LE0KS9303
Megosztás:
Huawei S9303 Assembly Chassis
The S9300 operates on the Versatile Routing Platform (VRP) operating system developed by Huawei and adopts the hardware-based forwarding and non-blocking data switching technology. The S9300 features carrier-class reliability, line-speed forwarding capability, perfect Quality of Service (QoS) mechanism, service processing capability, and good expansibility. The S9300 provides rich enterprise network features, including firewall, Network Address Translation (NAT), network traffic analysis, IPSec VPN, and load balancing, meeting requirements of various services on enterprise networks.
The S9300 is mainly used to access, converge, and transmit services on the MAN. As the access and convergence device on the MAN, the S9300 provides EPON, Fast Ethernet (FE), Gigabit Ethernet (GE), and 10GE interfacesthat transmit services at line speed.The S9300 can be applied to enterprise networks and data centers, providing high-density interfaces and rich value-added service (VAS) capabilities.

The S9303 supports a maximum of three Line Processing Units (LPUs).

Appearanceof the S9303

9303 front.png

Appearanceof the back of the S9303

9303 back.png

The dimensions of the S9303 are 442 mm x 476 mm x 175 mm (width x depth x height).

Facing the chassis, the LPUs, MCUs, and power modules are mounted from top to bottom.Ventilation and heat dissipation of the S9303 are performed from the back ofthe chassis. The handles reside on both sides of the chassis.


Component Layout of the S9303

layout of the S9303.png

  • All components of the S9303 are located on the front panel for maintenance. There are totally five slots for horizontally inserted boards in the board cage. The two half-height slots in the lower half of the chassis are reserved for the MCUs that support 1+1 backup mode. The other three slots are reserved for the LPUs.
  • The fan frame and air filter of the S9303 are located at the back of the chassis.
  • Located at the bottom of the chassis, the power modules work in 1+1 backup mode and support double power supply networks for power input. The power modules can be either AC power modules or DC power modules.
  • The power modules support PoE. The PoE function supports only the AC power supply and does not support the backup of power modules.

Product Characteristics

The S9300 provides high-density Ethernet interfaces. This section describes the the maximum interface density on the LPU and in the entire system, forwarding capability, features and reliability.

High-Density Interfaces

Table 1 lists the types of interfaces on the boards with high interface density and describes the interface density of theboards and in the entire system.

Table 1Table of interface density of the board and system

Interface Type

Interface Density on the LPU

Interface Density of the System

 10GE

48

  S9303: 144

 GE

48

  S9303: 144

 E

48

  S9303: 144

Flexible Extensibility

The system extensibility includes:

  • Service extensibility: The SRU of the system supports the FSUA, which can meet the requirements for service development in the future.
  • Power supply: Currently, the maximum power supply of a power supply module is 1600 W, and 1+1 and 2+2 redundancy are supported. In the future, 4+4 redundancy will be supported.
  • cluster switch system (CSS): In a CSS, two switches are connected through dedicated stacking cables to form a logical switch. To meet the forwarding requirement of the database and ensure the network reliability, the CSS technology is used.

Powerful Forwarding Capability

On the S9300, the hardware completes two-level packet replication to forward multicast at wire speed. Thatis, the SFU replicates multicast packets to the LPU, and the forwarding engineof the LPU replicates the multicast packets to its interfaces.

Table 2 System specifications of the S9300

 Switching capacity

 720 Mbps

 Backplane capacity

 3Tbit/s

 Forwarding capacity

 540 Mpps


Rich Features

  • The S9300 provides rich Layer 2 service features, including the following:
      • VLAN
      • Generic Attribute Registration Protocol / Generic VLAN Registration Protocol (GARP/GVRP)
      • Selective QinQ
      • RRPP
      • Smart Ethernet Protection (SEP)
      • Smart Link
      • STP, RSTP, and MSTP
      • Link aggregation
      • DHCP snooping
      • IGMP snooping
      • IPV6 ND snooping
      • MLDv1/v2 snooping
      • Ethernet OAM
  • The S9300 provides various IP services, including:
      • IPv4 unicast routing protocols, including the Routing Information Protocol (RIP), Open Shortest Path First (OSPFv2), Intermediate System-to-Intermediate System (IS-IS), Border Gateway Protocol (BGP), and Multiprotocol Border Gateway Protocol (MBGP)
      • IPv6 unicast routing protocols, including RIPng, OSPFv3, ISISv6, and BGP+
      • Multicast routing protocols, including IGMP, MLD, Multicast Source Discovery Protocol (MSDP), multicast VLAN, PIM-DM, PIM-SM, and PIM-SSM
      • VRRP
      • DHCP relay, DHCP server, and Option82
      • TheS9300supportsdistributed and integratedNetStream.
  • The S9300 provides MPLS services.
      • MPLS forwarding
      • LDP
      • MPLS-TE
      • MPLS-OAM
  • The S9300 provides perfect VPN services, including the following features:
      • VPLS
      • VLL
      • BGP/MPLS IP VPN
  • The S9300 provides mobile services, including:
      • Stratum-3 clock
      • Ethernet clock synchronization
      • 1588v2
  • The S9300 provides rich intranet features, including:
      • TheS9300, which functions as the network access device (NAD), supports Web authentication, 802.1x authentication, and MAC address authentication.
      • PoE
  • The S9300 provides service distribution, including:
      • Firewall/NAT
      • Load balancing
      • IPSec VPN

Excellent SecurityDesign

The S9300 adopts adistributed structure, which guarantees the separation between the data planeand the control plane. It provides a security performance leading in the industry.

