called the NE5000E) is one
of the top-class router products, which was launched by Huawei, catering to the
Internet backbone node, MAN core node and data interworking center node. The
NE5000E inherits the 5th generation of routers philosophy, based on the advanced
network processor technology, ASIC technology, IPv6 technology and optical backplane interconnection technology. It adopts the distributed and expandable design,
with the mass switching capacity and ultra-high forwarding performance, to meet
the requirements of bandwidth performance, service quality, and service providing
capability of the new generation Internet. The high performance, rich service features,
high reliability and modular expandability available to NE5000E brings more values to
networks, so it can be said an ideal choice for the next generation Internet.

Product Appearance

NE5000E core router

> 1-

Router Series

Product Features
Continuous Extension Capability
The NE5000E adopts the advanced non-blocking switching fabric with the interface
capacity of standalone system of 1.28Tbps, supporting the high-density 10G/40G
interface, it provides 64 wire-speed 10G POS interfaces, or 16 wire-speed 40G interfaces,
with a forwarding performance as high as 1600Mpps.
The NE5000E implements the capacity extension in the optical back-plane
interconnection mode. It supports multi-frame concatenation, and the interface capacity
can be extended to 80Tbps, providing 4096 wire-speed 10G POS/10GE interfaces, or
provides 1024 wire-speed 40G POS interfaces.

Outstanding Routing Performance

Ethernet
Switch

Supporting various unicast routing protocols such as OSPF, IS-IS and BGP, providing the
perfect multicast routing protocols, supporting the extra-high routing table capacity, and
the port can still keep its wire-speed forwarding in the complex routing environment of
route oscillation. It is available with the fast convergence mechanism, to greatly improve
the reliability of networks.

Rich Service Features

The NE5000E adopts the advanced ASIC and network processor technology, and it is
available with a variety of service features with an outstanding performance. It provides
MPLS VPN/TE, QoS, multicast and security, to implement the smooth evolution from
IPv4 and IPv6. The NE5000E is available with the fast service upgrading and expansion
capability to protect users investment to the largest extent, which speeds up the
development of the IP network with the enhanced natures of broadband, security, service
and intelligence.

Carrier-class Reliability
Key hardware components are provided with redundancy backup, providing the nonstop forwarding function at operation level; all the components are available with the
hot swapping function; adopts the passive back-plane design; provides the hot patching
technology to implement the smooth upgrading of software; provides the IP/MPLS fast

> 1-

Router Series

re-routing, Virtua Routing Redundancy Protocol (VRRP) and RPR, to effectively ensure the
high reliability of network running and to realize the system availability of 99.999%.

Product Specifications
Attribute

NE5000E

Switching capacity

2.56Tbps, non-blocking switching

Forwarding performance

1600Mpps

Number of interface

16

board slots
Connection mode

OC-192c/STM-64c POS

10GE-WAN/LAN

OC-48c/STM-16c POS

GE

OC-12c/STM-4c POS

FE

OC-3/STM-1 POS
OC-12c/STM-4c ATM
OC-3/STM-1 ATM
OC-48c/STM-16c RPR
OC-192c/STM-64c RPR
Routing protocol

Supports routing protocols OSPF, IS-IS, BGP-4, PIM-DM/SM, MSDP

and MBGP; available with an ultra-large routing table capacity; all the
ports can still be able to keep wire-speed forwarding in the complex
routing environment such as routing oscillation; supports the fast
convergence function to practically improve the reliability of users IP
network.

IPv6

Comprehensively supports the features and services of IPv6. Implements

the IPv6 wire-speed forward processing based on the hardware mode,
supports such routing protocols as OSPFv3, ISISv6, BGP4+, RIPng, provides
a variety of transition technologies from IPv4 to IPv6.

MPLS VPN

Supports MPLS wire-speed forwarding; supports L3/L2 MPLS VPN, as P

and PE; supports MPLS QoS; supports MPLS TE/FRR.

QoS

Supports the complex traffic classification integrating the L2/L3/L4 packet

information; provides the powerful bi-directional traffic classification
rule; supports the traffic policing and shaping function, equipped with
the advanced QoS functions such as PFQ/WFQ/CBQ multi-level queue

> 1-

Router Series

scheduling and WRED, it can provide the perfect QoS function based on
DiffServ and MPLS TE tunnel.
Reliability

The main control module provides 1:1 backup while the switching fabric
module provides 3+1 backup, and the system power supply and fan
provides redundancy backup, supporting the non-stop forwarding; all the
components can be hot swapped; provides the fast routing convergence
and MPLS fast re-routing (FRR) function.

Architecture

The standalone system is of the integrated chassis structure, supporting

19-inch standard rack and multi-machine extension.
Dual -48 VDC power input

Max. power consumption

< 5000W

Dimensions (W x D x H)

442mm x 600 mm x 1,600 mm

Maximum weight in full

< 200kg

Ethernet
Switch

Input power

configuration
Environmental

Long-term operation: 0 ~ 45C

requirements

Short-term operation: -5 ~ 55C

Temperature change rate limit: 30C/h
Operating humidity: 5% ~ 85%, non-condensing
Short-term operating humidity: 0% ~ 95%
Altitude: No effect on forwarding performance within 3,000m

Order Information
Name

Item

Amount

Remarks

Assembly cabinet-NE80E-CR5B1TSR-2.2 high-end

Optional

1. Host system
CR52-22

router assembly cabinet

CR52K-BKPA

Components for the NE 5000E integrated chassis

Mandatory

CR52-MPUA

Main processing board, with L3 clock module.

Mandatory, 2 pieces

Additional CF card and memory should be configured

CR52K-SFUC

NE 5000E switching fabric board

recommended
4

Mandatory, 4 pieces
recommended

> 1-

Router Series

CR52-PWRA

Specially-made secondary power supply-6500W-

-5degC-55degC--38V--75V--36-75VDC- primary

Mandatory, 2 pieces
recommended

channel 160A
SWP-CR52

NE80E core router IP/MPLS forwarding host

Mandatory

Mandatory, 1

software (VRP5)
CR52-MPUA-

Main processing unit 512MB FLASH card

CFB

memory bar for 1

MPUA

CR52-MPUA-

Main processing unit 1GB memory bar

MEMB

Mandatory, 1
memory bar for 1
MPUA

2. Line interface board

CR52K-P1XZ

10G POS interface single-mode short-distance line

16

Optional

16

Optional

16

Optional

Optional, XFP needs

board, LC interface, 2KM at maximum

CR52K-P1XQ

10G POS interface single-mode short-haul line

board, LC interface, 40KM at maximum

CR52K-P1XV

10G POS interface single-mode long-haul line

board, LC interface, 80KM at maximum

CR52K-P2XX

2xOC-192c/STM-64c POS XFP interface

16

CR52K-P4UF

4-port 2.5G POS interface line board, SFP

16

to be configured

to be configured

interface
CR52K-P8CF

8-port 155M POS interface line board, SFP

16

10G LAN Ethernet interface single-mode middle-

LAN-IRL-LC

distance line board, LC interface, 10KM at

Optional, SFP needs

to be configured

interface
CR52K-10GE-

Optional, SFP needs

16

Optional

16

Optional

16

Optional

16

Optional

maximum
CR52K-10GE-

10G LAN Ethernet interface single-mode long-haul

LAN-LRE-LC

line board, LC interface, 40KM at maximum

CR52K-10GE-

10G WAN Ethernet interface single-mode middle-

WAN-IRL-LC

distance line board, LC interface, 10KM at

maximum

> 1-10

CR52K-10GE-

10G WAN Ethernet interface single-mode long-

WAN-LRE-LC

haul line board, LC interface, 40KM at maximum

Router Series

CR52K-E2XX

2-port 10G BASE Ethernet LAN XFP interface

16

Optional, XFP needs

to be configured

CR52K-W2XX

2-port 10G BASE Ethernet WAN XFP interface

16

Optional, XFP needs

to be configured

CR52K-10x1000

10-port GE interface line board, SFP interface

16

Base-SFP

Optional, SFP needs

to be configured

3. SFP
SFP-1.25G-

Optical transceiver module-SFP-850-1.25G-0.55km

16

Optional

Optical transceiver module-SFP-1310-1.25G-10km

16

Optional

Optical transceiver module-SFP-1310-1.25G-40km

16

Optional

Optical transceiver module-SFP-1550-1.25G-80km

16

Optional

SFP-1.25G-

Optical transceiver module-SFP-1550-1.25G-

16

Optional

100KM

100km

SFP-2.5G-2KM

Optical transceiver module-SFP-1310-2.5G-2km

16

Optional

SFP-2.5G-15KM

Optical transceiver module-SFP-1310-2.5G-15km

16

Optional

SFP-2.5G-40KM

Optical transceiver module-SFP-1310-2.5G-40km

16

Optional

SFP-2.5G-80KM

Optical transceiver module-SFP-1550-2.5G-80km

16

Optional

XFP-STM64-SM-

Optical transceiver module-XFP-1310-STM64-2km

16

Optional

0.55KM
SFP-1.25G10KM
SFP-1.25G-

SFP-1.25G-

Ethernet
Switch

40KM

80KM

2km

For more information, please visit www.huawei.com

> 1-11

Router Series
Quidway NetEngine 80E Core Router
Product Overview
The Quidway NetEngine 80E core router (hereinafter called the NE80E) is the NE80
enhanced high-end network product launched by Huawei, mainly applied in the key
position of IP backbone network, IP MAN and various large-sized IP network, with the
wire-speed 10G interface provided. The NE80E core router inherits all the functional
features of NE80, and it is compatible with the NE80 line board and can be extended in
the future.
The NE80E is based on the distributed hardware forwarding and non-blocking switching
technology, with the carrier-class reliability, wire-speed forwarding performance, perfect
QoS mechanism, powerful service processing capability and outstanding extension
capability. It meets the requirements of the increasing data and Internet services for the
network backbone equipment, to realize the smooth evolution from IPv4 to IPv6, so it is
the important source power for the IP backbone network and IP MAN to develop toward
the nature of broadband, security and service.

Product Appearance

NE80E core router

> 1-12

Router Series

Product Features
th
The Distributed 5 Generation Router

The NE80E, as the 5th generation router, adopts the industry-leading high performance
network processor (NP) technologies, fully inheriting the architecture of the G4 full
distributed hardware processing, and combining the flexibility of software and high
performance of hardware organically, thus providing line speed forwarding performance
and rapid service upgrading and expanding capacities and guaranteeing customers
investment to the largest extent, to speed up the development of a more broadband,
security, service and intelligence-natured IP network.

A Variety of Services
The NE80E provides the high-quality QoS to implement the intelligent service awareness,

Ethernet
Switch

advanced queue scheduling algorithm and congestion control algorithm, to exactly

ensure the bandwidth, delay and jitter of different services, and to meet the requirements
of QoS for different users and at different service levels.
The NE80E is based on the processing of the distributed hardware, it has a highperformance network service capability and is competent in the high-performance P/PE
application, providing the high quality, secure and comprehensive MPLS VPN solution; it
provides the high-performance multicast capability; provides the Gigabit wire-speed NAT
services.
The NE80E is available with a fast expansion capacity, comprehensively supporting
IPv6, and can fast implement the new services that cannot be predicted, to assist
users in improving their competition. It can be said a solid foundation for the future IP
telecommunication network (IPTN).

Powerful Routing Capability and Line-speed Forwarding Performance

The NE80E supports the IP/MPLS distributed forwarding with a powerful routing
capability, and it supports the ultra-large routing table and provides a variety of routing
protocol functions such as RIP, OSPF, IS-IS and BGP4 as well as multicast routing
protocols, it is available with the fast convergence function, so it can be stably and
smoothly run in the complex routing environment, which is much suitable in the IP
backbone network application.
The NE80E realizes the full-duplex wire-speed forwarding of all interfaces (including

> 1-13

Router Series

POS 10Gbps), and it can provide 16 10Gbps interfaces and the packet forwarding
performance of the integrated IP/MPLS is as high as 400Mpps.

Carrier-class Reliability
The key parts of NE80E are of redundancy hot backup to implement the hot switching
and non-stop route forwarding based on status; all the components support hotswapping; adopts the passive back-plane design; provides the hot patching technology to
implement the fully smooth upgrading of software; provides the protection mechanisms
such as IP/MPLS fast re-routing, virtual routing redundancy protocol (VRRP) and RPR, to
effectively ensure the high-speed and reliability of the whole-network running, to realize
the system availability of 99.999%.

Product Specifications
Item

NE80E

Switching capacity

640Gbps, non-blocking switching

Forwarding performance

400Mpps

Number of interface

16

board slots
Interface type

OC-192c/STM-64c POS

10GE-WAN/LAN

OC-48c/STM-16c POS

GE

OC-12c/STM-4c POS

FE

OC-3/STM-1 POS

E1

OC-48/STM-16 cPOS to channelized to 155M

OC-12c/STM-4c ATM

OC-3/STM-1 cPOS channelized to E1/T1

OC-3/STM-1 ATM

OC-48c/STM-16c RPR

OC-192c/STM-64c RPR

Dedicated service board

NAT / Netstream / Tunnel

Routing protocol

Supports the routing protocols as RIP, OSPF, IS-IS and BGP-4, and all the
ports can still be able to keep wire-speed forwarding in the complex
routing environment such as routing oscillation.

IPv6

Comprehensively supports the dual protocol stack, IPv4 and IPv6;

Supports rich transition technologies from IPv4 to IPv6: Manual
tunnel configuration, automatic tunnel configuration, 6to4 tunnel and
implementation of NAT-PT by hardware;

> 1-14

Router Series

Supports the IPv6 static routing, and supports such dynamic routing
protocols as BGP4+, RIPng, OSPFv3, ISISv6;
Supports ICMPv6 MIB, UDP6 MIB, TCP6 MIB and IPv6 MIB.
MPLS VPN

Can serve as P and PE. Supports MPL VPN, meeting the RFC2547bis
protocol; supports three cross-domain implementation mode; supports
the integration with the Internet service, providing VPN-based multiinstance NAT; supports HoPE; supports the multi-role host. Supports
MPLS L2VPN in Martini, Kompella, VPLS modes.

NAT

Provides the dedicated NAT service processing board to implement

the bi-directional Gigabit wire-speed address translation capability;
each board supports 1 million concurrent connections; 200,000
new connections are processed per second; 500,000 NAT entries

Ethernet
Switch

are refreshed per second; supports the NAT-PT function of IPv6/IPv4;

provides a perfect security log.
QoS

Perfect QoS mechanism. Each line board provides 8k queues,

supporting the advanced scheduling technologies such as CBQ, LLS/NLS
and PBS, it adopts WRED, supporting the discard priority with eight
levels; provides the exact traffic policing and traffic shaping functions;
provides the function of defining the complex rules and it can
discriminate the streams with fine granularity. Can provide the perfect
QoS guarantee based on DiffServ.

Multicast

Supports IGMP, static multicast configuration, PIM-DM/SM, MSDP and

MBGP multicast routing protocol; supports the interoperability between
multiple multicast protocols; supports the multicast policy processing,
including the policy processing of multicast routing protocol and
multicast forwarding as well as multicast QoS. Provides the multicast
reproduction function at two levels, switching fabric and line board, to
reach the optimal multicast effect.

Reliability

Provides the protection mechanisms such as IP/MPLS fast re-routing,

virtual routing redundancy protocol (VRRP) and RPR. Provides the
software hot patching technology to implement the full smooth
upgrading of equipment software; uses the passive back-panel design;
redundancy backup of key parts (including route processing module,
switching fabric, power supply), the integrated system has no singlepoint faults; all the components can be hot swapped, supporting the

> 1-15

Router Series

status-based hot backup switching as well as non-stop forwarding of NSF and

fast link detection of APDP and BFD.
Architecture

Integrated chassis structure supports 19-inch standard rack

Input power

DC: -36 ~ -72V

Max. power consumption

< 5000W

Dimensions (W x D x H)

442mm x 600mm x 1,600mm

Maximum weight in full

< 200kg

configuration
Environmental

Long-term operation: 0 ~ 45C

requirements

Short-term operation: 5 ~ 55C

Temperature change rate limit: 30C/h
Operating humidity: 5% ~ 85%, non-condensing
Short-term operating humidity: 0% ~ 95%
Altitude: No effect on forwarding performance within 3,000m

Order Information
Name

Item

Configuration

Remarks

1. Host system
CR52-22

Assembly cabinet-NE80E-CR5B1TSR-2.2 high-

Optional

Mandatory

Mandatory,

end router assembly cabinet

CR52-BKPA

Components for the NE 80E integrated

chassis

CR52-MPUA

Main processing board, with L3 clock module,

CF card and memory can be configured

2 pieces

otherwise.
CR52-SFUA

NE 80E switching fabric board

recommended
4

Mandatory,
4 pieces
recommended

CR52-PWRA

SWP-CR52

Specially-made secondary power supply-

Mandatory,
2 pieces

75VDC- primary channel 160A

recommended

NE 80E core router IP/MPLS forwarding host

software (VRP5)

> 1-16

6500W--5degC-55degC--38V--75V--36-

Mandatory

Router Series

CR52-MPUA-

Main processing unit 512MB FLASH card

CFB

Mandatory, 1
flash card for 1
MPUA

CR52-MPUA-

Main processing unit 1GB memory bar

MEMB

Mandatory, 1
memory bar for 1
MPUA

2. Line interface board

CR52-P1XZ

10G POS interface single-mode short-haul line

16

Optional

16

Optional

16

Optional

16

Optional, SFP

board, LC interface, 2KM at maximum

CR52-P1XQ

10G POS interface single-mode short-haul line

board, LC interface, 40KM at maximum

CR52-P1XV

10G POS interface single-mode long-haul line

4-port 2.5G POS interface line board, SFP

interface

Ethernet
Switch

board, LC interface, 80KM at maximum

CR52-P4UF

needs to be
configured

CR52-10GE-

10G LAN Ethernet interface single-mode

LAN-IRL-LC

middle-distance line board, LC interface,

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional, SFP

10KM at maximum
CR52-10GE-

10G LAN Ethernet interface single-mode

LAN-LRE-LC

long-haul line board, LC interface, 40KM at

maximum

CR52-10GE-

10G WAN Ethernet interface single-mode

WAN-IRL-LC

middle-distance line board, LC interface,

10KM at maximum

CR52-10GE-

10G WAN Ethernet interface single-mode

WAN-LRE-LC

long-haul line board, LC interface, 40KM at

maximum

CR52-10xGE-

10-port GE interface line board, SFP interface

SFP

needs to be
configured

3. SFP
SFP-1.25G-

Optical transceiver module-SFP-850-1.25G-

0.55KM

0.55km

16

Optional

> 1-17

Router Series

SFP-1.25G-

Optical transceiver module-SFP-1310-

10KM

1.25G-10km

SFP-1.25G-

Optical transceiver module-SFP-1310-

40KM

1.25G-40km

SFP-1.25G-

Optical transceiver module-SFP-1550-

80KM

1.25G-80km

SFP-1.25G-

Optical transceiver module-SFP-1550-

100KM

1.25G-100km

SFP-2.5G-2KM

Optical transceiver module-SFP-1310-2.5G-

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

2km
SFP-2.5G-15KM

Optical transceiver module-SFP-1310-2.5G15km

SFP-2.5G-40KM

Optical transceiver module-SFP-1310-2.5G40km

SFP-2.5G-80KM

Optical transceiver module-SFP-1550-2.5G80km

XFP-STM64-SM-

Optical transceiver module-XFP-1310-STM64-

2km

2km

For more information, please visit www.huawei.com

> 1-18

Router Series
Quidway NetEngine 40E Core Router
Product Overview
The Quidway NetEngine 40E service router (hereinafter called the NE40E) is the NE40
enhanced high-end network product launched by Huawei, it is mainly applied in the
edge position of the IP backbone network, IP MAN and the large-sized IP network. It
provides the wire-speed 10G interface and high density Ethernet interface, to meet the
requirements of high-density service access and processing.
Based on the distributed network processor hardware forwarding and non-blocking
switching technology, the NE40E is available with an outstanding expansion capability,

Ethernet
Switch

and comprehensively supports IPv6. The NE40E integrates the powerful IP service
processing capability and L3 Ethernet switching capability of the core router, and
provides richer services, more flexible networking and more ideal performance cost. The
NE40E is the important source power for the development of IP backbone network and
IP MAN towards the nature of broadband, security and service.

Product Appearance

NetEngine 40E core router

> 1-19

Router Series

Product Features
th
The Distributed 5 Generation Router

The NE40E, as the 5th generation router, adopts the industry-leading high performance
network processor (NP) technologies, fully inheriting the architecture of the full
distributed hardware processing, and combining the flexibility of software and high
performance of hardware organically, thus providing line speed forwarding performance
and rapid service upgrading and expanding capacities and guaranteeing customers
investment to the largest extent, to speed up the development of a more broadband,
security, service and intelligence-natured IP network.

Rich Service Capability and High-quality Service Performance

The NE40E provides the high-quality QoS to implement the intelligent service awareness,
advanced queue scheduling algorithm and congestion control algorithm, to exactly
ensure the bandwidth, delay and jitter of different services, and to meet the requirements
of QoS for different users and at different service levels.
The NE40E is available with the high-performance network service capability based on
the distributed hardware processing, competent in the high-performance MPLS VPN P/PE
application. It provides such service solutions as high-quality, secure and comprehensive
MPLS VPN, MPLSTE, multicast and NAT.
In addition, the NE40E has various Layer 2 service features, including L2 VPN, virtual
private LAN service (VPLS), virtual leased line (VLL) and relevant features of VLAN.
The NE40E has both the powerful service processing capability of the high-end router
and rich L2 service features. The NE40E is available with a fast expansion capacity,
comprehensively supporting IPv6, and can fast implement the new services that cannot
be predicted, to assist users in improving their competition. It can be said a solid
foundation for the future IP telecommunication network (IPTN).

Carrier-class Reliability
The key parts of NE40E are of redundancy hot backup to implement the hot switching
and non-stop routing forwarding based on status; all the components support hotswapping; adopts the passive backplane design; provides the hot patching technology to
implement the fully smooth upgrading of software; provides the protection mechanisms

> 1-20

Router Series

such as IP/MPLS fast re-routing, virtual routing redundancy protocol (VRRP) and RPR, to
effectively ensure the high-speed and reliability of the whole-network running, to realize
the system availability of 99.999%.

Product Specifications
Item

NE40E

Switching capacity

640Gbps, non-blocking switching

Forwarding performance

400Mpps

Number of interface

board slots
OC-192c/STM-64c POS

10GE-WAN/LAN

OC-48c/STM-16c POS

GE

OC-12c/STM-4c POS

FE

OC-3/STM-1 POS

E1

OC-48/STM-16 cPOS is channelized to 155M

OC-12c/STM-4c ATM

OC-3/STM-1 cPOS is channelized to E1/T1

OC-3/STM-1 ATM

OC-48c/STM-16c RPR

OC-192c/STM-64c RPR

Dedicated service board

NAT / Netstream / Tunnel

Routing protocol

Supports the routing protocols as RIP, OSPF, IS-IS and BGP-4, and all the

Ethernet
Switch

Interface type

ports can still be able to keep wire-speed forwarding in the complex

routing environment such as routing oscillation.
IPv6

Comprehensively supports the dual protocol stack, IPv4 and IPv6;

Supports rich transition technologies from IPv4 to IPv6: Manual
tunnel configuration, automatic tunnel configuration, 6to4 tunnel and
implementation of NAT-PT by hardware;
Supports the IPv6 static routing, and supports such dynamic routing
protocols as BGP4+,RIPng,OSPFv3, ISISv6;
Supports ICMPv6 MIB, UDP6 MIB, TCP6 MIB and IPv6 MIB.

L2 service feature

Supports the basic VLAN feature; supports various L2 features as VLAN

convergence, VLAN TRUNK, multicast VLAN, VLAN Translation, STP/RSTP/
MSTP, and HGMP.

> 1-21

Router Series

MPLS VPN

Can serve as P and PE. Supports MPL VPN, meeting the RFC2547bis
protocol; supports three cross-domain implementation mode; supports
the integration with the Internet service, providing VPN-based multiinstance NAT; supports HoPE; supports the multi-role host. Supports
MPLS L2VPN in Martini, Kompella, VPLS modes.

NAT

Provides the dedicated NAT service processing board to implement

the bi-directional Gigabit wire-speed address translation capability;
each board supports 1 million concurrent connections; 200,000
new connections are processed per second; 500,000 NAT entries
are refreshed per second; supports the NAT-PT function of IPv6/IPv4;
provides a perfect security log.

QoS

Perfect QoS mechanism. Each line board provides 8k queues,

supporting the advanced scheduling technologies such as CBQ, LLS/
NLS and PBS, it adopts WRED and the advanced congestion control
algorithm, supporting the discard priority with eight levels; provides
the exact traffic policing and traffic shaping functions; provides the
function of defining the complex rules and it can discriminate the
streams with fine granularity. Can provide the perfect QoS guarantee
based on DiffServ.

Multicast

Supports IGMP, static multicast configuration, PIM-DM/SM, MSDP and

MBGP multicast routing protocol, and can provide 64K multicast routes;
supports the interoperability between multiple multicast protocols;
supports the multicast policy processing, including the policy processing
of multicast routing protocol and multicast forwarding as well as
multicast QoS. Provides the multicast reproduction function at two levels,
switching fabric and line board, to reach the optimal multicast effect.

Reliability

Provides the protection mechanisms such as IP/MPLS fast re-routing, virtual

routing redundancy protocol (VRRP) and RPR . Provides the software
hot patching technology to implement the full smooth upgrading of
equipment software; uses the passive back-panel design; redundancy
backup of key parts (including route processing module, switching fabric,
power supply), the integrated system has no single-point faults; all the
components can be hot swapped, supporting the status-based hot
backup switching as well as non-stop forwarding of NSF and fast link
detection of APDP and BFD.

> 1-22

Router Series

Architecture

Integrated chassis structure supports 19-inch standard rack

Input power

DC: -36 ~ -72V

Max. power consumption

< 3000W

Dimensions (W x D x H)

442mm x 600mm x 889mm (22U high)

Maximum weight in full

< 200kg

configuration
Environmental

Long-term operation: 0 ~ 45C

requirements

Short-term operation: -5 ~ 55C

Temperature change rate limit: 30C/h
Operating humidity: 5% ~ 85%, non-condensing
Short-term operating humidity: 0% ~ 95%
Altitude: No effect on forwarding performance within 3,000m

Ethernet
Switch

Order Information
Name

Item

Configuration

Remarks

1. Host system
CR52-22

Assembly cabinet -NetEngine80E-CR5B1TSR-2.2

Optional

Mandatory

Mandatory,

high-end router assembly cabinet

CR52-BKPB

Data communication-Integrated chassis of the

NE40E router

CR52-SRUA

NE40E route switching board, with L3 clock

module, CF card and memory can be configured

2 pieces

otherwise.
CR52-SFUD

NE40E switching fabric board

recommended
2

Mandatory,
2 pieces
recommended

CR52-PWRB

-48V DC power supply module

Mandatory,
2 pieces
recommended

SWP-CR52

NE40E router IP/MPLS forwarding host software

Mandatory

(VRP5)

> 1-23

Router Series

CR52-MPUA-

Main processing unit 512MB FLASH card

CFB

Mandatory, 2
flash cards for 1
SRU

CR52-

Main processing unit 1GB memory bar

MPUA-MEMB

Mandatory,1
flash card for 1
SRU

2. Line interface board

CR52-P1XZ

10G POS interface single-mode short-distance

Optional

Optional

Optional

Optional, SFP

line board, LC interface, 2KM at maximum

CR52-P1XQ

10G POS interface single-mode short-haul line

board, LC interface, 4KM at maximum

CR52-P1XV

10G POS interface single-mode long-haul line

board, LC interface, 80KM at maximum

CR52-P4UF

4-port 2.5G POS interface line board, SFP

interface

needs to be
configured

CR52-10GE-

10G LAN Ethernet interface single-mode

LAN-IRL-LC

middle-distance line board, LC interface, 10KM

Optional

Optional

Optional

Optional

Optional, SFP

at maximum
CR52-10GE-

10G LAN Ethernet interface single-mode

LAN-LRE-LC

long-haul line board, LC interface, 40KM at

maximum

CR52-10GE-

10G WAN Ethernet interface single-mode

WAN-IRL-LC

middle-distance line board, LC interface, 10KM

at maximum

CR52-10GE-

10G WAN Ethernet interface single-mode

WAN-LRE-LC

long-haul line board, LC interface, 40KM at

maximum

CR52-10xGE-

10-port GE interface line board, SFP interface

SFP

needs to be
configured

3. SFP

> 1-24

SFP-1.25G-

Optical transceiver module-SFP-850-1.25G-

0.55KM

0.55km

16

Optional

Router Series

SFP-1.25G-

Optical transceiver module-SFP-1310-

10KM

1.25G-10km

SFP-1.25G-

Optical transceiver module-SFP-1310-

40KM

1.25G-40km

SFP-1.25G-

Optical transceiver module-SFP-1550-

80KM

1.25G-80km

SFP-1.25G-

Optical transceiver module-SFP-1550-

100KM

1.25G-100km

SFP-2.5G-2KM

Optical transceiver module-SFP-1310-2.5G-

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

2km
SFP-2.5G-15KM

Optical transceiver module-SFP-1310-2.5G15km

Optical transceiver module-SFP-1310-2.5G-

Ethernet
Switch

SFP-2.5G-40KM

40km
SFP-2.5G-80KM

Optical transceiver module-SFP-1550-2.5G80km

XFP-STM64-SM-

Optical transceiver module-XFP-1310-STM64-

2km

2km

XFP-STM64-SM-

Optical transceiver module-XFP-1550-STM64-

40km

40km

For more information, please visit www.huawei.com

> 1-25

Router Series
Quidway NetEngine 80 Core Router
Product Overview
The Quidway NetEngine 80 core router (hereinafter called the NE80) is the high-end
network product launched by Huawei, mainly applied in the key position of IP backbone
network, IP MAN and various large-scale IP networks.
The switching capacity of the NE80 system is 128Gbps, with 16 line board slots, and
the NE80 provides the service interfaces ranging from 64Kbit/s to 2.5Gbit/s, applied in
the requirements for the networking and expansion of the backbone equipment. The
NE80 is based on the distributed network processor hardware forwarding and nonblocking switching technology, and its carrier-class reliability, wire-speed forwarding
performance, perfect QoS mechanism, rich service processing capacity and outstanding
expansion capacity meet the increasing requirements of the data and Internet
services for the network backbone equipment. The NE80 supports the IPv6 function
implemented basing on hardware in the mode of smooth software upgrading. The
NE80 is the important source power for the development of the Internet backbone
network and the IP MAN towards the nature of broadband, security and service, and it
can cooperate with the network products of Huawei or other manufacturers, providing
users with the integrated solutions.

Product Appearance

NE80 core router

> 1-26

Router Series

Product Features
th
The Distributed 5 Generation Router

The NE80, as the 5th generation router, adopts the industry-leading high performance
network processor (NP) technologies, fully inheriting the architecture of the full
distributed hardware processing, and combining the flexibility of software and high
performance of hardware organically, thus providing line speed forwarding performance,
rapid service upgrading, expanding capacities and guaranteeing customers investment
to the largest extent.
All the NE80s in the existing network can provide the IPv6 forwarding performance
of hardware in the mode of software upgrading, without the need of buying any IPv6
hardware equipment again, which saves a lot of expenses of users and fully protects the

Ethernet
Switch

user investment, it reflects the outstanding expansion capability of 5th generation routers.
The excellent expandability of NE80 accelerates the development of the IP network
towards the nature of broadband, security, service and intelligence.

A Variety of Services
The high-quality QoS capability lays a solid technical foundation for the network service.
The NE80 implements the intelligent service awareness, provides the advanced queue
scheduling algorithm and SARED congestion control algorithm, to exactly ensure the
bandwidth, delay and jitter of different services, and to meet the requirements of
different users and at different service levels.
The NE80 is available with rich service capabilities and high-quality, secure and
comprehensive MPLS VPN solutions based on the distributed hardware processing, and it
provides the high-efficiency multicast forwarding capability; it provides the services such
as Gigabit wire-speed NAT.
The NE80 is available with a fast expansion capacity, comprehensively supporting
IPv6, and can fast implement the new services that cannot be predicted, to assist
users in improving their competition. It can be said a solid foundation for the future IP
telecommunication network (IPTN).

Flexible Networking Capability

It owns a great variety of interface types, supports the RPR ring network technology,
provides the perfect protocol function and is able to deal with various complex

> 1-27

Router Series

networking to meet the requirements of IP MAN, backbone network and operation

supporting network.
The NE80 provides such security measures as packet filtering, traffic sampling, port
imaging and security log, and it is an ideal device for constructing the highly secure and
maintainable network.

High Reliability
The key parts of NE80 include the route processing system, the switching fabric system,
the clock system and the power supply system, and the management buses are all
redundancy hot backup, to realize the hot switching based on status; all the components
support hot swapping; they adopt the passive backplane design, providing the hot
patching technology to implement the full smooth upgrading of software; support
the dynamic routing protocol and MPLS traffic engineering; provide the protection
mechanisms such as IP/MPLS fast re-routing, virtual routing redundancy protocol (VRRP)
and RPR, with the Fast Routing Backup function; support the APDP and BFD fast link
detection and the NSF non-stop forwarding function to effectively ensure the high-speed
and reliable running of the whole network.

Product Specifications
Item

NE80

Switching capacity

128Gbps, non-blocking switching

Forwarding performance

96Mpps

Number of interface

16

board slots
Interface type

OC-48c/STM-16c POS

GE

OC-12c/STM-4c POS

FE

OC-3/STM-1 POS

E1

OC-48/STM-16c POS is channelized to 155M

OC-12c/STM-4c ATM
OC-3/STM-1c POS is channelized to DS0
OC-3/STM-1 ATM
OC-48c/STM-16c RPR

> 1-28

Router Series

Dedicated service board

NAT / Netstream / Tunnel

Routing protocol

Supports the routing protocols as RIP, OSPF, IS-IS and BGP-4, and all the
ports can still be able to keep wire-speed forwarding in the complex
routing environment such as routing oscillation.

IPv6

Comprehensively supports the dual protocol stack, IPv4 and IPv6;

Supports rich transition technologies from IPv4 to IPv6: Manual
tunnel configuration, automatic tunnel configuration, 6to4 tunnel and
implementation of NAT-PT by hardware;
Supports the IPv6 static routing, and supports such dynamic routing
protocols as BGP4+, RIPng, OSPFv3, ISISv6;
Supports ICMPv6 MIB, UDP6 MIB, TCP6 MIB and IPv6 MIB.

MPLS VPN

Can serve as P and PE. Supports MPL VPN, meeting the RFC2547bis
protocol; supports three cross-domain implementation mode; supports

Ethernet
Switch

the integration with the Internet service, providing VPN-based multiinstance NAT; supports HoPE; supports the multi-role host. Supports
MPLS L2VPN in Martini, Kompella modes.
NAT

Provides the dedicated NAT service processing board to implement

the bi-directional Gigabit wire-speed address translation capability;
each board supports 1 million concurrent connections; 200,000
new connections are processed per second; 500,000 NAT entries
are refreshed per second; supports the NAT-PT function of IPv6/IPv4;
provides a perfect security log.

QoS

Perfect QoS mechanism. Each line board provides 2k queues, supporting

the advanced scheduling technologies such as CBQ, LLS/NLS and PBS,
it adopts WRED and the advanced SA-RED algorithm, supporting the
discard priority with eight levels; provides the exact traffic policing and
traffic shaping functions; provides the function of defining the complex
rules and it can discriminate the streams with fine granularity. Can
provide the perfect QoS guarantee based on DiffServ.

Multicast

Supports IGMP, static multicast configuration, PIM-DM/SM, MSDP and

MBGP multicast routing protocol; supports the interoperability between
multiple multicast protocols; supports the multicast policy processing,
including the policy processing of multicast routing protocol and
multicast forwarding as well as multicast QoS. Provides the multicast
reproduction function at two levels, switching fabric and line board, to
reach the optimal multicast effect.

> 1-29

Router Series

Reliability

Provides the protection mechanisms such as IP/MPLS fast re-routing, virtual

routing redundancy protocol (VRRP) and RPR. Provides the software
hot patching technology to implement the full smooth upgrading of
equipment software; uses the passive back-panel design; redundancy
backup of key parts (including route processing module, switching fabric,
power supply), the integrated system has no single-point faults; all the
components can be hot swapped, supporting the status-based hot
backup switching as well as non-stop forwarding of NSF and fast link
detection of APDP and BFD.

