Huawei Products

Peyvand Azad Network
Certified partner in IRAN
Huawei Datacom
Product Quick Reference
Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net
info@peyvandazad.net
HUAWEI TECHNOLOGIES CO., LTD.

Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net

Router
Router Series
Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net

Huawei Datacom Product Quick Reference
Router Series
Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net

Contents
Quidway NetEngine 5000E Core Router............................................................1-6
Quidway NetEngine 40E Core Router.............................................................. 1-19

Quidway NetEngine 80 Core Router................................................................1-26
Quidway NetEngine 40 Core Router Series.....................................................1-34
Quidway NetEngine 20 High-end Router Series..............................................1-50
Quidway NetEngine 16E/08E/05 High-end Router Series.................................1-65
Quidway AR 46 Series Intelligent Service Central Routers...............................1-89
Quidway AR 28-40/80 Series Access Routers..................................................1-97
Quidway AR 28-30/31 Series Access Routers................................................ 1-100
Quidway AR 28-10/11 Series Access Routers................................................ 1-103
Quidway AR 28-09 Intelligent Service Branch Router.................................... 1-106
Quidway AR 18-30/31/32/33/34/35 Intelligent Service Access Routers.......... 1-113
Quidway AR 18-20/20S Series Ethernet Routers............................................ 1-117
Tel : (+98) 21 88 87 87 87
Quidway AR 18-1X Series Routers................................................................. 1-120
Fax:(+98)
21 88 78 62 97
www.peyvandazad.net
Ethernet
Switch
Quidway NetEngine 80E Core Router..............................................................1-12
Router Series
Peyvand
Azad Network
Tel : (+98) 21 88 87 87 87
Fax:(+98) 21 88 78 62 97
www.peyvandazad.net
Router Series
NE Router Product Series
Product Model
Feature
Quidway NetEngine 5000E
The top-class core router oriented towards the Internet
Core Router
backbone node, MAN core node and data interworking

node.
Comprehensively supports the MPLS, and various
services such as the L3 MPLS VPN, L2 MPLS VPN and
the CCC, which are suitable for high-performance P
application; supports high-capacity multicast wirespeed forwarding, and can be cooperated with features
such as the MPLS VPN and QoS.
Adopts high-performance components, and provides
Ethernet
Switch
wire-speed forwarding performance for the IP/MPLS

service; the switching capacity of the integrated system
is 2.56Tbps (non-blocking switching); the forwarding
performance of the integrated system is 1600Mpps.
The key hardware components are provided with
comprehensive redundancy, and all the components
are available with the hot swapping function. Provides
non-stop routing and non-stop forwarding functions
to ensure carrier class reliability of services. When the
active main control board fails, the standby board can
take over without any packet loss or affecting the
neighboring routers.
Quidway NetEngine 80E Core
The high-end core network product oriented towards the
Router
IP backbone network, IP MAN and various large-scale IP

networks.
CCC, which are suitable for high-performance P/PE
application; supports high-capacity multicast wirespeed forwarding, and can be cooperated with features
such as the MPLS VPN and QoS.
Adopts high-performance components, and provides
> 1-
Router Series
service; the switching capacity of the integrated system

is 640Gbps (non-blocking switching); the forwarding
performance of the integrated system is 400Mpps.
comprehensive redundancy, and all the components are
available with the hot swapping function. Provides nonstop routing and non-stop forwarding functions to ensure
carrier class reliability of services. When the active main
control board fails, the standby board can take over without
any packet loss or affecting the neighboring routers.
Quidway NetEngine 40E Core
The high-end service router oriented towards the IP
Router
backbone network, IP MAN and various large-scale IP

networks.
Integrates the powerful IP service processing capability
and the L3 Ethernet switching capability of the core
router, and provides richer services, more flexible
networking and more ideal performance cost.
application; supports high-capacity multicast wire-speed
forwarding, and can be cooperated features such as the
MPLS VPN and QoS.
Adopts high-performance components, and provides wirespeed forwarding performance for the IP/MPLS service;
the switching capacity of the integrated system is 640Gbps
(non-blocking switching); the forwarding performance of
the integrated system is 400Mpps.
> 1-
Router Series
Quidway NetEngine 80 Core
The high-end core network product oriented towards the
Router
IP backbone network, IP MAN and various large-scale IP

networks.
forwarding, and can be cooperated features such as the
MPLS VPN and QoS.
Adopts high-performance components, and provides wirespeed forwarding performance for the IP/MPLS service;
the switching capacity of the integrated system is 128Gbps
Ethernet
Switch
(non-blocking switching); the forwarding performance of

the integrated system is 96Mpps.
Quidway NetEngine 40 Core
The high-end network product oriented towards the large-
Router Series
sized enterprise network, industrial network, IP MAN and

