Quidway S8500 Series 10G Core Routing Switches

HUAWEI TECHNOLOGIES CO., LTD.

Contents
Product Overview ......................................................................... 1 Product Features .......................................................................... 2 Product Specifications .................................................................. 4 Standards and Specifications Compliance ..................................... 8 Ordering Information ................................................................. 12 Applications ............................................................................... 17

Copyright 2006 by Huawei Technologies Co., Ltd. All Rights Reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.

Quidway S8500 Series 10G Core Routing Switches

Product Overview
The Quidway S8500 switch series (S8500 for short) is a new-generation 10G core routing switch platform developed by Huawei geared towards applications in enterprise campus network core layers and carriers' IP metropolitan-area network (MAN) core or distribution layers for its intelligent, scalable architecture, as well as its converged, secure and reliable performance. To help carriers and enterprises accomplish their inspiring business perspective with appropriate investment and valuable consideration in IT infrastructure, the S8500 series employs the unparalleled and innovational 10G platform and flexible port density interface modules to provide high speed links for MAN, campus and data center networks, featuring low cost, high performance and capabilities to support abundant services. Configured maximally 576 GE-ports or 48 10GE-ports, the S8500 series provides L3 and L2 forwarding performance of large capacity, high density and modularization to support the MPLS distributed wire-speed forwarding. Integrated with multiple services categories, powerful QoS guarantee, complete security management mechanism and carrier-class high reliability, the S8500 series demonstrates its coincidence with customer's aspiration and continues to satisfy their requirements for maximum network uptime, comprehensive network security, and scalable and flexible services.

S8512

S8508

S8505

S8502

Figure 1 Appearance of S8500 Series Switches

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

Product Features
The S8500 series adopts numerous industry-leading features to realize the promise of top-ranking services, performance and availability with investment protection for enterprise and service provider IP communication markets, including:

Advanced System Structure

The S8500 series introduces the distributed system architecture and powerful ASIC chips for high-speed routing, as well the Crossbar technologies for packet switching, which greatly improve the forwarding performance and expansion capabilities of the routing switch. Embedded in the main control module, the Crossbar switching fabric provides a switching capacity up to 720 Gbps and can be set to work in the active/standby or load-sharing mode by software configuration. Through several 10 Gbps buses, the interface module is connected to the Crossbar switching networks on the two main control modules realizing the hot backup of dual main controls and dual switching networks in the real sense and greatly improving the system reliability. Adopting the advanced system ASIC chip design, the longest routing prefix mode and the packet-bypacket forwarding mode, the S8500 series can effectively combat network viruses like Worm.Blaster, get more applicable to large-scale networks with multiple services and complex visit flows and match more exactly the Ethernet MAN development trend, while keeping the wire-speed performance and relying on the low cost.

High Capacity, High-Density, Wire-Speed Forwarding

The S8500 series can provide 1.8T backplane bandwidth, 720 Gbps switching capacity and 428 Mpps forwarding capability to support ultimate 576 GE ports or 48 10GE ports totally. In addition, the S8500 series provides flexible interface choices from 10/100/1000 Megabit to 10 Gigabit Ethernet and combined interface boards to satisfy the customers requirements for high density and high throughput. Ideal for powerful hardware platform upgrades capabilities, the S8500 series has reserved a large number of bus interfaces on the backplane for future system expansion. The system switching capacity can be smoothly expanded to terabits to meet the ever-increasing bandwidth needs and user investment protection.

Carrier-Class Reliability Design

The S8500 series adopts distributed processing structure to support dual main control switching units with all interface modules and power supply modules hot swappable and passive backplane design. The power system has dual power inputs following the 1+1 redundant hot backup mechanism. All the reliability designs ensure the system to meet strict requirements for carrier-class network reliability (up to 99.999%).

 MPLS Distributed Wire-Speed Supported

The S8500 series provides hardware based Multi-protocol Label Switching (MPLS) to enable VPN services within the enterprise and facilitates smooth integration with wire-speed service provider core infrastructures and Metro Ethernet deployments. More than featuring the configuration of VPN IPv4 address & distribution VPN-IPv4 information by BGP, the S8500 series offers the comprehensive MIB functions through supervising VPN VRF, VPN Interface, VPN VRF BGP configuration table and VPN VRF Route ,VPN VRF Route Target table.

VLL & VPLS Layer 2 VPN Solutions

With the availability of MPLS enhanced interface module, The S8500 series provides abundant distributed and wire speed L2 VPN processing capability, including Martini and Kompella mode with 4K VLL VC. In addition, MPLS-VPLS has also been developed to provide centralized VPLS processing capability, with 1K VPLS VSI and MAC address 128/VSI; the processing capacity of VPLS NP module reaches 3 Gbps and MAC table is 128K in total.