Architecture

Integrated chassis structure supports 19-inch standard rack

Input power

DC: -40 ~ -72V;

Max. power consumption

< 1800W

Dimensions (W x D x H)

600mm x 800mm x 2,200mm

Maximum weight in full

< 400kg

AC: 150 ~ 280V

configuration
Environmental

Long-term operation: 0 ~ 45C

requirements

Short-term operation: -5 ~ 55C

Temperature change rate limit: 30C/h
Operating humidity: 5% ~ 85%, non-condensing
Short-term operating humidity: 0% ~ 95%
Altitude: No effect on forwarding performance within 3,000m

Order Information
Name

Item

Configuration

Remarks

1. Host system
CR-B08011-

Assembly cabinet of the core router (2.2m)

Optional

CR-K08011

Backplane subrack of the core router

Mandatory

CR-MPUB

Main control processing unit

Mandatory,

2.2M

2 pieces
recommended

> 1-30

Router Series

CR-NETB

Switching net board

Mandatory,
2 pieces
recommended

CR-PW-AC

Functional module- Quidway S8016-

Mandatory

Mandatory

16

Optional, GBIC

RS0M1GSR-220V AC power supply system

(dual input)
SWP-CR-

NE80 IP/MPLS forwarding host software

NE80
2. Line interface board
CR-E4GC

4-port GBIC optical interface line board

needs to be
configured
16-port FE SFP optical interface line board

16

Optional, SFP

Ethernet
Switch

CR-EGFF

needs to be
configured
CR-E8FB

4 x FE-RJ45 electrical interface and 4 x FE-SFP

16

optical interface line board

Optional, SFP
needs to be
configured

CR-EGFEE

16-port 100M Ethernet electrical interface

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional, SFP

line board (100m, RJ45)- enhanced

CR-EWFEE

32-port 100M Ethernet electrical interface

line board (100m, RJ45)- enhanced

CR-P1UZ

1-port 2.5G POS single-mode 1310nm 2km

LC optical interface line board

CR-P1US

1-port 2.5G POS single-mode 1310nm 15km

LC optical interface line board

CR-P1UL

1-port 2.5G POS single-mode 1310nm 40km

LC optical interface line board

CR-P1UV

1-port 2.5G POS single-mode 1550nm 70km

LC optical interface line board

CR-P2HM

2-port 622M POS multi-mode optical

interface line board (1310nm, 500m, SC)

CR-P4CF

4-port OC-3c/STM-1 POS optical interface line

process card (SFP)

needs to be
configured

> 1-31

Router Series

CR-P8CF

8-port OC-3c/STM-1 POS optical interface line

16

process card (SFP)

Optional, SFP
needs to be
configured

CR-P1RZ

1-port 2.5G channelized POS single-mode

16

Optional

16

Optional

16

Optional, SFP

1310nm 2km LC optical interface line boardchannelized to 155M POS

CR-P1RS

1-port 2.5G channelized POS single-mode

1310nm 15km LC optical interface line boardchannelized to 155M POS

CR-C4CF

4-port 155M channelized POS optical

interface line board-SFP-channelized to E1

needs to be
configured

CR-C2CF

2-port 155M channelized POS optical

16

interface line board-SFP-channelized to E1

Optional, SFP
needs to be
configured

CR-R1UZ

1-port 2.5G RPR single-mode 1310nm 2km

16

Optional

16

Optional

16

Optional

16

Optional

16

Optional, SFP

LC optical interface line board

CR-R1US

1-port 2.5G RPR single-mode 1310nm 15km

LC optical interface line board

CR-R1UL

1-port 2.5G RPR single-mode 1310nm 40km

LC optical interface line board

CR-R1UV

1-port 2.5G RPR single-mode 1550nm 70km

LC optical interface line board

CR-A2HF

2-port 622M ATM single-mode optical

interface line board (SFP)

needs to be
configured

CR-A8CF

8 - p o r t 1 5 5 M AT M m u l t i - m o d e o p t i c a l

16

interface line card (SFP)

Optional, SFP
needs to be
configured

CR-8*E1

> 1-32

8-port E1 interface line board -RJ45 interface

16

Optional

Router Series

3. Service board
CR-NAT

Network address translation service board +

16

Optional

16

Optional

network address translation software

CR-NetStream-1

NetStream billing statistics service board

Ethernet
Switch

For more information, please visit www.huawei.com

> 1-33

Router Series
Quidway NetEngine 40 Core Router Series
Product Overview
The Quidway NetEngine 40 universal switching router series (USR) (hereinafter called
the NE40) fully inherits the design philosophy and key technology of the NE80 core
router, and it is launched by Huawei to cater to large-scale enterprise network, industrial
network, IP MAN and IP backbone network.
Based on the distributed network processor hardware forwarding and non-blocking
switching technology, the NE40 is available with an outstanding expansion capability, and
comprehensively supports IPv6. The NE40 integrates the powerful IP service processing
capability and L3 Ethernet switching capability of the core router, and provides richer
services, more flexible networking and more ideal performance cost. The NE40 is the
important source power for the development of IP backbone network and IP MAN
towards the nature of broadband, security and service.

Product Appearance

NE40-8

> 1-34

NE40-4

NE40-2

Router Series

Product Features
th
The Distributed 5 Generation Router

The NE40, as the 5th generation router, adopts the industry-leading high performance
network processor (NP) technologies, fully inheriting the architecture of the full
distributed hardware processing, and combining the flexibility of software and high
performance of hardware organically, thus providing line speed forwarding performance,
rapid service upgrading, expanding capacities and guaranteeing customers investment
to the largest extent.
All the NE40 in the existing network can provide the IPv6 forwarding performance of
hardware in the mode of software upgrading, without the need of buying any IPv6
hardware equipment again, which saves a lot of expenses of users and fully protects the

Ethernet
Switch

user investment, it reflects the outstanding expansion capability of 5th generation routers.
The excellent expandability of NE40 accelerates the development of the IP network
towards the nature of broadband, security, service and intelligence.

A Variety of Services
The high-quality QoS capability lays a solid technical foundation for the network service.
The NE40 implements the intelligent service awareness, provides the advanced queue
scheduling algorithm and SARED congestion control algorithm, to exactly ensure the
bandwidth, delay and jitter of different services, and to meet the requirements of
different users and at different service levels.
The NE40 is available with rich service capabilities and high-quality, secure and
comprehensive MPLS VPN solutions based on the distributed hardware processing, and it
provides the high-efficiency multicast forwarding capability; it provides the services such
as Gigabit wire-speed NAT. The NE40 is a high cost-effective service router.
The NE40 is available with a fast expansion capacity, comprehensively supporting
IPv6, and can fast implement the new services that cannot be predicted, to assist
users in improving their competition. It can be said a solid foundation for the future IP
telecommunication network (IPTN).

Flexible Networking Capability

It owns a great variety of interface types, supports the RPR ring network technology,
provides the perfect protocol function and is able to deal with various complex

> 1-35

Router Series

networking to meet the requirements of IP MAN, backbone network and operation

supporting network.
The NE40 provides such security measures as packet filtering, traffic sampling, port
imaging and security log, and it is an ideal device for constructing the highly secure and
maintainable network.

High Reliability
The key parts of NE40 include the route processing system, the switching fabric system,
the clock system and the power supply system, and the management buses are all
redundancy hot backup, to realize the hot switching based on status; all the components
support hot swapping; they adopt the passive backplane design, providing the hot
patching technology to implement the full smooth upgrading of software; support
the dynamic routing protocol and MPLS traffic engineering; provide the protection
mechanisms such as IP/MPLS fast re-routing, virtual routing redundancy protocol (VRRP)
and RPR, with the Fast Routing Backup function; support the APDP and BFD fast link
detection and the NSF non-stop forwarding function to effectively ensure the high-speed
and reliable running of the whole network.

Ideal Cost Performance

USR of the NE40 series bases itself upon the localized design and production with the
features of L3 switch integrated on the basis of the core router. It is available with both
a powerful processing capability to meet the requirements of the IP backbone network
and rich L2 features. It reflects an extremely high cost performance by greatly saving the
network construction cost in addition to satisfying the service application, so it can be
applied in the peripheral layer of the IP backbone network and MAN.

> 1-36

Router Series

Product Specifications
Item
Switching capacity

NE40-8

NE40-4

NE40-2

64Gbps, non-

32Gbps, non-

16Gbps, non-

blocking switching

blocking switching

blocking switching

Forwarding performance

48Mpps

24Mpps

12Mpps

Number of interface

board slots
Interface type

OC-48c/STM-16c POS

GE

OC-12c/STM-4c POS

FE

OC-3/STM-1 POS

E3

OC-48/STM-16 cPOS is channelized to 155M T3

E1/cE1

OC-48c/STM-16c RPR

T1/cT1

Ethernet
Switch

OC-3/STM-1 cPOS is channelized to E1/T1

OC-12c/STM-4c ATM
OC-3/STM-1 ATM
Dedicated service board

NAT / Netstream / Tunnel

Routing protocol

Supports the routing protocols as RIP, OSPF, IS-IS and BGP-4, and all the
ports can still be able to keep wire-speed forwarding in the complex
routing environment such as routing oscillation.

IPv6

Comprehensively supports the dual protocol stack, IPv4 and IPv6;

Supports rich transition technologies from IPv4 to IPv6: Manual
tunnel configuration, automatic tunnel configuration, 6to4 tunnel and
implementation of NAT-PT by hardware;
Supports the IPv6 static routing, and supports such dynamic routing
protocols as BGP4+, RIPng, OSPFv3, ISISv6;
Supports ICMPv6 MIB, UDP6 MIB, TCP6 MIB and IPv6 MIB.

Layer-3 switch feature

Serves as the universal core router, supports L2 switching and L3

forwarding function, provides rich switch features, including IEEE802.1ad,
IEEE 802.1d, IEEE 802.3, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z, IEEE
802.1Q, IEEE 802.1p, IEEE 802.1D/802.1w, MSTP, supports VLAN
convergence (Super VLAN); supports access control list based on the MAC
address and ports, supports 1438B.

MPLS VPN

Can serve as P and PE. Supports MPLS VPN, meeting the RFC2547bis
protocol; supports three cross-domain implementation mode; supports

> 1-37

Router Series

the integration with the Internet service, providing VPN-based multiinstance NAT; supports HoPE; supports the multi-role host. Supports
MPLS L2VPN in Martini, Kompella, VPLS modes.
NAT

Provides the dedicated NAT service processing board to implement

the bi-directional Gigabit wire-speed address translation capability;
each board supports 1 million concurrent connections; 200,000
new connections are processed per second; 500,000 NAT entries
are refreshed per second; supports the NAT-PT function of IPv6/IPv4;
provides a perfect security log.

QoS

Perfect QoS mechanism. Each line board provides 2k queues, supporting

the advanced scheduling technologies such as CBQ, LLS/NLS and PBS,
it adopts WRED and the advanced SA-RED algorithm, supporting the
discard priority with eight levels; provides the exact traffic policing and
traffic shaping functions; provides the function of defining the complex
rules and it can discriminate the streams with fine granularity. Can
provide the perfect QoS guarantee based on DiffServ.

Multicast

Supports IGMP, static multicast configuration, PIM-DM/SM, MSDP and

MBGP multicast routing protocol; supports the interoperability between
multiple multicast protocols; supports the multicast policy processing,
including the policy processing of multicast routing protocol and
multicast forwarding as well as multicast QoS. Provides the multicast
reproduction function at two levels, switching fabric and line board, to
reach the optimal multicast effect.

Reliability

Provides the protection mechanisms such as IP/MPLS fast re-routing,

virtual routing redundancy protocol (VRRP) and RPR. Provides the software
hot patching technology to implement the full smooth upgrading of
equipment software; uses the passive back-panel design; redundancy
backup of key parts (including route processing module, switching fabric,
power supply), the integrated system has no single-point faults; all the
components can be hot swapped, supporting the status-based hot
backup switching as well as non-stop forwarding of NSF and fast link
detection of APDP and BFD.

> 1-38

Architecture

Integrated chassis structure supports 19-inch standard rack

Input power

DC: -42 ~ -60V

AC: 100V ~ 240V

Router Series

Max. power consumption

< 1000W

< 600W

< 600W

Dimensions (W x D x H)

482.6mm x 420mm

482.6mm x 420mm

482.6mm x 420mm

x 797.3mm

x 352.8mm

x 219.5mm

< 85kg

< 50kg

< 35kg

Maximum weight in full

configuration
Environmental

Long-term operation: 0 ~ 45C

requirements

Short-term operation: -5 ~ 55C

Temperature change rate limit: 30C/h
Operating humidity: 5% ~ 85%, non-condensing;
Short-term operating humidity: 0% ~ 95%
Altitude: No effect on forwarding performance within 3,000m

Ethernet
Switch

Order Information
NE40-8
Name

Item

Configuration

Remarks

1. Host system
CHASSIS-N68-

Assembly cabinet of the N68-22 router

Optional

UR-NE40-8-

NE40-8 integrated chassis-dual-DC power

Mandatory

CHASSIS-DC

supply

UR-SRUB-64G

NE40-8/NE40-4/NE40-2 route switching

Mandatory,

22

board

2 pieces
recommended

SWP-CR-NE40

NE40 IP/MPLS forwarding host software

Mandatory

Optional, GBIC

2. Line interface board

CR-E4GC

4-port GBIC optical interface line board

needs to be
configured
CR-E8FB

4 x FE-RJ45 electrical interface and 4 x FE-SFP

optical interface line board

Optional, SFP
needs to be
configured

CR-EGFEE

16-port 100M Ethernet electrical interface

Optional

line board (100m, RJ45)- enhanced

> 1-39

Router Series

CR-EGFF

16-port Fast Ethernet optical SFP interface

16

line board-enhanced

Optional, SFP
needs to be
configured

CR-EWFEE

32-port 100M Ethernet electrical interface

Optional

Optional

Optional

16

Optional, SFP

line board (100m, RJ45)- enhanced

RS-E4GC

4-port Gigabit Ethernet GBIC interface line

board -LAN

UR-EGFEE

16-port 100M Ethernet RJ45 electrical

interface line board processing unit- switching
board enhanced

UR-EGFF

16-port Fast Ethernet optical SFP interface

line board processing unit-switching board

needs to be

enhanced
UR-EWFEE

32-port 100M Ethernet RJ45 electrical

configured
8

Optional

Optional

Optional

Optional

Optional

Optional, SFP

interface line board processing unit- switching

board enhanced
CR-P1UZ

1-port 2.5G POS single-mode 1310nm 2km

LC optical interface line board

CR-P1US

1-port 2.5G POS single-mode 1310nm 15km

LC optical interface line board

CR-P1UL

1-port 2.5G POS single-mode 1310nm 40km

LC optical interface line board

CR-P1UV

1-port 2.5G POS single-mode 1550nm 70km

LC optical interface line board

CR-P2HM

2-port 622M POS multi-mode optical

interface line board (1310nm, 500m, SC)

needs to be
configured

CR-P2HS

2-port 622M POS single-mode optical

interface line board (1310nm, 15km, SC)

Optional, SFP
needs to be
configured

CR-R1UZ

1-port 2.5G RPR single-mode 1310nm 2km

LC optical interface line board

Optional, SFP
needs to be
configured

> 1-40

Router Series

CR-R1US

1-port 2.5G RPR single-mode 1310nm 15km

Optional

Optional

Optional

Optional, SFP

LC optical interface line board

CR-R1UL

1-port 2.5G RPR single-mode 1310nm 40km

LC optical interface line board

CR-R1UV

1-port 2.5G RPR single-mode 1550nm 70km

LC optical interface line board

CR-A2HF

2-port 622M ATM single-mode optical

interface line board (SFP)

needs to be
configured

CR-A8CF

8 - p o r t 1 5 5 M AT M m u l t i - m o d e o p t i c a l

16

interface line card (SFP)

Optional, SFP
needs to be
configured

8-port E1 interface line board-RJ45 interface

Optional

Optional

16

Optional

16

Optional

16

Optional, SFP

Ethernet
Switch

CR-8*E1

3. Flexible card-insertion series

UR-LPUF

Line board (supports flexible card insertion, a

maximum of two sub-cards configured)

UR-PIM-

16-port 100M Ethernet sub-card, routing

16xFE-WAN-

board, RJ45 interface

RJ45
UR-PIM-

16-port 100M Ethernet sub-card, switching

16xFE-LAN-

board, RJ45 interface

RJ45
UR-PIM-

8-port FE SFP optical interface sub-card,

E8FF-WAN

routing board

UR-PIM-

8-port FE SFP optical interface sub-card,

E8FF-LAN

switching board

needs to be
configured
16

Optional, SFP
needs to be
configured

UR-PIM-

2-port Gigabit Ethernet sub-card, routing

2xGE-WAN-SFP

board, SFP interface

16

Optional, SFP
needs to be
configured

> 1-41

Router Series

UR-PIM-2xGE-

2-port Gigabit Ethernet sub-card, switching

LAN-SFP

board, SFP interface

16

Optional, SFP
needs to be
configured

UR-PIM-1xGE-

1-port Gigabit Ethernet sub-card, routing

WAN-SFP

board, SFP interface

16

Optional, SFP
needs to be
configured

UR-PIM-1xGE-

1-port Gigabit Ethernet sub-card, switching

LAN-SFP

board, SFP interface

UR-PIM-

8-port E1 sub-card, which can be channelized

8xCHE1-RJ45

to 64k, RJ45 interface

UR-PIM-3xE3-

16

Optional, SFP
needs to be
configured

16

Optional

3-port E3 sub-card, SMB interface

16

Optional

2-port 155M POS single-mode optical

16

Optional, SFP

SMB
UR-PIM-P2CS

interface sub-card (SFP)

needs to be
configured

UR-PIM-P4CS

4-port 155M POS single-mode optical

16

interface sub-card (SFP)

Optional, SFP
needs to be
configured

4. Service board
CR-NAT

Network address translation service board +

Optional

Optional

network address translation software

CR-NetStream-1

NetStream billing statistics service board

NE40-4
Name

Item

Configuration

Remarks

1. Host system
CHASSIS-N68-

Assembly cabinet of the N68-22 router

Optional

UR-NE40-4-

NE40-4 integrated chassis-dual-DC power

Mandatory

CHASSIS-DC

supply

UR-SRUB-64G

NE40-8/NE40-4/NE40-2 route switching

Mandatory,

22

board

2 pieces
recommended

> 1-42

Router Series

SWP-CR-NE40

NE40 IP/MPLS forwarding host software

Optional

Optional, GBIC

2. Line interface board

CR-E4GC

4-port GBIC optical interface line board

needs to be
configured
CR-E8FB

4 x FE-RJ45 electrical interface and 4 x FE-SFP

optical interface line board

Optional, SFP
needs to be
configured

CR-EGFEE

16-port 100M Ethernet electrical interface

Optional

16

Optional, SFP

line board (100m, RJ45)- enhanced

CR-EGFF

16-port Fast Ethernet optical SFP interface

line board-enhanced

needs to be

32-port 100M Ethernet electrical interface

Optional

Optional

Optional

16

Optional, SFP

Ethernet
Switch

configured
CR-EWFEE

line board (100m, RJ45)- enhanced

RS-E4GC

4-port Gigabit Ethernet GBIC interface line

board -LAN

UR-EGFEE

16-port 100M Ethernet RJ45 electrical

interface line board processing unit- switching
board- enhanced

UR-EGFF

UR-EWFEE

16-port Fast Ethernet optical SFP interface

line board processing unit-switching board

needs to be

enhanced

configured

32-port 100M Ethernet RJ45 electrical

Optional

Optional

Optional

Optional

Optional

interface line board processing unit- switching

board- enhanced
CR-P1UZ

1-port 2.5G POS single-mode 1310nm 2km

LC optical interface line board

CR-P1US

1-port 2.5G POS single-mode 1310nm 15km

LC optical interface line board

CR-P1UL

1-port 2.5G POS single-mode 1310nm 40km

LC optical interface line board

CR-P1UV

1-port 2.5G POS single-mode 1550nm 70km

LC optical interface line board

> 1-43

Router Series

CR-P2HM

2-port 622M POS multi-mode optical

Optional

Optional

Optional

Optional

Optional

Optional

Optional, SFP

interface line board (1310nm, 500m, SC)

CR-P2HS

2-port 622M POS single-mode optical

interface line board (1310nm, 15km, SC)

CR-R1UZ

1-port 2.5G RPR single-mode 1310nm 2km

LC optical interface line board

CR-R1US

1-port 2.5G RPR single-mode 1310nm 15km

LC optical interface line board

CR-R1UL

1-port 2.5G RPR single-mode 1310nm 40km

LC optical interface line board

CR-R1UV

1-port 2.5G RPR single-mode 1550nm 70km

LC optical interface line board

CR-A2HF

2-port 622M ATM single-mode optical

interface line board (SFP)

needs to be
configured

CR-A8CF

8 - p o r t 1 5 5 M AT M m u l t i - m o d e o p t i c a l

16

interface line card (SFP)

Optional, SFP
needs to be
configured

CR-8*E1

8-port E1 interface line board-RJ45 interface

Optional

Optional

3. Flexible card-insertion series

UR-LPUF

Line board (supports flexible card insertion, a

maximum of two sub-cards configured)

UR-PIM-

16-port 100M Ethernet sub-card, routing

16xFE-WAN-

board, RJ45 interface

Optional

Optional

RJ45
UR-PIM-

16-port 100M Ethernet sub-card, switching

16xFE-LAN-

board, RJ45 interface

RJ45

> 1-44

Router Series

UR-PIM-E8FF-

8-port FE SFP optical interface sub-card,

WAN

routing board

Optional, SFP
needs to be
configured

UR-PIM-E8FF-

8-port FE SFP optical interface sub-card,

LAN

switching board

Optional, SFP
needs to be
configured

UR-PIM-2xGE-

2-port Gigabit Ethernet sub-card, routing

WAN-SFP

board, SFP interface

UR-PIM-2xGE-

2-port Gigabit Ethernet sub-card, switching

LAN-SFP

board, SFP interface

Optional, SFP
needs to be
configured

Optional, SFP
needs to be
configured

1-port Gigabit Ethernet sub-card, routing

WAN-SFP

board, SFP interface

Optional, SFP

Ethernet
Switch

UR-PIM-1xGE-

needs to be
configured

UR-PIM-1xGE-

1-port Gigabit Ethernet sub-card, switching

LAN-SFP

board, SFP interface

Optional, SFP
needs to be
configured

UR-PIM-8xCHE1-

8-port E1 sub-card, which can be channelized

Optional

RJ45

to 64k, RJ45 interface

UR-PIM-3xE3-

3-port E3 sub-card, SMB interface

Optional

2-port 155M POS single-mode optical

Optional, SFP

SMB
UR-PIM-P2CS

interface sub-card (SFP)

needs to be
configured

UR-PIM-P4CS

4-port 155M POS single-mode optical

interface sub-card (SFP)

Optional, SFP
needs to be
configured

4. Service board
CR-NAT

Network address translation service board +

Optional

Optional

network address translation software

CR-NetStream-1

NetStream billing statistics service board

> 1-45

Router Series

NE40-2
Name

Item

Configuration

Remarks

1. Host system
CHASSIS-N68-

Assembly cabinet of the N68-22 router

Optional

UR-NE40-2-

NE40-2 integrated chassis-dual-DC power

Mandatory

CHASSIS-DC

supply

UR-SRUB-16G

NE40-2 route switching board

Mandatory, only

22

for NE40-2

SWP-CR-NE40

NE40 IP/MPLS forwarding host software

Mandatory

Optional, GBIC

2. Line interface board

CR-E4GC

4-port GBIC optical interface line board

needs to be
configured
CR-E8FB

4 x FE-RJ45 electrical interface and 2 x FE-SFP

optical interface line board

Optional, SFP
needs to be
configured

CR-EGFEE

16-port 100M Ethernet electrical interface

Optional

16

Optional, SFP

line board (100m, RJ45)- enhanced

CR-EGFF

16-port 100M Ethernet electrical interface

line board (100m, RJ45)- enhanced

needs to be
configured

CR-EWFEE

RS-E4GC

UR-EGFEE

UR-EGFF

> 1-46

32-port 100M Ethernet electrical interface

line board (100m, RJ45)- enhanced

4-port Gigabit Ethernet GBIC interface line

board -LAN

16-port 100M Ethernet RJ45 electrical

interface line board processing unit- switching

board- enhanced

16-port Fast Ethernet optical SFP interface

16

Optional

Optional

Optional

Optional, SFP

line board processing unit-switching board

needs to be

enhanced

configured

Router Series

UR-EWFEE

32-port 100M Ethernet RJ45 electrical

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional, SFP

interface line board processing unit- switching

board- enhanced
CR-P1UZ

1-port 2.5G POS single-mode 1310nm 2km

LC optical interface line board

CR-P1US

1-port 2.5G POS single-mode 1310nm 15km

LC optical interface line board

CR-P1UL

1-port 2.5G POS single-mode 1310nm 40km

LC optical interface line board

CR-P1UV

1-port 2.5G POS single-mode 1550nm 70km

LC optical interface line board

CR-P2HM

2-port 622M POS multi-mode optical

2-port 622M POS single-mode optical

Ethernet
Switch

interface line board (1310nm, 500m, SC)

CR-P2HS

interface line board (1310nm, 15km, SC)

CR-R1UZ

1-port 2.5G RPR single-mode 1310nm 2km

LC optical interface line board

CR-R1US

1-port 2.5G RPR single-mode 1310nm 15km

LC optical interface line board

CR-R1UL

1-port 2.5G RPR single-mode 1310nm 40km

LC optical interface line board

CR-R1UV

1-port 2.5G RPR single-mode 1550nm 70km

LC optical interface line board

CR-A2HF

2-port 622M ATM single-mode optical

interface line board (SFP)

needs to be
configured

CR-A8CF

8 - p o r t 1 5 5 M AT M m u l t i - m o d e o p t i c a l
interface line card (SFP)

16

Optional, SFP
needs to be
configured

> 1-47

Router Series

CR-8*E1

8-port E1 interface line board-RJ45 interface

Optional

Optional

Optional

Optional

Optional, SFP

3. Flexible card-insertion series

UR-LPUF

Line board (supports flexible card insertion, a

maximum of two sub-cards configured)

UR-PIM-

16-port 100M Ethernet sub-card, routing

16xFE-WAN-

board, RJ45 interface

RJ45
UR-PIM-

16-port 100M Ethernet sub-card, switching

16xFE-LAN-

board, RJ45 interface

RJ45
UR-PIM-E8FF-

8-port FE SFP optical interface sub-card,

WAN

routing board

UR-PIM-E8FF-

8-port FE SFP optical interface sub-card,

LAN

switching board

needs to be
configured
4

Optional, SFP
needs to be
configured

UR-PIM-2xGE-

2-port Gigabit Ethernet sub-card, routing

WAN-SFP

board, SFP interface

Optional, SFP
needs to be
configured

UR-PIM-2xGE-

2-port Gigabit Ethernet sub-card, switching

LAN-SFP

board, SFP interface

Optional, SFP
needs to be
configured

UR-PIM-1xGE-

1-port Gigabit Ethernet sub-card, routing

WAN-SFP

board, SFP interface

UR-PIM-1xGE-

1-port Gigabit Ethernet sub-card, switching

LAN-SFP

board, SFP interface

Optional, SFP
needs to be
configured

Optional, SFP
needs to be
configured

UR-PIM-

8-port E1 sub-card, which can be channelized

8xCHE1-RJ45

to 64k, RJ45 interface

Optional

UR-PIM-3xE3-

3-port E3 sub-card, SMB interface

Optional

2-port 155M POS single-mode optical

Optional, SFP

interface sub-card (SFP)

needs to be

SMB
UR-PIM-P2CS

configured

> 1-48

Router Series

UR-PIM-P4CS

4-port 155M POS single-mode optical

interface sub-card (SFP)

Optional, SFP
needs to be
configured

4. Service board
CR-NAT

Network address translation service board +

Optional

Optional

network address translation software

CR-NetStream-1

NetStream billing statistics service board

Ethernet
Switch

For more information, please visit www.huawei.com

> 1-49

Router Series
Quidway NetEngine 20 High-end Router Series
Product Overview
The Quidway NetEngine 20 high-end router series (hereinafter called the NE20)
inherits the design philosophy of Huaweis high-end router, and can serve as the highperformance peripheral and convergence equipment in the operator IP backbone
network for the construction of service operation and supporting network with its highperformance advantage and as the core router or high-performance convergence router
in the industrial network and enterprise network.
The NE20 high-end router series adopts the modular structure and provides multiple
optional interface modules. In the design, it inherits Huaweis rich experiences in
telecommunication field, with the comprehensive backup and security technology
adopted. All the interface cards support hot swapping, providing two power supply
solutions, AC and DC. They support power supply 1+1 backup, and the power supply
module and fan module support hot swapping, to better meet the requirements of the
carrier-class network for high reliability.
The NE20 high-end router series adopts the mainstream NP (Network Processor)
technology in this industry, providing rich services and powerful packet forwarding
performance, fully representing the technical features of the 5th generation router. The
main control part of the NE20 router adopts the high-speed PowerPC microcomputer and
real-time OS, with the VRP (versatile Routing Platform) that Huawei has the independent
intellectual property rights as the foundation, and it provides rich service features
combining with the equipment and network management technology. The forwarding
part adopts the high-performance network processor for hardware forwarding, and
the dedicated IP network processor technology that can be programmed in the key
IP forwarding and service processing, and it provides the powerful routing searching,
packet forwarding and service acceleration features.
The NE20 high-end router series owns the consistent network interface, subscriber
interface and management interface, with powerful flexibility and configuration nature
and it supports a variety of interfaces and service features, integrating the recently
> 1-50

Router Series

growing MPLS (Multi-protocol Label Switching), VPN (Virtual Private Network), QoS
(Quality of Service), traffic engineering, multicasting and user management, in addition,
it supports a variety of link layer protocols, which ensures its advantages of highperformance and high quality. In terms of networking application, the NE20 highend router series provides a comprehensive service processing capability as a highend convergence equipment, and it also provides an all-round and flexible networking
solution to effectively improve the network value and save the network building cost.
The software/hardware features of the NE20 high-end router series conform to the
international standard, and guarantee its interworking with the products of other
manufacturers at different levels, to protect users existing investment to the largest
extent.

Ethernet
Switch

NE20-2

NE20-4

NE20-8

NE20E-8

Product Features
th
The 5 Generation Router Concept

The NE20 differs from the past router products of the same type that adopt the CPU
software for forwarding, it adopts the high-performance network processor technology
to implement the centralized forwarding of the high-speed interface packets, organically
combining with the flexibility of software and high-performance of hardware. In addition,
> 1-51

Router Series

it provides the wire-speed forwarding performance, so the NE20E-8 performance can

reach up to 6Mpps and the performance of NE20-8, NE20-4, and NE20-2 can reach up
to 4.5Mpps.
The NE20 adopts the technology of high-speed interface forwarding and control
plane splitting, and the forwarding engine of the high-speed interface uses the high
performance network processor, which improves the forwarding performance, control
capability, reliability and security of the equipment.

High-quality QoS Capability

The perfect QoS mechanism and the excellent QoS performance can ensure the service
quality of different services under the heavy load, and they can provide the perfect QoS
mechanism based on DiffServ. It supports the classification of complex streams and
the precise traffic policing and shaping; provides the queue scheduling and congestion
avoidance function, supporting the advanced scheduling technologies such as CBWFQ,
LLS/NLS and PBS. It adopts WRED and the advanced SA-RED algorithm, and RED supports
the discard priority of eight levels, which ensures the bandwidth, delay and jitter indices
of different services, to meet the Discrimination service requirements of users at various
service levels.

High Reliability
Adopts the high-reliability modular design. All the boards, fans and power supply
modules support hot swapping; provides the dual-power (1+1) module that can be
mutual backup, and the design mode of passive backplane; provides the software hot
patching technology to implement the fully smooth upgrading, thus effectively ensuring
the high-speed and reliable running in the whole network. The integrated system realizes
the non-stop running for 7 x 24 hours.
The NE20E-8 is the further enhancement of NE20, adopting the bus technology of the
core router, and the bandwidth of the backplane reaches 40G at present, with a very
strong expandability. The NE20E-8 route processing board and the network processing
board provide (1+1) redundancy backup, with the characteristic function of FRB (Fast
Routing Backup), to implement the status-based hot switching and non-stop route
forwarding and provide the high-quality service guarantee.

> 1-52

Router Series
Powerful MPLS Processing Capability
Supports MPLS VPN and MPLS TE, provides high-quality, secure and multi-level MPLS
VPN solution, used as the cost-effective MPLS PE equipment.

Service Capability
The software system is based on the VRP software platform that Huawei owns the
independent intellectual property rights, supporting VPN in multiple modes (L2TP, GRE,
MPLS VPN), and it is available with the NAT function and provides rich interworking
functions such as Ethernet /VLAN, PPP/MP, PPPoE, Frame Relay, HDLC, ATM, X.25, HDLC
and LAPB.

Routing Processing Capability

Ethernet
Switch

Supports such unicast routing protocols as RIP, OSPF, BGP and IS-IS and such multicast
routing protocols as IGMP, PIM-DM/SM, MBGP and MSDP; supports routing policy and
policy routing.

IPv6 Routing Capability

Comprehensively supports the double-protocol stack of IPv4 and IPv6 to implement the
hardware IPv6 forwarding and provides rich IPv6 protocols. Supports multiple transition
technologies from IPv4 and IPv6: Manual tunnel configuration, automatic tunnel
configuration, 6to4 tunnel, NAT-PT; supports the IPv6 static route and such dynamic
routing protocols as BGP4+, RIPng, OSPFv3 and ISISv6; supports ICMPv6 MIB, UDP6 MIB,
TCP6 MIB and IPv6 MIB.

Maintainability
Supports the automatic fault diagnosis function; helps engineers to locate the system
faults quickly and accurately through the fault diagnosis software running on the PC.

> 1-53

Router Series

Product Specifications
Item

NE20-8

NE20-4

NE20-2

NE20E-8

Bus bandwidth

8G

8G

8G

40G

Packet forwarding rate

4.5Mpps

4.5Mpps

4.5Mpps

6Mpps

Routing table capacity

600,000

600,000

600,000

600,000

Maximum configuration

of service interface board

Interface type

Synchronous serial port/interface module

E1/CE1 interface module
T1/CT1 interface module
E3/CE3 interface module
T3 interface module
OC-3c/STM-1 interface module
OC-3c/STM-1 interface module
FE interface module
GE interface module
CPOS interface module
436.2mm x 420 mm

436.2 mm x 420 mm

436.2 mm x 420 mm

436.2 mm x 480 mm

x 219.5 mm

x 130.5 mm

x 130.5 mm

x 263.9 mm

Weight

27.5Kg

17.5Kg

15Kg

32.5kg

Maximum output power

320W

240W

240W

350w

Working environment

0 ~ 45C

Dimensions (W x D x H)

temperature
Relative working

5%RH~ 85% RH, no condensing

humidity
Security specification

Obtained the security specification certification such as CE, UL, FCC

certification

PART15, ISTA and VCCI that are recognized in multiple countries.