IP backbone network.
Integrates the powerful IP service processing capability
and L3 Ethernet switching capability of the core router,
and provides richer services, more flexible networking
and more ideal performance cost.
Adopts high-performance components, provides wirespeed forwarding performance for the IP/MPLS service
at all the interfaces; the switching capacity of the
NE40-8 integrated system is 64Gbps, and the forwarding
performance is 48Mpps; the switching capacity of the
NE40-4 is 32Gbps and the forwarding performance is
24Mpps; the switching capacity of NE40-2 is 16Gbps
> 1-
Router Series
and the forwarding performance is 12Mpps.

the CCC, which are suitable for high-performance PE
forwarding, and can be cooperated with features such
as the MPLS VPN and QoS.
Quidway NetEngine 20 High-
The 5 th generation multi-service routers with high
end Router Series
performance oriented towards operators, industrial
networks and enterprise network can serve as the edge

equipment for the operator service network and as
small-sized PoP point, or as the centralized interworking
equipment with high performance for the operators
operation-supporting network, or as the central
equipment of enterprises in the enterprise network or the
high-performance convergent router for the enterprises.
Adopts the high-reliability modular design. All the
boards, fans and power supply modules support hot
swapping; provides the dual-power (1+1) module
that can be mutual backup, and the design mode of
passive backplane; provides the software hot patching
technology to implement the fully smooth upgrading,
thus effectively ensuring the high-speed and reliable
running in the whole network. The integrated system
realizes the non-stop running for 7 X 24 hours.
Adopts the high-performance components, to provide
service at all the interfaces; the switching capacity of the
NE20 router series is 8Gbps (non-blocking switching),
the forwarding performance of the integrated system
is 4.5Mpps; the switching capacity of the integrated
NE20E router series is 40Gbps and the forwarding
performance is 6Mpps.
Has a powerful service capability, supports VPN in
multiple modes (L2TP, GRE, MPLS VPN), available
> 1-
Router Series
with a wealth of NAT functions; provides such

interworking functions as Ethernet/VLAN, PPP/MP,
PPPoE, Frame Relay, HDLC, ATM, X.25, HDLC and
LAPB.
Quidway NetEngine 16E/08E/05
Oriented towards the carrier-class operation network
High-end Router Series
and the enterprise-class core network, available with

the powerful dedicated-line access and VPN service
capability, this series provides rich service functions,
along with the perfect QoS and security feature,
applicable to the internal network and service network
of operators, governments, education, finance, electrical
power and other enterprises.
The redundancy design of main control board; the
Ethernet
Switch
active/standby switching realizes zero packet-loss