RPR Solution
The S8500 will offer 10G RPR interface module in Q1/2006. The RPR (Resilient Packet Ring) technology combines advantages of SDH network and Ethernet, such as fault self-healing and cost-effectiveness for SDH, high bandwidth, high flexibility and expansibility for Ethernet. In addition, as RPR is based on ring technology, it can provide advanced features like highly efficient bandwidth management, automatic topology discovery, QoS guarantee, etc.

Complete Security Mechanism

The S8500 series employs the 802.1x mode for access user authentication, secure SNMPv3 NM protocol and MD5 encrypted authentication of OSPFv2, RIPv2 and BGPv4 packets. By distinguishing different users of various service levels, the S8500 series has different configuration privileges and provides two user authentication modes: local authentication and RADIUS authentication with the standard RADIUS protocol and SSH for access safety. The rich traffic control mechanisms are supported including ACL based on source and destination IP address, MAC address and port number.

10 Gigabit Interfaces Supported

The S8500 series figures the industry leading 10 Gigabit Ethernet and OC-192 packet over SDH/SONET (PoS) up to 48 10GE or 12 10G PoS port density of the whole system to provide a pertinent solution for MAN applications to simplify the network architecture and reduce the network construction costs. With chassis size ranging from 2 (for S8502), 5 (for S8505), 8 (for S8508) to 12 (for S8512) and utmost 288 10/100/1000M Ethernet ports supporting IEEE 802.3af Power over Ethernet (PoE), the S8500 delivers a intelligent and economical solution for the enterprise campus aggregation network.

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

The S8500 series symbolizes the 10GE network practices by providing powerful QoS guarantee, rich services features such as ACL, strategic routing and security, wire-speed MPLS forwarding, IP VPN services and transparent LAN services.

Integrated IEEE 802.af PoE Supported

Coming with the centralized and manageable Power-over-Ethernet (PoE) power supply assembly, the S8500 series simplifies the customers power layout through supporting the integrated IEEE 802.3af PoE functions to the desktop access switch. By providing optional choices of the PoE Chassis, power module and surge protection device, the PoE system facilitates the enterprise campus and carriers network layout to be more expansible and scalable.

Flexible Network Address Translation (NAT) Deployment

The S8500 series supports the flexible Network Address Translation (NAT) deployment by providing the specific NAT processing module to achieve the application layer gateway service of FTP, ICMP, DNS, LDAP,H.225, H.245, SIP, etc. To ease the customers internal network IP management and speed up the campus network configuration, the NAT processing module provides NAT log, NAT blacklist and NAT/ NAPT of Internet access service for all VPN users.

Firewall and IPSec Function Supported

With the flooding of network attacks, security has been becoming a critical issue in the network industry. Concerning about customers' demand in the network security, the S8500 switches provide SecBlade Firewall/VPN module to support rich firewall and IPSec function. SecBlade Firewall module supports ASPF, NAT-PAT, IPSec VPN encryption features, multiple certificate authentication, various network attack defending, real-time traffic analysis, internal network address security, email alarm, etc. SecBlade VPN module provides abundant VPN functions (such as L2TP VPN, GRE VPN, IPSec VPN, MPLS VPN and Huawei DVPN) and supports IPSec hardware encryption (such as DES, 3DES and AES).

Product Specifications
Key specifications of S8500 series switches are given in Table 1 ~ Table 5. Table 1 S8500 Series Software and Hardware Attributes
Attributes
Switching Capacity Backplane Capacity Packet Forwarding Speed Number of Slots

S8502
240 Gbps 450 Gbps 143 Mpps 4

S8505
300 Gbps 750 Gbps 178 Mpps 7

S8508
480 Gbps 1.2 Tbps 285 Mpps 10

S8512
720 Gbps 1.8 Tbps 428 Mpps 14

Attributes
Number of Slots for Interface Modules 2/3

S8502
5

S8505
8

S8508
12

S8512

L2 Features

4K VLAN Super VLAN PVLAN 802.1p priority 802.1Q STP/RSTP/MSTP GARP/GVRP IGMP snooping Port mirroring Flow mirroring Link aggregation (802.3ad) Cross boards link aggregation LACP 802.1x Guest VLAN Dynamic VLAN Broadcast storm suppression MDI/MDI-X auto-negotiation HWTACACS Selective QinQ (Class D interface module supported) 14K per card 42K per system (VLAN non-cross cards) 14K per card 70K per system (VLAN non-cross cards) 14K per card 112K per system (VLAN non-cross cards) 14K per card 168K per system (VLAN non-cross cards)