Order Information
NE20-8
Name

Item

Configuration

Remarks

1. Host system
RT-NE20-8CHASSIS

> 1-54

NE20-8 (Chassis + Fan)

Mandatory

Router Series

RT-NE20-RPU-

RPU (Route Processing Unit), 256M memory,

256M

with two FE/E interfaces

Mandatory

RT-NE20-NPU

NPU (Network Processor Unit)

Mandatory

RT-NE20-DC

NE20 DC power supply

Mandatory,
2 pieces
recommended

SWP-RT-NE20

NE20 software expense

Mandatory

Optional, SFP

2. Line interface module

NE-HIC-STM1/

1-port POS/155M high-speed interface

POS-SFP

module (SFP)

needs to be
configured

2-port POS/155M high-speed interface

2xSTM1/POS-

module (SFP)

needs to be

SFP

configured

NE-HIC-

4-port POS/155M high-speed interface

4xSTM1/POS-

module (SFP)

Optional, SFP
needs to be

SFP
NE-HIC-GE-SFP

Optional, SFP

Ethernet
Switch

NE-HIC-

configured
1-port Gigabit Ethernet high-speed interface

module, SFP interface

Optional, SFP
needs to be
configured

NE-HIC-2xGE-

2-port Gigabit Ethernet high-speed interface

SFP

module, SFP interface

Optional, SFP
needs to be
configured

NE-HIC-8xFE-

8-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-4xFE-

4-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-2xFE-

2-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-8xFE-

8-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional

Optional

Optional

Optional, SFP
needs to be
configured

NE-HIC-4xFE-

4-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional, SFP
needs to be
configured

> 1-55

Router Series

NE-HIC-2xFE-

2-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional, SFP
needs to be
configured

NE-FIC-CPOS-E1

Router 1-port 155M cPOS E1-standard

Optional

Optional

4 ports -E1-DB68-120ohm- interface module

Optional

4 ports -E1-DB68-75ohm- interface module

Optional

8 ports -E1 DB68-120ohm- interface module

Optional

8 ports -E1 DB68-75ohm- interface module

Optional

NE-FIC-4xcT1-

4 ports - channelized T1-DB68-100ohm-

Optional

100ohm

interface module

NE-FIC-4xcE1-

4 ports - channelized E1-DB68-75ohm-

Optional

75ohm

interface module

NE-FIC-4xcE1-

4 ports - channelized E1-DB68-120ohm-

Optional

120ohm

interface module

NE-FIC-8xcT1-

8 ports - channelized T1-DB68-100ohm-

Optional

100ohm

interface module

NE-FIC-8xcE1-

8 ports - channelized E1-DB68-75ohm-

Optional

75ohm

interface module

NE-FIC-8xcE1-

8 ports - channelized E1-DB68-120ohm-

Optional

120ohm

interface module

NE-FIC-CE3

1-port E3/CE3 compatible interface module

Optional

NE-FIC-T3

1-port T3/T3 compatible interface module

Optional

RT-FIC-4SAE

4-port enhanced synchronous/asynchronous

Optional

Optional

module
NE-FIC-CPOS-T1

Router 1-port 155M cPOS T1-standard

module

NE-FIC-4xE1120ohm
NE-FIC-4xE175ohm
NE-FIC-8xE1120ohm
NE-FIC-8xE175ohm

interface module
NE-FIC-STM1/

1- p o r t AT M / 1 5 5 M m u l t i - m o d e o p t i c a l

ATM-MM/1310-

interface module (1310nm, 2km, SC)

2km-SC

> 1-56

Router Series

NE-FIC-STM1/

1-port ATM/155M single-mode optical

ATM-MM/1310-

interface module (1310nm, 15km, SC)

Optional

Optional

15km-SC
NE-FIC-STM1/

1-port ATM/155M single-mode long-haul

ATM-MM/1310-

optical interface module (1310nm, 30km, SC)

30km-SC

NE20-4
Name

Item

Configuration

Remarks

1. Host system
NE20-4 (Chassis + Fan)

Mandatory

RT-NE20-RPU-

RPU (Route Processing Unit), 256M memory,

Mandatory

256M

with two FE/E interfaces

RT-NE20-NPU

NPU (Network Processor Unit)

Mandatory

RT-NE20-DC

NE20 DC power supply

Mandatory,

Ethernet
Switch

RT-NE20-4CHASSIS

2 pieces
recommended
SWP-RT-NE20

NE20 software expense

Mandatory

Optional, SFP

2. Line interface board

NE-HIC-STM1/

1-port POS/155M high-speed interface

POS-SFP

module (SFP)

NE-HIC-

2-port POS/155M high-speed interface

2xSTM1/POS-

module (SFP)

needs to be
configured
3

needs to be

SFP

configured

NE-HIC-

4-port POS/155M high-speed interface

4xSTM1/POS-

module (SFP)

Optional, SFP
needs to be

SFP
NE-HIC-GE-SFP

Optional, SFP

configured
1-port Gigabit Ethernet high-speed interface
module, SFP interface

Optional, SFP
needs to be
configured

> 1-57

Router Series

NE-HIC-2xGE-

2-port Gigabit Ethernet high-speed interface

SFP

module, SFP interface

Optional, SFP
needs to be
configured

NE-HIC-8xFE-

8-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-4xFE-

4-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-2xFE-

2-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-8xFE-

8-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional

Optional

Optional

Optional, SFP
needs to be
configured

NE-HIC-4xFE-

4-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional, SFP
needs to be
configured

NE-HIC-2xFE-

2-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional, SFP
needs to be
configured

NE-FIC-CPOS-E1

Router 1-port 155M cPOS E1-standard

Optional

Optional

4 port -E1-DB68-120ohm- interface module

Optional

4 port -E1-DB68-75ohm- interface module

Optional

8 ports -E1 DB68-120ohm- interface module

Optional

8 ports -E1 DB68-75ohm- interface module

Optional

module
NE-FIC-CPOS-T1

Router 1-port 155M cPOS T1-standard

module

NE-FIC-4xE1120ohm
NE-FIC-4xE175ohm
NE-FIC-8xE1120ohm
NE-FIC-8xE175ohm

> 1-58

NE-FIC-4xcT1-

4 ports - channelized T1-DB68-100ohm-

100ohm

interface module

NE-FIC-4xcE1-

4 ports - channelized E1-DB68-75ohm-

75ohm

interface module

Optional

Optional

Router Series

NE-FIC-4xcE1-

4 ports - channelized E1-DB68-120ohm-

120ohm

interface module

Optional

NE-FIC-8xcT1-

8 ports - channelized T1-DB68-100ohm-

Optional

100ohm

interface module

NE-FIC-8xcE1-

8 ports - channelized E1-DB68-75ohm-

75ohm

interface module

Optional

NE-FIC-8xcE1-

8 ports - channelized E1-DB68-120ohm-

Optional

120ohm

interface module

NE-FIC-CE3
NE-FIC-T3

1-port E3/CE3 compatible interface module

Optional

1-port T3/T3 compatible interface module

Optional

RT-FIC-4SAE

4-port enhanced synchronous/asynchronous

Optional

Optional

Optional

Optional

interface module
1- p o r t AT M / 1 5 5 M m u l t i - m o d e o p t i c a l

ATM-MM/1310-

interface module (1310nm, 2km, SC)

Ethernet
Switch

NE-FIC-STM1/

2km-SC
NE-FIC-STM1/

1-port ATM/155M single-mode optical

ATM-MM/1310-

interface module (1310nm, 15km, SC)

15km-SC
NE-FIC-STM1/

1-port ATM/155M single-mode long-haul

ATM-MM/1310-

optical interface module (1310nm, 30km, SC)

30km-SC

NE20-2
Name

Item

Configuration

Remarks

1. Host system
RT-NE20-2-

NE20-2 (Chassis + Fan)

Mandatory

RT-NE20-RPU-

RPU (Route Processing Unit), 256M memory,

Mandatory

256M

with two FE/E interfaces

RT-NE20-NPU

NPU (Network Processor Unit)

Mandatory

RT-NE20-DC

NE20 DC power supply

Mandatory,

CHASSIS

2 pieces
recommended

> 1-59

Router Series

SWP-RT-NE20

NE20 software expense

Mandatory

Optional, SFP

2. Line interface module

NE-HIC-STM1/

1-port POS/155M high-speed interface

POS-SFP

module (SFP)

NE-HIC-

2-port POS/155M high-speed interface

2xSTM1/POS-

module (SFP)

needs to be
configured
2

needs to be

SFP

configured

NE-HIC-

4-port POS/155M high-speed interface

4xSTM1/POS-

module (SFP)

Optional, SFP
needs to be

SFP
NE-HIC-GE-SFP

Optional, SFP

configured
1-port Gigabit Ethernet high-speed interface

module, SFP interface

Optional, SFP
needs to be
configured

NE-HIC-2xGE-

2-port Gigabit Ethernet high-speed interface

SFP

module, SFP interface

NE-HIC-8xFE-

8-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-4xFE-

4-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-2xFE-

2-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-8xFE-

8-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional, SFP
needs to be
configured

Optional

Optional

Optional

Optional, SFP
needs to be
configured

NE-HIC-4xFE-

4-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

NE-HIC-2xFE-

2-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional, SFP
needs to be
configured

Optional, SFP
needs to be
configured

NE-FIC-CPOS-E1

> 1-60

Router 1-port 155M cPOS E1-standard

module

Optional

Router Series

NE-FIC-CPOS-T1

Router 1-port 155M cPOS T1-standard

Optional

4 ports -E1-DB68-120ohm- interface module

Optional

4 port -E1-DB68-75ohm- interface module

Optional

8 ports -E1 DB68-120ohm- interface module

Optional

8 ports -E1 DB68-75ohm- interface module

Optional

NE-FIC-4xcT1-

4 ports - channelized T1-DB68-100ohm-

Optional

100ohm

interface module

NE-FIC-4xcE1-

4 ports - channelized E1-DB68-75ohm-

Optional

75ohm

interface module

NE-FIC-4xcE1-

4 ports - channelized E1-DB68-120ohm-

Optional

120ohm

interface module

NE-FIC-8xcT1-

8 ports - channelized T1-DB68-100ohm-

Optional

100ohm

interface module

NE-FIC-8xcE1-

8 ports - channelized E1-DB68-75ohm-

Optional

75ohm

interface module

NE-FIC-8xcE1-

8 ports - channelized E1-DB68-120ohm-

Optional

120ohm

interface module

NE-FIC-CE3

1-port E3/CE3 compatible interface module

Optional

NE-FIC-T3

1-port T3/T3 compatible interface module

Optional

RT-FIC-4SAE

4-port enhanced synchronous/asynchronous

Optional

Optional

Optional

Optional

module
NE-FIC-4xE1120ohm
NE-FIC-4xE175ohm
NE-FIC-8xE1120ohm
NE-FIC-8xE175ohm

Ethernet
Switch

interface module
NE-FIC-STM1/

1- p o r t AT M / 1 5 5 M m u l t i - m o d e o p t i c a l

ATM-MM/1310-

interface module (1310nm, 2km, SC)

2km-SC
NE-FIC-STM1/

1-port ATM/155M single-mode optical

ATM-MM/1310-

interface module (1310nm, 15km, SC)

15km-SC
NE-FIC-STM1/

1-port ATM/155M single-mode long-haul

ATM-MM/1310-

optical interface module (1310nm, 30km, SC)

30km-SC

> 1-61

Router Series

NE20E-8
Name

Item

Configuration

Remarks

1. Host system
RT-NE20E-8-

NE20E-8 (Chassis + Fan)

Mandatory

RT-NE20E-RPU-

RPU (Route Processing Unit), 256M memory,

Mandatory,

256M

with two GE/FE/E interfaces, supporting SFP

CHASSIS

2 pieces
recommended

RT-NE20E-NPU

NPU (Network Processor Unit)

Mandatory,
2 pieces
recommended

RT-NE20-DC

NE20 DC power supply

Mandatory,
2 pieces
recommended

SWP-RT-NE20

NE 20 software expense

Mandatory

Optional, SFP

2. Line interface module

NE-HIC-STM1/

1-port POS/155M high-speed interface

POS-SFP

module (SFP)

NE-HIC-

2-port POS/155M high-speed interface

2xSTM1/POS-

module (SFP)

needs to be
configured
3

Optional, SFP
needs to be

SFP

configured

NE-HIC-

4-port POS/155M high-speed interface

Optional, SFP

4xSTM1/POS-

module (SFP)

needs to be

SFP
NE-HIC-GE-SFP

configured
1-port Gigabit Ethernet high-speed interface

Optional, SFP

module, SFP interface

needs to be
configured

> 1-62

NE-HIC-2xGE-

2-port Gigabit Ethernet high-speed interface

Optional, SFP

SFP

module, SFP interface

needs to be

configured

NE-HIC-8xFE-

8-port 100M Ethernet high-speed interface

Optional

RJ45

module (RJ45)

Router Series

NE-HIC-4xFE-

4-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-2xFE-

2-port 100M Ethernet high-speed interface

RJ45

module (RJ45)

NE-HIC-8xFE-

8-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional

Optional

Optional, SFP
needs to be
configured

NE-HIC-4xFE-

4-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

Optional, SFP
needs to be
configured

NE-HIC-2xFE-

2-port 100M Ethernet high-speed interface

SFP

module (SFP optical interface)

NE-FIC-CPOS-E1

Router 1-port 155M cPOS E1-standard

Optional, SFP
needs to be

Optional

Optional

4 ports -E1-DB68-120ohm- interface module

Optional

4 port -E1-DB68-75ohm- interface module

Optional

8 ports -E1 DB68-120ohm- interface module

Optional

8 ports -E1 DB68-75ohm- interface module

Optional

NE-FIC-4xcT1-

4 ports - channelized T1-DB68-100ohm-

Optional

100ohm

interface module

NE-FIC-4xcE1-

4 ports - channelized E1-DB68-75ohm-

Optional

75ohm

interface module

NE-FIC-4xcE1-

4 ports - channelized E1-DB68-120ohm-

Optional

120ohm

interface module

NE-FIC-8xcT1-

8 ports - channelized T1-DB68-100ohm-

Optional

100ohm

interface module

NE-FIC-8xcE1-

8 ports - channelized E1-DB68-75ohm-

Optional

75ohm

interface module

Ethernet
Switch

configured
8

module
NE-FIC-CPOS-T1

Router 1-port 155M cPOS T1-standard

module

NE-FIC-4xE1120ohm
NE-FIC-4xE175ohm
NE-FIC-8xE1120ohm
NE-FIC-8xE175ohm

> 1-63

Router Series

NE-FIC-8xcE1-

8 ports - channelized E1-DB68-120ohm-

120ohm

interface module

Optional

NE-FIC-CE3

1-port E3/CE3 compatible interface module

Optional

NE-FIC-T3

1-port T3/T3 compatible interface module

Optional

RT-FIC-4SAE

4-port enhanced synchronous/asynchronous

Optional

Optional

Optional

Optional

interface module
NE-FIC-STM1/

1- p o r t AT M / 1 5 5 M m u l t i - m o d e o p t i c a l

ATM-MM/1310-

interface module (1310nm, 2km, SC)

2km-SC
NE-FIC-STM1/

1-port ATM/155M single-mode optical

ATM-MM/1310-

interface module (1310nm, 15km, SC)

15km-SC
NE-FIC-STM1/

1-port ATM/155M single-mode long-haul

ATM-MM/1310-

optical interface module (1310nm, 30km, SC)

30km-SC

For more information, please visit www.huawei.com

> 1-64

Router Series
Quidway NetEngine 16E/08E/05 High-end Router Series
Product Overview
The Quidway NetEngine 16E/08E/05 high-end router series (hereinafter called the
NE16E/08E/05) is the high-end products among Huaweis router series, with the
advanced distributed forwarding architecture and flexible networking capability. It has
the peripheral access feature, which determines its application in multiple networks. It
can provide users with an all-round solution to maximally meet customers requirements.
This product is mainly applied in the carrier-class operation network and the enterpriseclass core network, available with the powerful dedicated-line access and VPN service
capability, and it provides rich service functions, available with the perfect QoS and

Ethernet
Switch

security feature, applicable to operators, governments, education, finance, electrical

power and the internal network and service network of enterprises. It can cooperate
with the access server and IP telephone gateway device.
The NE high-end router is developed by the powerful professional R&D team of
Huawei, and this team takes active part in the work of the international standardization
organization, meanwhile keeping its close tracing the advanced technologies of this
industry, to constantly improve the technical level of products, provide users with the
powerful service support and fully satisfy their service requirements. The NE high-end
router has provided with the IPv6 function in all aspects, and it is the first IPv6 router in
China that has passed the network access test.
Up till now, the NE high-end router has been widely applied in telecommunication
operators and government, finance, education, electrical power and enterprise networks,
and won users trust.

> 1-65

Router Series

Product Appearance

NE16E

NE08E

NE05

Product Features
CPCI Bus Technology
With the CPCI bus technology, its bandwidth and performance is better than the similar
products that were adopting the earlier bus technology, Cybus.

High Reliability
The redundancy design of the main control board; the active/standby switching realizes
zero packet-loss rate; 2+1 or 1+1 power hot backup; interface backup and port binding
realize the high reliability of links; VRRP ensures the reliability between devices; the main
control board and the interface board support hot swapping; the integrated system
realizes the non-stop running for 7x24 hours.

High Performance
Distributed forwarding architecture, the high-performance CPU cooperates with the IP
TurboEngineTM technology of independent intellectual property rights, the integrated
forwarding performance of NE16E exceeds 4.8Mpps, the integrated NE08E forwarding
performance exceeds 2.4Mpps and the integrated NE05 forwarding performance
exceeds 1.6Mpps.

> 1-66

Router Series
Policy NAT
It supports the distributed NAT, available with the policy and the security management
function, and it is able to prevent the evil subscribers from attacking the NAT connections
and provides a perfect security log.

Security
Supports the packet filtering firewall and dynamic firewall ASPF, the authentication of
subscribers and routing protocols, the IPSEC and IKE of the standard protocols and the
IspKeeper anti-traffic attacking technology of Huawei.

Routing Processing Capability

Supports static routing and such unicast routing protocols as RIP, OSPF, BGP and IS-IS;

Ethernet
Switch

supports policy routing and multicast routing protocols, IGMP, PIM-DM/SM, MBGP and
MSDP.

IPv6 Routing Capability

Comprehensively it supports the double protocol stack of the IPv4 and IPv6, and provides
a rich IPv6 protocols. Supports multiple transition technologies from IPv4 and IPv6:
Manual tunnel configuration, automatic tunnel configuration, 6to4 tunnel, NAT-PT, 6PE;
supports the IPv6 static route and such dynamic routing protocols as BGP4+, RIPng,
OSPFv3 and ISISv6; supports ICMPv6 MIB, UDP6 MIB, TCP6 MIB and IPv6 MIB.

Powerful QoS Capability

Supports traffic policing, traffic shaping, congestion control and multi-queue scheduling.

Service Capability
Supports dedicated line access, PPPOE access, PPPOA access, PPPOEOA access, Ethernet
VLAN access, Portal, Web authentication, port leasing, DHCP RELAY, DNS, and DLSW.

Powerful VPN Service Capability

Supports L2TP, GRE, IPSEC, FR, VPN services such as L3 MPLS VPN, L2 MPLS VPN;
provides tunnel integration and VPN interworking, and provides the secure and multilevel MPLS VPN solution.

> 1-67

Router Series
High-density Port
The NE16E provides 12 universal I/O slots, and the maximum loading capacity of a single
frame is: 24 155M POS interfaces, 60 100M Ethernet interfaces, 192 E1/CE1 interfaces;
the NE08E provides six universal I/O slots, and the maximum loading capacity of a single
frame is: 12 155M POS interfaces.

Product Specifications
Item

NE16E

NE08E

NE05

Bus bandwidth

4G

2G

2G

Packet forwarding rate

4.8Mpps

2.4Mpps

1.6Mpps

Routing table capacity

250,000 ~ 700,000

250,000 ~ 700,000

120,000

Maximum configuration

12 (Each interface

6 (Each interface

4 (Each interface

of service interface board

board can be matched

board can be matched

board can be matched

with two interface

with two interface

with two interface

modules)

modules)

modules)

Connection mode

Synchronous serial port

E1/CE1 interface
T1/CT1 interface
E3/CE3 interface
T3/CT3 interface
E1 ATM reverse multiplex interface
T1 ATM reverse multiplex interface
ATM over E3 interface
ATM over T3 interface
OC-3c/STM-1 ATM interface
OC-3c/STM-1 POS interface
Channelized OC-3c/STM-1 POS interface
FE interface
GE interface

Integrated interface

3-port 100M Ethernet electrical interface + 1-port Gigabit Ethernet optical

module

interface integrated module

3-port 100M Ethernet electrical interface + 1-port Gigabit Ethernet
electrical interface integrated module
3-port 100M Ethernet electrical interface integrated module

> 1-68

Router Series

Dimensions (W x D x H)
Weight

Maximum output power

482.6 mm x 420 mm x

482.6 mm x 420 mm x

482.6 mm x 420 mm x

619.5 mm

441.7 mm

175 mm

63.5kg (3-power

45kg (Dual-power

22kg (Dual-power

supply module, full

supply module, full

supply module, full

configuration of board)

configuration of board) configuration of board)

460W

460W

350W

(single power supply)

Working environment

0 ~ 45C

temperature
Relative working humidity

5%RH ~ 85%RH, no condensing

Security specification

Obtained the security specification certification such as CE, UL, FCC

certification

PART15, ISTA and VCCI that are recognized in multiple countries

Ethernet
Switch

Order Information
NE16E
Name

Item

Configuration

Remarks

1. Host system
CHASSIS-

NE16E rack

Optional

NE16E assembly cabinet (DC)

Mandatory

RT-NE-ALU

System monitoring management unit

Mandatory

RT-NE-RSU

Route switching unit front processing board

Mandatory,

NE-N68-22
RT-NE16E
CHASSIS/3DC

2 pieces
recommended
RT-NE-RSEU

Route switching extended unit

Mandatory,
2 pieces
recommended

RT-NE-HAU

System CPCI hot swapping control bridge

board

Mandatory,
2 pieces
recommended

SWP-VRP

Expense for NE16E VRP software

Mandatory

Versatile interface unit front processing board

12

Optional

-256 M memory

2. Versatile interface unit

RT-NE-VIUB

> 1-69

Router Series

RT-NE-VIEU

Versatile interface unit back transfer board

12

Optional

RT-NE-VIU4B

G4 versatile interface unit front processing

12

Optional

12

Optional

24

Optional

24

Optional

24

Optional

24

Optional

board-256M memory
RT-NE-VIU4BE

G4 versatile interface unit front processing

board-256M memory performance enhanced

3. Versatile interface card

4-port SA synchronous serial port/interface card
RT-NE-SAPA

4-port synchronous serial port front

processing board

RT-NE-SAKA

4-port synchronous serial port back transfer

card (DB100 female connector)

4-port E1/CE1 interface card

RT-NE-CEPA

4-port E1/CE1 interface front processing card

24

Optional

RT-NE-QEKA

4-port E1/CE1 75 ohm/120 ohm electrical

24

Optional

24

Optional

interface back transfer card (DB68 female

connector)
8-port E1/CE1 interface card
RT-NE-8EPA

8-port E1/CE1 interface front processing card

24

Optional

RT-NE-8EKA

8-port E1/CE1 75-ohm electrical interface

24

Optional

8-port E1/CE1 120-ohm electrical interface

24

Optional

back transfer card (DB68 female connector)

back transfer card (DB68 female connector)

RT-NE-8EKB

8-port E1 IMA interface card

RT-NE-E8IP

8-port E1 ATM reverse multiplex interface

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

front processing card

RT-NE-8EKA

8-port E1/CE1 75-ohm electrical interface

back transfer card (DB68 female connector)

RT-NE-8EKB

8-port E1/CE1 120-ohm electrical interface

back transfer card (DB68 female connector)

8-port T1 IMA interface card

RT-NE-T8IP

8-port T1 ATM reverse multiplex interface

front processing card

RT-NE-8TKA

8-port T1/CT1 100-ohm electrical interface

back transfer card (DB68 female connector)

> 1-70

Router Series

1-port channelized CE3 interface card

24

Optional

RT-NE-CE3P

24

Optional

24

Optional

1-port E3 interface card

24

Optional

RT-NE-E3PA

1-port E3 interface front processing board

24

Optional

RT-NE-CE3K

1-port E3/cE3/ATM E3 75-ohm electrical

24

Optional

1-port ATM over E3 interface card

24

Optional

RT-NE-AESP

24

Optional

24

Optional

2-port ATM over E3 interface card

24

Optional

RT-NE-AEDP

24

Optional

24

Optional

1-port T3 interface card

24

Optional

RT-NE-T3PA

1-port T3 interface front processing card

24

Optional

RT-NE-CT3K

1-port channelized T3 interface card

24

Optional

1-port ATM over T3 interface card

24

Optional

RT-NE-ATSP

24

Optional

24

Optional

2-port ATM over T3 interface card

24

Optional

RT-NE-ATDP

24

Optional

24

Optional

1-port fast Ethernet interface card

24

Optional

RT-NE-ETPA

24

Optional

24

Optional

1- p o r t c h a n n e l i z e d E 3 i n t e r f a c e f ro n t
processing card

RT-NE-CE3K

1-port E3/cE3/ATM E3 75-ohm electrical

interface back transfer card (SMB)

interface back transfer card (SMB)

1-channel ATM over E3 interface front

processing board
1-port E3/cE3/ATM E3 75-ohm electrical

Ethernet
Switch

RT-NE-CE3K

interface back transfer card (SMB)

2-channel ATM over E3 interface front

processing board

RT-NE-E3DK

2-channel ATM over E3 interface back

board

1-channel ATM over T3 interface front

processing board

RT-NE-CT3K

1-port channelized T3 interface card

2-channel ATM over T3 interface front

processing board

RT-NE-T3DK

2-channel ATM over T3 interface back board

1- p o r t 1 0 0 M E t h e r n e t i n t e r f a c e f ro n t
processing card

RT-NE-ETKA

1-port 100M Ethernet electrical interface back

transfer card (RJ45)

> 1-71

Router Series

RT-NE-ETKB

1-port 100M Ethernet single-mode optical

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

12

Optional

12

Optional

12

Optional

12

Optional

interface back transfer card (1310nm, 15km, SC)

RT-NE-ETKC

1-port 100M Ethernet multi-mode optical

interface back transfer card (1310nm, 2km, SC)

1-port 155M POS interface card

RT-NE-POPB

1-port OC3/STM1 POS interface front

processing card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multimode optical interface back transfer card

(1310nm,2km, SC)

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

1-port 155M ATM interface card

RT-NE-ATPB

1 - p o r t O C 3 / S T M 1 AT M i n t e r f a c e f r o n t
processing card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multi-mode

optical interface back transfer card (1310nm,
2km, SC)

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

1-port channelized 155M POS to the E1 interface

RT-NE-CPOP

1-port channelized OC3/STM1 POS interface

front processing card

RT-NE-CPOC

1-port channelized OC3/STM1 POS interface

front processing card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multimode optical interface back transfer card

(1310nm,2km, SC)

> 1-72

Router Series

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

24

Optional

12

Optional

12

Optional

short-haul optical interface back transfer card

(1310nm, 15km, SC)
RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

1-port channelize 155M POS to the T1 interface

RT-NE-CPOB

1-port OC3/STM1 channelized POS interface

front processing card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multimode optical interface back transfer card

(1310nm,2km, SC)
1-port OC3/STM1 POS/ATM/CPOS multi-mode

Ethernet
Switch

RT-NE-PAKA

short-haul optical interface back transfer card

(1310nm, 15km, SC)
RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

1-port Gigabit Ethernet interface card

RT-NE-GEPA

1-channel Gigabit Ethernet optical interface

front processing card

RT-NE-GEKA

1-port Gigabit Ethernet single-mode optical

interface back transfer card (1310nm,10km, SC)

RT-NE-GEKB

1-port Gigabit Ethernet multi-mode optical

interface back transfer card (1310nm,500km, LC)

RT-NE-GEKC

1-port Gigabit Ethernet single-mode long-haul

optical interface back transfer card (1550nm,
40km, LC)

RT-NE-GEKD

1-port Gigabit Ethernet single-mode extra

long-haul optical interface back transfer card
(1550nm, 70km, LC)

3FE electrical interface integrated module unit

RT-NE-3FEMK

The rear panel of module provides 3FE electrical

interface + 1 empty card position

> 1-73

Router Series

3FE electrical interface + 1GE optical interface (GBIC)

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

integrated module unit

RT-NE-1GOMK

The rear panel of module provides 3FE

electrical interface + 1 GE optical interface
(GBIC)

RT-NE-1GOMP

The front panel of module provides 3FE

electrical interface + 1 GE optical interface
(256M SDRAM)

3FE electrical interface + 1GE electrical interface

integrated module unit
RT-NE-1GEMK

The rear panel of module provides 3FE

electrical interface + 1 GE electrical interface

RT-NE-1GEMP

The front panel of module provides 3FE

electrical interface + 1 GE electrical interface
(256M SDRAM)

NE08E
Name

Item

Configuration

Remarks

1. Host system
CHASSIS-

NE08E rack

Optional

NE08E assembly cabinet (DC)

Mandatory

RT-NE-ALU

System monitoring management unit

Mandatory

RT-NE-RSU

Route switching unit front processing board

Mandatory,

NE-N68-22
RT-NE08E
CHASSIS/3DC

2 pieces
recommended
RT-NE-RSEU

Route switching extended unit

Mandatory,
2 pieces
recommended

> 1-74

Router Series

RT-NE-HAU

System CPCI hot swapping control bridge

board

Mandatory,
2 pieces
recommended

SWP-VRP

Expense for NE08E VRP software

Mandatory

Optional

2. Versatile interface unit

RT-NE-VIUB

Versatile interface unit front processing

board-256 M memory

RT-NE-VIEU

Versatile interface unit back transfer board

Optional

RT-NE-VIU4B

G4 versatile interface unit front processing

Optional

Optional

4-port SA synchronous serial port/interface card

12

Optional

RT-NE-SAPA

12

Optional

12

Optional

4-port E1/CE1 interface card

12

Optional

RT-NE-CEPA

4-port E1/CE1 interface front processing card

12

Optional

RT-NE-QEKA

4-port E1/CE1 75 ohm/120 ohm electrical

12

Optional

8-port E1/CE1 interface card

12

Optional

RT-NE-8EPA

8-port E1/CE1 interface front processing card

12

Optional

RT-NE-8EKA

8-port E1/CE1 75-ohm electrical interface

12

Optional

12

Optional

8-port E1 IMA interface card

12

Optional

RT-NE-E8IP

12

Optional

12

Optional

board-256 M memory
RT-NE-VIU4BE

G4 versatile interface unit front processing

board-256 M memory-performance enhanced

4-port synchronous serial port front processing

Ethernet
Switch

3. Versatile interface card

board
RT-NE-SAKA

4-port synchronous serial port back transfer

card (DB100 female connector)

interface back transfer card (DB68 female

connector)

back transfer card (DB68 female connector)

RT-NE-8EKB

8-port E1/CE1 120-ohm electrical interface

back transfer card (DB68 female connector)

8-port E1 ATM reverse multiplex interface

front processing card

RT-NE-8EKA

8-port E1/CE1 75-ohm electrical interface

back transfer card (DB68 female connector)

> 1-75

Router Series

RT-NE-8EKB

8-port E1/CE1 120-ohm electrical interface

12

Optional

12

Optional

12

Optional

12

Optional

1-port channelized CE3 interface card

12

Optional

RT-NE-CE3P

12

Optional

12

Optional

1-port E3 interface card

12

Optional

RT-NE-E3PA

1-port E3 interface front processing board

12

Optional

RT-NE-CE3K

1-port E3/cE3/ATM E3 75-ohm electrical

12

Optional

1-port ATM over E3 interface card

12

Optional

RT-NE-AESP

12

Optional

12

Optional

2-port ATM over E3 interface card

12

Optional

RT-NE-AEDP

12

Optional

12

Optional

1-port T3 interface card

12

Optional

RT-NE-T3PA

1-port T3 interface front processing card

12

Optional

RT-NE-CT3K

1-port channelized T3 interface card

back transfer card (DB68 female connector)

8-port T1 IMA interface card
RT-NE-T8IP

8-port T1 ATM reverse multiplex interface

front processing card

RT-NE-8TKA

8-port T1/CT1 100-ohm electrical interface

back transfer card (DB68 female connector)

1- p o r t c h a n n e l i z e d E 3 i n t e r f a c e f ro n t
processing card

RT-NE-CE3K

1-port E3/cE3/ATM E3 75-ohm electrical

interface back transfer card (SMB)

interface back transfer card (SMB)

1-channel ATM over E3 interface front

processing board

RT-NE-CE3K

1-port E3/cE3/ATM E3 75-ohm electrical

interface back transfer card (SMB)

2-channel ATM over E3 interface front

processing board

RT-NE-E3DK

2-channel ATM over E3 interface back

board

12

Optional

1-port ATM over T3 interface card

12

Optional

RT-NE-ATSP

12

Optional

12

Optional

12

Optional

1-channel ATM over T3 interface front

processing board

RT-NE-CT3K

1-port channelized T3 interface card

2-port ATM over T3 interface card

> 1-76

Router Series

RT-NE-ATDP

2 - c h a n n e l AT M o v e r T 3 i n t e r f a c e f ro n t

12

Optional

12

Optional

1-port fast Ethernet interface card

12

Optional

RT-NE-ETPA

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

processing board
RT-NE-T3DK

2-channel ATM over T3 interface back board

1-port 100M Ethernet interface front

processing card

RT-NE-ETKA

1-port 100M Ethernet electrical interface back

transfer card (RJ45)

RT-NE-ETKB

1-port 100M Ethernet single-mode

optical interface back transfer card
(1310nm,15km,SC)

RT-NE-ETKC

1-port 100M Ethernet multi-mode optical

1-port 155M POS interface card

RT-NE-POPB

1-port OC3/STM1 POS interface front

Ethernet
Switch

interface back transfer card (1310nm,2km,SC)

processing card
RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multimode optical interface back transfer card

(1310nm,2km, SC)

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

1-port 155M ATM interface card

RT-NE-ATPB

1 - p o r t O C 3 / S T M 1 AT M i n t e r f a c e f r o n t
processing card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multimode optical interface back transfer card

(1310nm,2km, SC)

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

> 1-77

Router Series

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-

12

Optional

1-port channelize 155M POS to the E1 interface

Optional

RT-NE-CPOP

Optional

Optional

Optional

Optional

Optional

1-port channelize 155M POS to the T1 interface

Optional

RT-NE-CPOB

Optional

Optional

Optional

Optional

mode long-haul optical interface back

transfer card (1310nm, 40km, SC)

1-port channelized OC3/STM1 POS interface

front processing card

RT-NE-CPOC

1-port channelized OC3/STM1 POS interface

front processing card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multimode optical interface back transfer card

(1310nm,2km, SC)

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

1-port OC3/STM1 channelized POS interface

front processing card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multimode optical interface back transfer card

(1310nm,2km, SC)

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

> 1-78

Router Series

1-port Gigabit Ethernet interface card

RT-NE-GEPA

1-channel Gigabit Ethernet optical interface

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

12

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

front processing card

RT-NE-GEKA

1-port Gigabit Ethernet single-mode optical

interface back transfer card (1310nm,10km, SC)

RT-NE-GEKB

1-port Gigabit Ethernet multi-mode optical

interface back transfer card (1310nm,500km, LC)

RT-NE-GEKC

1-port Gigabit Ethernet single-mode long-haul

optical interface back transfer card (1550nm,
40km, LC)

RT-NE-GEKD

1-port Gigabit Ethernet single-mode extra

long-haul optical interface back transfer card

3FE electrical interface integrated module unit

RT-NE-3FEMK

The rear panel of module provides 3FE electrical

Ethernet
Switch

(1550nm, 70km, LC)

interface + 1 empty card position

3FE electrical interface + 1GE optical interface (GBIC)
integrated module unit
RT-NE-1GOMK

T h e re a r p a n e l o f m o d u l e p ro v i d e s 3 F E
electrical interface + 1 GE optical interface
(GBIC)

RT-NE-1GOMP

The front panel of module provides 3FE

electrical interface + 1 GE optical interface
(256M SDRAM)

3FE electrical interface + 1GE electrical

interface integrated module unit
RT-NE-1GEMK

The rear panel of module provides 3FE electrical

interface + 1 GE electrical interface

RT-NE-1GEMP

The front panel of module provides 3FE

electrical interface + 1 GE electrical interface
(256M SDRAM)

> 1-79

Router Series

NE05
Name

Item

Configuration

Remarks

RT-NE05

NE05 chassis-Dual DC power supply module

Mandatory

CHASSIS/2DC

configuration

RT-NE-ALU

System monitoring management unit

Mandatory

RT-NE-RSU

Route switching unit front processing board

Mandatory

RT-NE-RSHC

Route switching extended unit

Mandatory

SWP-VRP

Expense for NE05 VRP software

Mandatory

Optional

Optional

1. Host system

2.Versatile interface unit

RT-NE-VIUA

Versatile interface unit front processing board

-128 M memory

RT-NE-VIUB

Versatile interface unit front processing

board-256 M memory

RT-NE-VIEU

Versatile interface unit back transfer board

Optional

RT-NE-VIU4A

G4 versatile interface unit front processing

Optional

Optional

Optional

Optional

4-port SA synchronous serial port/interface card

Optional

RT-NE-SAPA

Optional

Optional

4-port E1/CE1 interface card

Optional

RT-NE-CEPA

4-port E1/CE1 interface front processing card

Optional

RT-NE-QEKA

4-port E1/CE1 75 ohm/120 ohm electrical

Optional

board-128 M memory (NE05 dedicated)

RT-NE-VIU4B

G4 versatile interface unit front processing

board-256 M memory

RT-NE-VIU4AE

G4 versatile interface unit front processing

board -128 M memory-performance enhanced
(NE05 dedicated)

RT-NE-VIU4BE

G4 versatile interface unit front processing

board-256 M memory-performance enhanced

3. Versatile interface card

4-port synchronous serial port front processing

board

RT-NE-SAKA

4-port synchronous serial port back transfer

card (DB100 female connector)

interface back transfer card (DB68 female

connector)

> 1-80

Router Series

8-port E1/CE1 interface card

Optional

RT-NE-8EPA

8-port E1/CE1 interface front processing card

Optional

RT-NE-8EKA

8-port E1/CE1 75-ohm electrical interface back

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional
Optional

transfer card (DB68 female connector)

RT-NE-8EKB

8-port E1/CE1 120-ohm electrical interface

back transfer card (DB68 female connector)

8-port E1 IMA interface card

RT-NE-E8IP

8-port E1 ATM reverse multiplex interface front

processing card

RT-NE-8EKA

8-port E1/CE1 75-ohm electrical interface back

transfer card (DB68 female connector)

RT-NE-8EKB

8-port E1/CE1 120-ohm electrical interface

RT-NE-T8IP

8-port T1 ATM reverse multiplex interface front

Ethernet
Switch

back transfer card (DB68 female connector)

8-port T1 IMA interface card

processing card
RT-NE-8TKA

8-port T1/CT1 100-ohm electrical interface

back transfer card (DB68 female connector)

1-port channelized CE3 interface card

RT-NE-CE3P

1-port channelized E3 interface front processing

card

RT-NE-CE3K

1-port E3/cE3/ATM E3 75-ohm electrical

interface back transfer card (SMB)

1-port E3 interface card

RT-NE-E3PA

1-port E3 interface front processing board

RT-NE-CE3K

1-port E3/cE3/ATM E3 75-ohm electrical

Optional

Optional

Optional

Optional

Optional

interface back transfer card (SMB)

1-port ATM over E3 interface card
RT-NE-AESP

1- c h a n n e l AT M o v e r E 3 i n t e r f a c e f ro n t
processing board

RT-NE-CE3K

1-port E3/cE3/ATM E3 75-ohm electrical

interface back transfer card (SMB)

2-port ATM over E3 interface card

RT-NE-AEDP

2 - c h a n n e l AT M o v e r E 3 i n t e r f a c e f ro n t

Optional

RT-NE-E3DK

processing board

Optional

2-channel ATM over E3 interface back board

> 1-81

Router Series

1-port T3 interface card

Optional

RT-NE-T3PA

1-port T3 interface front processing card

Optional

RT-NE-CT3K

1-port channelized T3 interface card

Optional

1-port ATM over T3 interface card

Optional

RT-NE-ATSP

Optional

Optional

2-port ATM over T3 interface card

Optional

RT-NE-ATDP

Optional

1- c h a n n e l AT M o v e r T 3 i n t e r f a c e f ro n t
processing board

RT-NE-CT3K

1-port channelized T3 interface card

2 - c h a n n e l AT M o v e r T 3 i n t e r f a c e f ro n t
processing board

Optional

1-port fast Ethernet interface card

Optional

RT-NE-ETPA

Optional

Optional

Optional

Optional

1-port 155M POS interface card

Optional

RT-NE-POPB

Optional

Optional

Optional

Optional

1-port 155M ATM interface card

Optional

RT-NE-ATPB

Optional

RT-NE-T3DK

2-channel ATM over T3 interface back board

1-port 100M Ethernet interface front processing

card

RT-NE-ETKA

1-port 100M Ethernet electrical interface back

transfer card (RJ45)

RT-NE-ETKB

1-port 100M Ethernet single-mode optical

interface back transfer card (1310nm, 15km, SC)

RT-NE-ETKC

1-port 100M Ethernet multi-mode optical

interface back transfer card (1310nm, 2km, SC)

1-port OC3/STM1 POS interface front processing

card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multi-mode

optical interface back transfer card (1310nm,
2km, SC)

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

1-port OC3/STM1 ATM interface front processing

card

> 1-82

Router Series

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multi-mode

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

optical interface back transfer card (1310nm,

2km, SC)
RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

1-port channelized 155M POS to the E1 interface

RT-NE-CPOP

1-port channelized OC3/STM1 POS interface

front processing card
1-port channelized OC3/STM1 POS interface

Ethernet
Switch

RT-NE-CPOC

front processing card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multi-mode

optical interface back transfer card (1310nm,
2km, SC)

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

1-port channelized 155M POS to the T1 interface

RT-NE-CPOB

1-port OC3/STM1 channelized POS interface

front processing card

RT-NE-PAKB

1-port OC3/STM1 POS/ATM/CPOS multi-mode

optical interface back transfer card (1310nm,
2km, SC)

RT-NE-PAKA

1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)

RT-NE-PAKC

1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)

> 1-83

Router Series

1-port Gigabit Ethernet interface card

Optional

RT-NE-GEPA

Optional

Optional

Optional

Optional

Optional

3FE electrical interface integrated module unit

Optional

RT-NE-3FEMK

Optional

Optional

Optional

Optional

Optional

Optional

Optional

1-channel Gigabit Ethernet optical interface

front processing card

RT-NE-GEKA

1-port Gigabit Ethernet single-mode optical

interface back transfer card (1310nm, 10km, SC)

RT-NE-GEKB

1-port Gigabit Ethernet multi-mode optical

interface back transfer card (1310nm, 500km, LC)

RT-NE-GEKC

1-port Gigabit Ethernet single-mode long-haul

optical interface back transfer card (1550nm,
40km, LC)

RT-NE-GEKD

1-port Gigabit Ethernet single-mode extra

long-haul optical interface back transfer card
(1550nm, 70km, LC)

The rear panel of module provides 3FE electrical

interface + 1 empty card position

3FE electrical interface + 1GE optical interface (GBIC)

integrated module unit
RT-NE-1GOMK

T h e re a r p a n e l o f m o d u l e p ro v i d e s 3 F E
electrical interface + 1 GE optical interface
(GBIC)

RT-NE-1GOMP

The front panel of module provides 3FE

electrical interface + 1 GE optical interface
(256M SDRAM)

RT-NE-1GOMP-

The front panel of module provides 3FE

128M

electrical interface + 1 GE optical interface

(128M SDRAM)

3FE electrical interface + 1GE electrical interface integrated

module unit
RT-NE-1GEMK

The rear panel of module provides 3FE electrical

interface + 1 GE electrical interface

> 1-84

Router Series

RT-NE-1GEMP

The front panel of module provides 3FE

Optional

Optional

electrical interface + 1 GE electrical interface

(256M SDRAM)
RT-NE-1GEMP-

The front panel of module provides 3FE

128M

electrical interface + 1 GE electrical interface

(128M SDRAM)

Ethernet
Switch

For more information, please visit www.huawei.com

> 1-85

memo

Router Series

> 1-86

Ethernet
Switch

memo

Router Series

> 1-87

memo

Router Series

> 1-88

Router Series
Quidway AR46 Series Intelligent Service Central Routers
Based on the design concept of paying equal attention to services and performances, and
smooth evolution of services, we launch high-performance, high-reliability multi-service
routers, the Quidway AR46 Series Intelligent Service Central Routers that orient overall
service and open service model, for enterprise core, industry and operator networks.
The Quidway AR46 series routers have three models, namely, AR46-80, AR46-40 and
AR46-20, which provide eight slots, four slots and two slots respectively. According to the
network scale, the AR46 router can serve as a core router in a corporation network, as an
edge router in a carrier network and as a convergence router in a large industry network.