rate; 2+1 or 1+1 power hot backup; interface backup
and port binding realize the high reliability of links;
VRRP ensures the reliability between devices; the main
control board and the interface board support hot
swapping; the integrated system realizes the non-stop
running for 7 x 24 hours.
Distributed forwarding architecture, the highperformance CPU cooperates with the IP
TurboEngineTM technology of independent intellectual
property rights, the integrated forwarding performance
of NE16E exceeds 4.8Mpps, the integrated NE08E
forwarding performance exceeds 2.4Mpps and the
integrated NE05 forwarding performance exceeds
1.6Mpps.
Powerful service capability, supporting dedicatedline access, PPPOE access, PPPOA access, PPPOEOA
access, Ethernet VLAN access, Portal, Web
authentication, DHCP RELAY, DNS, DLSW, supporting
such VPN services as L2TP, GRE, IPSEC, FR, L3 MPLS
VPN, L2 MPLS VPN; provides tunnel integration and
VPN interworking, providing the secure and multilevel MPLS VPN solution.
> 1-
Router Series
Quidway NetEngine 5000E Core Router
Product Overview
The Quidway NetEngine 5000E core router (hereinafter called the NE5000E) is one
of the top-class router products, which was launched by Huawei, catering to the
Internet backbone node, MAN core node and data interworking center node. The
NE5000E inherits the 5th generation of routers philosophy, based on the advanced
network processor technology, ASIC technology, IPv6 technology and optical backplane interconnection technology. It adopts the distributed and expandable design,
with the mass switching capacity and ultra-high forwarding performance, to meet
the requirements of bandwidth performance, service quality, and service providing
capability of the new generation Internet. The high performance, rich service features,
high reliability and modular expandability available to NE5000E brings more values to
networks, so it can be said an ideal choice for the next generation Internet.
Product Appearance
NE5000E core router
> 1-
Router Series
Product Features
Continuous Extension Capability
The NE5000E adopts the advanced non-blocking switching fabric with the interface
capacity of standalone system of 1.28Tbps, supporting the high-density 10G/40G
interface, it provides 64 wire-speed 10G POS interfaces, or 16 wire-speed 40G interfaces,
with a forwarding performance as high as 1600Mpps.
The NE5000E implements the capacity extension in the optical back-plane
interconnection mode. It supports multi-frame concatenation, and the interface capacity
can be extended to 80Tbps, providing 4096 wire-speed 10G POS/10GE interfaces, or
provides 1024 wire-speed 40G POS interfaces.
Outstanding Routing Performance

Ethernet
Switch
Supporting various unicast routing protocols such as OSPF, IS-IS and BGP, providing the
perfect multicast routing protocols, supporting the extra-high routing table capacity, and
the port can still keep its wire-speed forwarding in the complex routing environment of
route oscillation. It is available with the fast convergence mechanism, to greatly improve
the reliability of networks.
Rich Service Features

The NE5000E adopts the advanced ASIC and network processor technology, and it is
available with a variety of service features with an outstanding performance. It provides
MPLS VPN/TE, QoS, multicast and security, to implement the smooth evolution from
IPv4 and IPv6. The NE5000E is available with the fast service upgrading and expansion
capability to protect users investment to the largest extent, which speeds up the
development of the IP network with the enhanced natures of broadband, security, service
and intelligence.
Carrier-class Reliability
Key hardware components are provided with redundancy backup, providing the nonstop forwarding function at operation level; all the components are available with the
hot swapping function; adopts the passive back-plane design; provides the hot patching
technology to implement the smooth upgrading of software; provides the IP/MPLS fast
> 1-
Router Series
re-routing, Virtua Routing Redundancy Protocol (VRRP) and RPR, to effectively ensure the
high reliability of network running and to realize the system availability of 99.999%.
Product Specifications
Attribute
NE5000E
Switching capacity
2.56Tbps, non-blocking switching
Forwarding performance
1600Mpps
Number of interface
16
board slots
Connection mode
OC-192c/STM-64c POS
10GE-WAN/LAN
OC-48c/STM-16c POS
GE
OC-12c/STM-4c POS
FE
OC-3/STM-1 POS
OC-12c/STM-4c ATM
OC-3/STM-1 ATM
OC-48c/STM-16c RPR
OC-192c/STM-64c RPR
Routing protocol
Supports routing protocols OSPF, IS-IS, BGP-4, PIM-DM/SM, MSDP

and MBGP; available with an ultra-large routing table capacity; all the
ports can still be able to keep wire-speed forwarding in the complex
routing environment such as routing oscillation; supports the fast
convergence function to practically improve the reliability of users IP
network.
IPv6
Comprehensively supports the features and services of IPv6. Implements

the IPv6 wire-speed forward processing based on the hardware mode,
supports such routing protocols as OSPFv3, ISISv6, BGP4+, RIPng, provides
a variety of transition technologies from IPv4 to IPv6.
MPLS VPN
Supports MPLS wire-speed forwarding; supports L3/L2 MPLS VPN, as P

and PE; supports MPLS QoS; supports MPLS TE/FRR.
QoS
Supports the complex traffic classification integrating the L2/L3/L4 packet

information; provides the powerful bi-directional traffic classification
rule; supports the traffic policing and shaping function, equipped with
the advanced QoS functions such as PFQ/WFQ/CBQ multi-level queue
> 1-
Router Series
scheduling and WRED, it can provide the perfect QoS function based on
DiffServ and MPLS TE tunnel.
Reliability
The main control module provides 1:1 backup while the switching fabric
module provides 3+1 backup, and the system power supply and fan
provides redundancy backup, supporting the non-stop forwarding; all the
components can be hot swapped; provides the fast routing convergence
and MPLS fast re-routing (FRR) function.
Architecture
The standalone system is of the integrated chassis structure, supporting