MAC Address Table

L3 Features

RIPv1, RIPv2, OSPF, IS-IS, BGPv4 Equal Cost Multi Path: 8 Policy routing Routing policy uRPF (NAT service module supported) VRRP DHCP-RELAY DHCP-SERVER NAT IGMPv2 IGMP snooping PIM-DM PIM-SM MSDP/MBGP Any-RP Label stack levels: 4 LER/LSR MCE Embedded MPLS VPN HoPE Inter-AS MPLS VPN

Multicast

MPLS VPN

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

Attributes

S8502

S8505

S8508

S8512

VPLS & VLL

VPLS VSI number: 1K Mac table: 128/VSI,128K (total) VPLS Martini method H-VPLS VLL VC number: 4K VLL Martini method VLL Kompella method DiffServ Each port supporting 8 priority queues Detailed bandwidth management with the granularity of 8K Congestion prevention algorithm: WRED and tail drop Queue scheduling algorithms: SP, WRR and SP+WRR Traffic shaping MTBF > 200,000 hours MTTR < 0.5 hours Dual main control boards 1+1 power supplies Modules hot-swappable Integrated chassis that can be installed in a 19-inch rack 436 x 420 x 265 40 kg 436 x 450 x 486 65 kg 436 x 450 x 619 80 Kg 436 x 450 x 753 100 kg

QoS

Reliability

System Architecture Dimension (mm) (WDH) Weight (full configuration) Environmental Requirement

Working temperature: 0C ~ 45C Relative humidity: 10%~90%, no condensing

Table 2 S8500 Series Power Supplies

Attributes
Input Voltage (AC)

S8502
100 ~ 240 VAC auto-ranging (50 ~ 60Hz)

S8505
100 ~ 240 VAC auto-ranging (50 ~ 60Hz)

S8508

S8512

2000W AC power supply module: 100~240 VAC auto-ranging (50 ~ 60Hz) Output 1200W: 100 ~ 120 VAC Output 2000W: 200 ~ 240 VAC 2000W DC power supply module: -48 ~ -60 VDC 2000W < 1200W <1600W

Input Voltage (DC) Max Power Output of Single Power Module Max Power Dissipation Power Redundancy

-48 ~ -60 VDC 600W < 600W

-48 ~ -60 VDC 1200W < 1000W

1+1 backup, hot swappable

Table  S8502 PoE Assembly Specifications

Attributes
PoE Power System Deployment (redundant configuration) PoE Power Module

Description
1+1 redundancy for PoE power supply modules Hot swappable 2500W AC power supply module: 100~240 VAC auto-ranging Output 1250W: 100 ~ 120 VAC Output 2500W: 200 ~ 240 VAC Totally 2500W: 200 ~ 240V Supports 144 ports at 15.4W

PoE Power Dissipation

Table 4 S8505/S8508/S8512 PoE Assembly Specifications

Attributes
PoE Power System Deployment (redundant configuration) PoE Power Module

Description
2+1 redundancy for PoE power supply modules Hot swappable 2500W AC power supply module: 100 ~ 240 VAC auto-ranging Output 1200W: 100 ~ 120 VAC Output 2500W: 200 ~ 240 VAC Totally 4500W: 200 ~ 240V Supports 288 ports at 15.4W

PoE Power Dissipation

Table 5 S8500 Series Port-density Information and WAN Interfaces

Maximum System Port Densities
10 Gigabit Ethernet OC-48 PoS OC-192 PoS Gigabit Ethernet Fast Ethernet

S8502
12 12 3 144 144

S8505
20 20 5 240 240

S8508
32 32 8 384 384

S8512
48 48 12 576 576

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

Standards and Specifications Compliance

Table 6 lists the standard compliance specifications for the S8500 series switches. Table 6 S8500 Series Compliance Specifications
Name Code
IEEE 802.1D IEEE 802.1p/Q IEEE 802.1w IEEE 802.1s IEEE 802.1X IEEE802.3 IEEE802.3u IEEE IEEE802.3z IEEE802.3ab IEEE802.3ae IEEE802.3x IEEE802.3ad IEEE802.3af (PoE) IEEE802.3ak IEEE 802.17 RFC1771 RFC1772 RFC1965 RFC1997 BGPv4 RFC1998 RFC2385 RFC2439 RFC2796 RFC1657 RFC2328 OSPFv2 RFC1587 RFC2370 RFC1850 ISO10589 IS-IS RFC1195 RFC2973 Bridging VLAN tagging RSTP MSTP Port based access control 10Base-T 100BASE-TX, 100BASE-FX 1000BASE-SX, 1000BASE-LX 1000BASE-T 10 Gigabit Ethernet Flow control Link aggregation Power over Ethernet 10GBASE-CX4 Resilient Packet Ring (RPR) access method & physical layer specifications BGPv4 Application of the BGP BGPv4 autonomous system confederations Communities attribute PPP Gandalf FZA compression protocol Transmission Control Protocol (TCP) MD5 authentication for BGP Route flap dampening Route reflection Definitions of Managed Objects for BGPv4 OSPFv2 OSPF NSSA OSPF opaque link-state advertisement (LSA) option OSPFv2 Management Information Base (MIB), traps IS-IS IS-IS IS-IS mesh groups