Ethernet
Switch

Quidway AR46-20

Quidway AR46-40

Quidway AR46-80

Product Features
Highly-effective Dual-bus Architecture
The Quidway AR46 router adopts a unique dual-bus architecture that consists of
two independent PCI buses, high-performance PowerPC, and the IP Turbo EngineTM
technology with intellectual property right, thus greatly improving system forwarding
capabilities. Its forwarding capacity reaches up to 350 Kpps (155M interface line speed
forwarding), which is much greater than the equivalences in the industry. The AR 46
router provides high-performance service; so its forwarding performance does not fall
observably in processing various services.

End-to-end Reliability Guarantee

The Quidway AR46 router takes high reliability into consideration in networking
applications. It enhances technologies of high-end routers and adopts redundancy design
for key components, such as bus, power supply, heat dissipation system, and BootROM.
In addition, it adopts dual power modules with redundancy (1 + 1 standby) and supports
AC and DC input. Note that the bus here is not designed with redundancy.
> 1-89

Router Series
Hot Swap for Key Modules:
All the interface cards, power supplies, fans of the Quidway AR 46 router support
hot swap, thus meeting the requirements for network maintenance, upgrade, and
optimization.

Software Online Patch:

The Quidway AR 46 router provides the unique software online patch function, thus
guaranteeing the service is not interrupted during software optimization.

Abundant Network Redundancy:

The Quidway AR 46 router has abundant functions, such as link backup, link binding,
routing backup, dial-in backup, and VRRP, thus ensuring the reliability of network nodes
and the entire network.
Through overall guarantee, the Quidway AR46 router can implement 7 x 24 hour
uninterrupted operation.

Easy to Maintain and Human-centered Design

The Quidway AR 46 router fully takes design for testability (DFT) into consideration, and
provides a unique fault location and analysis tool based on DFT. Network engineers can
locate system faults rapidly and accurately through running the fault diagnosis software
on the PC. In addition, the system provides query of system status and alarm information,
and rich diagnosis test methods.

High Integration Security

The Quidway AR46 router is integrated with multiple security features, such as
packet filtering firewall, dynamic firewall, ISPKeeper DOS defense system, NAT, user
authentication, security log, equipment security, VPN encryption, service isolation (VR). In
this case, the AR46 router tailored a security policy for network users in time, space, and
network layer.

Overall Capabilities with Excellent Adaptation

The Quidway AR46 router has perfect service capabilities, such as routing, MPLS, VPN,
multicast, voice, security, QoS, IPv6, wideband access, three-in-one networking. All the
services are specially designed for enterprise core environments. The Quidway AR46

> 1-90

Router Series

router is integrated with such functions as router, FW, intrusion detection, VPN gateway,
voice gateway, wideband access gateway, layer 2 switch, which completely adapts to the
requirements for network integration. Further, it can flexibly implement a combination of
multiple equipment functions and services based on different application environments.

Product Specifications
Item

AR46-80

AR46-40

AR46-20

256M (512M maximum)

256M (512M maximum)

256M (512M maximum)

Flash

32M (default)

32M (default)

32M (default)

BootROM

1,024K

1,024K

1,024K

NVRAM

512K

512K

512K

Fixed interface

Two 10/100M Ethernet interfaces

Ethernet
Switch

Memory

One AUX interface

One console port

Number of slots

Packet

350 Kpps

forwarding rate
Input voltage

AC: 100V to 240V (+/-10%) 50/60 Hz

DC: -48V to -60V (+/-20%)

Dimensions (mm) 436.2 x 420 x 219.5

436.2 x 420 x 130.5

436.2 x 420 x 130.5

17.5kg

15kg

126W

86W

H x W x D
Weight

27.5kg

Maximum power 213W

Safety certification Compliance with CE, UL, and TUV

Working

0C to 40C

environment
temperature
Environment

10% to 90% no condensing

relative humidity

> 1-91

Router Series

Order Information
The Quidway AR46 series routers are enterprise-class products. You can choose and
purchase host, interface module, and cable suite as required.

Host Purchase
The Quidway AR46 router provides two types of hosts: AC supply and DC supply. You
can purchase it as required.
Reference Table for Purchasing the Quidway AR46 Router Host
Item

Quantity

Remarks

Host

Mandatory

Memory (SDRAM)

Mandatory (256M default)

Flash

Mandatory (32M default)

Power module and

1/2

One power supply and cable are mandatory; two powers

power cable

and cables are required for redundant power supplies.

Protection

Mandatory

grounding wire
Console cable
AUX cable
Ethernet cable
Fan

Mandatory

Mandatory

1/2

Mandatory

Mandatory

Notes:
1) Mandatory indicates the item is shipped with the purchased host without purchase.
2) Optional indicates the item is not shipped with the purchased host and requires
purchase.

> 1-92

Router Series

Interface Module Purchase

Interface modules provided by the Quidway AR46 router are fixed (for example,
including packing and cable). You can purchase them by yourself, independent of host
delivery.
Actually, interface module purchase includes two parts: interface module to be chosen
and relevant cable. Generally, an interface module has its fixed type of cable without
choice. If there are multiple types of cables for choice, you need to purchase the relevant
cable in the external cable suite according to line feature and interface quantity. For more
information, see the following table.
Reference Table for Purchasing the Quidway AR46 Router Interface Module
Module Description

Cable

Remarks

RT-FIC-1FE

1-port FE Interface Module Ethernet cable

Cable, mandatory

RT-FIC-2FE

2-port FE Interface Module Ethernet cable

Cable, mandatory

RT-FIC-1SFX

1-port 100M Ethernet

Single-mode optical

Optional in external suite

single mode optical cable

of optical cables

Ethernet
Switch

Interface Module

Interface Module
RT-FIC-1MFX

1-port 100M Ethernet

Multi-mode optical

Optional in external suite

Multi-mode optical

cable

of optical cables

Interface Module

RT-FIC-2SAE

2-port Enhanced

Multiple serial port

Choosing the relevant cable

Synchronous/Asynchronous cables

based on the required protocol

Serial Interface Module

(such as V.35, V.24, X.21

RS449, RS530 DTE/DCE)

RT-FIC-4SAE

4-port Enhanced

Choosing the relevant cable

Synchronous/Asynchronous cables

based on the required protocol

Serial Interface Module

(such as V.35, V.24, X.21

Multiple serial port

RS449, RS530 DTE/DCE)

RT-FIC-8SAE

8-port Enhanced

Choosing the relevant cable

Synchronous/Asynchronous cables

based on the required protocol

Serial Interface Module

(such as V.35, V.24, X.21

Multiple serial port

RS449, RS530 DTE/DCE)

> 1-93

Router Series

> 1-94

RT-FIC-4BS

4-Channel ISDN S/T

S port cable

Cable, mandatory

Interface Module

RT-FIC-8ASE

8-port Asynchronous

Serial Interface Module

AUX cable

Cable, mandatory

RT-FIC-16ASE

16-port Asynchronous

AUX cable

Cable, mandatory

Serial Interface Module

RT-FIC-6AM

6-Channel Enhanced

Analog Modem Interface line

Magnetic ring telephone

Mandatory

Module

RT-FIC-12AM

12-Channel Enhanced

Analog Modem Interface line

Module

RT-FIC-1E1/E1-F

1-port cE1/PRI Interface

E1 75 ohm coaxial cable

Optional in external suite

Module( 1-port E1&

and coaxial connector

of optical cables

Fractional E1 Interface

E1 120 ohm twisted pair

Module)

cable and network port

Magnetic ring telephone Mandatory

connector

RT-FIC-2E1/E1-F

2-port cE1/PRI Interface

E1 75 ohm coaxial cable Optional in external suite

Module ( 2-port

andcoaxial connector

Fractional E1 Interface

E1 120 ohm twisted pair

Module)

cable and network port

E 1&

of optical cables

connector

RT-FIC-4E1/E1-F

4-port cE1/PRI Interface

4E1 75 ohm transit cable 4E1 transit cable is

Module( 4-port E1&

and 4E1 120 ohm transit

mandatory ; other cables

Fractional E1 Interface

cable

are optional in external

Module)

E1 75 ohm coaxial cable

cable suite.

and coaxial connector;

E1 120 ohm twisted pair

cable and network port

connector

RT-FIC-1T1/T1-F

1-port cT1/PRI Interface

T1 G.703 100 ohm

The impedance of the

Module (1-port T1& Fract

balanced cable

network cable is generally

ional T1 Interface Module)

100 ohm. You can purchase

network cables according

to port count.

Router Series

RT-FIC-2T1/T1-F

2-port cT1/PRI Interface

T1 G.703 100 ohm

The impedance of the

Module (2-port T1&

balanced cable

network cable is generally

Fractional T1 Interface

100 ohm. You can purchase

Module)

network cables according

to port count.

RT-FIC-4T1/T1-F

4-port cT1/PRI Interface

T1 G.703 100 ohm

The impedance of the

Module (4-port T1&

balanced cable

network cable is generally

Fractional T1 Interface

100 ohm. You can purchase

Module)

network cables according

to port count.

RT-FIC-1cE3

1-port E3/cE3

E3 cable

Mandatory

Compatible Interface

Module

RT-FIC-1cT3

1-port T3/cT3

T3 cable

Mandatory

Compatible Interface

Module

RT-FIC-1ATM-

1-port ATM/155M

Multi-mode optical cable

Optional in external suite

OC3MM

Multimode Interface

of optical cables

Module

RT-FIC-1ATM-

1-port ATM/155M Single

OC3SM

mode Interface Module

RT-FIC-1ATM-

1-port ATM/155M Single

OC3SML

mode Long Reach

Ethernet
Switch

Single-mode optical cable Optional in external suite

of optical cables

Single-mode optical cable Optional in external suite

of optical cables

Interface Module

RT-FIC-1/2ADSL

1/2-port ADSL over

Magnetic ring telephone

POTS Interface Module

line

RT-FIC-1/2

1(2)-port ADSL over

S port cable

Mandatory

ADSL-I

ISDN Interface Module

RT-FIC-2/4FXS

2(4)-port Voice

S port cable

Mandatory

Processing Board

Subscriber Circuit

S port cable

Mandatory

Interface Module

RT-FIC-2/4FXO

2(4)-port Voice

Processing Board Loop

Trunk Interface Module

Mandatory

> 1-95

Router Series

RT-FIC-2/4E&M

2(4)-port Voice

Processing Board E&M

Trunk Interface Module

RT-FIC-1GEE

1-port 1000M Ethernet

Electrical Interface

Module

S port cable

Mandatory

Ethernet cable

Mandatory

Notes:
1) Mandatory indicates the cable is shipped with the purchased interface module without
purchase.
2) Optional indicates the cable is not shipped with the purchased interface module and
requires purchase.
3) External cable suite/external optical cable suite is a set of cable/optical cable for choice,
independent of host delivery.

For more information, please visit www.huawei.com

> 1-96

Router Series
Quidway AR28-40/80 Series Access Routers
Adopting the modular structure, high speed CPU technology and fast routing strategy,
the Quidway AR 28-40/80 Routers provide abundant low speed service interfaces to
meet the requirements of such leased line services as DDN, packet-switching network
and Frame Relay, and to satisfy the networking requirements of such dial-up line
services as PSTN and ISDN. Latest xDSL technology is also adopted to meet the trend of
broadband IP network.
They can be used as the core and branch routers for medium and small enterprises to
provide secure and reliable multiple network solution in combination with other Huawei

Ethernet
Switch

network products. The Quidway AR 28-40/80 support ATM/GE/MPLS.

The Quidway AR 28-40 provides 4 multifunction interface module (MIM) slots, and the
AR 28-80 provides 8 MIM slots. The two models use the same multifunction interface
module (MIM).

Quidway AR 28-40 router rear view

Quidway AR 28-80 router rear view

> 1-97

Router Series

Product Features
Powerful Backup Function
Support the function of interface backup, link backup and route backup. The routers can
be configured in the active/stand-by mode between the leased line and the dial-up link,
between the leased line and the virtual link, or between two dial-up links. They can also
be active/standby configured between the DDN, FR, X.25, PSTN, ISDN, etc.

Higher Access Speed and More Powerful Processing Capacity

The Quidway AR 28-40/80 Series Routers each support up to 112 (AR 28-80) analog
dial-up users or 56 (AR 28-80) ISDN BRI dial-up users, capable of providing a high-density
remote office solution. It can access up to 28 (AR 28-80) 2M synchronous interfaces
for connecting DDN, frame relay and X.25 networks. The Quidway AR 28-40/80 Series
Routers can serve as not only the core routers in the small and medium size Intranets but
also the access routers in the large networks.

Enterprise Core Router

The Quidway AR 28-40/80 Series Routers usually work at the core layer of enterprise
network and provide GE or ATM uplink to intranet. The Quidway AR 28-40/80 Series
Routers also provide comprehensive security solutions. The security solution contains:
packet filtering firewall, network address translation, VPN, Call Back technique, AAA, log
administration, and so on.

> 1-98

Router Series

Product Specifications
Description

AR 28-40

AR 28-80

4 Slots for MIM

Fixed interfaces

1 AUX Port

8 Slots for MIM

1 Console Port

BootROM

512KB

Default SDRAM

128MB

Maximum SDRAM

256MB

Flash

32MB

Performance capacity

120Kpps

Dimensions (W X H X D)

442 X 44.3 X 413 mm

442 X 88.2 X 413 mm

(include the rubber feet)

(include the rubber feet)

Weight

8kg

14kg

Input voltage

AC: 100 ~ 240V 50/60Hz

AC: 100 ~ 240V 50/60Hz

DC: -48 ~ -60V

DC: -48 ~ -60V

Max. power consumption

80W

120W

Operating temperature

0C to 40C

Operating humidity

10% to 90%, non-condensing

Ethernet
Switch

Module slots

Order Information

Description

Quantity

AR 28-40

Quidway AR 28-40-RTSM12840-Router

AR 28-80

Quidway AR 28-80-RTSM12880-Router

For more information, please visit www.huawei.com

> 1-99

Router Series
Quidway AR28-30/31 Series Access Routers
Adopting the modular structure, high speed CPU technology and fast routing
mechanism, the Quidway AR 28-30/31 Routers provide abundant low speed service
interfaces to meet the requirements of such leased line services as DDN, packet-switching
network and Frame Relay, and to satisfy the networking requirements of such dial-up line
services as PSTN and ISDN. Latest x DSL technology is also adopted to meet the trend of
broadband IP network.
They can be used as the core and branch routers for SME to provide secure and reliable
network solution in cooperation with other Huawei network products.
The Quidway AR 28-30 Series Routers contain two types: the AR 28-30 and the AR
28-31. The Quidway AR 28-30 provides one 10/100 Mbps Ethernet port and three
network module slots (for MIM). The AR 28-31 provides two 10/100 Mbps Ethernet ports
and three network module slots (for MIM).

Quidway AR 28-30 router rear view

Quidway AR 28-31 router rear view

> 1-100

Router Series

Product Features
Integrated Voice Solutions
The Quidway AR 28-30/31 Routers are key components of huawei integrated voice
over packet solutions, which include a rich family of Voice Gateway, GK and billing
systems. The Quidway AR 28-30/31 Routers deliver high quality and density VoIP
and VoFR services to enterprises. By supporting standard H.323 and SIP protocols,
Huawei integrated voice over packet solutions can inter-operate with other mainstream
manufacturers equipments.

Perfect Security Protecting System

The Quidway AR 28-30 Series Routers provide comprehensive security solutions. The
security solution contains: packet filtering firewall, network address translation, VPN, Call

Ethernet
Switch

Back technique, AAA, log administration, and so on.

Product Specifications
Description

AR 28-30

AR 28-31

Module slots

3 Slots for MIM

Fixed interfaces

1 10/100Mbps Ethernet Interface

1AUX Port

1 Console Port

BootROM

512KB

Default SDRAM

128MB

Maximum SDRAM

256MB

Flash

32MB

Performance capacity

90Kpps

Dimensions (W X H X D)

442 X 44.3 X 413 mm (including the rubber feet)

Weight

8kg

Input voltage

AC: 100 ~ 240V 50/60Hz

DC: -48 ~ -60V

Max. power consumption

80W

Operating temperature

0C to 40C

Operating humidity

10% to 90%, non-condensing

2 10/100Mbps Ethernet Interfaces

> 1-101

Router Series

Order Information

Description
Quidway AR 28-30-RTSM12830-Router

AR 28-31

Quidway AR 28-31-RTSM12831-Router

For more information, please visit www.huawei.com

> 1-102

Quantity

AR 28-30

Router Series
Quidway AR28-10/11 Series Access Routers
Adopting the modular structure, high speed CPU technology and fast routing policy,
the Quidway AR 28-10/11 Routers provide abundant service interfaces to meet the
requirements of such leased line services as DDN, packet-switched network and Frame
Relay, and to satisfy the networking requirements of such dial-up line services as PSTN
and ISDN. Latest x DSL technology is also adopted to meet the trend of broadband IP
network.
The Quidway AR 28-10/11 Routers can be used as the core routers for SME and
industrial users to provide secure and reliable network solutions in cooperation with

Ethernet
Switch

other Huawei network products.

The Quidway AR 28-10/11 routers can provide not only integrated Fast Ethernet
interfaces (FE), AUX ports and synchronous/asynchronous serial interfaces, but also
abundant optional SICs (Smart Interface Cards) and MIMs (Multifunction Interface
Modules). The AR 28-10 provides one fixed FE port, and AR 28-11 provides two.

Quidway AR 28-10 rear view

Quidway AR 28-11 rear view

> 1-103

Router Series

Product Features
Abundant Interface Types
The Quidway AR 28-10/11 Routers support many different service interfaces, including
synchronous serial interface, asynchronous serial interface, FE, E1/T1/PRI, ISDN BRI,
E3, FXS, FXO, E&M, E1VI, T1VI, ATM, ADSL and so on. They also fully meet various
networking requirements of DDN, Frame Relay, X.25, PSTN, ISDN, ATM and etc.

Perfect Security Protecting System

The Quidway AR 28-10/11 Routers provide comprehensive security solutions. The
security solution contains: packet filtering firewall, network address translation (NAT),
Authentication, Authorization and Accounting (AAA), VPN, Call Back service, log
administration, and so on.

Constructing VPN
Intranet VPN interconnects distributed points of the Intranet through the public network
so as to serve as the extension or replacement of the traditional leased line network
or other Intranets. Access VPN helps set up secure channels for small size users such
as SOHO to access the resources of the company headquarters through PSTN/ISDN.
Extranet VPN extends the Intranets to the partners or the clients, so as to enable different
Intranets to conduct secure and private communications to each other through the public
network. The Quidway AR 28-10/11 routers mainly serve as LNS (L2TP Network Server).

> 1-104

Router Series

Product Specifications
Description

28-10

AR 28-11

Module slots

2 SIC Slots 1MIM Slot

Fixed interfaces

1 10/100Mbps Ethernet Interface

1 Synchronous/Asynchronous Serial Interface

1 AUX Port

1 Console Port

BootROM

512KB

Default SDRAM

128MB

Maximum SDRAM

128M

Flash

32MB

Performance capacity

80Kpps

Dimensions

442 X 44.4 X 315 mm (including the rubber feet)

2 10/100Mbps Ethernet Interfaces

Ethernet
Switch

(W X H X D)
Weight

6kg

Input voltage

AC: 100V to 240V 50/60Hz

DC: -48V to -60V

Max. power

60W

consumption
Operating temperature

0C to 40C

Operating humidity

10% to 90%, non-condensing

Order Information

Description

Quantity

AR 28-10

Quidway AR 28-10-RTSM12810-Router

AR 28-11

Quidway AR 28-11-RTSM12811-Router

For more information, please visit www.huawei.com

> 1-105

Router Series
Quidway AR 28-09 Intelligent Service Branch Router
The Quidway AR28-09 intelligent service branch router is an edge access router. It
adopts a modular architecture and provides integrated Fast Ethernet interfaces, AUX
interface and synchronous/asynchronous serial interfaces. Further, it also offers optional
Smart Interface Card (SIC) and Multifunctional Interface Module (MIM). Compared with
its equivalences, the Quidway AR 28-09 intelligent service branch router has higher
performance cost and extensible capabilities. It can act as an access router in some
large branches and as a core router in small- and mid-sized enterprise networks. Further,
the Quidway AR 28-09 intelligent service branch routers can work together with the
Quidway series routers, Ethernet switches to provide overall end-to-end network
solutions for industry users and mid- and large-sized enterprise users, such as telecom,
ISP, finance, tax, public security, and railway.

Quidway AR 28-09 intelligent service branch router

Product Features
Interconnection Protocols
Ethernet, bridge, frame relay, X.25, HDLC, SDLC, LAPB, SLIP, PPP, PPP head compression,
MP, ISDN, PPPoE Client, dial-in on demand, dial-in string cyclic backup, PPP/ISDN callback,
layer 2 tunnel based on L2TP, layer 3 tunnel based on GRE, and wideband access.

Network Protocols
DHCP, VLAN, IPX, DLSw, RIP-1/RIP-2, OSPF, BGP, policy routing, multicast, routing load
sharing, address unnumbered, TCP packet head compression, and routing policy.

> 1-106

Router Series
Application Layer Protocols and Service Features
Telnet, SSH, Rlogin, dumb terminal, terminal access server with enhanced security
features, finance POS access, RTC, LPD, FTP, Ping, NTP application layer protocols or
service features.

Network Security
Login user authentication, RADIUS/Tacacs+ authentication/accounting, IPSEC, IKE,
hardware encryption card, firewall support for filtering interface/time segment/MAC
address, and high-performance NAT.

Network Reliability
Inter-interface/subinterface physical layer backup, inter-virtual link/virtual template/dial-

Ethernet
Switch

in interface/logical interface link layer backup, network layer backup for dynamic routing,
equipment layer backup for VRRP.

Voice Characteristics
Mute compression, comfort noise, voice jitter prevention, volume adjustment, PBX switch
function simulation, calling number identification, auto busy tone detection, flexible VOIP
routing and backup policy, IP fax, voice RADIUS, GK Client, IPHC, and voice QoS.

Quality of Service
Traffic classification and traffic policing (CAR/LR), traffic shaping (GTS), congestion
management (PQ/CQ/WFQ/CBQ), and congestion avoidance (WRED).

Configuration Management
Chinese and English languages, command hierarchical protection, tracert/ping/debugging
fault diagnosis function, RMON, SNMPv1/v2c/v3, system log, system upgrade through
FTP or TFTP, configuration through Console/AUX/X.25 PAD/Telnet/reverse Telnet.

> 1-107

Router Series

Product Specifications
Item

AR 28-09 Description

Slot

2 SIC slots, 1 MIM slot

Fixed interface

1 console port (CON), 1 auxiliary port (AUX)

1 high-speed synchronous/asynchronous serial port module

1 Fast Ethernet interface

Extended

LAN interface SIC-1FE (10/100Base-TX Fast Ethernet intelligent interface card)

module

module

SIC-1ETH (10M Ethernet intelligent interface card)

1FE (10/100Base-TX Fast Ethernet interface module)

1SFX (100Base-FX Ethernet single-mode optical interface module)

1MFX (100Base-FX Ethernet multi-mode optical interface module)

GE (Gigabit electrical interface module)

WAN interface SIC-3AS (asynchronous serial port intelligent interface card)

module

SIC-1SA (high-speed synchronous/asynchronous serial

intelligent interface card)

SIC-EPRI (channelized cE1/PRI intelligent interface card)

SIC-1E1-F (non-channelized E1 intelligent interface card)

SIC-TPRI (channelized cT1/PRI intelligent interface card)

SIC-1T1-F (non-channelized T1 intelligent interface card)

SIC-1/2BS (ISDN-S intelligent interface card)

SIC-1/2BU (ISDN-U intelligent interface card)

SIC-1/2AM (analog Modem intelligent interface card)

2/4/8SAE (enhanced high-speed synchronous/asynchronous

serial interface module)

8/16ASE (enhanced asynchronous serial interface module)

1/2/4E1 (channelized cE1/PRI module)

1/2/4E1-F (non-channelized E1 module)

1/2/4T1 (channelized cT1/PRI module)

1/2/4T1-F (non-channelized T1 module)

6/12AM (analog Modem module)

1ATM-OC3MM (155M ATM multi-mode interface module)

1ATM-OC3SM (155M ATM single-mode interface module)

1ATM-OC3SML (155M ATM single-mode long haul interface module)

> 1-108

Router Series

Voice module 2/4FXS (FXS interface voice module)

SIC-1/2FXS (FXS intelligent interface card)

2/4FXO (FXO interface voice module)

SIC-1/2FXO (FXO intelligent interface card)

POS access

2/4/6FCM (finance POS access module)

module

Other

modules

NDEC (encryption card module)

200MHZ Motorola 8241

Forwarding performance

70 KPPS

BootROM

512 KB

Flash

32 MB

SDRAM

128 MB

Dimensions (mm)

376.2 X287.9 X79.4 (plastic foot included)

Ethernet
Switch

Processor

heightX width X depth

Weight

2.5kg

Input power

Rated voltage range: 100-240 V, 50/60 Hz

Maximum voltage range: 90-264 V, 50/60 Hz

Current: 0.5A-1A

Maximum power

50 W

Working environment

0C to 40C

temperature
Environment humidity

10% to 90% noncondensing

> 1-109

Router Series

Order Information
Host
AR 28-09

Quantity Remarks

Quidway AR 28-09 router host

Mandatory

SIC slot:Serial interface card

RT-SIC-3AS

3-port asynchronous serial interface card

Optional

RT-SIC-1SA

1-port synchronous/asynchronous serial interface card

Optional

E1/CE1/T1/CT1/PRI interface card

RT-SIC-TPRI

1-port T1/CT1/PRI interface card

Optional

RT-SIC-EPRI

1-port E1/CE1/PRI interface card

Optional

RT-SIC-T1-F

1-port non-channelized T1 interface card

Optional

RT-SIC-E1-F

1-port non-channelized E1 interface card

Optional

ISDN interface card

RT-SIC-1BS

1-port ISDN basic rate S/T interface card

Optional

RT-SIC-1BU

1-port ISDN basic rate U interface card

Optional

RT-SIC-2BS

2-port ISDN basic rate S/T interface card

Optional

RT-SIC-2BU

2-port ISDN basic rate U interface card

Optional

Ethernet interface card

RT-SIC-1FEA

1-port 10/100M Fast Ethernet electrical interface card

Optional

RT-SIC-1ETH

1-port 10 Ethernet electrical interface card

Optional

Analog Modem interface card

RT-SIC-1AM

1-port analog Modem interface card

Optional

RT-SIC-2AM

2-port analog Modem interface card

Optional

POS access module

RT-2FCM

2-port finance POS access module

Optional

RT-4FCM

4-port finance POS access module

Optional

RT-6FCM

6-port finance POS access module

Optional

Voice interface processing card

RT-SIC-1FXO

1-channel voice processing board loop trunk interface card

Optional

RT-SIC-1FXS

1-channel voice processing board user circuit interface card

Optional

RT-SIC-2FXO

2-channel voice processing board loop trunk interface card

Optional

RT-SIC-2FXS

2-channel voice processing board user circuit interface card

Optional

> 1-110

Router Series

MIM slot:Ethernet interface module

RT-1FE

1-port 100BASE-T interface module

Optional

RT-1SFX

1-port 100M single-mode optical interface Ethernet interface

Optional

module

RT-1MFX

1-port 100M single-mode optical interface Ethernet interface

Optional

module

Analog Modem interface module

RT-6AM

6-port analog Modem interface module

Optional

RT-12AM

12-port analog Modem interface module

Optional

Serial interface module

2-port enhanced synchronous/asynchronous interface module

Optional

RT-4SAE

4-port enhanced synchronous/asynchronous interface module

Optional

RT-8SAE

8-port enhanced synchronous/asynchronous interface module

Optional

RT-8ASE

8-port enhanced asynchronous serial interface module

Optional

RT-16ASE

16-port enhanced asynchronous serial interface module

Optional

Ethernet
Switch

RT-2SAE

E1/T1 module
RT-1E1

1-port E1/CE1/PRI module

Optional

RT-2E1

2-port E1/CE1/PRI module

Optional

RT-4E1

4-port E1/CE1/PRI module

Optional

RT-1E1-F

1-port non-channelized E1 interface module

Optional

RT-2E1-F

2-port non-channelized E1 interface module

Optional

RT-4E1-F

4-port non-channelized E1 interface module

Optional

RT-1T1

1-port T1/CT1/PRI module

Optional

RT-2T1

2-port T1/CT1/PRI module

Optional

RT-4T1

4-port T1/CT1/PRI module

Optional

RT-1T1-F

1-port non-channelized T1 interface module

Optional

RT-2T1-F

2-port non-channelized T1 interface module

Optional

RT-4T1-F

4-port non-channelized T1 interface module

Optional

Optional

Optional

Network data encryption card

RT-NDEC

Network data encryption card

Voice interface module

RT-2FXO

2-channel voice processing board loop trunk interface module

> 1-111

Router Series

RT-2FXS

2-channel voice processing board user circuit interface module

Optional

RT-4FXO

4-channel voice processing board loop trunk interface module

Optional

RT-4FXS

4-channel voice processing board user circuit interface module

Optional

For more information, please visit www.huawei.com

> 1-112

Router Series

Quidway AR 18-30/31/32/33/34/35
Intelligent Service Access Routers
The Quidway AR 18-3X Series Access Router is a new generation of fixed-port routers
developed by Huawei Technologies intended for providing interconnection to the smallsized enterprises and branches and offices. It is characterized by streamline shapes, easy
and feasible installation and maintenance, providing abundant network security features,
VPN services and the backup center technology. As a result, the Quidway AR 18-3X
Series Router acquires wide application as branch routers in many network solutions.

Ethernet
Switch

Rear panel of Quidway AR18-30 router

Rear panel of Quidway AR 18-31 router

> 1-113

Router Series

Quidway AR18-32 rear view

Quidway AR18-33 rear view

Quidway AR18-34 rear view

Quidway AR18-35 rear view

> 1-114

Router Series

Product Features
Diverse and Flexible Interface
The Quidway AR 18-3x Series x DSL Router has 4-port fast Ethernet switch and different
DSL interfaces or ISDN backup interface according to different models. Customers can
flexibly select ADSL over POTS, ADSL over ISDN, G.SHDSL or common ISDN as WAN link.

Powerful Packet Forwarding Capability

Advanced CPU technology, highly effective, real time and multi-task operating system
and unique software are used to substantially enhance its capability to process packets.
Users can get good use of the wire-speed of all kinds of DSL technology.

Rich and Cost-Effective VPN Solutions

Ethernet
Switch

The Quidway AR 18-3x Series Router could provide a lot of VPN solutions, such as
dynamic VPN, L2TP, GRE, IPSec, IKE, as well as MPLS VPN. It could be used in Intranet
VPN and Access VPN, and will greatly reduce customers costs.

Abundant Service
The Quidway AR 18-3x Series Router can support services such as AAA, firewall, ASPF
(Application Specific Packet Filtering), IKE, IPSec, GRE, NAT, L2TP, PPPoE, DHCP, etc.

Product Specifications
Description AR 18-30

AR 18-31

AR 18-32 AR 18-33

AR 18-34

AR 18-35

Interfaces

One ADSL One ADSLover One ADSL

One

One G.SHDSL

One ADSL over

over POTS POTS (WAN)

G.SHDSL

Interface

ISDN Interface

(WAN)

Interface

One ISDN BRI

One ISDN BRI

S/T Interface

S/T Interface

over ISDN

One ISDN BRI Interface

S/T interface

(ISDN BRI)

Four 10/100M Ethernet Interfaces

One Console Port

SDRAM

64MB

Flash

8MB

Max. power 10W

consumption

> 1-115

Router Series

Power

Input: Rated voltage: 100-240v AC; 50/60Hz; Current: < 0.5A

supply
module

Output: Voltage: 12V DC; Current: < 1A

(external)
Dimensions 300 x 180 x 45mm (maximum dimensions)
(W x H x D)
Weight

1kg

Operating 0C to 40C
temperature
Operating 10% to 90%, non-condensing
humidity

Order Information

Description

Quantity

AR 18-30 functional module - Quidway AR 18-30-RTSM11830

- router host
AR 18-31 functional module - Quidway AR 18-31-RTSM11831

- router host
AR 18-32 functional module - Quidway AR 18-32-RTSM11832

- router host
AR 18-33 functional module - Quidway AR 18-33-RTSM11833

- router host
AR 18-34 functional module - Quidway AR 18-34-RTSM11834

- router host
AR 18-35 functional module - Quidway AR 18-35-RTSM11835
- router host

For more information, please visit www.huawei.com

> 1-116

Remarks

Router Series

Quidway AR18-20/20S Series Ethernet Routers

The Quidway AR 18-2x Series Ethernet Router is Ethernet broadband SOHO router. With
plentiful fast Ethernet interfaces, robust packet processing capability, abundant services,
and also streamline outlook, the Quidway AR 18-2x Series Router features high costperformance ratio, and can be applied in SOHO solutions and SME as a branch router.
The Quidway AR 18-2x Series includes two type: AR 18-20, AR18-20S.
The Quidway AR 18-20/20S router is integrated with layer 2 switching module. With
security and ease to use, the Quidway AR18-20/20S router provides rich network security
features, such as System Network Architecture (SNA), VLAN, bridge, VPN, IP multicast, and

Ethernet
Switch

Quality of Service (QoS). Compared with the Quidway AR 18-20, the Quidway AR 18-20S
adopts hardware encryption providing superior security performance. The appearance of
the AR 18-20/20S router is shown in the following figure:

Rear view of Quidway AR18-20/20S router

> 1-117

Router Series

Product Features
Plentiful Fast Ethernet Interfaces
The Quidway AR 18-20/20S Ethernet Router totally has five Ethernet interfaces, one
10M Ethernet interface for WAN, 4 Fast Ethernet interfaces for LAN, forming a 4-port
Fast Ethernet switch.