19-inch standard rack and multi-machine extension.
Dual -48 VDC power input
Max. power consumption
< 5000W
Dimensions (W x D x H)
442mm x 600 mm x 1,600 mm
Maximum weight in full
< 200kg
Ethernet
Switch
Input power
configuration
Environmental
Long-term operation: 0 ~ 45C
requirements
Short-term operation: -5 ~ 55C

Temperature change rate limit: 30C/h
Operating humidity: 5% ~ 85%, non-condensing
Short-term operating humidity: 0% ~ 95%
Altitude: No effect on forwarding performance within 3,000m
Order Information
Name
Item
Amount
Remarks
Assembly cabinet-NE80E-CR5B1TSR-2.2 high-end
Optional
1. Host system
CR52-22
router assembly cabinet

CR52K-BKPA
Components for the NE 5000E integrated chassis
Mandatory
CR52-MPUA
Main processing board, with L3 clock module.
Mandatory, 2 pieces
Additional CF card and memory should be configured

CR52K-SFUC
NE 5000E switching fabric board
recommended
4
Mandatory, 4 pieces
recommended
> 1-
Router Series
CR52-PWRA
Specially-made secondary power supply-6500W-
-5degC-55degC--38V--75V--36-75VDC- primary
Mandatory, 2 pieces
recommended
channel 160A
SWP-CR52
NE80E core router IP/MPLS forwarding host
Mandatory
Mandatory, 1
software (VRP5)
CR52-MPUA-
Main processing unit 512MB FLASH card
CFB
memory bar for 1

MPUA
CR52-MPUA-
Main processing unit 1GB memory bar
MEMB
Mandatory, 1
memory bar for 1
MPUA
2. Line interface board

CR52K-P1XZ
10G POS interface single-mode short-distance line
16
Optional
16
Optional
16
Optional
Optional, XFP needs
board, LC interface, 2KM at maximum

CR52K-P1XQ
10G POS interface single-mode short-haul line

CR52K-P1XV
10G POS interface single-mode long-haul line

CR52K-P2XX
2xOC-192c/STM-64c POS XFP interface
16
CR52K-P4UF
4-port 2.5G POS interface line board, SFP
16
to be configured
to be configured
interface
CR52K-P8CF
8-port 155M POS interface line board, SFP
16
10G LAN Ethernet interface single-mode middle-
LAN-IRL-LC
distance line board, LC interface, 10KM at
Optional, SFP needs

to be configured
interface
CR52K-10GE-
Optional, SFP needs
16
Optional
16
Optional
16
Optional
16
Optional
maximum
CR52K-10GE-
10G LAN Ethernet interface single-mode long-haul
LAN-LRE-LC
line board, LC interface, 40KM at maximum
CR52K-10GE-
10G WAN Ethernet interface single-mode middle-
WAN-IRL-LC
distance line board, LC interface, 10KM at

maximum
> 1-10
CR52K-10GE-
10G WAN Ethernet interface single-mode long-
WAN-LRE-LC
haul line board, LC interface, 40KM at maximum
Router Series
CR52K-E2XX
2-port 10G BASE Ethernet LAN XFP interface
16
Optional, XFP needs

to be configured
CR52K-W2XX
2-port 10G BASE Ethernet WAN XFP interface
16
Optional, XFP needs

to be configured
CR52K-10x1000
10-port GE interface line board, SFP interface
16
Base-SFP
Optional, SFP needs