Description

Name
RFC1058 RFC1723 RIP RFC1724 RFC2453 RFC2083 RFC791 RFC792 RFC793 RFC768 RFC826 RFC783 RFC854 RFC894 RFC1213 RFC950 RFC959 RFC1141 RFC1122 RFC1256 IP General RFC1393 RFC 2338 RFC 2787

Code
RIPv1 RIPv2 RIPv2 MIB RIPv2

Description

PNG (Portable Network Graphics) specification version IP ICMP TCP UDP ARP TFTP Telnet IP over Ethernet MIB-II Internet standard subnetting procedure FTP Incremental updating of the Internet checksum Requirements for Internet hosts - communication layers ICMP router discovery messages Trace route using an IP option VRRP Definitions of Managed Objects for VRRP DHCP relay IGMP Snooping Routing Policy Specification Language (RPSL) NTPv3 Evolution of the interfaces group of MIB-II SNMP Telnet echo option Telnet suppress go ahead option NSFNET routing architecture NAT NAT terminology and considerations RADIUS HWTACACS

RFC 1542 & 2131 RFC2236 RFC2280 RFC1305 RFC1573 RFC1157 RFC857 RFC858 RFC1093 RFC1631 RFC2663 RFC2138 RFC1492

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

Name
RFC 1112 RFC 2236 RFC 2715 IP Multicast RFC 2362 Draft RFC 3618 RFC 2283 RFC2474 QoS RFC2475 RFC3168 RFC3031 RFC3032 MPLS RFC3033 RFC3036 RFC3037 RFC2547 RFC2764 RFC2796 VPN RFC2842 RFC2858 RFC2917 RFC2918 RFC3107 Draft VLL&VPLS Draft Draft Draft RFC1619 PoS RFC1661 RFC1662 RFC2687 ITU

Code
IGMPv2

Description
Host extensions for IP multicasting Interoperability rules for multicast routing protocols PIM-SM PIM-DM:draft-ietf-idmr-pim-dm-06 MSDP Multi-protocol extensions for BGPv4 Definition of the Differentiated Service field (DS field) in the IPv4 and IPv6 headers Architecture for Differentiated Service The addition of Explicit Congestion Notification (ECN) to IP Multi-protocol label switching architecture MPLS label stack encoding The assignment of the information field and protocol identifier in the Q.2941 generic identifier and Q.2957 userto-user signaling for the Internet protocol LDP specification LDP applicability BGP/MPLS VPN A framework for IP based virtual private networks BGP route reflection - an alternative to full mesh IBGP Capabilities advertisement with BGPv4 Multi-protocol extensions for BGPv4 A core MPLS IP VPN architecture Route refresh capability for BGPv4 Carrying label information in BGPv4 Draft-martini-l2circuit-trans-mpls-08.txt Draft-martini-l2circuit-encap-mpls-04.txt Draft-kompella-ppvpn-l2vpn-01.txt Draft-ietf-l2vpn-vpls-ldp-06.txt PPP over SONET The point-to-point protocol PPP in HDLC-like framing PPP in a real-time oriented HDLC-like framing Definition and test methods for the relevant parameters of single-mode fibers Characteristics of a single-mode optical fiber cable

G.650 (4/97) G.652 (4/97)

10

Name

Code
G.661 (11/96) G.662 (7/95) G.663 (10/96) G.671 (11/96)

Description
Definition and test methods for the relevant generic parameters of optical fiber amplifiers Generic characteristics of optical fiber amplifier devices and sub-systems Application related aspects of optical fiber amplifier devices and sub-systems Transmission characteristics of passive optical components Functional characteristics of interoffice and long-haul line systems using optical amplifiers, including optical multiplexing Physical/Electrical characteristics of hierarchical digital interfaces Optical interfaces for equipments and systems relating to the synchronous digital hierarchy Digital line systems based on the synchronous digital hierarchy for use on optical fiber cables Equipment engineering; environmental conditions and environment tests for telecommunications equipment Electromagnetic compatibility Dimensions of mechanical structures of the 482.6 mm series