Powerful Packet Forwarding Capability

Advanced CPU technology, highly effective, real time and multi-task operating system
and unique software are used to substantially enhance its capability to process packets.

Rich and Cost-Effective VPN Solutions

The Quidway AR 18-20/20S Ethernet Router can provide a lot of VPN solutions, such
as dynamic VPN, L2TP, GRE, IPSec, IKE, as well as MPLS VPN. It could be used in Intranet
VPN and Access VPN, and will greatly reduce customers costs.

Abundant Service
The Quidway AR 18-20/20S Ethernet Router can support services such as AAA, firewall,
ASPF (Application Specific Packet Filtering), IKE, IPSec, GRE, NAT, L2TP, PPPoE, DHCP etc.

> 1-118

Router Series

Product Specifications
Item

AR 18-20 Description

AR 18-20S Description

Interface name

One console port

One console port

One 10M Ethernet interface (WAN)

One 10M Ethernet interface (WAN)

Four 10/100M Ethernet interfaces

Four 10/100M Ethernet interfaces (LAN)

(LAN)

Processor

MPC859DSL 80 MHz

SDRAM

64MB

Flash

8MB

Maximum power 10W

consumption
Input:

(external)

Rated voltage range: 100-240 VAC, 50/60 Hz

Maximum voltage range: 90-264 VAC, 50/60 Hz

Current: 0.5A-1A

Output:

Voltage: 12 VDC

Current: 4A

Dimensions

300 mm X 180 mm X 45 mm (all sizes are maximum from the highest point

(W x H x D)

of plastic panel arc)

Weight

1kg

Environment

0C to 40 C

Ethernet
Switch

Power module

temperature
Environment

10% to 90% noncondensing

relative humidity

Order Information

Description

Quantity Remarks

AR 18-20 Functional module-Quidway AR 18-20-RTSM11820-Router host

For more information, please visit www.huawei.com

> 1-119

Router Series
Quidway AR18-1X Series Routers
The Quidway AR18-1X router provides abundant, flexible interfaces, including Ethernet
interface, multi-protocol synchronous/asynchronous serial interface, AUX interface, ISDN
BRI S/T and U interfaces, cT1/PRI interface, and E1-F interface. Synchronous/asynchronous
serial interfaces support multiple protocols, such as V.24 DTE/DCE, V.35 DTE/DCE, X.21
DTE/DCE, RS449 DTE/DCE, and RS 530 DTE. You only need to choose the relevant cable
to meet the requirements for diversification of serial interfaces. You can flexibly select
a networking scheme based on multiple WAN technologies, such as PSTN/ISDN, Frame
Relay, X.25, Digital Data Network (DDN), and T1/E1 line.
The appearance of the AR 18-1X router is shown in the following figure:

Rear panel of Quidway AR 18-12 router

Rear panel of Quidway AR 18-13 router

Rear panel of Quidway AR18-15 router

> 1-120

Router Series

Rear panel of Quidway AR 18-16 router

Rear panel of Quidway AR 18-18 router

Ethernet
Switch

Product Features

Network Security: The Quidway AR 18-1X router provides rich network security

features, such as firewall, packet filtering, address translation, AAA, Callback. You can
select different security policies to build enterprise networks.

Building VPN Networks: Intranet Virtual Private Network (VPN), as an extension

and substitution of traditional dedicated line networks or other enterprise networks,

can connect to various branches of the enterprise through a public network. Access
VPN can build a secure channel to access resources of the corporate headquarters for
small users such as SOHO through PSTN/ISDN. Extranet VPN can extend the enterprise
network to partners and customers to make different enterprises able to perform
secure and private communications. The Quidway AR 18-1X router is mainly used for
the access end of VPN.

Dial Control Center (DCC): The Quidway AR 18-1X router provides users with

perfect dial-in solutions, supports standard DCC and flexible DCC dial modes. In addition,
it supports multiple link layer protocols (PPP) and multiple network layer protocols (IP and
IPX), and provides capabilities of running multiple dynamic routing protocols on the dial
interface. All these advantages can satisfy the needs for various network topologies. The
function of flexible DCC is more perfect. It can enable multiple dial-in users to share the
physical interface through Dialer Pool to implement different call functions.
> 1-121

Router Series

Reliability: The Quidway AR 18-1X router adopts the backup center technology,

thus greatly improving network reliability. It can utilize synchronous, asynchronous, CT1/
PRI, and ISDN BRI interface features to implement backup of various lines, thus meeting
the requirements for high reliability.

2B+D Data Transmission: The AR 18-13/18-15/18-31/18-34 routers are embedded

with Terminal Adapter (TA) functions and respectively provide ISDN BRI S/T interface and
U interface, thus implementing 2B+D data transmission.

TI/E1 Dedicated Line and PRI Dial-in Service: The AR 18-16/18-18 routers provide

CT1/PRI interface and E1-F interface, respectively. A CT1/PRI interface can be bound into
either channel-group to flexibly provide Nx 64k or 56kbps data bandwidth, or pri-group
to provide dial-in service for remote users. An E1-F interface only supports CE1 binding
and not provides PRI dial-in service.

Structure Appearance: It adopts a plastic chassis that can shield electromagnetic

radiation, with streamlined appearance and small dimensions. In addition, it can

effectively shield various electromagnetic interferences and operate stably and reliably.

Product Specifications
Item
Interface

AR 18-12 Description
One console port

AR 18-13/18-15 Description
One console port

AR 18-16/18-18 Description
One console port

name

One 10/100M Ethernet One 10/100M Ethernet

One 10/100M Ethernet

interface

interface

interface

One AUX interface

One AUX interface

One AUX interface

Two multi-protocol

One multi-protocol synchronous

One CT1/PRI interface

synchronous

/asynchronous serial interface

(AR 18-16)

/asynchronous serial

One ISDN BRI S/T interface

One E1-F interface

interfaces

(AR 18-13)

(AR 18-18)

One ISDN BRI U interface

(AR 18-15)

> 1-122

Router Series

Processor

MPC860T 50 MHz

SDRAM

64MB

Flash

8MB

Maximum

10W

power
consumption
Power

Input: Rated voltage range: 100-240 VAC, 50/60 Hz

module

Maximum voltage range: 90-264 VAC, 50/60 Hz

(external)

Output: Voltage: 12V

Current: 0.5A-1A

Current: < 1A

Dimensions 251 mm x 42.5 mm x 187 mm (all sizes are maximum from the highest point of plastic
(W x H x D)

panel arc)

Weight

0.85kg

Ethernet
Switch

Environment 0 oC to 40 oC
temperature
Environment 10% to 90% noncondensing
relative
humidity

Order Information

Description

Quantity

AR 18-12

Functional module-Quidway AR 18-12-RTKM21612-Router host

AR 18-13

Functional module-Quidway AR 18-13-RTKM31613-Router host

AR 18-15

Functional module-Quidway AR 18-15-RTKM41614-Router host

AR 18-16

Functional module-Quidway AR 18-16-RTKM11615-Router host

AR 18-18

Functional module-Quidway AR 18-18-RTJM1E1RM-Router host

For more information, please visit www.huawei.com

> 1-123

memo

Router Series

> 1-124

Ethernet
Switch

memo

Router Series

> 1-125

memo

Router Series

> 1-126

Ethernet
Switch

Product Quick Reference

Ethernet Switch Series

Huawei Datacom Product Quick Reference

Ethernet Switch Series

Contents
Quidway S8500 Series 10G Multi-service Core Routing Switches...................... 2-1
Quidway S6500 Series High-end Multi-service Switches.....................................2-9
Quidway S5600 Series L3 Intelligent Gigabit Ethernet Switches.......................2-20
Quidway S5000 Series L2 Intelligent Gigabit Ethernet Switches......................2-28
Quidway S3900 Series Switches......................................................................2-34
Quidway S3500 Series Security Intelligent Switches........................................2-44

Quidway S2000-EI Series Intelligent Switches................................................2-60

BRAS

Quidway S3000 Series Intelligent Switches.....................................................2-52

Ethernet Switch Series

Quidway S8500 Series 10G Multi-service Core Routing Switches
The Quidway S8500 series 10G multi-service core routing switch (referred to as the
S8500 series switch hereinafter) is a new-generation high performance routing switch.
It is extensively applied as the core layer of e-government networks, campus networks,
education MANs, and enterprise networks, and the core layer and convergence layer of
carriers IP MANs.
Based on the 10G platform, it supports the new-generation high-performance 10Gbps
interface and can provide super high-speed links for MANs, campus networks and data
centers to construct end-to-end Ethernet featuring low cost, high performance and
capabilities to support abundant services. It provides L2 and L3 wire-speed forwarding
performance of high capacity, high density and modularization to support the MPLS
distributed wire-speed forwarding. It also provides rich service functions, powerful QoS
guarantee, complete security management mechanism and carrier-class high reliability
design to fully satisfy the requirements of high-end users for multiple services, high
reliability and high capacity and large bandwidth.

BRAS

Quidway S8505

Quidway S8508

Quidway S8512

Product Features
Advanced System Structure
Distributed structure design is adopted for the S8500 series switch, powerful ASIC chips
are used for high-speed routing, and the Crossbar technologies are adopted for highspeed packet switching, all of which greatly improve the forwarding performance and

> 2-

Ethernet Switch Series

expansion capabilities of the routing switch. Passive backplane is adopted for the switch,
thus structure keeps the backplane is more reliable. Built in the main control board
without taking up the equipment slot, the Crossbar switching chip provides a switching
capacity up to 720G and can be set to work in the active/standby or load-sharing mode
via software configuration. The interface board is connected to the crossbar switching
fabric on the two main control boards via several 10G buses, thus realizing the hot
backup of dual main controls and dual switching fabric in the real sense and greatly
improving the system reliability.
The new-generation high performance ASIC chip design, the routing mode of maximum
matching and the packet-by-packet forwarding mode are adopted for the S8500 series
switch. As the design technologies develop and the techniques and integration improve,
the ASIC chip can implement the wire-speed maximum matching based on the existing
low cost, and removes the defects of former ASIC chips that can only process the precise
matching table and can realize the maximum matching table function only via software.
Thus, while keeping the wire-speed performance and relying on the low cost, the S8500
series switch revolutionarily removes the defects of traditional switches, and effectively
combats network viruses like Worm. Blaster. It is more applicable to large-scale networks
with multiple services and complex visit flows and caters more to the Ethernet MAN
development.

High Capacity, High-density Wire-speed Switching

The S8500 series switch can provide a backplane bandwidth of 1.8T, a switching capacity
of 720Gbps and forwarding capabilities of 428Mpps. High-density interface boards can
be provided for the switch to support wire-speed forwarding. In addition, while keeping
the wire-speed forwarding performance, the switch supports different high-density
interface boards and combined interface boards to satisfy the core layers requirements
for high density and high throughput.
It also has powerful hardware platform upgrade capabilities. A large number of bus
interfaces are reserved on the backplane for future system expansion. The system
switching capacity can be smoothly expanded to terabits to meet the ever-increasing
bandwidth needs of and protect and save users investments to the utmost.

> 2-

Ethernet Switch Series

Support for New-generation 10G Interfaces
The new-generation 10G Ethernet interface provides richer bandwidths and powerful
processing capabilities while preserving the compatibility and simple usage of Ethernet
for easy upgrade. Meanwhile, the 10G Ethernet provides pertinent solutions for MAN
and WAN applications to simplify the network architecture and reduce the network
construction costs.
The new-generation 10G Ethernet provided by the S8500 series switch overcomes a
number of limitations of the earlier 10G Ethernet, provides powerful QoS guarantee based
on wire-speed forwarding, and supports rich features such as ACL, strategic routing and
security. It can support wire-speed MPLS forwarding, provide better IP VPN services and
transparent LAN services, and provide the traffic engineering function via the MPLS TE.
In addition to standard LAN interfaces, the S8500 series switch provides 10GBASE-LX4
interfaces that employ the wavelength division multiplexing technologies to greatly raise
the flexibility of user networking.

Carrier-class Reliability Design

Distributed structure is adopted for the S8500 series switch to support dual main control
switching boards. The switch supports passive backplane design and all the boards

BRAS

support hot plugging. The 1+1 redundant hot backup mechanism is adopted for the
power supply system and dual power inputs are supported. The switch supports the
STP/RSTP/MSTP and VRRP protocols and can meet strict requirements for carrier-class
network reliability (up to 99.999%).

Complete Security Mechanism

The S8500 series switch supports clear text and MD5 encrypted text authentication
of OSPF, RIP v2 and BGP v4 packets. It adopts the 802.1x mode for access user
authentication, and supports secure SNMPv3 NM protocol, configuration security for user
authentication. Users of different levels have different configuration rights and two user
authentication modes are provided: local authentication and RADIUS authentication. The
switch supports rich traffic control mechanisms; ACL based on source and destination IP
address is supported. Source and destination port based ACL is also supported.

> 2-

Ethernet Switch Series

The system can support 4096 VLANs. Port based and protocol based VLAN is supported.
The 802.1Q standard is compliant. The switch provides VLAN management function by
protocol GVRP.
The S8500 series switch also supports the standard Radius protocol, provides the Radius+
function. As for switch access safely, SSH is supported by the switch. 802.1x protocol is
compliant also.

MPLS Distributed Wire-speed Supported

The S8500 series switch complies with the design concept that attaches importance to
both services and performance. On the one hand, the bandwidth and network scale
increase push the performance improvement and capacity increase of core routing
switch. On the other hand, the service development requires the core switch be more
intelligent and have more powerful service provision capabilities. The S8500 series switch
adopts the powerful ASIC chip to realize the MPLS distributed wire-speed forwarding.

Product Specifications
Attribute

S8505

S8508

S8512

Switching capacity

300Gbps

480Gbps

720Gbps

Backplane capacity

750Gbps

1.2Tbps

1.8Tbps

Packet forwarding

178Mpps

285Mpps

428Mpps

Number of slots

10

14

Number of slots for

12

speed

service boards

> 2-

L2 functions

4K VLAN

802.1q priority

STP/RSTP/MSTP

GARP/GVRP/GMRP

IGMP snooping

Port binding/port mirroring

802.1X

Broadcast storm suppression

Compatible with Ethernet_II/Ethernet_SNAP/IEEE 802.2/IEEE 802.3

MDI/MDI-X adaptation

L3 functions

ARP Proxy

Ethernet Switch Series

Rich routing protocols: RIP, OSPF, IS-IS, BGP4

128k routing forwarding table

Route load sharing

Policy routing

1k route interfaces

VRRP

DHCP-RELAY

Multicast

Multicast routing protocols: IGMP, PIM-DM, PIM-SM, MSDP/MBGP

Controllable multicast service

MPLS VPN

MPLS label space: 128K

LER/LSR

MPLS VPN service

QoS

DiffServ

Each port supporting 8 priority queues.

Detailed bandwidth management with the granularity of 3k

Congestion prevention algorithm: WRED and tail drop

Queue scheduling algorithms: SP, WRR and SP+WRR

Traffic shaping

Reliability

MTBF:>200,000 hours

Dual main control boards

Dual power supplies

Boards hot pluggable

System architecture

Integrated chassis that can be installed in a 19-inch rack

Outline dimensions

436 x 450 x 486

436 x 450 x 619

436 x 450 x 753

65 kg

80 Kg

100 kg

Label stack levels: 4

MTTR < 0.5 hours

BRAS

(mm) (W x D x H)
Weight (in maximum
configuration)
Environmental

Working temperature: 0C ~ 40C

requirements

Relative humidity: 10% ~ 85%

Power supply

DC: Input voltage: -36V ~ -72V (operating range)

requirements

AC: Input voltage: 90V ~ 264V (operating range), 47 ~ 63Hz

Maximum output power: 1200W/2000W

Order Information
The S8500 series switch is a core switch. Users can purchase the chassis, power supplies
and service modules as actually required.
> 2-

Ethernet Switch Series

S8505
Cabinet Configuration Guide

Description

Quantity Remarks

Assembly cabinet-Quidway S8505-LSBB1HLAN-integrated assembly 1

Mandatory

chassis
Assembly cabinet-Quidway S8505-LSBB2HLAN-2.2m assembly cabinet 1

Optional

Assembly cabinet-Quidway S8505-LSBB3HLAN-1.8m assembly cabinet 1

Optional

Power Supply Configuration Guide

You can select either DC or AC power supply.

Description

Quantity Remarks

Quidway S8505 DC power supply module 1-2

Optional

Quidway S8505 AC power supply module 1-2

Optional

Board Configuration Guide

You should select the service boards according to the specific conditions.

Item Description

Quantity Remarks

Quidway S8505 switching & route processing board 1-2

Mandatory

48-port FE electrical interface board (RJ45) 0-5

Optional

20-port FE optical interface board (SFP, LC) 0-5

Optional

12-port GE electrical interface board (RJ45) 0-5

Optional

12-port GE optical interface board (SFP, LC) 0-5

Optional

1-port 10GBASE-R/LX4 service board (XENPAK) 0-5

Optional

8-port GE optical interface (SFP) + 4-port ATM interface (RJ45) service 0-5

Optional

board
32-port FE Ethernet electrical interface + 4-port GE optical interface 0-5

Optional

(SFP) service board

8-port OC-3POS interface (SFP) + 8-port GE optical interface (SFP) 0-5

Optional

service board

> 2-

24-port GE optical interface board (SFP) 0-5

Optional

24-port GE electrical interface board (RJ45) 0-5

Optional

48-port GE electrical interface board (RJ45) 0-5

Optional

2-port 10GE optical interface board (XFP) 0-5

Optional

4-port 10GE optical interface board (XFP) 0-5

Optional

Ethernet Switch Series

S8508
Cabinet Configuration Guide

Description

Quantity Remarks

Assembly cabinet-Quidway S8508-LSBB1HLAN-integrated assembly 1

Mandatory

chassis
Assembly cabinet-Quidway S8508-LSBB2HLAN-2.2m assembly cabinet 1

Optional

Assembly cabinet-Quidway S8508-LSBB3HLAN-1.8m assembly cabinet 1

Optional

Power Supply Configuration Guide

You can select either DC or AC power supply.

Description

Quantity Remarks

Quidway S8508 DC power supply module 1-2

Optional

Quidway S8508 AC power supply module 1-2

Optional

Board Configuration Guide

You should select the service boards according to the specific conditions.
Item Description

Quantity Remarks

Quidway S8508 switching & route processing board 1-2

Mandatory

48-port FE electrical interface board (RJ45) 0-8

Optional

20-port FE optical interface board (SFP, LC) 0-8

Optional

12-port GE electrical interface board (RJ45) 0-8

Optional

12-port GE optical interface board (SFP, LC) 0-8

Optional

1-port 10GBASE-R/LX4 service board (XENPAK) 0-8

Optional

8-port GE optical interface +4-port ATM interface board 0-8

Optional

32-port FE Ethernet interface + 4-port GE optical interface board 0-8

Optional

8-port OC-3POS interface (SFP)+8-port GE optical interface (SFP) 0-8

Optional

BRAS

service board
24-port GE optical interface board (SFP) 0-8

Optional

24-port GE electrical interface board (RJ45) 0-8

Optional

48-port GE electrical interface board (RJ45) 0-8

Optional

2-port 10GE optical interface board (XFP) 0-8

Optional

4-port 10GE optical interface board (XFP) 0-8

Optional

> 2-

Ethernet Switch Series

S8512
Cabinet Configuration Guide

Description

Quantity Remarks

Assembly cabinet- Quidway S8512-LSBB1HLAN -integrated assembly 1

Mandatory

chassis
Assembly cabinet-Quidway S8512-LSBB2HLAN-2.2m assembly cabinet 1

Optional

Assembly cabinet-Quidway S8512-LSBB3HLAN-1.8m assembly cabinet 1

Optional

Power Supply Configuration Guide

You can select either DC or AC power supply.

Description

Quantity Remarks

Quidway S8512 DC power supply module 1-2

Optional

Quidway S8512 AC power supply module 1-2

Optional

Board Configuration Guide

You should select the service boards according to the specific conditions.

Item Description

Quantity Remarks

Quidway S8512 switching & route processing board 1-2

Mandatory

48-port FE electrical interface board (RJ45) 0-12

Optional

20-port FE optical interface board (SFP, LC) 0-12

Optional

12-port GE electrical interface board (RJ45) 0-12

Optional

12-port GE optical interface board (SFP, LC) 0-12

Optional

1-port 10GBASE-R/LX4 service board (XENPAK) 0-12

Optional

8-port GE optical interface +4-port ATM interface board 0-12

Optional

32-port FE Ethernet interface + 4-port GE optical interface board 0-12

Optional

8-port OC-3POS interface (SFP)+8-port GE optical interface (SFP) 0-12

Optional

service board

> 2-

24-port GE optical interface board (SFP) 0-12

Optional

24-port GE electrical interface board (RJ45) 0-12

Optional

48-port GE electrical interface board (RJ45) 0-12

Optional

2-port 10GE optical interface board (XFP) 0-12

Optional

4-port 10GE optical interface board (XFP) 0-12

Optional

Ethernet Switch Series

Quidway S6500 Series High-end Multi-service Switches
The Quidway S6500 series 10 GE multi-service switches are high performance, highdensity, and modular L2/3 line speed Ethernet switching products. Ideal for IP MANs,
large enterprise Intranets and district networks, S6500 could be deployed as core
switches of enterprises or MAN aggregation layer switches. This series consists of S6502 (2
slots), S6503 (4 slots), S6506 (7 slots), and S6506R (8 slots).
The Quidway S6500 provides high-speed interface to create low-cost, highperformance, multi-service networks platform. The Quidway S6500 series products
possess a broad range of service functions, powerful QoS assurance, refined security
management mechanism and carrier-class high-reliability design, completely meeting
the needs of industry customers and operators for multiple services, high reliability, large
capacity and modular design.
Furthermore, a new generation of Quidway S6500 Series Product has just been
released, which has brand new chassis, powerful new Salience III series super engines,
and new interface boards with abundant services. Furthermore the new generation

BRAS

S6500 switches are much more cost effective than the old ones: lower price, higher
performance and more features.

S6502

S6503

S6506

S6506R

> 2-

Ethernet Switch Series

Product Features
Advanced Architecture
With distributed processing structure and modular design, the S6502, as a whole,
supports 2 high-speed service slots; the S6503, as a whole, supports 3 high-speed
service slots; the S6506/S6506R, as a whole, support 6 high-speed service board slots,
and provide smooth investment and service expandability.

High-density L2/3 Full Line Speed Interface

The backplane bandwidth of the S6500 series switches is up to 1.68Tbps. In full
configuration, the S6500 can provide up to 292GE or 288FE. Supporting up to 64K
routing table entries, and based on Longest Prefix Match (LPM) routing, which ensures
all packets have the same forwarding performance, and enable the switch inherently
immune against Code red worm and Worm blaster. Powerful processing capacity
is an important assurance for building reliable, stable, and high-speed IP network
platforms.

Carrier-class Reliability Design

With distributed architecture, the S6506R supports dual main control boards. All boards
of the S6500 series are hot swappable, and the power system is in N+1 redundancy.
Dual power cord input also enhances the system reliability. The system supports STP/
RSTP /MSTP and VRRP, meeting strict carrier-class network reliability requirements.

Highly Reliable System Resource Configuration

They support the patented flexible resource allocation system technology, to achieve
optimal distribution of the system backplane, the switching engine bandwidth and
performance. They support the VRPTM 3.x network operating system to provide a broad
range of network features and functions.

Serialized Super Engine

The Salience series switching route engine based on the new generation Crossbar
technology combines L2/3/4 line speed forwarding and a broad range of QOS and ACL
features, which are important assurance for building high-reliability, low-delay core
networks. The S6500 provides serialized engines that can be configured flexibly on
serialized cabinet based on the specific needs of the user.
> 2-10

Ethernet Switch Series

The Salience III is a complete new generation engine for S6500 series switches. It delivers
much high switch capacity with XGBUS technology. It also provides abundant optional
LPU boards including full wire-rate GE LPU boards, PoE LPU boards and 10GE LPU boards.
The Salience III is compliant with all the traditional LPU boards, and can be applied in
S6503 (4 slots), S6506 (7 slots), and S6506R (8 slots). Except Salience III series engines,
there are another two interface boards T12PE, P12TE are designed specifically for S6502,
which could work as switching engines.

Refined User Management

The granularity of bandwidth control can reach 64Kbps. This series offers powerful
user management and authentication, and billing support. It supports CAMSTM
(Comprehensive Access Management Server) system and provides professional user
management and billing solutions. It features built-in IEEE 802.1x authentication server.

Perfect Security Mechanism

Supports standard Radius, and provides Radius+; HWTACACS support; ensures accurate
authentication.

Practical Management System

BRAS

They support SNMP, and can support general NM platforms such as Open View, and the
Quidview, iManager network management systems. They support RMON, and HGMP
cluster management, which make easier equipment management. And SSH promise the
secure management access.

Product Specifications
Attribute

S6502

S6503

S6506

S6506R

Number of service slots

280G

640G

1.6T

1.6T

Backplane capacity
Layer 2 switching

Port-based VLAN (802.1Q)

YES (4K)

Protocolo-based VLAN (IP,IPX

YES

and etc)
MAC table number

16K/module

IEEE802.3x flow control

YES

IEEE802.1p

YES

IEEE802.3ad link-aggregation

YES. MAX 8 ports/link group. MAX. 64 groups

> 2-11

Ethernet Switch Series

Link-aggregation between

YES

boards

Layer 3 switching

LACP

YES

GVRP/GMRP/GARP

YES

Port mirroring

YES

STP

YES

RSTP

YES

MSTP

YES (support 16 instances)

Broadcast storm suppression

YES

Q-in-Q

YES

Jumbo-frame

YES (support MAX 9216 bytes)

Middle frame

YES (support MAX 1600 bytes)

Port auto negotiation

YES

IGMP snooping (v1,v2)

YES

L2 static unicast addresses

YES

Multicast groups

YES

LPM(Longest Prefix Match)

YES

Static route

YES

RIP1/2, OSPF, IS-IS, BGP

YES

VRRP

YES

ARP

YES

Local ARP proxy

YES

DHCP relay

YES

DHCP server

YES

SuperVLAN

YES (up to 64)

SubVLAN

YES (127 SubVLAN per SuperVLAN, totally 1024

SubVLAN per system)

> 2-12

IGMP (v1, v2)

YES

PIM-DM, PIM-SM

YES

ECMP

YES

Switched virtual interfaces

1K

Traceroute

YES

BootP client

No

IPX (software switched)

YES

RADIUS, HWTACACS

YES

Ethernet Switch Series

Security

QoS

802.1x

YES

ACL

YES

SSHv1.5/2.0

YES

Unicast MAC filter

YES

Per-port QoS configuration

YES

ACL capacity

128/port

CAR

YES (granularity: 64Kbps)

Queues per port

Traffic classification

Strict priority queuing;

WRR (Weighted Round Robin) provided through
bandwidth;
SP + WRR;
Supports priority queue based on VLAN port,
IEEE802.1P;
Supports up to 8 FIFO, SP, WRR queues for each
port Remarking of packets based on priority:
Auto classification
Selectable prioritization
Type of Service (ToS)
IEEE 802.1p Class of Service (CoS)

BRAS

IP precedence
Local precedence: physical port, source/destination
MAC address, VLAN information, Ethernet type,
Layer 3 protocol, source/destination IP address,
datagram type, IP layer 4 protocol, IP layer 4 ports
flows identified through Access Control Lists (ACLs)
System

Configuration through CLI

configuration/

Console, Telnet and Modem

system

FTP/TFTP

YES

management

Web management

NO

HGMPv2

YES

Other

Provides system logs

YES

Provides user-level alarming

Optional CF card
Management VLAN

YES

> 2-13

Ethernet Switch Series

Power distribution

AC power distribution box

box

with two inputs, each with a

110-120V/220-240V AC; 50-60Hz; 9.0A/5.0A

separate ON/OFF switch

DC power distribution box

Rated voltage: -60 to -48 V DC

Maximum tolerance: -72 to -36 V DC

PoE input voltage

-46V to -55V; 55.0A

Operating temperature

0oC to 45oC

Operating humidity (non-condensing)

10% to 90%

MTBF (Mean Time Between Failures)

99,999 h

MTTR (Mean Time To Repair)

1h

Weight (maximum in full configuration)

Maximum power consumption (all slots inserted

216,000 h

146,000 h

223,000 h

20kg

50kg

70kg

80kg

AC: 300W

AC: 350W

AC: 650W

AC: 800W

with boards)

DC: 300W

DC: 300W

DC: 550W

DC: 700W

Physical dimensions (W x H x D)

436 x 130.5

436 x 352.8 436 x 486.2 436 x 530.6

x 400 mm

x 480 mm

x 480 mm

x 480 mm

(17.17 x

(17.2 x

(17.2 x

(17.2 x

5.14 x

13.9 x

19.1 x

20.9 x

15.75 in.)

18.9 in.)

18.9 in.)

18.9 in.)

Order Information
S6502
Host Purchase
S6502 Series Ethernet Switches Host Configurations

Description

Quantity Remarks

S6502 Ethernet switch chassis with fan and document, supports PoE
and XGBUS, 2 power cord input. No power module

> 2-14

Optional

Ethernet Switch Series

Optional Switching Route Processing Boards

S6502 Series Ethernet Switches Optional Switching Route Processing Boards

Description

Quantity Remarks

S6502 switch and route processing module with 12-port 10/100/

Optional

Optional

1000BASE-T RJ-45 and 4-port 1000BASE-X SFP

S6502 switch and route processing module with 12-port 1000BASE-X
SFP and 4-port 10/100/1000BASE-T RJ-45

Optional Service Interface Modules

S6502 Series Ethernet Switches Optional Interface Modules

Description

Quantity Remarks

48-port 10/100BASE-TX Ethernet interface module, RJ45

Optional

48-port 100BASE-FX Ethernet optical interface module, SFP Req.

Optional

Enhanced 20-port 10/100/1000BASE-T Ethernet interface module, RJ45

Optional

48-port 10/100/1000BASE-T enhanced Ethernet interface module, RJ45

Optional

Enhanced 20-port 1000BASE-X Ethernet optical interface module, SFP

Optional

Enhanced 1-port 10GE interface module, Xenpak Req.

Optional

48-port 10/100/1000Bae-T Ethernet interface module, RJ45 (PoE)

Optional

48-port 10/100BASE-TX Ethernet interface module, RJ45 (PoE)

Optional

12-port 10/100/1000BASE-T RJ45 and 4-port 1000BASE-X SFP

Optional

12-port 1000BASE-X SFP and 4-port 10/100/1000BASE-T RJ45

Optional

Req.

BRAS

S6502 Series Ethernet Switches Optional Optical Modules

Description

Quantity Remarks

100BASE-FX SFP transceiver, multi-mode (1310nm, 2km, LC)

Optional

100BASE-LX SFP transceiver, single mode (1310nm, 15km, LC)

Optional

100BASE-LH40 SFP transceiver, single mode (1310nm, 40km, LC)

Optional

100BASE-LH80 SFP transceiver, single mode (1550nm, 80km, LC)

Optional

1000BASE-T SFP

Optional

1000BASE-SX SFP transceiver, multi-mode (850nm, 550m, LC)

Optional

> 2-15

Ethernet Switch Series

1000BASE-LX SFP transceiver, single mode (1310nm, 10km, LC)

Optional

1000BASE-LH40 SFP transceiver, single mode (1310nm, 40km, LC)

Optional

1000BASE-LH40 SFP transceiver, single mode (1550nm, 40km, LC)

Optional

1000BASE-LH70 SFP transceiver, single mode (1550nm, 70km, LC)

Optional

1000BASE-LH100 SFP transceiver, single mode (1550nm, 100km, LC)

Optional

1000BASE-LH70 CWDM SFP transceiver, single mode

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

(1530nm, 70km, LC)

1000BASE-LH70 CWDM SFP transceiver, single mode
(1510nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1490nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1470nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1610nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1590nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1570nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1550nm, 70km, LC)
10GBASE-SR XENPAK module, multi-mode
(850nm, 300m, SC)
10GBASE-LR XENPAK module, single mode
(1310nm, 10km, SC)
10GBASE-ER XENPAK module, single mode
(1550nm, 40km, SC)

Optional Power Modules

S6502 Series Ethernet Switches Power Modules

> 2-16

Description

Quantity Remarks

DC power supply module, only for S6502

Optional

AC power supply module, only for S6502

Optional

Ethernet Switch Series

S6503/S6506/S6506R
Host Purchase

S6503/S6506/S6506R Ethernet Switches Host Configurations

Description

Quantity Remarks

S6503 Ethernet switch chassis (DC 48V) with fan, 1 DC power and

Optional

Optional

Optional

Optional

Optional

Optional

document, support PoE and XGBUS, 2 power cord input

S6503 Ethernet switch chassis (AC 110/220V) with fan, 1 AC power
and document, support PoE and XGBUS, 2 power cord input
S6506 Ethernet switch chassis (DC 48V) with fan, 2 DC power and
document, support PoE and XGBUS, 2 power cord input
S6506 Ethernet switch chassis (AC 110/220V) with fan, 2 AC power
and document, support PoE and XGBUS, 2 power cord input
S6506R Ethernet switch chassis (DC 48V) with fan, 2 DC power and
document, support PoE and XGBUS, 2 power cord input
S6506R Ethernet switch chassis (AC 110/220V) with fan, 2 AC power
and document, support PoE and XGBUS, 2 power cord input

Note: S6506R has double main control units.

BRAS

Optional Switching Route Processing Boards

S6503/S6506/S6506R Ethernet Switches Optional Switching Route Processing Boards

Description

Quantity Remarks

S6503,S6506 and S6506R: switch and route processing module,

Optional

Optional

Salience III Edge-96G with 4 1000BASE-X interface, SFP Req.

S6503,S6506 and S6506R: switch and route processing module,
Salience III 384G, with 4 1000BASE-X interface, SFP Req.

> 2-17

Ethernet Switch Series

Optional Service Interface Modules

S6503/S6506/S6506R Ethernet Switches Optional Interface Modules

Description

Quantity Remarks

48-port 10/100BASE-TX Ethernet interface module, RJ45

Optional

48-port 100BASE-FX Ethernet optical interface module, SFP Req.

Optional

Enhanced 20-port 10/100/1000BASE-T Ethernet interface module, RJ45

Optional

48-port 10/100/1000BASE-T enhanced Ethernet interface module, RJ45

Optional

Enhanced 20-port 1000BASE-X Ethernet optical interface module, SFP

Optional

Enhanced 1-port 10GE interface module, Xenpak Req.

Optional

48-port 10/100/1000Bae-T Ethernet interface module, RJ45 (PoE)

Optional

48-port 10/100BASE-TX Ethernet interface module, RJ45 (PoE)

Optional

12-port 10/100/1000BASE-T RJ45 and 4-port 1000BASE-X SFP

Optional

12-port 1000BASE-X SFP and 4-port 10/100/1000BASE-T RJ45

Optional

Req.

S6503/S6506/S6506R Ethernet Switches Optional Optical Modules

Description

Quantity Remarks

100BASE-FX SFP transceiver, multi-mode (1310nm, 2km, LC)

Optional

100BASE-LX SFP transceiver, single mode (1310nm, 15km, LC)

Optional

100BASE-LH40 SFP transceiver, single mode (1310nm, 40km, LC)

Optional

100BASE-LH80 SFP transceiver, single mode (1550nm, 80km, LC)

Optional

1000BASE-T SFP

Optional

1000BASE-SX SFP transceiver, multi-mode (850nm, 550m, LC)

Optional

1000BASE-LX SFP transceiver, single mode (1310nm, 10km, LC)

Optional

1000BASE-LH40 SFP transceiver, single mode (1310nm, 40km, LC)

Optional

1000BASE-LH40 SFP transceiver, single mode (1550nm, 40km, LC)

Optional

1000BASE-LH70 SFP transceiver, single mode (1550nm, 70km, LC)

Optional

1000BASE-LH100 SFP transceiver, single mode (1550nm, 100km, LC)

Optional

1000BASE-LH70 CWDM SFP transceiver, single mode

Optional

Optional

(1530nm, 70km, LC)

1000BASE-LH70 CWDM SFP transceiver, single mode
(1510nm, 70km, LC)

> 2-18

Ethernet Switch Series

1000BASE-LH70 CWDM SFP transceiver, single mode

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

Optional

(1490nm, 70km, LC)

1000BASE-LH70 CWDM SFP transceiver, single mode
(1470nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1610nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1590nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1570nm, 70km, LC)
1000BASE-LH70 CWDM SFP transceiver, single mode
(1550nm, 70km, LC)
10GBASE-SR XENPAK module, multi-mode
(850nm, 300m, SC)
10GBASE-LR XENPAK module, single mode
(1310nm, 10km, SC)
10GBASE-ER XENPAK module, single mode
(1550nm, 40km, SC)

BRAS

Optional Power Modules

S6503/S6506/S6506R Ethernet Switches Power Modules

Description

Quantity Remarks

DC power supply module, for S6503, S6506 and S6506R

Optional

AC power supply module, for S6503, S6506 and S6506R

Optional

Note:
To ensure robustness of the system, the S6500 series switches support load sharing,
plugging/unplugging, fault detection. S6506/S6506R can support 2+1 redundancy
backup of the power modules and ensure the normal working of the system with
only two power modules configured. S6502 and S6503 can support 1+1 redundancy
backup of the power modules and ensure the normal working of the system with only
one power module. And also dual power cords can be supported for S6502/S6503/
S6506/S6506R.