The S9300 provides the following security features:

  • Three user authentication modes: local authentication, Remote Authentication Dial in User Service (RADIUS) authentication, and Huawei Terminal Access Controller Access Control System (HWTACACS) authentication.
  • Hardware-based packet filtering and sampling, which guarantees high performance and high scalability
  • Multiple authentication methods including plain text authentication and Message Digest 5 (MD5) for upper-layer routing protocols such as OSPF, IS-IS, RIP, and BGP-4
  • ACL on the forwarding plane and control plane
  • Anti-attack features: The S9300 provides the blacklist and CAR functions to limit the packets to be sent to the CPU.
  • Port security
  • URPF
  • DHCP snooping and DHCP snooping over VPLS
  • MAC limit and MAC Forced Forwarding (MFF)
  • IP source trail, ARP attack defense,ICMP attack defense,and broadcast traffic suppression
  • Blacklist and attack trace: TheS9300filters out the traffic of users on the blacklist and displays the physical interfaces and VLAN IDs of the attackers.
  • Whitelist: TheS9300provides a high-priority channel for the protocol packets transmitted to the CPU.

Carrier-ClassReliability

The S9300 provides a powerful monitoring system. The S9300 manages and maintains the entire system by using the individual monitoring unit. The monitoring unit manages, monitors, and maintains the boards, fans, and power modules.

The S9300 complies with Electro Magnetic Compatibility (EMC). The modular design of the S9300 implements EMC isolation between boards.

The S9300 meets the requirements for the high reliability of carrier-class and high-end devices.The S9300 provides the following features shown in Table 3 to ensure high reliability.

Table 3 Carrier-class reliability

Item

Description

System protection mechanism

The boards, power modules, and fans are hot swappable.

The monitoring unit is totally separated from the service system.

The system can operate normally for 96 hours when a single fan fails.

The MPUs work in 1+1 backup mode.

The power modules work in 1+1 or 2+2 backup mode.

Key components such as the clocks and management buses work in backup mode.

Protection against abnormalities

The system can restart automatically and be recovered when abnormalities occur.

The system resets a board when abnormalities occur on the board and resumes the work.

The system automatically restores the interface configuration.

The system provides protections against over-current and over-voltage for power modules and interfaces.

The system provides protection against mis-insertion of boards.

Power alarm monitoring

The system provides alarm prompt, alarm indication, running status query, and alarm status query.

Voltage and environment temperature monitoring

The system provides alarm prompt, alarm indication, running status query, and alarm status query.

Reliability design

The system adopts distributed hardware-based forwarding.

The control channel is separated from the service channel to provide a non-blocking control channel.

The system provides fault detection for the system and boards and alarm function for indicators, and the NMS.

Reliable upgrade

The system supports in-service patching.

The system supports version rollback.

The system supports online upgrade of the BootROM.

The system supports the Error Checking and Correction (ECC) Random Access Memory (RAM).

Fault tolerance design

Data backup

The system supports hot backup of the data between the active and standby units. When the active unit fails, the standby unit automatically takes over the active unit for data transmission. This prevents data loss.

Synchronization configuration

The system supports the synchronization between the MPUs and LPUs.

The system can automatically select and boot correct applications.

The system supports the automatic upgrade and restoration of the BootROM program.

The system can back up configuration files to the remote FTP server.

The system can automatically select and run correct configuration files.

The system provides abnormality monitoring for the system software, automatic restoration, and log record.

Operation security

The system provides password protection for system operations.

The system provides hierarchical protection for commands through the configuration of login user levels and command levels.

The system can lock the terminal through commands to prevent illegal use.

The system provides operation and confirmation prompts for some commands that may degrade the system performance.

Operation and maintenance center

The system adopts the generic integrated Network Management System platform developed by Huawei.

Good Maintainability

TheS9300provides the following maintenance features:

  • The S9300 supports Ethernet OAM, providing point-to-point Ethernet fault management to detect faults in the first mile of the directly connected link on the user side of the Ethernet. The S9300 supports automatic neighbor discovery, link fault monitoring, remote fault notification, and remote loopback configuration defined in IEEE 802.3ah, and Connectivity Check (CC) fault detection, MAC Ping, and MAC Trace defined in IEEE 802.1ag.
  • The S9300 supports MPLS OAM, providing fault detection and location techniques such as Ping and TraceRoute on the MPLS network.
  • The S9300 supports 802.1ag, 802.3ah, association between the status of BFD sessions, and end-to-end OAM.
  • The S9300 supports traffic statistics based on physical interfaces, VLAN IDs, MPLS LSPs, and ACLs.
  • Through theU2000, you can operate theS9300for: Device management, Interface management, VLAN management, Multicast management, MPLS management, Software upgrading management, Configuration file management(item list)
  • The S9300 supports different configuration methods such as end-to-end configuration, batch configuration, and configuration wizard. At the same time, it provides corresponding default configuration templates.
  • The S9300 supports remote maintenance. The S9300 supports remote maintenance through Telnet.
  • The S9300 supports in-service upgrade. When the system is operating normally, it can be upgraded through FTP or TFTP. In addition, with the active/standby switchover function, services are not interrupted during the upgrade.
  • The S9300 supports hot patch. It can upgrade only the features that need to be optimized. Services are not interrupted during a patch is installed. It also supports deletion and confirmation during a patch is installed.
  • It supports rollback of versions. When the in-service upgrade of the system software or that of a patch fails, the S9300 can return to the version before the upgrade.
Hua logo.jpg
  Ma van...
2019. július. 17. szerda, Endre, Elek napja.
  Elérhetőségünk
2045 Törökbálint,
FSD Park II. 2.emelet

Telefon:
+36.23.531.270
Fax: +36.23.531.279
Email: office@lantel.hu

Copyright © Lantel 2010. Minden jog fenntartva!