ITU

G.681 (10/96) G.703(1998) G.957(1999) G.958

ETS IEC

ETS 300 019-2 1999 IEC 1000 1995 IEC 297 1986

EN 55022: 1998 + A1: 2000 + A2: 2003 EN 55024: 1998+ A1: 2001 + A2: 2003 CISPR 22: 2003 CISPR 24: 1997+A1:2001+A2:2002 ETSI EN 300 386V1.3.2:2003 VCCI V-3: 2003.04 EMC AS/NZS CISPR 22 CNS 13438:1997 FCC part 15:2003 Class A EMC Directive 89/336/EEC R&TTE Directive 99/5/EC Article 3.1 (b) IECS-003 GB9254 EN 60950: 2000 EN 60825-1: 1993+A1:1997 Safety EN 60825-2: 2000 UL 60950-1: 2003, First Edition CSA C22.2 No. 60950-1-03 1st Ed. April 1, 2003 IEC 60950

11

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

Name
RFC2401 RFC2402 RFC2403 RFC2404 RFC2405 IPSec RFC2406 RFC2407 RFC2408 RFC2409 RFC2410

Code

Description
Security architecture for the Internet protocol IP authentication header The use of HMAC-MD5-96 within ESP and AH The use of HMAC-SHA-1-96 within ESP and AH The ESP DES-CBC cipher algorithm with explicit IV IP Encapsulating Security Payload (ESP) The Internet IP security domain of interpretation for ISAKMP Internet Security Association and Key Management Protocol (ISAKMP) The Internet Key Exchange (IKE) The NULL encryption algorithm and its use with IPSec

Ordering Information
Users can purchase the chassis, power supplies and modules as actually required. Table 7 Order Inofrmation for S8502
Name Description
S8502 Ethernet switch chassis with fan, 1 AC power and documents S8502 Ethernet switch chassis with fan, 1 DC power and documents

Quantity

Remark

Chassis Configuration (Chassis with 1 AC or DC power) LS-8502-AC-OVS LS-8502-DC-OVS Power Supply Configuration LSBM9POWER LSBM5POWER Main Control Board LSBM1SRP1M0 Software LIS-Quidway-S8502-OVS S8502 VRP network operating system (host software) 1 Mandatory S8502 general main control unit with switching fabric 1-2 Mandatory S8502 AC power supply S8502 DC power supply 0-1 0-1 Optional Optional 1 1 Mandatory Mandatory

12

Table 8 Order Inofrmation for S8505

Name Description
S8505 Ethernet switch chassis with fan, 1 AC power 1200W and documents S8505 Ethernet switch chassis with fan, 1 DC power 1200W and documents

Quantity

Remark

Chassis Configuration (Chassis with 1 AC or DC power) LS-8505-AC-OVS LS-8505-DC-OVS Cabinet Configuration LS-8500-2.2m LS-8500-1.8m Power Supply Configuration LSBM7POWER LSBM2POWER Main Control Board LSBM1SRP1N2 LSBM1SRP1N3 Software LIS-Quidway-S8505-OVS S8505 VRP network operating system (host software) 1 Mandatory S8505 general main control unit with switching fabric S8505/08/12 general main control unit with switching fabric (clock) 1-2 1-2 Mandatory Mandatory S8505 AC P/S 90-264V (Max 1200W) S8505 DC P/S 36-75V (Max 1200W) 0-1 0-1 Optional Optional Switch router rack 2200 (H) Switch router rack 1800 (H) 0-1 0-1 Optional Optional 1 1 Mandatory Mandatory

Notes: SRP1N2 and SRP1N3 can not be mixed up for configuration. Only 2 SRP1N2 or 2 SRP1N3 are allowed to be deployed in one chassis. For more information, please check Quidway S8500 Series Switch Quick Configuration Manual V1.00.

Table  Order Inofrmation for S8508

Name Description
S8508 Ethernet switch chassis with fan, 1 AC power 2000W and documents S8508 Ethernet switch chassis with fan, 1 DC power 2000W and documents

Quantity

Remark

Chassis Configuration (Chassis with 1 AC or DC power) LS-8508-AC-OVS LS-8508-DC-OVS Cabinet Configuration LS-8500-2.2m LS-8500-1.8m Switch router rack 2200 (H) Switch Rrouter rack 1800 (H) 0-1 0-1 Optional Optional 1 1 Mandatory Mandatory

1

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

Name
Power Supply Configuration LSBM8POWER LSBM4POWER Main Control Board LSBM1SRP1N1 LSBM1SRP1N3 Software LIS-Quidway-S8508-OVS

Description
S8512&S8508 AC P/S 90-264V (Max 2000W) S8512&S8508 DC P/S 36-75V (Max 2000W)

Quantity
0-1 0-1

Remark
Optional Optional

S8508 general main control unit with switching fabric S8505/08/12 general main control unit with switching fabric (clock)

1-2 1-2

Mandatory Mandatory

S8508 VRP network operating system (host software)

Mandatory

Notes: SRP1N1 and SRP1N3 can not be mixed up for configuration. Only 2 SRP1N1 or 2 SRP1N3 are allowed to be deployed in one chassis. For more information, please check Quidway S8500 Series Switch Quick Configuration Manual V1.00.