> 2-19

Ethernet Switch Series

Quidway S5600 Series L3 Intelligent Gigabit Ethernet Switches
The Quidway S5600 series switches are innovative switches that powered by Intelligent
Resilient Framework. The innovative highlights of S5600 Series switches are high
stacking bandwidth up to 96G, high-density GE ports, 10GE uplink, and hot-swappable
power suppliers. Quidway S5624P/S5648P can be upgraded to S5624P-PWR/S5648PPWR by replacing the power suppliers. This product series represents the next generation
desktop switches. Quidway S5600 series switches can be used in access layer of Gigabit
Ethernet network or in aggregation layer with high availability as well as scalability.
The Quidway S5600 series switches include 5 models namely S5624P, S5624P-PWR,
S5648P, S5648P-PWR and S5624F.
The Quidway S5624P/S5624P-PWR have 24 Ethernet 10/100/1000 Base-T ports, 4
1000BASE-X SFP (combo), 2 dedicated stacking ports and one expansion slot. S5624PPWR supports PoE, which transmit power over Ethernet to endpoint-devices.
The Quidway S5648P/S5648P-PWR have 48 Ethernet 10/100/1000Base-T ports, 4
1000BASE-X SFP (combo), 2 dedicated stacking ports and one expansion slot. S5648PPWR model supports PoE, which transmit power over Ethernet to endpoint-devices.
The Quidway S5624F has 24 Ethernet 1000Base-X SFP ports, 4 10/100/1000Base-T ports
(combo), 2 dedicated stacking ports and one expansion slot.

S5624P/S5624P-PWR

S5648P/S5648P-PWR

> 2-20

S5624F

Ethernet Switch Series

Product Specifications
Innovative IRF Technology
The Quidway S5600 Series adopts an innovative technology, Intelligent Resilient
Framework, so bandwidth can be expanded and upgraded smoothly. With IRF
technology, the S5600 series switches can be stacked up to 8 units, forming a distributed
switching fabric with up to 96G stacking bandwidth between any two units. From the
management and configuration perspective, the distributed switches act as one switching
device and run as one logical entity, while from a performance perspective, each switch
in the IRF framework can make local forwarding decision in layer2 and layer3, the unit in
the fabric can backup each other.
Most importantly, IRF can provide the features that users are pressing for: reliability,
scalability and manageability.

New Wire-speed, Multi-layer Switch

The Quidway S5600 series switches have 88G or 136G switching capacity and
65.47Mpps or 101.18Mpps throughput. The Quidway S5600 series switches offer
L2/L3 wire-speed switching capacity. The product series supports maximum 448GE or
384GE+16*10GE, offers 10GE uplink speed, satisfies the most demanding. The hardware

BRAS

supports L3 wire-speed switching, and is able to identify and process the traffic flows
from L4-L7. With independent packet filters, all ports distinguish different flows and
forward them with corresponding priority.

PoE Supply Feature

The Quidway S5600 series supply PoE function for endpoint devices, providing power
over copper Ethernet cable to endpoint (such as IP phone, WLAN AP). As IEEE802.3af
compliant PSE (Power Sourcing Equipment), the Quidway S5600 PWR series can provide
up to 15.4W/port of power on every 10/100/1000 port. With PoE and Voice Vlan
technology, the S5600 can provide an ideal solution for a converged voice and data
network.

> 2-21

Ethernet Switch Series

Flexible Security Control Policies
Based on the longest-prefix matching routing policy, This function can prevent the attack
of some virus or worm, such as Code Red and Worm Blaster.
The S5600 series switches support centralized MAC and 802.1X authentication. It
verifies users legality when they access the network. In addition, the S5600 can prevent
unauthorized access the network by binding IP, MAC and port in any combination. The
S5600 series switches can support dynamic Vlan assignment which allows identity-based
security policy regardless of where the user is connected.
The S5600 series switches support Disconnect Unauthorized Device (DUD) authentication.
The switch filters out all the traffic of a connected device once it detects the device is
unauthorized. The S5600 series switches support SSH.

High Reliability
The Quidway S5600 switches are IRF enabled. With IRF, there will be redundancy in the
stacking fabric not only in the control plane but also in the data plane. There is no single
point of failure in a fabric.
The Quidway S5600 supports STP/RSTP, and Multi-Vlan based MSTP, which greatly
improves the reliability of the whole networks.
The Quidway S5600 series switches support VRRP and can build a VRRP backup group
with other VRRP supported L3 switches.
The Quidway S5600 supports up to 4 ECMP (Equal Cost Multi-path Protocol) routing,
which can be used for load balance and routing redundancy.
Power supply can be AC or RPS DC to meet different customers demands. Power module
can be hot-swappable.

Abundant QoS Policies

The Quidway S5600 supports L2 to L7 flow classification. The rules can be based on
source/destination MAC address, source/destination IP address, TCP/UDP ports and
protocols. The S5600 series switches can support 100 flows rule per port.

> 2-22

Ethernet Switch Series

The Quidway S5600 series switches support flexible queue scheduling algorithms, which
can be defined based on port and queue at the same time. Strict Priority (SP), Weighted
Round Robin (WRR), SP + WRR can be configured for queue scheduling. Congestion
avoidance algorithm can support 8 queues.
The Quidway S5600 series switches support Committed Access Rate (CAR) which has a
granularity of 64Kbps for GE port, and 1Mbps for 10GE port.

Diverse Management Mode

The Quidway S5600 series switches support Simple Network Management Protocol
(SNMP). The SNMPv1/v2c/v3 are all supported. They can be managed by general
network management platform such as OpenView, and Quidview network management
system. In addition, Command Line Interface (CLI), Web network management and telnet
are supported.

Product Features
S5624P S5624P-PWR S5648P S5648P-PWR

Fixed port

24 10/100/1000Base-T

48 10/100/1000Base-T,

24 1000Base-X SFP ports,

ports, 4 1000BASE-X

4 1000BASE-X SFP

4 10/100/1000BASE-

SFP (Combo) ports, and

(Combo) ports, and 2

T(Combo), and 2

2 dedicate high speed

dedicate high speed

dedicate high speed

stacking ports

stacking ports

stacking ports

Expansion slot
Expansion module

S5624F

BRAS

Port configuration

(1) 8 ports 1000Base-X SFP module

(2) 1 port Xenpak 10GE Module
(3) 2 ports XFP 10GE module

MTBF (Years)
MTTR (hours)
Performance

32.30

23.99

32.30

23.99

23.99

<2

<2

<2

<2

<2

Switch capacity: 88Gbps Switch capacity: 136Gbps Switch capacity: 88Gbps

Throughput: 65.47Mpps Throughput: 101.18Mpps Throughput: 65.47Mpps

Layer 2 feature
Flash

16M

16M

16M

16M

16M

> 2-23

Ethernet Switch Series

Vlan

4k Vlan (IEEE802.1Q)
Voice Vlan
Port-based Vlan

Link aggregation

Link aggregation through command lines

Dynamic link aggregation through LACP
Link aggregation across switches
Up to eight GE or four 10GE ports in each aggregation group
Up to 32 aggregation groups(each aggregation port must be of the same
speed)

Mirroring

Many-to-one port mirroring (multiple monitored ports to one monitor port)

Traffic mirroring

MAC address table

Address self-learning
IEEE 802.1D standard
Up to 16K MAC addresses

STP/RSTP/MSTP

STP
RSTP
MSTP

PoE
Flow control

No

Yes

No

Yes

IEEE 802.3x (full duplex)

Back-pressure based flow control (half duplex)

IRF

Up to 8 units in one stacking group

Up to 448GE or 384GE and 16 10GE in one stacking group
Stacking bandwidth :96Gbps

Layer 3 feature
IP routing

Static
RIPv1/v2
OSPF
4 ECMP(Equal Cost Multi-Path)

IP Routing Table

16K

Multicast

256 multicast groups

IGMP
IGMP Snooping
PIM-DM
PIM-SM

> 2-24

No

Ethernet Switch Series

Network protocol

DHCP Relay
NTP
ARP
VRRP

Management

CLI
Telnet
Console
SNMPv1/v2c/v3
RMON1/2/3/9 groups of MIBs
Huawei Quidview NMS
Web-based management
System logging
Hierarchical alarming

Quality of Service

Committed Access Rate (CAR), GE port with granularity of 64 Kbps and

(QoS)/

10GE port with the granularity of 1 Mbps

Access Control List

Eight output queues on each port

(ACL)

Three scheduling algorithms per port and scheduling algorithms can be:
strict priority (SP), weighted round robin (WRR) or SP + WRR
Remapping 802.1p or DSCP preference values of packets
Packet filter from layers 2 to layer 4

BRAS

Time-based QoS
Profile-based QoS
Security

Hierarchical user management and password protection

IEEE 802.1x authentication
Disconnect Unauthorized Device (DUD) authentication
SSH1.5
Denial of Service (DoS) attack prevention
MAC address authentication
Portal authentication
Packet filtering
Port isolation

Hardware configuration
Outline dimension

440mm x 43.6mm x 420mm (W x H x D)

Weight

<7.5Kg

<8Kg

<7.5Kg

> 2-25

Ethernet Switch Series

Power

PSL130-AD: 130 W system output, AC/RPS DC input

module

PSL480-AD24P: 180 W system output + 300 W PoE output with 24 ports,

AC/RPS DC input
PSL180-AD: 180 W system output, AC/RPS DC input
PSL480-AD48P: 180 W system output + 300 W PoE output with 48 ports,
AC/RPS DC input

Input

AC:

voltage

Rated voltage: 100V to 240V, 50 Hz to 60Hz

Maximum tolerance:90V to 264V, 50 Hz to 60Hz

Power

DC:

supply

Rated voltage: -48V to -60V

Maximum tolerance: -36V to -72V
Input DC

The S5624P-PWR/S5648P-PWR must use the external PoE PSU RPS1000-A

voltage of

as its DC input, but not the -48VDC power supply generally available in the

PoE power

equipment room. Otherwise, the device may be damaged.

module

DC input of the PoE power module:

Rated voltage: -53.5 V
Max voltage range: -52 to -55 V

RPS power
Maximum power

Supported
170W

consumption

DC: 540W

230W

AC: 560W

Operating temperature

0C to 45C

Operating humidity

10% to 90%

DC: 970W

170W

AC: 640W

(non-condensing)

Order Information
S5600 Series Host Configurations

Description

S5624F (PSL130-AD dual input power module, 220/110VAC, -48VDC to -60VDC)

S5624P (PSL130-AD dual input power module, 220/110VAC, -48VDC to -60VDC)
S5624P-PWR (PSL480-AD24P dual input PoE power module, 220/110VAC,-52VDC to
-55VDC)
S5648P (PSL180-AD dual input power module, 220/110VAC, -48VDC to -60VDC)
S5648P-PWR (PSL480-AD48P dual input PoE power module, 220/110VAC, -52VDC to
-55VDC)

> 2-26

Ethernet Switch Series

S5600 Optional Interface Card Modules

Description

8-port 1000Base-X SFP interface card

1-port 10GE XENPAK interface card
2-port 10GE XFP interface card

S5600 Optical Modules

Description

1000Base-SX-SFP module
1000Base-LX-SFP module
1000Base-LH30-SFP module
1000Base-LH40-SFP module
1000Base-LH70-SFP module
1000Base-T-SFP module
10GBase-SR-XFP module
10GBase-LR-XFP module
10GBase-SR-XENPAK module

BRAS

10GBase-LR-XENPAK module
10GBase-ER-XENPAK module

For more information, please visit www.huawei.com

> 2-27

Ethernet Switch Series

Quidway S5000 Series L2 Intelligent Gigabit Ethernet Switchs

The Quidway S5000 series intelligent switches are L2 wire-speed Gigabit Ethernet
switching products providing high capacity and more features. With the highperformance ASIC and flexible modular structure, they provide L2~L7 intelligent flow
classification and ACL policies. They implement complete service control and user
management, so they are suitable for the access layer switches in enterprise networks
and MANs.
The S5000 series Gigabit switches comprise S5012G, S5012T and S5024G. The Quidway
S5000 switches are used for Gigabit L2 convergence and the Gigabit access application with
high QoS requirement.
The Quidway S5012G Ethernet switch is a box-type equipment of 1U high. It can
be installed in the 19 rack and can run independently. The system provides 12
10/100/1000BASE-T auto-negotiation Ethernet ports (RJ-45 connectors) and 4 Combo
Gigabit Interface Converters (GBICs).
The Quidway S5012T Ethernet switch is a box-type equipment of 1U high. It can be
installed in the 19 rack and can run independently. The system provides 10 GBIC ports,
2 10/100/1000BASE-T Ethernet ports and 2 Combo 10/100/1000BASE-T ports.
The Quidway S5024G Ethernet switch is a box-type equipment of 1U high. It can
be installed in the 19 rack and can run independently. The system provides 20
10/100/1000BASE-T Ethernet ports (RJ-45 connectors) and 4 GBIC ports.

Note:
Combo indicates that the ports from a combination, out of which only one can be
used. The last 4 electrical interfaces of S5012G form a combination with 4 GBIC
ports, while the last 2 GBIC ports of S5012T form a combination with the first 2
electrical interfaces.

> 2-28

Ethernet Switch Series

S5012G

S5012T

S5024G

Product Specifications
BRAS

Full Wire-speed Multi-layer Switching

The S5000 series intelligent switches perform switching at wire-speed, so that they can
forward packets rapidly even under a heavy load. Their hardware can identify and process
the application traffic flows from L2~L7. All ports have an independent data packet filter,
and differentiate different application flows for different management and control.

Comprehensive Security Control Policies

The Quidway S5000 series support 802.1x authentication to identify users who attempt
to access the network. They can also prevent unauthorized access to the network by
binding any combination of MAC, IP, VLAN and PORT.
The Quidway S5000 series support multiple ACL policies to set the authorities for users
to access the network resource, so that access to the network can be controlled.

Abundant QoS Policies

The Quidway S5000 series intelligent L2 switches support L2~L7 complex flow
classification based on the source MAC address, the destination MAC address, the source
> 2-29

Ethernet Switch Series

IP address, the destination IP address, the port, or protocol. They provide three particular
queue scheduling algorithms: Strict-Priority Queue (PQ), Weighted Round Robin (WRR),
and Delay bounded WRR.
They support Committed Access Rate (CAR), and limit the traffic speed by the 1Mbit/s
granularity.

High Reliability
The Quidway S5000 series support STP/RSTP and multi-VLAN based MSTP, thus greatly
improving the redundant backup for links and the fault tolerance capability, so that the
network can run stably.

Product Features
Specifications

S5012G

S5012T

S5024G

Performance

Port capacity: 24Gbps

Port capacity: 48Gbps

Throughput: 17.8Mpps

Throughput: 35.6Mpps

Layer 2 switching

> 2-30

MAC address

16K MAC addresses

Latency

<10s

VLAN

4K VLANs (IEEE 802.1Q)

Supports 4K VLAN Pass-through

GVRP (GARP VLAN Registration Protocol)

Supports VLAN isolate

Supports VLAN trunk

Link

Supports FE (Fast Ethernet) port aggregation

aggregation

Supports GE (Gigabit Ethernet) port aggregation

Supports maximum of 6 groups aggregation ( Max. 8 ports per group) of S5012G

and S5012T

Supports maximum of 12 groups aggregation ( Max. 8 ports per group) of S5024G

Traffic control

IEEE 802.3x full-duplex flow control

Back pressure flow control for half-duplex

STP/RSTP/

IEEE 802.1D Spanning Tree Protocol (STP)

MSTP

IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)

Ethernet Switch Series

IEEE 802.1s Multi Spanning Tree Protocol (MSTP)

Multicast

256 Multicast routes

IGMP (Internet Group Management Protocol) snooping on Layer 2 interfaces

GMRP (GARP Multicast Registration Protocol)

Network

DHCP Snooping (Dynamic Host Configuration Protocol Snooping)

protocol

ARP

Convergence
Priority queues Eight hardware queues per port
QoS(Quality of Supports 3072 flow rules of S5024G
Service)/ACL

Supports 1536 flow rules of S5012G and S5012T

(Access Control Flow-based QoS profiles

List)

Ingress and egress

DSCP (DiffServ Code Point)

IEEE 802.1p Class of Service (CoS)

Flows identified through Access Control Lists (ACLs)

Minimum and maximum thresholds:
1Mbit/s increments

128 flows per port

Supports flexible queuing algorithms:

PQ (Priority Queuing)

WRR (Weighted Round Robin)

BRAS

Security
Network login

IEEE 802.1X user authentication

Supports proxy detection of double network cards

Supports ACL filter

Management
System

Supports CLI (Command Line Interface) configuration mode

configuration

Supports configuration via the console (control console) port

and

Supports local/remote configuration via Telnet

management

Supports remote configuration via modem dial-up

Supports system configuration with SNMPv1/v2/v3

Supports RMON (Remote Monitoring)

Supports Quidview and network management system

Supports WEB management system

Supports hierarchical alarms

> 2-31

Ethernet Switch Series

Supports system log

Supports HGMPv2 (Huawei Group Management Protocol)

System

Supports FTP and TFTP

Supports HGMPv1
maintenance
Hardware Configuration
Attribute

S5012G

S5012T

S5024G

Port

(1) 12 10/100/1000M

(1) 2 10/100/1000M

(1) 20 10/100/1000M

configuration

Base-T slots

Base-T slots

Base-T slots

(2) 4 Combo GBIC slots

(2) 2 Combo 10/100/1000M (2) 4 GBIC slots

(3) 1 console slot

Base-T slots

(3) 10 GBIC slots

(4) 1 console slot

Extended

1000BASE-SX-GBIC module

module

1000BASE-LX-GBIC module

1000BASE-LH30-GBIC module

1000BASE-LH40-GBIC module

1000BASE-ZX70-GBIC module

1000BASE-STACK-HSSDC-GBIC module

Outline

44*436*240

(3) 1 console slot

dimensions
(mm) HxWxD
Weight

4kg

RPS

Support

redundancy
power
Input voltage

AC : 100V ~240V, 50/60Hz

DC: -48 ~ -60V

Maximum

60W

system power
consumption

> 2-32

Environment

Working temperature: 0C ~45C

Storage temperature: -40C ~ 70C

Relative humidity: 10%~90%, non-condensing

6kg

Ethernet Switch Series

Order Information
Host Configurations

Description

S5012G-DC host (-48V, DC)

S5012G host (220V, AC)
S5012T-DC host (-48V, DC)
S5012T host (220V, AC)
S5024G-DC host (-48V, DC)
S5024G host (220V, AC)

Optional Interface Module Configurations

Description

1000BASE-SX-GBIC module
1000BASE-LX-GBIC module
1000BASE-LH30-GBIC module
1000BASE-LH40-GBIC module
1000BASE-ZX70-GBIC module

BRAS

1000BASE-STACK-HSSDC-GBIC module

For more information, please visit www.huawei.com

> 2-33

Ethernet Switch Series

Quidway S3900 Series Switches
The Quidway S3900 Series Ethernet Switches are a new line of premier multilayer
switches that entirely fulfills the enterprise customers requirement of designing and
implementing a unified, highly resilient network. One of the most important and
innovative highlight of S3900 Series Ethernet Switches is the IRF technology (Intelligent
Resilient Framework) which represents the most advantage stackable technology. IRF
technology, which is a completely innovative technology, allows network managers to
build affordable networks with high resilient, flexibility and exceptional performance.

S3928TP-SI

S3928F-EI

S3928P-SI / S3928P-EI / S3928P-PWR-EI

S3952P-SI / S3952P-EI / S3952P-PWR-EI

> 2-34

Ethernet Switch Series

With flexible software options, the Quidway S3900 Series switch is available in the
Standard Software Image (SI) and the Enhanced Software Image (EI), offering a costeffective path for meeting current and future service requirements from enterprises and
commercial businesses. The SI feature set includes advanced quality of service (QoS), ratelimiting, access control lists (ACLs), static and Routing Information Protocol (RIP) routing,
and basic IRF function. In addition to these features, the EI feature set provides a richer
set of enterprise-class features such as advanced hardware-based IP unicast, multicast
routing, and advanced IRF functionality.

Product Specifications
IRF Technology
Intelligent Resilient Framework (IRF) is an innovative resilient network technology that
allows enterprise customers to design and implement high availability Fast Ethernet core
and aggregation backbones that are affordable and provide exceptional performance,
scalability and availability. With IRF technology, the Quidway S3900 Series switches
can be interconnected together to behave as a single logical switching entity called
a Distributed Fabric. From management and configuration perspective, the Fabric
appears as a single device; while from a performance perspective, each switch in the

BRAS

Distributed Fabric can make its own forwarding decisions, both a Layer 2 and Layer 3
for traffic that appears on its ports.

Distributed Device Management (DDM)

Distributed Device Management is the control system of IRF technology, responsible
for distributing management and control information across the IRF Distributed Fabric.
DDM allows the entire IRF Distributed Fabric to be managed as a single logical entity.
Management tasks are all performed across the Distributed Fabric, minimizing complexity
and administration overheads. In addition, the management IP address is shared across
all units in the IRF Distributed fabric, ensuring continuous device management and
monitoring, in the event of an outage in one of the interconnected switches.

> 2-35

Ethernet Switch Series

Distributed Resilient Routing (DRR)
Distributed Resilient Routing, provided by Enhanced Image, is an advanced routing
implementation that allows multiple interconnected switches in an IRF Distributed Fabric
to behave as a single active routing entity. Unlike resilient Layer 3 implementations such
as VRRP and HSRP, DRR intelligently distributes the routing load across all switches in
the Distributed Fabric to optimize routing performance and make full use of bandwidth
capacity.

Distributed Link Aggregation (DLA)

Distributed Link Aggregation, provided by Enhanced Image, allows networks and IRF
Distributed Fabrics to be coordinated with switches at edge of the network. With the
ability to multi-home across different units in the IRF Distributed Fabric, the availability
of the entire network is dramatically increased. Traffic is forwarded across all links in the
Aggregated Link to the fabric to optimize the use of available capacity. DLA guarantees
high levels of resiliency since failure in one of the members of the Aggregated Link results
in automatic redistribution of traffic across the remaining links.

Excellent PoE (Power over Ethernet) Supply Function

The Quidway S3900 series switches support PoE function for the LAN switching
infrastructure, which provides power over a copper Ethernet cable to an endpoint
(Powered Device). With the Quidway S3900, up to 15.4W/port of power on every
10/100 port ensures maximum device support for IP telephony and wireless LAN
deployments. As PSE (Power Sourcing Equipment) devices, the Quidway S3900 series are
802.3af compliant PoE switches. With PoE and Voice VLAN technology, the Quidway S3900
series switches can supply a perfect solution for a converged voice and data network.

Full Wire-speed, Multi-layer Switching

The Quidway S3900 series offer L2/L3 wire-speed switching capability for all ports
of the switch. The system offers 4 GE to meet one piece of equipments requirement
for multiple Gigabit uplinks and for access to the Gigabit server, thus greatly saving
the equipment investment. The Hardware supports L3 wire-speed switching, and is
able to identify and process the application traffic flows from L2~L7. All ports have an
independent data packet filter, and distinguish different application flows for different
management and control.
> 2-36

Ethernet Switch Series

Flexible Security Control Policies
Based on the longest match routing policy, Quidway S3900 series forward the
packets one by one so that the packets acquire the same forwarding performance. This
function can guard the network against the attack by Code Red and Worm Blaster, thus
guaranteeing the equipment security.
The Quidway S3900 series support 802.1x authentication to identify users who attempt
to access the network. They can also prevent unauthorized access to the network by
binding any combination of MAC, IP, VLAN and PORT.
Secure Shell (SSH) offers security information protection and powerful authentication
function to safeguard the Ethernet switch from attacks such as IP address spoofing and
plain text cipher interception.

High Reliability
The Quidway S3900 series support STP/RSTP and multi-VLAN based MSTP, thus greatly
improving the redundant backup for links and the fault tolerance capability, so that the
network can run stably.
The Quidway S3900 series support the optional RPS (Redundant Power Supply, provided
by Enhanced Image) and can provide power redundancy for four pieces of equipments,

BRAS

thus improving the fault tolerance capability and normal network operation duration.
The Quidway S3900 series support VRRP (provided by Enhanced Image), and can build a
VRRP backup group with other L3 switches. They can build a redundant route topological
structure when a fault occurs to guarantee communication continuity and reliability,
keeping network stable status.
The Quidway S3900 series implement redundant backup routes by configuring multiple
equivalent routes. When the active uplink route becomes faulty, it will automatically
switch to the next backup router, thus achieving multi-level backup for uplink routes.

Abundant QoS Policies

The Quidway S3900 series support L2~L7 complex flow classification based on source
MAC address/destination MAC address/source IP address/destination IP address/ ports/
protocols.

> 2-37

Ethernet Switch Series

set on the basis of port and queue at the same time. They support Strict Priority (SP),
Weighted Round Robin (WRR), Weighted Fair Queuing (WFQ), SP+WRR, and SP+WFQ;
8 priority queues and 2 discarding priorities; WRED congestion avoidance algorithm and
port traffic shaping.
The Quidway S3900 series support Committed Access Rate (CAR), and limit the traffic
speed in the 64Kbit/s granularity.

Diversified Management Modes

The Quidway S3900 series support Simple Network Management Protocol (SNMP)
and can be managed by general network management platform such as Open View,
and the Quidview network management system. In addition, Command Line Interface
(CLI), Web network management, TELNET, and HGMP cluster management make the
equipment management more convenient.

Product Features
Port

S3928P-SI

S3928TP-SI

S3928F-EI

Configuration S3928P-EI

S3952P-EI

S3952P-

S3928P-PWR-EI

PWR-EI

Fixed port

(1) 24 10/100M Ethernet (1) 24 10/100M

(1) 24 100M SFP

(1) 48 10/100M

ports

Ethernet ports

optical ports

Ethernet ports

(2) 1 console slot

(2) 2 1000M BASE (2) 2 1000M BASE-T (2) 1 console

-T ports

ports

(3) 1 console slot

(3) 1 console slot

Extended slot

4 1000M SFP extended

2 1000M SFP extended module slots

4 1000M

module slots

SFP extended

> 2-38

S3952P-SI

Extended

(1) SFP-T

1000M SFP

(2) SFP-SX (0.55km)

module

(3) SFP-LX (10km)

(4) SFP-LH30 (30km)

(5) SFP-LH40 (40km)

(6) SFP-ZX70 (70km)

slot

module slots

Ethernet Switch Series

Port capacity

12.8 Gbps

17.6 Gbps

Forwarding

9.53 Mpps

11.78 Mpps

rate
SDRAM

64 M

Buffer

32 M

Layer 2

S3900-SI

S3900-EI

Switching
Address self-learning

IEEE 802.1D standard

16K MAC addresses

Up to 64 static MAC addresses

Up to 256 static MAC addresses

Flash

8M

16M

Latency

<10s

VLAN

4K VLANs (IEEE 802.1Q)

Voice VLAN

Supports Port-based VLAN

N/A

BRAS

MAC address

Supports Protocol-based VLAN

Super VLAN

QinQ

GVRP (GARP VLAN Registration Protocol)

Link

Dynamic link aggregation through

Dynamic link aggregation through LACP

aggregation

Link Aggregation Control Protocol

and across devices

(LACP)

Manual link aggregation through command lines

Aggregation of FE/GE ports

Up to 8 FE or 4 GE ports in each aggregation

Flow control

IEEE 802.3x full-duplex flow control

Back pressure flow control for half-duplex

STP/RSTP/

IEEE 802.1D Spanning Tree Protocol (STP)

MSTP

IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)

IEEE 802.1s Multiple Spanning Tree Protocol instances (MSTP)

> 2-39

Ethernet Switch Series

Stack

Supports maximum of 8 units

Supports maximum bandwidth of 4G

Extends to maximum of 384FE or 16GE

N/A

IRF Stack supports DLA. DLA supplies the

capacity that multiple switches in a stack

can create a link aggregation connection.

Loss of an individual switch will not affect

connectivity for the other switches

RPS

N/A

Support

Layer 3 Switching
IP routing

Static routing

RIP-1/2 (Routing Information Protocol-1/2)

1K IP Routes

6K IP Routes

OSPF (Open Shortest Path First)

3 ECMP (Equal Cost Multipath)

Policy-based Routing

Multicast

256 Multicast Numbers

IGMP (Internet Group Management Protocol) snooping on Layer 2 interfaces

N/A

IGMPv1

IGMPv2

PIM-DM

PIM-SM

MSDP (Multicast Source Discovery

Protocol)

Network

DHCP Relay (Dynamic Host Configuration Protocol Relay)

protocol

DHCP Client

ARP (Address Resolution Protocol)

NTP (Network Time Protocol)

BOOTP (Bootstrap Protocol)

N/A

VRRP (Virtual Router Redundancy

Protocol)

Web cache

Support

Convergence
Priority queues 8 hardware queues per port

> 2-40

Ethernet Switch Series

QoS(Quality of Limitation on packet receiving/sending rate on ports;

Service) /ACL

Packet redirection;

(Access Control Supports CAR (Committed Access Rate) with the granularity of 64 kbps;
List)

WRED (Weighted Random Early Detect/Discard);

Five scheduling algorithms that can be set based on port and queue at the same

time:

SP(Strict Priority)

WRR (Weighted Round Robin)

WFQ (Weighted Fair Queue)

SP + WRR

SP + WFQ

Packet tagging based on 802.1p or DSCP preference;

Packet filter at the layers 2 through 4, providing filtering based on source/destination

MAC address, source/destination IP address, port, protocol, VLAN, VLAN range,

MAC address range, or invalid frame;

Time range setting;

QoS profile management, allowing QoS service scheme customization.

Security
IEEE 802.1X user authentication

SSH (Secure Shell)

N/A

BRAS

Network login

Support Portal authentication

Management
System

Supports CLI (Command Line Interface) configuration mode

configuration

Supports configuration via the console (control console) port

and

Supports local/remote configuration via Telnet

management

Supports remote configuration via modem dial-up

Supports system configuration with SNMPv1/v2/v3

Supports RMONv1(Remote Monitoring), 1/2/3/9 groups of MIBs

Supports Quidview network management system

Supports WEB management system

Supports hierarchical alarms

Supports system log

Supports HGMPv2 (Huawei Group Management Protocol)

System

Detailed alarm/debug information

maintenance

Supports Ping and Traceroute

> 2-41

Ethernet Switch Series

Supports remote maintenance via Telnet

Hardware

S3928P-SI

S3952P-SI

S3928P-PWR-EI

configuration

S3928TP-SI

S3952P-EI

S3952P-PWR-EI

S3928P-EI

S3928F-EI

Outline

43.6mm*440mm*260mm

43.6mm*440mm*420mm

3.5kg

S3928P-PWR-EI: 5.8kg

dimensions
(mm)
(H x W x D)
Weight

4kg

Input voltage

The S3900-SI series are AC-powered. The S3900-EI series can be AC-powered

and DC-powered.

AC: 100V ~ 240V, 50/60Hz

DC: -48 ~ -60V DC

Maximum

40W (except S3928F-EI)

system power 65W (S3928F-EI)

> 2-42

S3952P-PWR-EI: 6.2kg

50W

S3928P-PWR-EI

DC: 430W/AC: 450W

consumption

S3952P-PWR-EI

DC: 820W/AC: 465W

Environment

Operation temperature: 0C ~45C

Storage temperature: -40C ~ 70C

Relative humidity: 10%~90%, non-condensing

Ethernet Switch Series

Order Information
S3900 Series Host Configurations

Description

S3928P-SI host (AC)

S3928TP-SI host (AC)
S3952P-SI host (AC)
S3928P-EI host (AC & DC)
S3952P-EI host (AC & DC)
S3928P-PWR-EI host (AC & DC)
S3952P-PWR-EI host (AC & DC)
S3928F-EI host (AC & DC)

S3900 Optional 1000M SFP Module Configurations

Description

1000BASE-SX-SFP module

BRAS

1000BASE-LX-SFP module
1000BASE-LH30-SFP module
1000BASE-LH40-SFP module
1000BASE-ZX70-SFP module
1000BASE-T-SFP module

For more information, please visit www.huawei.com

> 2-43

Ethernet Switch Series

Quidway S3500 Series Security Intelligent Switches
The Quidway S3500 series routing switches are box-type layer 3 wire-speeds Ethernet
switches with 10/100M aggregation in service provider data centers, server cluster,
wiring cabinet and metropolitan area networks. The Quidway S3500 series high
performance Ethernet switches include such types as: S3528G, S3528P, S3552G,
S3552P and S3552F. Running on the VRP (Versatile Routing Platform) network operating
system, the Quidway S3500 series switches provide abundant routing protocols,
VLAN switching, traffic management, QoS, powerful bandwidth control and user
management.

S3528G

S3552G/3552P

S3528P

S3552F

Product Specifications
Full Wire-speed, Multi-layer Switching
The Quidway S3500 series offer a 32Gbps bandwidth to provide the L3 wire-speed
switching capability for all ports of the switch. The system offers 4 GE to meet a single
piece of equipments requirement for multiple Gigabit uplinks and for access to the
Gigabit server, thus greatly saving the equipment investment. The equipment provides a
maximum of 512 subnet route interfaces. Hardware supports L3 wire-speed switching,
and is able to identify and process the application traffic flows from L4 to L7. All ports
have an independent data packet filter, and distinguish different application flows for
different management and control.
> 2-44

Ethernet Switch Series

Comprehensive Security Control Policies
Based on the longest match routing policy, the Quidway S3500 series forward the
packets one by one so that the packets acquire the same forwarding performance.
This can guard the network to against the attack by Code Red and Worm Blaster, thus
guaranteeing the equipment security.
The Quidway S3500 series support 802.1x and Web Portal authentication to identify
users who attempt to access the network. They can also prevent unauthorized access to
the network by binding any combination of MAC, IP, VLAN and PORT.

High Reliability
The Quidway S3500 series support STP/RSTP and multi-VLAN based MSTP, thus greatly
improving the redundant backup for links and the fault tolerance capability, so that the
network can run stably.
The Quidway S3500 series support the optional Redundant Power System (RPS) and
can provide power redundancy for four pieces of equipments, thus improving the fault
tolerance capability and normal network operation duration.
The Quidway S3500 series support Virtual Route Redundancy Protocol (VRRP), and can
build a VRRP backup group with other L3 switches. They can build a redundant route
topological structure when a fault occurs to guarantee communication continuity and

BRAS

reliability, so that the network can keep stable.

The Quidway S3500 series implement redundant backup routes by configuring multiple
equivalent routes. When the active uplink route becomes faulty, it will automatically
switch to the next backup router, thus achieving multi-level backup for uplink routes.

Abundant QoS Policies

The Quidway S3500 series support L2~L7 complex flow classification based on the
source MAC address, the destination MAC address, the source IP address, the destination
IP address, the port, or protocol. They can support 1K flow rules.
The Quidway S3500 series support flexible queue scheduling algorithms, which can be
set on the basis of port and queue at the same time. They support Strict Priority (SP),
Weighted

> 2-45

Ethernet Switch Series

Round Robin (WRR), and SP+WRR; 8 priority queues and 3 discarding priorities; WRED
congestion avoidance algorithm and port traffic shaping.
The Quidway S3500 series support Committed Access Rate (CAR), and limit the traffic
speed in the 8Kbit/s granularity.

Diversified Management Modes

The Quidway S3500 series support Simple Network Management Protocol (SNMP),
the general network management platform such as Open View, and the Quidview
network management system. They support Command Line Interface (CLI), Web network
management, TELNET, and HGMP cluster management, so that equipment management
becomes more convenient.

Product Features
Specifications

S3528G/S3528P

S3552G/S3552P/S3552F

Performance

Port capacity: 12.8Gbps

Port capacity: 17.6Gbps

Throughput: 9.6Mpps

Throughput: 13.2Mpps

Layer 2 Switching
MAC address

12K MAC addresses

Latency

<10s

VLAN

4K VLANs (IEEE 802.1Q)

GVRP (GARP VLAN Registration Protocol)

Supports Port-Based VLAN

Link aggregation

Supports FE (Fast Ethernet) port aggregation

Supports GE (Gigabit Ethernet) port aggregation

Supports maximum of 7 groups aggregation ( Max. 8 ports per group)

Traffic control

IEEE 802.3x full-duplex flow control

Back pressure flow control for half-duplex

STP/RSTP/MSTP

IEEE 802.1D Spanning Tree Protocol (STP)

IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)

IEEE 802.1s Multiple Spanning Tree Protocol instances (MSTP)

Layer 3 Switching

> 2-46

IP routing

512 Route Interfaces

4K IP Routes

Ethernet Switch Series

Static Routing

RIPv1/v2 (Routing Information Protocol); supports Split Horizons

OSPFv1/v2 (Open Shortest Path First)

BGP4 (Boarder Gateway Protocol)

ECMP (Equal Cost Multipath)

Multicast

256 Multicast Routes

IGMP (Internet Group Management Protocol) snooping on Layer 2

interfaces

IGMPv1/v2

GMRP (GARP Multicast Registration Protocol)

PIM-DM (Protocol Independent Multicast-Dense Mode)

PIM-SM (Protocol Independent Multicast-Sparse Mode)

Network protocol

DHCP Relay (Dynamic Host Configuration Protocol Relay)

TCP/IP protocol stack

ARP

Resilience

VRRP (Virtual Router Redundancy Protocol)

Convergence
Eight hardware queues per port

QoS(Quality of Service)/

Supports 1K flow rules

ACL(Access Control List)

Flow-based QoS profiles

Ingress and Egress

DSCP (Diffserv Code Point)

Type of Service (ToS)

Local precedence: physical port, source/destination MAC address,

VLAN information, Ethernet type, Layer 3 protocol, source/destination IP

address, DSCP, datagram type

Supports CAR (Committed Access Rate)

Flows identified through Access Control Lists (ACLs)

Minimum and maximum thresholds:

8Kbit/s increments

128 flows per GE port

64 flows per FE port

WRED (Weighted Random Early Detect/Discard)

Supports flexible queuing algorithms:

SP (Strict Priority) Queuing

BRAS

Priority Queues

> 2-47

Ethernet Switch Series

WRR (Weighted Round Robin)

SP + WRR

Security
Network login

IEEE 802.1X user authentication

Supports Portal authentication

SSH (Secure Shell)

Management
System configuration

Supports CLI (Command Line Interface) configuration mode

and management

Supports configuration via the console (control console) port

Supports local/remote configuration via Telnet

Supports remote configuration via modem dial-up

Supports system configuration with SNMPv1/v2/v3

Supports RMON (Remote Monitoring)

Supports Quidview network management system

Supports WEB management system

Supports hierarchical alarms

Supports system log

Supports HGMPv2 (Huawei Group Management Protocol)

Supports HGMP (as server)

Supports NTP (Network Time Protocol)

System maintenance

Detailed alarm/debug information

Supports Ping and Traceroute

Supports remote maintenance via Telnet

Supports HGMP (as server)

Hardware Configuration
Attribute

S3528G

S3528P

Outline dimensions (mm)

42*436*240

S3552G

S3552P

42*436*360

S3552F
86*436*390

(H x W x D)
Weight

4kg

5kg

6kg

RPS redundancy power

Support

Support

Support

Input voltage

AC: 100V~240V, 50/60Hz

DC: -48 ~ -60V DC

Maximum system power

40W

45W

54W

consumption
Environment

> 2-48

Working temperature: 0C ~45C

Ethernet Switch Series

Storage temperature: -40C~ 70C

Relative humidity: 10%~90%, non-condensing

Port Configuration S3528G

Fixed ports

(1) 24

S3552G
(1) 48

10/100M 10/100M

S3528P

3552P

S3552F

(1) 24

(1) 48

10/100M

10/100M 10/100M

N/A

Ethernet

Ethernet

Ethernet

Ethernet

ports

ports

ports

ports

(2) 1 con- (2) 1 con-

(2) 1 cons- (2) 1 con-

sole slot

sole slot

ole slot

sole slot

Extended slots

4 GBIC

4 GBIC

4 GE SFP

4 GE SFP (1) 4 GBIC extended module

extended

extended

extended extended slots

module

module

module

module

(2) 6 extended module slots

slots

slots

slots

slots

supporting 4 kinds of 8-port FE

extended modules

Extended modules

(1) GBIC-T

(1) SFP-T

(1) GBIC-T

(2) GBIC-SX(0.55km)

(2) SFP-SX(0.55km)

(2) GBIC-SX (0.55km)

(3) GBIC-LX(10km)

(3) SFP-LX(10km)

(3) GBIC-LX (10km)

(4) GBIC-LH30(30km)

(4) SFP-LH30(30km)

(4) GBIC-LH 30 (30km)

(5) GBIC-LH40(40km)

(5) SFP-LH40(40km)

(5) GBIC-LH

(6) GBIC-ZX70(70km)

(6) SFP-ZX70(70km)

(6) GBIC-ZX70 (70km)

(7) GBIC-STACK

40 (40km)

(8) 8*10/100Base-TX (RJ-45)

module (supports 100m)

(9) 8*100 Base-FX (LC) module

(multi mode supports 2km)

(10) 8*100 Base-FX (LC) module

(single mode supports 15km)

(11) 8*100 Base-X SFP module

BRAS

(7) GBIC-STACK

> 2-49

Ethernet Switch Series

Order Information
S3528 Series Host Configurations

Description

S3528G-DC host (-48V, DC)

S3528G host (220V, AC)
S3528P-DC host (-48V, DC)
S3528P host (220V, AC)

S3552 Series Host Configurations

Description

S3552G-DC host (-48V, DC)

S3552G host (220V, AC)
S3552P-DC host (-48V, DC)
S3552P host (220V, AC)
S3552F-DC host (-48V, DC)
S3552F host (220V, AC)

S3552P/S3528P Optional Interface Module Configurations

Description

1000BASE-SX-SFP module
1000BASE-LX-SFP module
1000BASE-LH30-SFP module
1000BASE-LH40-SFP module
1000BASE-ZX70-SFP module
1000BASE-T-SFP module

> 2-50

Ethernet Switch Series

S3552G/S3528G Optional Interface Module Configurations

Description

1000BASE-SX-GBIC module
1000BASE-LX-GBIC module
1000BASE-LH30-GBIC module
1000BASE-LH40-GBIC module
1000BASE-ZX70-GBIC module
1000BASE-T-GBIC module
1000BASE-STACK-HSSDC-GBIC module

S3552F Optional Interface Module Configurations

Description

8-port 10/100BASE-TX module

8-port 100BASE-FX MMF FE module
8-port 100BASE-FX SMF FE module
100BASE-X SFP module

BRAS

1000BASE-SX-GBIC module
1000BASE-LX-GBIC module
1000BASE-LH30-GBIC module
1000BASE-LH40-GBIC module
1000BASE-ZX70-GBIC module
1000BASE-T-GBIC module
1000BASE-STACK-HSSDC-GBIC module

For more information, please visit www.huawei.com

> 2-51

Ethernet Switch Series

Quidway S3000 Series Intelligent Switches
The Quidway S3000 series intelligent switches are L2 wire-speed Ethernet switches
which fully meet the needs for secure large-capacity switching and high QoS
requirements. The system adopts high-performance ASIC and uses a flexible module
structure to provide intelligent L2~L7 flow classification, complete QoS, implementing
comprehensive service control and subscriber management. It can be used as an access
layer switch that focuses on service control and management and network security
guarantee in enterprise networks and MANs.
The following models used in the access layer of enterprise networks and MANs, are
included in this series switches: S3026C, S3026G, S3026T, and S3050C. The S3000 series
switches provide gigabit uplink interfaces and powerful QoS capabilities to adapt to the
access requirements of multiple services.

> 2-52

S3050C

S3026C

S3026G

S3026T

Ethernet Switch Series

Product Specifications
Full Wire-speed Multi-layer Switching
All the S3000 series switches guarantee fast package forwarding capacity with full wirespeed switching, even in heavy traffic load. In addition, their hardware can identify and
process application flows of L2~L7 and all ports can filter data packets, identify and
manage/control different application flows according to different flows.

Comprehensive Security Control Policies

The Quidway S3000 series intelligent L2 switch supports 802.1x authentications and
identifies users in their access to the network. It supports flexible binding of MAC
address, IP address, VLAN and port to prevent illegal users from accessing the network
effectively.
It also supports multiple ACL policies to set users rights for accessing network resources
and thus guarantees the controlled access to network resources.

Abundant QoS Policies

The Quidway S3000 series intelligent L2 switch supports the L2~L7 complicated flow
classification based on source/destination MAC address, source/destination IP address,
port and protocol. It also provides three queue dispatching algorithms, which are Strict-

BRAS

Priority Queue (PQ), Weighted Round Robin (WRR) and Delay bounded WRR.
It supports Committed Access Rate (CAR) and the traffic granularity is 1Mbit/s.

Diversified Management Modes

The Quidway S3000 series intelligent L2 switch can support SNMP, OpenView versatile
network platform and Quidview NM system. And it also supports CLI, Web network
management, Telnet, HGMP to facilitate the equipment management.

High Reliability
The Quidway S3000 series intelligent L2 switch supports STP/RSTP (Spanning Tree
Protocol/Rapid Spanning Tree Protocol) as well as the MSTP based on multiple VLANs.
Thus the redundancy backup and error tolerance capability of the link can be greatly
improved to guarantee the network stability.
It supports the optional Redundant Power System (RPS).

> 2-53

Ethernet Switch Series

Product Features
Specifications

S3050C

S3026C/G/T

Performance

Port capacity: 13.6Gbps

Port capacity: 8.8Gbps

Throughput: 10.13Mpps

Throughput: 6.55Mpps

Layer 2 Switching
MAC address 8K MAC addresses
Latency

<10s

VLAN

256 VLANs (IEEE 802.1Q)

Supports 4K VLAN Pass-through

GVRP (GARP VLAN Registration Protocol)

Supports VLAN isolate

Supports VLAN trunk

Link

Supports FE (Fast Ethernet) port aggregation

aggregation

Supports GE (Gigabit Ethernet) port aggregation

Supports maximum of 6 groups aggregation ( Max. 8 ports per group)

Traffic control IEEE 802.3x full-duplex flow control

Supports full-duplex 8.8G in maximum with S3026G/T/C

Supports full-duplex 13.6G in maximum with S3050C

STP/RSTP/

IEEE 802.1D Spanning Tree Protocol (STP)

MSTP

IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)

IEEE 802.1s Multi Spanning Tree Protocol (MSTP)

Multicast

256 Multicast routes

IGMP (Internet Group Management Protocol) snooping on Layer 2 interfaces

GMRP (GARP Multicast Registration Protocol)

Network

DHCP Snooping (Dynamic Host Configuration Protocol Snooping)

protocol

ARP

Convergence
Priority queues Four hardware queues per port
QoS(Quality of Supports 1K flow rules

> 2-54

Service)/ACL

Flow-based QoS profiles

(Access

Ingress and egress

Control List)

DSCP (Diffserv Code Point)

Ethernet Switch Series

IEEE 802.1p Class of Service (CoS)

Flows identified through Access Control Lists (ACLs)

Minimum and maximum thresholds:

1Mbit/s increments

128 flows per GE port

64 flows per FE port

Supports flexible queuing algorithms:

SP (Strict Priority) Queuing

WRR (Weighted Round Robin)

Delay bounded WRR

Security
Network login IEEE 802.1X user authentication

Supports proxy detection of double network cards

Supports ACL filter

Management
System

Supports CLI (Command Line Interface) configuration mode

configuration Supports configuration via the console (control console) port

and

Supports local/remote configuration via Telnet

management Supports remote configuration via modem dial-up

Supports system configuration with SNMPv1/v2/v3

Supports RMON (Remote Monitoring)

Supports Quidview and iManager N2000 network management system

Supports WEB management system

Supports hierarchical alarms

Supports system log

Supports HGMPv2 (Huawei Group Management Protocol)

Supports HGMPv1 Server

Supports NTP (Network Time Protocol)

System

Supports FTP, TFTP, Ping, and Tracerouter

BRAS

maintenance
Hardware Configuration
Attribute

S3050C

S3026C/G/T

Outline

42*436*360

42*436*245

dimensions
(mm)(H x W x D)

> 2-55

Ethernet Switch Series

Weight

6kg

3kg

RPS

Yes

Yes

redundancy
power
Input voltage AC : 100V ~ 240V, 50/60Hz

DC: -48 ~ -60V

Maximum

55W

30W

system power
consumption
Environment

Working temperature: 0C ~ 45C

Storage temperature: -40C ~ 70C

Relative humidity: 10% ~ 90%, non-condensing

Attribute

Fixed Port Extended Slot

(1) 48 10/

2 extended

(1) 1*1000Base-T (RJ-45) module;

100M

module slots

(2) 1*1000Base-SX (SC) module (multi mode supports

Ethernet

in rear.

500m);

(3) 1*1000Base-LX (SC) module (single mode supports

ports;

(2) 1

10km, multi mode supports 550m);

console slot.

(4) 1*1000Base-LX (LC) GL middle distance module

> 2-56

Extended Module

S3050C

(single mode supports 40km);

(5) 1*1000Base-ZX (LC) long distance module (single

mode supports 70km);

(6) 1*100Base-FX (MTRJ) module (multi mode

supports 2km);

(7) 1*100Base-FX (MTRJ) module (single mode

supports 15km);

(8) 1 stackable module.

S3026C

(1) 1*1000Base-T (RJ-45) module;

(1) 24 10/

2 extended

100M

module slots

(2) 1*1000Base-SX (SC) module (multi mode supports

Ethernet

in front.

500m);

ports;

(3) 1*1000Base-LX (SC) module (single mode supports

(2) 1

10km, multi mode supports 550m);

console slot.

(4) 1*1000Base-LX (LC) GL middle distance module

Ethernet Switch Series

(single mode supports 40km);

(5) 1*1000Base-ZX (LC) long distance module (single

mode supports 70km);

(6) 1*100Base-FX (MTRJ) module (multi mode

supports 2km);

(7) 1*100Base-FX (MTRJ) module (single mode

supports 15km);

(8) 1*100Base-FX module (single mode supports 40km)

(9) 1 stackable module.

S3026G

(1) 2 GIBC

(1) GBIC-T

extended

(2) GBIC-SX (0.55km)

module slots

(3) GBIC-LX (10km)

(4) GBIC-LH30 (30km)

(5) GBIC-LH40 (40km)

(6) GBIC-ZX70 (70km)

(7) GBIC-STACK

S3026T

(1) 24 fixed N/A

N/A

10/100M

Ethernet

ports;

(2) 2

extended

module slo-

ts supports

10/100/

1000BASE

-T module;

(3) 1

console slot

BRAS

> 2-57

Ethernet Switch Series

Order Information

S3050C Host Configurations

Description

S3050C-DC host (-48V, DC)

S3050C host (220V, AC)

S3026C/G/T Host Configurations

Description

S3026C-DC host (-48V, DC)

S3026C host (220V, AC)
S3026G-DC host (-48V, DC)
S3026G host (220V, AC)
S3026T-DC host (-48V, DC)
S3026T host (220V, AC)

S3050C Optional Interface Module Configurations

Description

1*1000BASE-T module
1*1000BASE-SX module
1*1000BASE-LX module
1*100BASE-FX multi mode fiber module
1*100BASE-FX single mode fiber module
1*1000BASE-LH40 middle distance module
1*1000BASE-ZX long distance module
Stackable module

> 2-58

Ethernet Switch Series

S3026C Optional Interface Module Configurations

Description

1*1000BASE-T module
1*1000BASE-SX module
1*1000BASE-LX module
1*100BASE-FX multi mode fiber module
1*100BASE-FX single mode fiber module
1*100BASE-FX single mode fiber middle distance module
1*1000BASE-LH40 middle distance module
1*1000BASE-ZX long distance module
Stackable module

S3026G Optional Interface Module Configurations

Description

BRAS

1000BASE-SX-GBIC module
1000BASE-LX-GBIC module
1000BASE-LH30-GBIC module
1000BASE-LH40-GBIC module
1000BASE-ZX70-GBIC module
1000BASE-T-GBIC module
1000BASE-STACK-HSSDC-GBIC module

For more information, please visit www.huawei.com

> 2-59

Ethernet Switch Series

Quidway S2000-EI Series Intelligent Switches
The Quidway S2000-EI series intelligent switches are L2 wire-speed Ethernet switches
to fully meet the needs for secure switching. The system adopts high performance
ASIC and uses a flexible module structure to provide comprehensive service control
and subscriber management. The Quidway S2000-EI series intelligent switches provide
flexible bandwidth distribution and access control function. So these switches are ideal
for an access layer that focuses on service control, management and network security
guarantee in enterprise networks and MANs.
The Quidway S2000-EI series switches include 3 models namely S2008-EI, S2016-EI,
S2403H-EI.
The S2008-EI provides 8 fixed 10/100BASE-TX auto-sensing ports and one console port.
The S2016-EI provides 16 fixed 10/100BASE-TX auto-sensing ports, one console ports,
and one expansion slot where an expansion 100BASE-FX module can be installed. This
expansion module can be a single mode/multi-mode/medium-haul optical interface
module or a 10/100BASE-TX Power over Ethernet (PoE) electrical interface module.
Through a 10/100BASETX electrical PoE module, a DC-powered S2016-EI can be
connected to a remote power supply and becomes a Powered Device (PD).
The S2403H-EI provides 25 fixed 10/100BASE-TX auto-sensing ports, one console port,
and one expansion slot where a 100BASE-FX single mode/multimode/medium-haul
optical interface module using SC connector can be installed.

S2008-EI

S2016-EI
> 2-60

S2403H-EI

Ethernet Switch Series

Product Specifications
Full Wire-speed Multi-layer Switching
All the Quidway S2000-EI series intelligent switches employ full wire-speed switching to
ensure their capability to forward packets fast even in a heavy load.

High Reliability
The Quidway S2000-EI series intelligent L2 switches support STP/RSTP/MSTP (Spanning
Tree Protocol/Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol). Thus the
redundancy back-up and error tolerance capability of the link can be greatly improved to
guarantee the network stability.

Comprehensive Security Control Policies

The Quidway S2000-EI series intelligent L2 switches support 802.1x authentications
and identify users when they access the network. It supports flexible binding of MAC
addresses, IP addresses, VLANs and ports to prevent illegal users from accessing the
network effectively.

BRAS

Diversified Management Modes

The Quidway S2000-EI series intelligent L2 switches can support SNMP v1/v2/v3 and
can be managed by Quidview NMS. They also support CLI, Web network management,
Telnet, HGMP to facilitate the equipment management.

> 2-61

Ethernet Switch Series

Product Features
Feature

S2008-EI

S2016-EI

S2403H-EI

Performance
Switching

1.6Gbps

3.4Gbps

5.2Gbps

1.19Mpps

2.53Mpps

3.87Mpps

capacity
Throughput

Layer 2 Switching
MAC Address

4K MAC addresses

Latency

<10s

VLAN

512 VLANs (IEEE 802.1Q)

Supports 4K VLAN Transparent Transfer
GVRP (GARP VLAN Registration Protocol)
Port-based VLAN

Link

Up to 4 maximum

Up to 8 maximum

Up to 12 maximum

Aggregation

aggregation groups,

aggregation groups,

aggregation groups,

each containing up to 8

each containing up to 8

each containing up to 8

ports

ports

ports

Traffic control

IEEE 802.3x full-duplex flow control

Back-pressure based flow control (half duplex)

STP/RSTP/

IEEE 802.1D Spanning Tree Protocol (STP)

MSTP

IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)

IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)

Multicast

2K Multicast groups
IGMP (Internet Group Management Protocol) snooping on Layer 2 interfaces
GMRP (GARP Multicast Registration Protocol)

Network

DHCP Snooping (Dynamic Host Configuration Protocol Snooping)

protocol

Supports NTP (Network Time Protocol)

ARP

Convergence
Priority queues

Four hardware queues per port

QoS(Quality

Supports flexible queuing algorithms:

of Service)

WRR (Weighted Round Robin)

HQ+WRR (High-Priority Queuing + WRR)
Supports bi-directional port rate-limiting with the granularity of 64kbit/s

Security

> 2-62

Ethernet Switch Series

Network login

Hierarchical user management and password protection

Port-based and MAC-based 802.1X authentication
Local authentication server
PEAP/TLS (Protected Extensible Authentication Protocol/Transport Layer Security)

Management
System

Supports CLI (Command Line Interface) configuration mode

configuration

Supports configuration via the console port

and management

Supports local/remote configuration via Telnet

Supports system configuration with SNMPv1/v2/v3
Supports RMON (Remote Monitoring),1/2/3/9 groups of MIB
Supports Quidview and iManager N2000 network management system
Supports WEB management system
Supports hierarchical alarms
Supports system log
Supports HGMPv2 (Huawei Group Management Protocol)

System

Debugging information output

maintenance

Ping and Tracert

Remote maintenance through Telnet

Hardware Configuration
S2008-EI

S2016-EI

S2403H-EI

Outline

40 x 216 x 117

42 x 436 x 200

42 x 436 x 240

Weight

< 2kg

3kg

3kg

Input voltage

AC:100V~240V, 50/60Hz

AC: 100V~ 240V, 50/60Hz

BRAS

Attribute
dimensions (mm)

(H x W x D)

DC: -48 ~ -60V

Maximum system

8W

12W

15W

power
consumption

Environment

Working temperature: 0 ~ 45C

Storage temperature: -40 ~ 70C
Relative humidity: 10% ~ 90%, non-condensing

Fixed ports

(1) 8 10/100BASE-TX

(1) 16 10/100BASE-TX

(1) 25 10/100BASE-TX

Ethernet ports

Ethernet ports

Ethernet ports

(2) 1 console port

(2) 1 console port

(2) 1 console port

> 2-63

Ethernet Switch Series

Extended slot

N/A

1 extended module slot

1 extended module slot

Extended module

N/A

(1) 1*100BASE-FX single

(1)1*100BASE-FX single

mode module

mode module

(2)1*100BASE-FX single

(2)1*100BASE-FX single

mode medium-haul

mode medium-haul

module

module

(3)1*100BASE-FX multi-

(3)1*100BASE-FX multi-

mode module

mode module

(4)1*10/100BASE-TX PoE
electrical interface module

Order Information
S2000-EI Series Host Configurations

Description

S2008-EI(AC)
S2016-EI (AC)
S2016-EI (DC)
S2403H-EI (AC)
S2403H-EI (DC)

S2016-EI Optional Interface Module Configurations

Description

1*100Base-FX multi-mode fiber module

1*100Base-FX single mode fiber module
1*100Base-FX single mode medium-haul fiber module
1*10/100Base-TX PoE electrical interface module

> 2-64

Ethernet Switch Series

S2403H-EI Optional Interface Module Configurations

Description

1*100Base-FX multi-mode fiber module

1*100Base-FX single mode fiber module
1*100Base-FX single mode medium-haul fiber module

BRAS

For more information, please visit www.huawei.com

> 2-65

memo

Ethernet Switch Series

> 2-66

BRAS

memo

Ethernet Switch Series

> 2-67

memo

Ethernet Switch Series

> 2-68

BRAS Series

BRAS

Product Quick Reference

Huawei Datacom Product Quick Reference

BRAS Series

Contents
Quidway MA5200 Series Broadband Access Server...........................................3-2

Firewal

BRAS Series

> 3-

BRAS Series
MA5200 Series Broadband Access Server
Product Model

Feature

Quidway MA5200 Series

To prevent such problems as the poor capability of the

Broadband Access Server

broadband network in user management, service control and

network security, Huawei launched its MA5200 broadband
access server series, to implement the function of authentication,
billing, service control, security and QoS guaranteeing for
broadband access users.
Supports the access of users in various modes such
as Ethernet, xDSL, HFC and WLAN; supports various
authentication access modes such as Web, PPP, 802.1x, port
binding and plug-&-play; the authentication mode can be
flexibly selected for different access ports as required by the
network operation.
It can correctly collect users billing information, including
duration and traffic. Supports billing on the equipment and
the remote Radius server; supports the copying of the billing
information to the specified server; supports the accounting
and settlement of tiered operations.
Supports the authorization and management of user
attributes, including user bandwidth restrictions, Access
right control, users mutual access right control, QoS
attribute control and policy route authorization; provides the
subscriber login log and user online service log.
By means of user isolation, access identity authentication,

Firewal

access control (ACL), network resource application control

and user online service log record, the security of network
resources can be guaranteed and the forgery of addresses
and the attacking to the network, which is provided with a
identification function for network attacks.
It is designed based on the architecture of the advanced G5
router and has an extremely powerful routing function to
support such services as the routing of the edge router and
MPLS/VPN.

> 3-

BRAS Series
Quidway MA5200 Series Broadband Access Server
Product Overview
To prevent such problems as the poor capability of the broadband network in user
management, service control and network security, Huawei launched its MA5200
broadband access server series, to implement the function of authentication, billing,
service control, security and QoS guaranteeing for broadband access users, it can meet
the requirements of operation networks, financial office networks, education networks
and e-Government networks for user management, service control and high security.
The MA5200 product series includes MA5200F and MA5200G. The MA5200F-2000
supports a maximum of 2,000 subscribers online concurrently. The MA5200G is the
product series based on the distributed hardware architecture and high-capacity nonblocking hardware switching, including MA5200G-2, MA5200G-4 and MA5200G-8.
These three products are different in such performance specifications as the quantity of
service boards, the number of accessed subscribers and the switching capacity, support a
maximum of 12,000, 24,000 and 48,000 concurrent online subscribers.
The MA5200 product series can meet the requirements of various network scales for the
access server, and it can serve as the broadband access server of the ATM/IP DSLAM end
office with different capacities and be applied in the Ethernet convergent layer to provide
the Ethernet access subscribers with access service, security control and service control,
and it can also serve as the core equipment for subscriber management and security
control in medium to large-sized enterprise networks and industrial networks, meeting
the requirements of diversified, flat-structured and customized networking.

Product Appearance

MA5200F

> 3-

BRAS Series

MA5200G-2

MA5200G-4

MA5200G-8

Features of MA5200F

Flexible access authentication mode: Supports the access of subscribers via Ethernet,
xDSL, HFC and WLAN. Supports various authentication access modes such as Web,
PPPoE, 802.1x, port binding and plug-&-play; different subscribers can flexibly select
different authentication modes. And it supports the PPPoE authentication, the WEB
authentication, the fast authentication and the 802.1x authentication on a port.
Supports various authentication policies, including local authentication and remote
authentication, as well as local preference authentication and remote preference
authentication.

Effectively addresses management functions: Supports DHCP Relay and embedded

DHCP Server, dynamically allocates addresses for the subscribers configured
with DHCP, acts as the DHCP agent for the PPP dialing subscribers, and applies
for addresses from the external DHCP server, with the DHCP Proxy function. It
can manage the address resources in the address pool, to allocate addresses for
subscribers from the local address pool and the remote DHCP server address pool,
allows subscribers to access networks through dynamically obtaining addresses or
statically configure addresses. It supports secondary address allocation. The private IP
is allocated before subscriber authentication and addresses are re-allocated according
to the domains selected by subscribers after the authentication, to solve the problem
of insufficient public network addresses and to improve the utilization of public
network addresses.

Support for multiple billing solutions: It can correctly collect users billing information,
including duration and traffic. In addition, it supports the copying of the billing

> 3-

Firewal

and be able to support the address allocation for subscribers via the AAA server. It

BRAS Series

information to the specified billing server, as well as local billing and remote billing.
Both of them support real-time billing to ensure the correctness of the billing
information. The remote the AAA server can implement the integrated pre-payment
service based on duration and traffic, and it supports the rate switching function
and other discounting functions, so different rates can be adopted for charging
according to the access type.

Powerful subscriber management function: Supports the authorization and

management of subscriber attributes, including subscriber bandwidth restriction,
restriction of NAT connections, access right control, mutual access right control,
QoS attribute control and policy route authorization; provides the subscriber login
log and user subscriber access service log. It can specify the type of the specified
logic port access subscriber, for example, WLAN subscriber and ADSL subscriber,
and carry out different control policies against different subscribers, and it can
report the information about subscriber access types to the authentication billing
server. The access control function based on subscriber groups can divide them into
different UCL-Group, on which the ACL rule is executed, to implement the grouping
management of subscriber access control; the mutual-access control function based
on subscriber groups can divide the subscribers into the different InterGroups, and
the mutual-access rights between the mutual-access rights and the InterGroup of
the internal subscribers of InterGroup can be configured, thus implementing the
grouping management of subscriber mutual-access.

Perfect security mechanism provides the perfect security functions such as Identity
discrimination, address forgery prevention, attack protection and security auditing by
means of identity authentication, ACL, resource protection and subscriber log. The
unique packet binding check technology can realize the binding check in terms of logic
port (access port + VLAN ID) + MAC address + IP address on each packet of users after
their passing of authentication, and discarding of the unmatched packets. This function
can thoroughly prevent various forgery acts of users and provide a guarantee for the
network security. The number of accessed subscribers, address allocation request and
PPP dialing request are accessed via the same port to control and filter various illegal
packets, and to prevent users from attacking the network.

Rich service functions provide a great variety of services as CAR, QoS, VPDN, multiISP, portal service, multicast, PnP and NAT.

> 3-

BRAS Series

Powerful routing function is based on the design of the advanced G5 router

architecture of Huawei and can run serving as the standard router, supporting static
route, RIP1/2, OSPF, BGP, PIM-SM, PIM-DM and IGMPv1/v2, as well as the L2TP
tunnel protocol.

Operation-level management and maintenance adopts the HGMP protocol to manage

the subscriber access switch in a centralized way, to simplify the management and
maintenance of the Ethernet access. It provides the online log function, to generate
user MAC, VLAN ID, IP address and the access destination IP and duration by
recording the online status of subscribers on the equipment. It provides the operation
log function, which can track the equipment running in full range by recording all the
operations on the equipment. It provides a perfect NM platform to implement the
operation-level management function such as topology, configuration, performance,
failure and security.

MA5200F Product Specifications

MA5200F

Item
Architecture

2U high case-shape equipment, which can be installed in 19-inch

standard cabinet;

Dimensions (mm)

482.6 (19) x 381 x 88.9 (2U)

WxDxH
Full service function 3Mpps (2GE bi-directional linear speed forwarding)

Switching fabric

Shared buffer switching network, with the switching capacity of 10Gbps

Subscribers/entries

MAC address: 4K

Firewal

Forwarding capability

Routing entry: 4K
VLAN terminated quantity (Integrated system): 8K
Number of concurrent subscribers (Integrated system): MA5200F-2000:
2K subscribers
Supported protocols

802.1x, PPPoE, DHCP Server/DHCP Relay/DHCP Client, RIP/RIPv2, OSPF,

BGP, IGMP, RADIUS, SNMP.

Security

Available with the function of identity discrimination, resource protection,

attack prevention, address forgery prevention, security log and auditing.
IP+MAC+VLAN ID binding, limit on the number of VLAN ID-accessed

> 3-

BRAS Series

subscribers
CAR restricts users available bandwidth: Minimum: 64Kbps~1Gbps; step:
1Kbps
NMS

Adopts iManager; supports SNMP; can independently run in the

e n v i ro n m e n t o f U N I X ( S U N , H P ) a n d O R AC L E / SY B AS E ; c a n b e
imbedded into the existing commercial NM platform such as HP
OpenView;
Supports HGMP to conduct the cluster management of the accessed
Ethernet switches;
Provides the service management functions as VPN management and
QoS policy management.
Provides multi-language support.

Environment

Long-term operating temperature: 0 ~ 45 oC

Short-term operating

temperature: -5 ~ 55 oC
Storage temperature: -30 oC ~ 60 oC.
Operating humidity: 10%~90%
Operating voltage: DC -C36 ~ 72V; AC 90 ~ 264V, 47 ~ 63Hz
Power consumption at full configuration: <60W.
Mean Time Between Failure (MTBF): 130000H

MA5200F Order Information

Item

Product Description

Configuration

Remarks

MA5200F

MA5200F-2000 broadband IP access

Mandatory,

MA5200F host

-2000-48V

equipment host (-48V DC power supply)

Supports 2K

provides various

concurrent

service interfaces

subscribers

by configuring the

MA5200F

MA5200F-2000 broadband IP access

Mandatory,

following interface

-2000-220V

equipment host (220V AC power supply)

Supports 2K

modules

concurrent
subscribers
H5-E6FC

6-port fast Ethernet interface module (RJ45)

Optional

MA5200F can

H5-FCBA

6-port fast Ethernet optical interface module

Optional

configure a

(1310nm, multi-mode, 2km, LC)

H5-FCFA

> 3-

6-port fast Ethernet optical interface module

maximum of four
Optional

fast Ethernet

BRAS Series

(1310nm, single-mode, 15km, LC)

H5-1GCAA

1-port Gigabit Ethernet optical interface

interface modules
Optional

module (850nm, multi-mode, 500m, LC)

H5-1GCEA

1-port Gigabit Ethernet optical interface

available with
Optional

module (1310nm, single-mode, 10km, LC)

H5-1GCG

1-port Gigabit Ethernet optical interface

1-port Gigabit Ethernet optical interface

2-port Gigabit Ethernet optical interface

Optional

2-port Gigabit Ethernet optical interface

2-port Gigabit Ethernet optical interface

Optional

2-port Gigabit Ethernet optical interface

2-port Gigabit Ethernet optical interface

Optional

4-port POS OC-3C/STM-1 interface module

POS interface
module should be

Optional

module (SFP)
H5-P4CC

the SFP interface

module and the

module (1550nm, single-mode, 70km, LC)

H5-O2GD

or POS interface
module. Here,

Optional

module (1550nm, single-mode, 40km, LC)

H5-2GCI

modules, or SFP
interface module

module (1310nm, single-mode, 10km, LC)

H5-2GCG

kinds of Gigabit
optical interface

Optional

module (850nm, multi-mode, 500m, LC)

H5-2GCEA

it can be matched
with various

module (1550nm, single-mode, 70km, LC)

H5-2GCAA

a GE extended
module slot, and

Optional

module (1550nm, single-mode, 40km, LC)

H5-1GCI

MA5200F is

configured with
another SFP/POS

Optional

optical module in
their use.

Features of MA5200G
High capacity and high density: The back-plane capacity of MA5200G-2/MA5200G-4/
MA5200G-8 is 64Gbps/256Gbps/256Gbps, the system switching capacity is 16Gbps/
64Gbps/64Gbps, 2/4/8 service slots are provided, and 32 GEs/128 FEs/64 ATMs,
155M/32 POSs, 155M/16 POSs, 622/8 POSs, 2.5G, supporting 12,000 /24,000/48,000
concurrent online subscribers, with a high capacity and high port density, to meet the
requirements of high-capacity BRAS networking and expansion.

Linear forwarding performance and powerful routing capability: Adopting the

mainstream network processor technology in this industry to implement the linearspeed forwarding of IP, MPLS and multicast for all the interfaces with the GE interface

> 3-

Firewal

BRAS Series

included. The board supports a forwarding capability of 6Mpps, and the forwarding
performance of the MA5200G-2/MA5200G-4/MA5200G-8 integrated system
reaches large routing table as high as 512K, and a wealth of routing protocols
including static routers, RIP1/2, OSPF, BGP, IS unicast routing protocol and such
multicast routing protocols as PIM-SM,PIM-DM,MBGP,IGMPv1/v2, and support such
tunnel protocols as L2TP and LDP LSP as well as the MPLS label switching and the
MPLS VPN service.

Carrier-class reliability: Adopting the distributed hardware forwarding; the key parts
include the route processing system, the service processing system, the switching
fabric system, the clock system, power supply, the system internal management bus
and fans, which are all redundancy hot backups to implement the constant route
forwarding and service processing. With port binding and VRRP, there are three
equivalent routes available upon IP forwarding, and the reliability of the link layer
and the network layer can be ensured.

Flexible access authentication mode: Supports the access of subscribers via Ethernet,
xDSL, HFC and WLAN. The equipment supports various authentication access modes
such as the PPP dialing authentication, WEB authentication, fast WEB authentication
and port binding, and on the same port, the PPP dialing authentication, the WEB
authentication and the fast WEB authentication are supported, or you may limit
them within one or more authentication modes.

Effectively address management function: Supports DHCP Relay and imbedded

DHCP Server, dynamically allocates addresses for the subscribers configured
with DHCP, acts as the DHCP agent for the PPP dialing subscribers, and applies
for addresses from the external DHCP server, with the DHCP Proxy function. It
can manage the address resources in the address pool, to allocate addresses for
subscribers from the local address pool and the remote DHCP server address pool,
and support the address allocation for subscribers via the AAA server. It allows
subscribers to access networks through dynamically obtaining addresses or statically
configuring the mode of addresses.

Support for multiple billing solutions: It can correctly collect users billing
information, including duration and traffic. And it can copy the billing information

> 3-

BRAS Series

to the specified server. The AAA billing supports the providing of a billing protection
mechanism, and such mechanisms as redundancy backup, handshaking and
retransmission of the Radius server can ensure no loss of bills and no generation of
wrong bills in the link failure. When the remote billing server fails to bill, it can save
the bills in the local server, and upload the billing information to the billing server via
TFTP after the recovery of the billing server. It can support various billing policies as
non-billing, post-payment and pre-payment. The pre-payment service supports the
pre-payment based on duration and that based on traffic. Its cooperation with the
AAA server can implement the integrated pre-payment service based on duration and
traffic, and it supports the rate switching function and other discounting functions, so
different rates can be adopted for charging according to the access type.

Powerful user management function supports the authorization and management

of user attributes, including CAR user bandwidth restriction, access right control,
mutual-access right control, QoS attribute control and policy routing authorization.
It can specify the type of the specified logic port access subscriber, for example,
WLAN subscriber and ADSL subscriber, and carry out different control policies
against different subscribers, and it can report the information about subscriber
access types to the authentication-billing server. The access control function based
on subscriber groups can divide them into different UCL-Group, on which the ACL
rule is executed, to implement the grouping management of subscriber access
control; the mutual-access rights and the InterGroup of the internal subscribers of
InterGroup can be configured, thus implementing the grouping management of
subscriber mutual-access.