Table 10 Order Inofrmation for S8512

Name Description
S8512 Ethernet switch chassis with fan, 1 AC power 2000W and documents S8512 Ethernet switch chassis with fan, 1 DC power 2000W and documents Switch router rack 2200 (H) Switch router rack 1800 (H) S8512&S8508 AC P/S 90-264V (Max 2000W) S8512&S8508 DC P/S 36-75V (Max 2000W) S8512 general main control unit with switching fabric S8505/08/12 general main control unit with switching fabric (clock) S8512 VRP network operating system (host software)

Quantity

Remark

Chassis Configuration (Chassis with 1 AC or DC power) LS-8512-AC-OVS LS-8512-DC-OVS Cabinet Configuration LS-8500-2.2m LS-8500-1.8m Power Supply Configuration LSBM8POWER LSBM4POWER Main Control Board LSBM1SRP1N0 LSBM1SRP1N3 Software LIS-Quidway-S8512-OVS 1 Mandatory 1-2 1-2 Mandatory Mandatory 0-1 0-1 Optional Optional 0-1 0-1 Optional Optional 1 1 Mandatory Mandatory

Notes: SRP1N0 and SRP1N3 can not be mixed up for configuration. Only 2 SRP1N0 or 2 SRP1N3 are allowed to be deployed in one chassis. For more information, please check Quidway S8500 Series Switch Quick Configuration Manual V1.00.

14

Table 11 Order Inofrmation for Interface Modules

Name
Standard Module (Optional) LSBM2FT48B0 S8500 48-port 10/100BASETX Interface Module, RJ45 (Standard) S8500 20-port 100BASE-FX Interface Module, SFP Req. (Standard) S8500 12-port 1000BASE-X Interface Module, SFP Req. (Standard) S8500 12-port 10/100/1000BASE-T Interface Module, RJ45 (Standard) S8500 24-port 10/100/1000BASE-T Interface Module, RJ45 (Standard) S8500 24-port 1000BASE-X Interface Module, SFP Req. (Standard) S8500 1-port 10G Interface Module, XENPAK Req. (Standard) S8500 2-port 10G Interface Module, XFP Req. (Standard) S8500 4-port 10G Interface Module, XFP Req. (Standard) S8500 32-port 10/100BASETX RJ45 and 4-port 1000BASE-X SFP (Standard) S8500 8-port 10/100/1000BASE-T RJ45 and 4-port 1000BASE-X SFP (Standard) S8500 4-port OC-3c (155M) PoS SFP and 8-port 1000BASE-X SFP (Standard) 0-3 0-5 0-8 0-12 Optional

Description

Quantity S8502 S8505 S8508 S8512

Remarks

LSBM1FP20B0

0-3

0-5

0-8

0-12

Optional

LSBM1GP12B0

0-3

0-5

0-8

0-12

Optional

LSBM1GT12B0

0-3

0-5

0-8

0-12

Optional

LSBM1GT24B0

0-3

0-5

0-8

0-12

Optional

LSBM1GP24B0

0-3

0-5

0-8

0-12

Optional

LSBM1XK1B0

0-3

0-5

0-8

0-12

Optional

LSBM1XP2B0 LSBM1XP4B0

0-3 0-3

0-5 0-5

0-8 0-8

0-12 0-12

Optional Optional

LSBM1F32GB0

0-3

0-5

0-8

0-12

Optional

LSBM1GT8PB0

0-3

0-5

0-8

0-12

Optional

LSBM1P4G8B0 MPLS Enhanced Module LSBM2FT48CA0

0-3

0-5

0-8

0-12

Optional

S8500 48-port 10/100BASETX Interface Module, RJ45 (Enhanced)

0-3

0-5

0-8

0-12

Optional

15

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

Name

Description
S8500 20-port 100BASE-FX Interface Module, SFP Req. (Enhanced) S8500 12-port 1000BASE-X Interface Module, SFP Req. (Enhanced) S8500 12-port 10/100/1000BASE-T Interface Module, RJ45 (Enhanced) S8500 24-port 10/100/1000BASE-T Interface Module, RJ45 (Enhanced) S8500 24-port 1000BASE-X Interface Module, SFP Req. (Enhanced) S8500 1-port 10G Interface Module, XENPAK Req. (Enhanced) S8500 2-port 10G Interface Module, XFP Req. (Enhanced) S8500 4-port 10G Interface Module, XFP Req. (Enhanced) S8500 32-port 10/100BASETX RJ45 and 4-port 1000BASE-X SFP (Enhanced) S8500 8-port 10/100/1000BASE-T RE45 and 4-port 1000BASE-X SFP (Enhanced) S8500 4-port OC-3c (155M) PoS SFP and 8-port 1000BASE-X SFP (Enhanced) S8500 4-port OC-48c (2.5G) PoS Interface Module, SFP Req. (Enhanced) S8500 1-port OC-192c (10G) PoS Interface Module, XFP Req. (Enhanced)
NEW

Quantity S8502
0-3

S8505
0-5

S8508
0-8

S8512
0-12

Remarks

LSBM1FP20CA0

Optional

LSBM1GP12CA0

0-3

0-5

0-8

0-12

Optional

LSBM1GT12CA0

0-3

0-5

0-8

0-12

Optional

LSBM1GT24CA0

0-3

0-5

0-8

0-12

Optional

LSBM1GP24CA0

0-3

0-5

0-8

0-12

Optional

LSBM1XK1CA0

0-3

0-5

0-8

0-12

Optional

LSBM1XP2CA0 LSBM1XP4CA0

0-3 0-3

0-5 0-5

0-8 0-8

0-12 0-12

Optional Optional

LSBM1F32GCA0

0-3

0-5

0-8

0-12

Optional

LSBM1GT8PCA0

NEW

0-3

0-5

0-8

0-12

Optional

LSBM1P4G8CA0

0-3

0-5

0-8

0-12

Optional

LSBM1SP4CA0

0-3

0-5

0-8

0-12

Optional

LSBM1UP1CA0

0-3

0-5

0-8

0-12

Optional

LSBM1VP2CA0

S8500 2-port 10G RPR Interface Module, XFP Req. (Enhanced)

0-3

0-5

0-8

0-12

Optional

16

Name
IPv6-ready Module LSBM1GV48DB0

Description

Quantity S8502 S8505 S8508 S8512

Remarks

S8500 48-port 10/100/1000BASE-T Interface Module, RJ45 (PoE ready)

NEW

0-3

0-5

0-8

0-12

Optional

LSBM1GP24DB LSBM1GP24DC

S8500 24-port 1000BASE-X Interface Module, SFP Req. S8500 24-port 1000BASE-X Interface Module, SFP Req. S8500 24-port 10/100/1000BASE-T Interface Module, RJ45

0-3 0-3

0-5 0-5

0-8 0-8

0-12 0-12

Optional Optional

NEW

LSBM1GT24DB0 PoE Module LSBM1GV48DB0

NEW

0-3

0-5

0-8

0-12

Optional

S8500 48-port 10/100/1000BASE-T Interface Module, RJ45 (PoE ready) DIMM for PoE Master and Slave Power Management

0-3

0-5

0-6

0-6

Optional Mandatory for PoE function

LSBM1POEDIMM Service Module LSBM1NATB0 LSBM1VPNB0

0-3

0-5

0-6

0-6

S8500 NAT Service Interface Module (Standard) S8500 VPLS Service Interface Module (Standard)
NEW

0-1 0-1

0-1 0-1

0-1 0-1

0-1 0-1

Optional Optional

LSBM1FW8DB0

S8500 Firewall Service and 8-port 1000BASE-X Interface Module (Standard) S8500 IPSec Service and 8-port 1000BASE-X Interface Module (Standard)

0-3

0-5

0-8

0-12

Optional

LSBM1IPSEC8DB0

NEW

0-3

0-5

0-8

0-12

Optional

Notes: The figures listed above do not include Optics. For more information, please check the latest Huawei Price List.

Applications
The S8500 series switches can be deployed for converged services for enterprise campus and carriernetworks:

Deployment Scenario for S8500 Switches in Distribution and Core Layers of MAN
The S8500 switches provide a robust high performance 10G network platform as the distribution and core layers equipment of an IP MAN.

17

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

NE5000E/NE80E

2.5G PoS
S8500 S8500 AR46

S3900 S3900 S3900 AR46

S3900 S3900 S3900

10 GE

Office Building

S8500

S8500

Enterprise Campus

MA5200

Intelligent S3900 Resident Area

S3900

S3900

Figure 2 Deployment Scenario for S8500 Switches in Distribution and Core Layers of MAN

In carrier backbone networking environment requiring high reliability, security and expandability, the network core equipment comprises the NE80/40 core router and the S8500 switches. With flexibly choices from 5~12 service module slots, the S8500 switches are configured with dual main control units, dual switching units and multiple power supplies as redundant backup to avoid network interruption. The core equipment can be interconnected via 10GE or PoS interface. For Internet Service Provider (ISP), the service convergence MAN must offer value-added services such as VoD, video conference, IP voice, E-learning and telemedicine, etc. So it is necessary to subdivide the services and users to ensure the security when Ethernet is deployed as access network layer. In this scenario the MA5200 can serve as the access server and those access Ethernet switches such as S5600 can directly connect to it via the 10/100/1000M Ethernet interfaces, and the S8500 can be networked with the BAS (MA5200) to provide user access control, authentication and billing functions to carry out flexible user management.