Powerful QoS support: Providing the QoS function of DiffServ based on priorities to
can implement the QoS guarantee for different service streams on the basis of the
QoS function of DiffServ of the complex stream classification rule. Each interface
board supports 5K stream classification rules. Supports traffic policing and traffic
shaping for 1,024 streams; supports the 802.3x traffic control protocol, uses WRED
to implement the congestion avoidance; WRED supports the discard priority of
eight levels.

> 3-

Firewal

differentiate the QoS requirements of different subscribers. In addition, these rules

BRAS Series

Perfect security mechanism provides the perfect security functions such as

Identity discrimination, ACL, network resource protection, and provides identity
authentication, address forgery prevention and attack prevention. The unique packet
binding check technology can realize the binding check in terms of logic port (access
port + VLAN ID/PVC) + MAC address + IP address + PPPoE Session on the header
of users packets of after their passing of authentication, and discarding of the
unmatched packets. This function can thoroughly prevent various acts of forgery
by users and provide a guarantee for network security. The number of accessed
subscribers, address allocation request and PPP dialing request are accessed via the
same port to control and filter various illegal packets, and to prevent users from
attacking the network.

A variety of service functions provide broadband access, multi-ISP, portal service,

multicast, VPDN, MPLS VPN.

Operation-level management and maintenance provides the operation log function,

which can track the equipment running in full range by recording all the operations
on the equipment. It provides a perfect NM platform to implement the operationlevel management function such as topology, configuration, performance, failure
and security.

MA5200G Product Specifications

Item
Architecture

MA5200G-8

MA5200G-4

MA5200G-2

Integrated chassis structure supports 19-inch standard rack;

Using the network processor to implement high-performance hardware
forwarding

> 3-10

Dimensions (mm)

482.6 x 420 x 797.3

482.6 x 420 x 352.8

482.6 x 420 x 219.5

WxDxH

18U

8U

5U

Backplane capacity

256Gbps

256Gbps

64Gbps

Switching capacity

64Gbps,

64Gbps,

16Gbps,

Non-blocking switching,

Non-blocking switching, Non-blocking

dual backup

dual backup

switching

BRAS Series

Forwarding

48Mpps

24Mpps

12Mpps

Type and quantity of

32 GEs

16 GEs

8 GEs

interface

256 FEs

128 FEs

64 FEs

128 ATM OC-3c/STM-1

64 ATM OC-3c/STM-1

32 ATM OC-3c/STM-1

32 ATM OC-12c/STM-4

16 ATM OC-12c/STM-4

8 ATM OC-12c/STM-4

32 POS OC-3c/STM-1

16 POS OC-3c/STM-1

8 POS OC-3c/STM-1

16 POS OC-12c/STM-4

8 POS OC-12c/STM-4

4 POS OC-12c/STM-4

8 POS OC-48c/STM-16

4 POS OC-48c/STM-16

2 POS OC-48c/STM-16

performance
Number of interface
board slots

Routing protocol

Supports such routing protocols as RIP, OSPF, IS-IS and BGP-4; the routing
table has a high capacity with a total number of 512K routes. All the ports
can keep forwarding at line speed in such complex routing environment as
route oscillation.

MPLS VPN

Supports L3 MPLS VPN (RFC2547bis), and can serve as PE, supporting 1,024
VRF x 1024 routes;
Supports L2 MPLS VPN (Martini)
Supports the access of VPN in L2TP LAC&LNS mode, strictly following the
relevant standards, interworking with other mainstream manufacturers in
full scale.
Supports GRE Tunneling Protocol.

QoS

It provides the QoS function of DiffServ based on subscriber priority and

complex stream classification rule, to implement its QoS guarantee for
different subscribers and service streams. Each interface board supports 5K

Firewal

stream classification rules. Supports traffic policing and traffic shaping for
1,024 streams; supports the 802.3x traffic control protocol, uses WRED to
implement the congestion avoidance; WRED supports the discard priority of
eight levels.
Multicast

Supports IGMP, static multicast configuration, PIM-DM/SM, and MBGP

multicast routing protocol; supports the interoperability between multiple
multicast protocols; supports the multicast policy processing, including the
policy processing of multicast routing protocol and multicast forwarding as
well as multicast QoS.

Reliability

Provides such protection mechanisms for multiple equivalent routes

> 3-11

BRAS Series

and MPLS fast re-routing as port binding, VRRP link backup and IP packet
forwarding
All key parts are available with redundancy backup (including system control
management, route processing module, switching fabric, power supply,
clock, internal system management bus and fan); all the components can be
hot-swapped, and they support the status-based hot backup switching, to
implement the constant route forwarding.
Number of

48K

24K

12K

512K (unicast)

512K (unicast)

512K (unicast)

10K (multicast)

10K (multicast)

10K (multicast)

256K

128K

64K

concurrent
subscribers
(Integrated system)
Routing table

VLAN terminated
quantity (Integrated
system)
Access protocols

Supports PPPoX (PPPoE, PPPoA, PPPoEoA), DHCP, L2TP and ARP

Billing

Supports RADIUS, extended RADIUS+ protocol

Security

Available with the function of identity discrimination, resource protection,

attack prevention, address forgery prevention.
IP+MAC+VLAN ID binding, and the number of subscribers accessed by VLAN
ID can be restricted.
CAR restricts users available bandwidth, with the bandwidth range from
8Kbps to 1Gbps and the step of 8Kbps.

NMS

Adopts Huaweis frame-shaped NM platform, iManager, supporting SNMP

and client/server architecture; can run independently in the environment of
UNIX (SUN, HP), ORACLE/SYBASE, or can be imbedded in users commercial
NM platform, such as HPOpenView.
Provides dynamic topology management, fault management, performance
management, configuration tool, equipment log management, NMS running
monitoring, security and user management.
Provides service management functions such as VPN management and QoS
policy management.
Provides optional offline traffic engineering tools.
Provides multi-language support.

> 3-12

BRAS Series

Input power

DC: -42V ~ 58V / AC (220V): 176V ~ 285V / AC (110V): 85V ~ 154V

Full load power

< 1000W

< 600W

< 350W

Maximum weight in

< 85kg

< 50kg

< 35kg

44 years

33 years

12 years

full configuration
Mean Time Between
Failure (MTBF)
Environmental

Long-term operating temperature: 0 ~ 45 o C; short-term operating

Requirements

temperature: - 5 ~ 55 oC.
Storage temperature: -30 oC ~ 60 oC.
Relative humidity: 10% RH ~ 95%RH.
Altitude: No effect on forwarding performance within 4,000m

MA5200G Series Order Information

Item
H5-B-F02A

Product Description

Configuration

Assembly cabinet- MA5200-H57B25200- Optional

Remarks
Assembly cabinet

2.2m B68 assembly cabinet

H5-B-F01A

Assembly cabinet -MA5200-H57B15200- Optional

Assembly cabinet

1.8m B68 assembly cabinet

H5-MA5200G-8- MA5200G-8 integrated chassis-dual-DC Mandatory
CHASSIS-DC

power supply

H5-MA5200G-8- MA5200G-8 integrated chassis-dual-AC Mandatory

CHASSIS-AC

Firewal

MA5200G-4

power supply

H5-MA5200G-2- MA5200G-2 integrated chassis-dual-DC Mandatory

CHASSIS-DC

MA5200G-4

power supply

H5-MA5200G-4- MA5200G-4 integrated chassis-dual-AC Mandatory

CHASSIS-AC

MA5200G-8

power supply

H5-MA5200G-4- MA5200G-4 integrated chassis-dual-DC Mandatory

CHASSIS-DC

MA5200G-8

MA5200G-2

power supply

H5-MA5200G-2- MA5200G-2 integrated chassis-dual-AC Mandatory

CHASSIS-AC

power supply

H5-SMU

M A 5 2 0 0 G - 8 / M A 5 2 0 0 G - 4 s y s t e m Mandatory

MA5200G-2

MA5200G-4/-8/-2

management unit
H5-SMUC

MA5200G-2 system management unit

Mandatory

Only applicable to
MA5200G-2

> 3-13

BRAS Series

Ethernet interface processing board

H5-E16FF

16-port flexible 100M Ethernet interface

Optional

line board (RJ45)

H5-E32FF

32-port flexible 100M Ethernet interface

Optional

line board (RJ45)

H5-O8FF

8-port 100M Ethernet optical interface

Optional

line board (SFP)

H5-O16FF

16-port 100M Ethernet optical interface

Optional

line board (SFP)

H5-O2GCG

2-port Gigabit Ethernet optical interface

Optional

line board (SFP)

H5-O4GCG

4-port Gigabit Ethernet optical interface

Optional

line board (SFP)

H5-G2F8F

2-port GE(SFP) + 8-port FE(SFP) flexible

Optional

interface line board

H5-G2FGF

2-port GE(SFP) + 16-port FE(RJ45) flexible

Optional

interface line board

ATM interface processing board
H5-A8CF

8-port OC-3c/STM-1 ATM optical interface

Optional

line board (SFP)

H5-A16CF

1 6 - p o r t O C - 3 c / S T M -1 AT M o p t i c a l

Optional

interface line board (SFP)

H5-A2HF

2 - p o r t O C -1 2 c / S T M - 4 AT M o p t i c a l

Optional

interface line board (SFP)

H5-A4HF

4 - p o r t O C -1 2 c / S T M - 4 AT M o p t i c a l

Optional

interface line board (SFP)

POS interface processing board
H5-P4CDM

4-port OC-3c/STM-1 POS multi-mode optical

Optional

interface line board (1310nm, 2km, LC)

H5-P4CDS

4-port OC-3c/STM-1 POS single-mode

Optional

optical interface line board (1310nm,

15km, LC)
H5-P2HDM

2-port OC-12c/STM-4c POS multi-mode

optical interface line board (1310nm,
500m, SC)

> 3-14

Optional

BRAS Series

H5-P2HDS

2-port OC-12c/STM-4c POS single-mode

Optional

optical interface line board (1310nm,

15km, SC)
H5-P1UDZ

1-port OC-48c/STM-16c POS single-mode

Optional

optical interface line board (1310nm, 2km,

LC)
H5-P1UDS

1-port OC-48c/STM-16c POS single-mode

Optional

optical interface line board (1310nm,

15km, LC)
H5-P1UDL

1-port OC-48c/STM-16c POS single-mode

Optional

optical interface line board (1310nm,

40km, LC)
H5-P1UDZ

1-port OC-48c/STM-16c POS single-mode

Optional

optical interface line board (1550nm,

70km, LC)
E1/T1, E3/T3 and CPOS interface processing board
H5-C4CF0

4-port channelized OC-3/STM-1 to T1/E1

Optional

optical interface line board (SFP)

H5-16CE10

16-port channelized E1 Interface line Board

Optional

(RJ45)
H5-16CT10

16-port channelized T1 interface line board

Optional

H5-6E30

(RJ45)

H5-6T30

6-port E3 interface line board(SMB)

Optional

6-port T3 interface line board(SMB)

Optional

Service processing board

Tunnel service processing unit

Optional

H5-SSU

Security service unit

Optional

12V-100AH

VRLA battery (Valve Regulated Lead Acid)

Optional

P-Shelf

Support for components of the storage

Optional

Firewal

H5-SPU

Other modules

battery

Four batteries per

group, configured with
group as the unit
Mandatory in the
configuration of
storage battery, 2
groups can be placed

For more information, please visit www.huawei.com

> 3-15

memo

BRAS Series

> 3-16

Firewal

memo

BRAS Series

> 3-17

memo

BRAS Series

> 3-18

Product Quick Reference

Firewal Series
Firewal

Huawei Datacom Product Quick Reference

Firewal Series

Contents
Quidway Eudemon 100/200 Firewall................................................................4-2
Quidway Eudemon 500/1000 Firewall............................................................ 4-10

Firewall Series

Eudemon Firewall Product Series

Product Model
Eudemon100/200 Firewall

Feature
The new generation of high-speed status firewall based
on the professional carrier-class hardware platform and
the VRP software system, and it provides a throughput
of 100M and 400M. The Eudemon firewall series
integrates the Application Specific Packet Filter (ASPF)
and the Virtual Private Network (VPN) with the Network
Address Translation (NAT) in a proper way, providing
users network with an excellent security protection
with outstanding performance and high reliability of
carrier-class equipment.
Applicable to providing security guarantee to small and
medium-sized networks.

Eudemon500/1000 Firewall

The new generation of hardware high-speed status

firewall, that is based on the Network Processor (NP)
technology, separately providing a throughput of 2G
and 3G. The Eudemon firewall series integrates the
Application Specific Packet Filter (ASPF) and the Virtual
Private Network (VPN) with the Network Address
Translation (NAT) in a proper way, providing users
network with an excellent security protection with
outstanding performance and high reliability of carrierclass equipment.
Applicable to the requirements of a large-sized
enterprise network and carrier-class security service.

> 4-

Firewall Series
Quidway Eudemon 100/200 Firewall
Product Overview
The Quidway Eudemon 100/200 Firewall (hereinafter referred to as the Eudemon
100/200) is the new generation of high-speed status firewall, not only supporting a
variety of status detection and address translation functions for protocols, but a powerful
attacking protection capability. It provides such functions as static/dynamic blacklist
filtering as well as a variety of functions in statistical analysis and log. In addition, it
supports such features as QoS and VPN, and provides a perfect networking application
solution. It has a wide application range, properly supporting the voice and video services
(supporting RTSP, H.323, SIP, and RTSP), and is widely applied in NGN and multimedia.
The Eudemon 100 and Eudemon 200 are based on the Huawei carrier-class hardware
platform and the VRP software platform, which are different in performance levels and
interface specifications, applicable to providing security guarantee to the small and
medium-sized networks.
At present, the product has been applied in a great scale both at home and abroad, and
it is sold as far as Europe, Middle-East, South America and Southeast Asia.

Product Appearance

Eudemon 100 Firewall

> 4-

Eudemon 200 Firewall

Firewall Series

Product Features
A Powerful Security Protector
The Eudemon 100/200 100M firewall adopts the latest security technology in this
industry, with its core based on ASPF (Application Specific Packet Filter) of streams, to
implement the maintenance and monitoring of each connection status information
and dynamically filtering the data packets, and it is a powerful protection for internal
networks.
It is effectively protected from all kinds of network attacks, for example,

eavesdropping packets, IP address spoofing, source route attacks, address port

scanning, Deny of service attacks; application layer attacks (detection of Java, ActiveX
controls, Trojan); as well as intelligent worm virus protective function.
It provides support for a variety of protocols, and implementing status monitoring on

HTTP, FTP, RTSP, SIP, H.323 (including T.120, Q.931, RAS, H.245), HWCC and general
TCP and UDP application.
It has a perfect traffic monitoring feature; Monitoring the data traffic and connection

status, dynamically controlling the connections and bandwidth of each IP, which
can effectively and flexibly prevent the ISP and IDC network from traffic attacks. The
perfect QOS feature can implement the bandwidth control service of such feature
streams as user-defined traffic and attack traffic.
Support for a variety of firewall logs, providing the follow-up function. And it can

output the log in the binary format, except for the text format, in a high-speed way
to meet the application environment requirements for heavy traffic.
The enhanced blacklist function can control the network authority of the users being

attacked by viruses, through which the service of next step can be provided (such as
announcement and online virus-killing).
It provides an open IDS cooperative interface protocol and LIB, which can quickly

cooperate with the IDS system of other manufacturers, such as VenusTech, Is-One,
Orient Legendmaker, Kingnet Security, to jointly construct a comprehensive network
security protection. It adopts the embedded operating system dedicated to Huawei,
which avoids the security holes that are exposed to the general operating system on
which common firewalls are used.

> 4-

Firewall Series

It implements the AAA concept according to the RADIUS protocol, to construct the

distributed customer/server security access application control.

Full-featured VPN GW
The Eudemon 100/200 100M firewall is still a full-featured VPN gateway that can
securely transmit data via public networks, and it can construct various kinds of VPN
networking such as remote access and network-to-network. Huawei was the first to
put forward the philosophy of dynamic VPN in this industry, and its headquarters and
branches can be accessed with the dynamic IP address or private IP address, and the
(maintenance) tunnels can be automatically created between the VPN equipments.
The DVPN technology can realize the establishment of only N -1 channels for the
interconnection of the whole network, and the addition of a VPN node requires only
one maintenance link, with a good expandability. Compared to the traditional IP
VPN network, it is lower in the maintenance cost and more flexible in the network
application. The dynamic VPN provides a perfect authentication and encryption feature,
to totally ensure the network security of users.
The Eudemon series supports multiple IP VPN access modes, for example, L2TP, GRE

and IPSec, as well as the DVPN that is dedicated to Huawei.

It supports multiple encryption algorithms, 56-bit data encryption standard (DES) or

168-bit 3DES, and it implements the key exchange function following the ISAKMP
protocol frame, IKE.
To obtain a more powerful encryption performance, the Eudemon200 supports the

high-speed encryption card. It also provides a dedicated VPN client software, and is
user friendly.
Various VPN protocols are implemented strictly following the RFC or related

standards, to ensure that the product can be interconnected and interworked with
the VPN equipment of other manufacturers.

NAT Service with Multiple Services

With the development of the Internet, the shortage of IP addresses has become an
increasingly serious problem. In view of the position and technical features of a firewall,
it is appropriate to provide the perfect address translation technology on the Eudemon.

> 4-

Firewall Series

The Eudemon series can implement such features as multi-to-multi-address

translation, restriction of local address translation and internal server service. It can
simultaneously translate addresses and ports (PAT), and provide a Privacy protection
to the internal network.
The service features of the Eudemon firewall support NAT, including FTP, ICMP, NBT,

QQ and MSN, and it can pass the User defined ALG functions.
It supports the perfect multimedia service. It can implement the service that is based

on H.323 (including T.120, RAS, Q.931 and H.245), SIP and RTSP, and it can be
flexibly networked with multimedia MCU, GK, videoconferencing terminal and the
VOIP equipment, supporting the calls between public network and private network
and between private networks.
The Eudemon firewall can not only ensure the security of the multimedia service

network, but it can also implement the isolation of data service from voice service.

Carrier-class Firewall Product

Outstanding processing performance

The firewall requires the configuration of a large amount of ACL rules in the actual
application, especially in the current spreading of the worm virus. There are a great
number of ACL configurations to close the related ports. The Eudemon 100/200
firewall adopts a fast stream classification algorithm, and the performance of the
system cannot be affected basically in its searching among millions of ACL rules, and
its processing speed keeps unchanged, thus ensuring the high speed of ACL searching
to improve the integrated performance of the system. The Eudemon 100/200 firewall
is based on a dedicated hardware structure. Compared with those firewalls at the
same level, it provides a high capacity for adding connections per second, which gives
the firewall a powerful anti-attacking capacity.
Flexible service and routing feature

The Eudemon series supports such dynamic routing protocols as RIP and OSPF as well
as policy route. It is available with the multi-ISP function, that is to say, the firewall
can allocate traffics on the ISP line with different bandwidths as needed so that
the users can adjust different Internet-accessing lines based on charges when there

> 4-

Firewall Series
are several ISP egresses. When a line fails, the traffic can be switched to other lines
automatically to improve the reliability.
Perfect configuration management

The system can be maintained through dialup or remote logging, and it supports
the remote management of the VPN tunnel (IPSec); supports two kinds of user
management interface modes, CLI and GUI; supports SNMP (V1/V2c/V3). It can be
uniformly managed under the large-sized integrated NM software; in addition, it can
provide a dedicated high capacity log server software for supporting purposes, as
well as a powerful analysis functions and the free mini-log server software.
High Reliability

The Eudemon firewall gives a complete consideration on the high reliability of

network application, with the reliability technology of the telecommunication
equipment integrated, for example, the chassis and board hardware of Eudemon 200
is of special design; it supports the dual power (1+1 backup), supports the monitoring
of the temperature inside the chassis, automatically adjusts the rotary speed of the
fans; supports AC/DC input power module, the power supply can adapt to the great
changes in AC 85V ~ 264V and DC 36 ~ 75V; interface card, fan and power supply
support hot swapping, to fully meet the requirements of network maintenance,
upgrading and optimization.
It provides the hot backup mechanism for dual-system status, supporting the ActiveActive and Active-Standby mode. Two or more equipments form a hot backup group
to avoid the single-point fault of networking, to meet the most complex networking
and high reliability requirements for such industries as telecommunication.
Certification and sales license

It obtained the UL, CE, FCC and security specification certification in China, North
America, Europe, Austria and Japan and other countries and areas, as well as
sales license from the Security Ministry, and such competent authorities as China
Information Technology Security Certification Center (CNITSEC), State Secrecy Bureau
and the PLA.

> 4-

Firewall Series

At present, this product is being widely applied at home and sold to Europe, Middle
East, South America and Southeast Asia, and it also gets a wide application in NGN,
multi-media, wireless telecommunication network, large/medium-sized enterprise
network and industry network.

Product Specifications
Item

Eudemon 100

Eudemon 200

The host carries two FE interfaces,

Two fixed FE ports, two extended

and two extended slots, supporting a

slots, supporting a maximum of six

maximum of four FE ports.

FE ports.

Maximum throughput

100Mbps

400Mbps

Number of connected

200,000 connections

500,000 connections

5,000 connections/second

20,000 connections/second

2,000 Pcs

2,000 Pcs

Processor

MPC8240 200MHz

PowerPC 750 733MHz

NVRAM

128KB

512 KB

BootROM

512 KB

512 KB

SDRAM

128 MB by default

256MB by default

Number of slots

sessions
Number of new
connections per
second
Number of VPN
connections

Maximum: 256MB

Maximum: 512MB

Flash

16MB

32MB

Dimensions (W x D x H)

442mm x 413 mm x 44.4 mm

436.2 mm x 420 mm x 130.5 mm

Weight

6kg

18kg

Input voltage

AC: 85 ~ 270V (50/60Hz)

AC: 85 ~ 264V (50/60Hz)

DC: 40V ~ 75V

DC: 36V ~ 75V

Power

60w

100w

Mean Time Between

12.67 years

37.54 years

Failure (MTBF)

> 4-

Firewall Series

Supports the state inspection of SMTP, H.323 (including T.120 and RAS), SIP,

Standard and

HTTP, FTP, TCP, UDP; NAT supports such protocols as H.323 (including T.120

protocol

and RAS) SIP, ICMP, DNS, PPTP, NetMeeting and NBT; supports PPP, PPPOE,
ARP and DHCP Server; supports L2TP, GRE, and IPSec/IKE; supports QoS,
SNMPv3, RADIUS, RIP, OSPF and multiple multicast protocols.

Order Information
Order Information about Eudemon 100
The Eudemon 100 firewall can provide two power supply modes, AC and DC, which can
be chosen by users as needed. The host of Eudemon 100 and its accessories are shown
in the table below:
Item

Amount

Remarks

Eudemon 100

Mandatory; Type: AC host and DC host; composition: shell of

host

chassis, main board, fan, DC/AC power supply.

The Eudemon 100 firewall carries two 1-port Ethernet cards, and you can buy another
interface card of the Ethernet card if two Ethernet interfaces are not enough.
Item
FW-1FE

Cable
Ethernet cable

Remarks
Optional1-port fast Ethernet interface card

Order Information about Eudemon 200

The Eudemon 200 firewall can provide two power supply modes, AC and DC, which can
be chosen by users as needed. The host of Eudemon 200 and its accessories are shown
in the table below:
Item

Amount

Remarks

Eudemon 200

Mandatory; Type: AC/DC host with the standard configuration

host

of 2FE; composition: Shell of chassis, backpanel, fan frame and

fans installed in the fan frame. The host provides the firewall
processing board.

AC/DC power
supply

> 4-

1/2

Optional. The host contains one AC/DC power supply, and the
second one can be selected as the 1+1 backup.

Firewall Series

The Eudemon 200 firewall can be equipped with purchased interface modules except the
host in standard configurations if the number of interfaces is not enough. Note: The host
and these interface modules do not carry cables and optical cables; The Ethernet cable is
generally equipped by users themselves, and purchase is also an option; the optical cable
can be purchased as needed. The Eudemon 200 Gigabit optical interface adopts the SFP
optical modules, whose optical interface is LC connector; the 100M optical interface
module is the SC interface.
Item
FW-FIC-1FE

Cable
Ethernet cable

FW-FIC-2FE
FW-FIC-1SFX

Remarks
Optional. 1-port fast Ethernet card and 2-port
fast Ethernet card

Single-mode optical cable

Optional. 1-port Ethernet optical interface card;

single-mode 1310nm, 30km and SC connector

FW-FIC-1MFX

Multi-mode optical cable

Optional. 1-port Ethernet optical interface card;

FW-FIC-IPSEC

None

Optional. Hardware encryption card

FW-FIC-1GEUB

Ethernet cable

Optional. Gigabit Ethernet electrical interface

single-mode 1310nm, 1km and SC connector

card
FW-FIC-1GE-SFP

Multi-mode or multi-mode

Optional. 1-port and 2-port Gigabit Ethernet

optical cable; selecting the

optical interface card; optical interface is SFP,

GE SFP electrical interface

and the optical module of SFP of different types

module requires the use of

should be selected.

Ethernet cable.

For the SFP optical module, there is multi-mode

Optional

0.55Km; there are single-mode optical modules

with multiple distances, 10Km, 40Km, 70Km and
100Km.
In addition, the Gigabit GE electrical interface
module (RJ45) of SFP is provided, which is
inserted in the optical interface board to provide
the Gigabit electrical interface externally.

For more information, please visit www.huawei.com

> 4-

Firewall Series
Quidway Eudemon 500/1000 Firewall
Product Overview
The Quidway Eudemon 500/1000 firewall (hereinafter called the Eudemon 500/1000)
is the new generation hardware high-speed status firewall that is based on NP (Network
Processor) technology launched by Huawei, and its Gigabit-level performance can
meet the requirements of large-sized enterprise network and carrier-class service. The
Eudemon firewall series integrates the Application Specific Packet Filter (ASPF) and the
Virtual Private Network (VPN) with the Network Address Translation (NAT) in a proper
way, providing users network with an excellent security protection with outstanding
performance and high reliability of carrier-class equipment.

Product Appearance

Eudemon 500 Firewall

Eudemon 1000 Firewall

Product Features
A Powerful Security Protector
The Eudemon 500/1000 Gigabit firewall adopts the latest security technology in this
industry, with its core based on ASPF (Application Specific Packet Filter) of streams, to
implement the maintenance and monitoring of each connection status information and
dynamically filter the data packets, and it is a powerful protection for internal networks.

> 4-10

Firewall Series

Effectively protect from all kinds of network attacks, for example, eavesdropping

packets, IP address spoofing, source route attacks, address port scanning, Deny of
service attacks; application layer attacks (detection of Java, ActiveX controls, Trojan);
as well as intelligent worm virus protective function.
Support for a variety of protocols, and implementing status monitoring on HTTP, FTP,

RTSP, SIP, H.323 (including T.120, Q.931, RAS, H.245), HWCC and general TCP and
UDP application.
Perfect traffic monitoring feature; Monitoring the data traffic and connection status

of the system, dynamically controlling the connections and bandwidth of each

IP, which can effectively and flexibly prevent the ISP and IDC network from traffic
attacks. The perfect QOS feature can implement the bandwidth control service of
such feature streams as user-defined traffic and attack traffic.
Providing the function of follow-up through such functions of firewall as NAT log,

attacking prevention log and traffic monitoring log. And it can output the log in the
binary format, except for the text format, in a high-speed way to meet the application
environment requirements for heavy traffic.
The enhanced blacklist function can control the network authority of the users being

attacked by viruses, through which the service of next step can be provided (such as
announcement and online virus-killing).
Support for the cooperation with the IDS system and anti-virus system to construct

the complete network security protection. This product cooperates with the IDS
system of many manufacturers such as VenusTech, Is-One, Orient Legendmaker,
Kingnet Security, and provides the open IDS cooperative interface protocol and LIB,
which can cooperate with the IDS system of other manufacturers fast.
In addition, it is combined with the dedicated imbedded operating system, to guard

against the security holes for various general operating systems.

It implements AAA according to the RADIUS protocol, to construct the distributed

customer/server security access application control.

> 4-11

Firewall Series
Full-featured VPN GW
The Eudemon 500/1000 Gigabit firewall is still a full-featured VPN gateway that
can securely transmit data via public networks, and it can construct various kinds of
VPN networking such as remote access and network-to-network solutions. Huawei
was the first to put forward the philosophy of dynamic VPN in this industry, and its
headquarters and branches can be accessed with the dynamic IP address or private IP
address, and the (maintenance) tunnels can be automatically created between the VPN
equipments. The DVPN technology can realize the establishment of only N -1 channels
for the interconnection of the whole network, and the addition of a VPN node requires
only one maintenance link, with a good expandability. Compared to the traditional IP
VPN networking, it is lower in the maintenance cost and more flexible in the network
application. The dynamic VPN provides a perfect authentication and encryption feature,
to totally ensure the network security of users.
It supports multiple IP VPN access modes, for example, L2TP, GRE and IPSec, as well

as the DVPN dedicated to Huawei.

It supports multiple encryption algorithms, 56-bit data encryption standard (DES) or

168-bit 3DES, and it implements the key exchange function following the ISAKMP
protocol frame, IKE.
To obtain a more powerful encryption performance, The Eudemon200 supports

the high-speed hardware encryption card. It also provides a dedicated VPN client
software, and is easy to be used.
Various VPN protocols are implemented strictly following the RFC or related

standards, to ensure that the product can be interconnected and interworked with
the VPN equipment of other manufacturers.

NAT Service with Multiple Services

With the development of Internet, the shortage of IP addresses has become a more and
more serious problem. In view of the position and technical features of firewall, it is very
appropriate to provide the perfect address translation technology on the Eudemon.
The Eudemon series can implement such features as multi-to-multi-address

translation, restriction of local address conversion and internal server service. It can
simultaneously translate addresses and ports (PAT), and provide a Privacy protection

> 4-12

Firewall Series

to the internal network.

The service features of the Eudemon firewall support NAT, including FTP, ICMP, NBT,

QQ and MSN, and it can pass the User defined ALG functions.
It supports the perfect multimedia service. It can implement the service that is based

on H.323 (including T.120, RAS, Q.931 and H.245), SIP and RTSP, and it can be
flexibly networked with multimedia MCU, GK, videoconferencing terminal and the
VOIP equipment, supporting the calls between public network and private network
and between private networks.
The outstanding NAT translation performance supports the number of over 800,000

concurrent connections per second, to meet the translation requirements of the

MAN egress. The Eudemon firewall can ensure the security of the multimedia service
network, and implement the isolation of data service from voice service as well.

Carrier-class Firewall Product

Outstanding processing performance

The Eudemon500/1000 firewall differs from the firewall in traditional sense. It adopts
the network processing technology to ensure the continued provision of outstanding
forwarding function even in the case of small packet (64 bytes) and complex
application environment (a great number of ACL rules and providing of the NAT
service), to reach the capability of Gigabit line speed. In addition, it has a capability
of adding over 100,000 connections per second, so it is available with a powerful
guarding capacity against the frequently occurring SYN FLOOD attack on networks.
Flexible service and routing feature

The Eudemon series supports such dynamic routing protocols as RIP and OSPF as well
as policy route. It is available with the multi-ISP function, that is to say, the firewall
can allocate traffics on the ISP line with different bandwidths as needed so that users
can adjust different Internet-accessing lines based on charges when there are several
ISP egresses. When a line fails, the traffic can be switched to other lines automatically
to improve the reliability.
Perfect configuration management

The system can be maintained through dialup or remote logging, and it supports
the remote management of the VPN tunnel (IPSec); supports two kinds of user
> 4-13

Firewall Series

management interface modes, CLI and GUI; supports SNMPv1/v2c/v3. It can be

uniformly managed under the large-sized integrated NM software; in addition, it can
provide large-sized dedicated log server software for supporting purpose, as well as a
powerful analysis function and the free mini-log server software.
High Reliability

The Eudemon firewall gives a full consideration on the high-reliability of network

application, and it integrates the reliability technology of the telecommunication
equipment: redundant hardware design, power 1+1 backup, support for temperature
monitoring in chassis, automatic adjustment of fan rotary speed, interface card, fans
and power supporting hot swapping, all these can fully meet the requirements for
network maintenance, upgrading and optimization.
Through the combination with the dynamic routing protocol, the Eudemon firewall
provides the hot backup mechanism for dual-system status, supporting the ActiveActive and Active-Standby mode. Two or more equipments form a hot backup group
to avoid the single-point fault of networking, which enables the firewall to meet the
most complex networking and high reliability requirements for such industries as
telecommunication.
Certification and sales license

It obtained the UL, CE, FCC and security specification certification in China, North
America, Europe, Austria and Japan and other countries and areas, as well as
sales license from the Security Ministry, and such competent authorities as China
Information Technology Security Certification Center (CNITSEC), State Secrecy Bureau
and the PLA.
At present, this product is being widely applied at home and sold to Europe, Middle
East, South America and Southeast Asia, and it also gets a wide application in NGN,
multi-media, wireless telecommunication network, large/medium-sized enterprise
network and industry network.

> 4-14

Firewall Series

Product Specifications
Eudemon 500

Item

Eudemon 1000

Number of extension

Two fixed FE ports and four extended Two fixed FE ports and four extended

slots

slots. Support for 6GE+2FE or 26FE

slots. Support for 6GE+2FE or 26FE

Maximum throughput

2,000Mbps

3,000Mbps

Number of connected

500,000 connections

800,000 connections

>100,000 connections/second

>100,000 connections/second

2,000 PCS

2,000 PCS

Network processor + PowerPC 750

Network processor + PowerPC 750

733MHz

733MHz

NVRAM

512 KB

512 KB

BootROM

512 KB

512 KB

SDRAM

256MB by default

256MB by default

Maximum: 512MB

Maximum: 512MB

Flash

32MB

32MB

Dimensions (Wx D x H)

436.2mm x 420 mm x 130.5 mm

436.2 mm x 420 mm x 130.5 mm

Weight

18.7kg

18.7kg

Input voltage

AC: 85 ~ 264V (50/60Hz)

sessions
Number of new
connections per
second
Number of VPN
connections
Processor

DC: 36V ~ 75V

Maximum power

105w

105w

Mean Time Between

37.54 years

37.54 years

Failure (MTBF)
Standard protocols

Supports the state inspection of H.323 (including T.120, RAS), SIP, RTSP,
HTTP, FTP, TCP and UDP and its NAT ALG; supports PPP, PPPOE, ARP, DHCP
Server, and RAIDUS; supports VPN such as L2TP, GRE, and IPSec/IKE;
supports RIP, OSPF and multiple multicast protocols.

Order Information
Both the Eudemon 500 and 1000 have similar configurations, and they can provide
AC and DC power supply. Users can select them as needed. The host of the Eudemon
500/1000 and their accessories are shown in the table below:
> 4-15

Firewall Series

Item

Amount

Remarks

Mandatory; Type: AC/DC host with the standard configuration

Eudemon 500

of 2FE; composition: Shell of chassis, backpanel, fan frame and

fans installed in the fan frame. The main-control board and the
network processor board are provided in the host.
Eudemon 1000

Mandatory; Type: AC/DC host with the standard configuration

of 2FE; composition: Shell of chassis, backpanel, fan frame and
fans installed in the fan frame. The main-control board and the
network processor board are provided in the host.

AC/DC power supply

1/2

Mandatory: 1; optional: the second one as the 1+1 backup

The Eudemon500/1000 firewall can be equipped with purchased interface modules except
the host in standard configurations. Note: The host and these interface modules do not
carry cables and optical cables; The Ethernet cable is generally equipped by the users
themselves, and purchase is also an option; the optical cable can be purchased as needed.
The Eudemon500/1000 firewall adopts the SFP optical modules, whose optical interface is LC
connector; the selection of optical cables requires the selection of the LC connector for the
end connected to the firewall. The details are shown in the table below:
Item

Cable

Remarks

FW-HIC-8FE

Ethernet cable

Optional. 8-port 100M Ethernet interface card

FW-HIC-4FE

Ethernet cable

Optional. 4-port 100M Ethernet interface card

FW-HIC-2FE

Ethernet cable

Optional. 2-port 100M Ethernet interface card

FW-HIC-1GE-SFP

Multi-mode or multi-

Optional. High-speed 1-port and 1-port Gigabit Ethernet

mode optical cable;

optical interface card; optical interface is SFP, and the optical

selecting the GE SFP

module of SFP of different types should be selected.

electrical interface

For the SFP optical module, there is multi-mode 0.55Km;

module requires the

there are single-mode optical modules with multiple

FW-HIC-2GE-SFP

use of Ethernet cable. distances, 10Km, 40Km, 70Km and 100Km.

Optional

In addition, the Gigabit GE electrical interface module (RJ45)

of SFP is provided, which is inserted in the optical interface
board to provide the Gigabit electrical interface externally.

FW-FIC-IPSEC

> 4-16

None

Optional. Hardware encryption card

memo

Firewall Series

> 4-17

memo

Firewall Series

> 4-18

memo

Firewall Series

> 4-19

memo

Firewall Series

> 4-20

HUAWEI TECHNOLOGIES CO., LTD.

Add: Huawei Industrial Base
Bantian Longgang
Shenzhen 518129, P.R.China
Tel : +86-755-28780808
Version No.: M3-080030-20060619-C-3.0
www.huawei.com