18

 Deployment Scenario for S8500 Switches with RPR Solution in Backbone Layer of
Campus Network

CERNET NE20/NE16

2.5G PoS
S3900 S3900 S3900 6502 S8500 S8500 S3900 6503 S3900 S3900

10 GE RPR
S8500 S8500 6506

Administration Building

Dormitory Building

Lecture Hall

S3900

S3900

S3900

Figure 3 Deployment Scenario for S8500 Switches with RPR Solution in Backbone Layer of Campus Network

The 10G RPR interface module can be used to deploy advanced, intelligent and resilient ring, offering campus network high speed L2 packet forwarding. Further more, due to advanced network design (inner ring and outer ring), the switchover time for link failure is less than 50 ms (carrier class level). In addition, the RPR can offer complete QoS mechanism, which guarantees the high priority service, such as data flow for administration purpose.

1

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

Deployment Scenario for S8500 Switches in Backbone Layer of Enterprise Network

In this scenario, the S8500 switches are deployed as the backbone devices of the enterprise network.

CAMS Authentication Server Video Phone S3900

10GE or OC-192/48 PoS

S8500

E-mail DNS Server Server

Secpath 1000 S5600

10 GE

IP-Phone VLAN 1

S8500

Voice Gateway

Administrator Center
VLAN 2 S3900 Video Phone IP-Phone

DHCP WWW Server Server

Enterprise Servers Farm

Manufactoryl

Figure 4 Deployment Scenario for S8500 Switches in the Enterprise Backbone Network

The S8500 switches provide an ideal solution for enterprise backbone networks requirements for high reliability, expandability and service convergence. In this scenario, the S8500 switches act as the network core nodes to provide high speed connections to the ISP network for its powerful routing capacity and abundant L3 features. The S8500 switches can provide a full security management mechanism and QoS guarantee for the enterprise backbone network, and control the access authorities and users bandwidth flexibly. Supporting standard VLAN and multiple VLAN-based extended functions, the switches can isolate enterprise servers farm and avoid illegal access to the servers. Double 10GE links for redundant backup are provided in the networking core layer with two or more core switches.

20

 Deployment Scenario for S8500 Series Firewall Application

SecBlade FW module is located at the egress of the Internet

Area 1
SecBlade S8500

Area 3

Area 2

Figure 5 Deployment Scenario for S8500 Series Firewall Application at the Egress

While located at the egress of the Internet, the SecBlade FW module can support NAT, ALGs of multiple application protocols such as FTP and H.323, and varieties of attack defending, thus ensuring normal secure access from the internal network to the external network.

21

Huawei Datacom
Quidway S8500 Series 10G Core Routing Switches

SecBlade FW module is located at the internal network for protecting important areas Important protection area 1 in the internal network

Secure_Vlan1

SecBlade S8500

Secure_Vlan2

Important protection area 2 in the internal network

Figure 6 Deployment Scenario for S8500 Series Firewall Application at the Internal Network

If there are important network segments in the internal network, the SecBlade FW module can be deployed in the internal network for protection. It configures Secure VLAN, formulates rules for each Secure VLAN, and customizes security strategies according to specific application features. This deployment can detect all traffic flows into or out of the protected network.

22

 Deployment Scenario for S8500 Series VPN Application

The SecBlade VPN module has powerful VPN functions, with IPSec /IKE VPN, GRE VPN, L2TP VPN, DVPN features supported, meeting demand of branches and mobile offices for accessing the corporate headquarters. By integrating Internet, Intranet and Extranet, it implements secure access of enterprises.

iMS

VPN Manager

iTellin/CAMS

Carrier Core Ethernet

IPSec

Stock User
IPSec

SecBlade-VPN S85
Ethernet VLAN Access

Enterprise
VLAN VPN L2TP

Green Online User

Securities Company

State Taxation, Local Taxation, Industry and Commerce

Figure 7 Deployment Scenario for S8500 Series VPN Application

2

HUAWEI TECHNOLOGIES CO., LTD. Add: Huawei Industrial Base Bantian Longgang Shenzhen 518129, P.R.China Tel : +86-755-28780808 Version No: M3-080030-20060601-C-2.0 www.huawei.com