to be configured
3. SFP
SFP-1.25G-
Optical transceiver module-SFP-850-1.25G-0.55km
16
Optional
Optical transceiver module-SFP-1310-1.25G-10km
16
Optional
16
Optional
16
Optional
SFP-1.25G-
Optical transceiver module-SFP-1550-1.25G-
16
Optional
100KM
100km
SFP-2.5G-2KM
16
Optional
SFP-2.5G-15KM
16
Optional
SFP-2.5G-40KM
16
Optional
SFP-2.5G-80KM
16
Optional
XFP-STM64-SM-
Optical transceiver module-XFP-1310-STM64-2km
16
Optional
0.55KM
SFP-1.25G10KM
SFP-1.25G-
SFP-1.25G-
Ethernet
Switch
40KM
80KM
2km
For more information, please visit www.huawei.com
> 1-11
Router Series
Product Overview
The Quidway NetEngine 80E core router (hereinafter called the NE80E) is the NE80
enhanced high-end network product launched by Huawei, mainly applied in the key
position of IP backbone network, IP MAN and various large-sized IP network, with the
wire-speed 10G interface provided. The NE80E core router inherits all the functional
features of NE80, and it is compatible with the NE80 line board and can be extended in
the future.
The NE80E is based on the distributed hardware forwarding and non-blocking switching
technology, with the carrier-class reliability, wire-speed forwarding performance, perfect
QoS mechanism, powerful service processing capability and outstanding extension
capability. It meets the requirements of the increasing data and Internet services for the
network backbone equipment, to realize the smooth evolution from IPv4 to IPv6, so it is
the important source power for the IP backbone network and IP MAN to develop toward
the nature of broadband, security and service.
Product Appearance
NE80E core router

> 1-12
Router Series
Product Features
th
The Distributed 5 Generation Router
The NE80E, as the 5th generation router, adopts the industry-leading high performance
network processor (NP) technologies, fully inheriting the architecture of the G4 full
distributed hardware processing, and combining the flexibility of software and high
performance of hardware organically, thus providing line speed forwarding performance
and rapid service upgrading and expanding capacities and guaranteeing customers
investment to the largest extent, to speed up the development of a more broadband,
security, service and intelligence-natured IP network.
A Variety of Services
The NE80E provides the high-quality QoS to implement the intelligent service awareness,
Ethernet
Switch
advanced queue scheduling algorithm and congestion control algorithm, to exactly

ensure the bandwidth, delay and jitter of different services, and to meet the requirements
of QoS for different users and at different service levels.
The NE80E is based on the processing of the distributed hardware, it has a highperformance network service capability and is competent in the high-performance P/PE
application, providing the high quality, secure and comprehensive MPLS VPN solution; it
provides the high-performance multicast capability; provides the Gigabit wire-speed NAT
services.
The NE80E is available with a fast expansion capacity, comprehensively supporting
IPv6, and can fast implement the new services that cannot be predicted, to assist
users in improving their competition. It can be said a solid foundation for the future IP
telecommunication network (IPTN).
Powerful Routing Capability and Line-speed Forwarding Performance

The NE80E supports the IP/MPLS distributed forwarding with a powerful routing
capability, and it supports the ultra-large routing table and provides a variety of routing
protocol functions such as RIP, OSPF, IS-IS and BGP4 as well as multicast routing
protocols, it is available with the fast convergence function, so it can be stably and
smoothly run in the complex routing environment, which is much suitable in the IP
backbone network application.
The NE80E realizes the full-duplex wire-speed forwarding of all interfaces (including
> 1-13
Router Series
POS 10Gbps), and it can provide 16 10Gbps interfaces and the packet forwarding
performance of the integrated IP/MPLS is as high as 400Mpps.
The key parts of NE80E are of redundancy hot backup to implement the hot switching
and non-stop route forwarding based on status; all the components support hotswapping; adopts the passive back-plane design; provides the hot patching technology to
implement the fully smooth upgrading of software; provides the protection mechanisms
such as IP/MPLS fast re-routing, virtual routing redundancy protocol (VRRP) and RPR, to
effectively ensure the high-speed and reliability of the whole-network running, to realize
the system availability of 99.999%.
Item
NE80E
Switching capacity
640Gbps, non-blocking switching
400Mpps
Number of interface
16
board slots
Interface type
OC-192c/STM-64c POS
10GE-WAN/LAN
OC-48c/STM-16c POS
GE
OC-12c/STM-4c POS
FE
OC-3/STM-1 POS
E1
OC-48/STM-16 cPOS to channelized to 155M
OC-12c/STM-4c ATM
OC-3/STM-1 cPOS channelized to E1/T1
OC-3/STM-1 ATM
OC-48c/STM-16c RPR
OC-192c/STM-64c RPR
Dedicated service board
NAT / Netstream / Tunnel
Routing protocol
Supports the routing protocols as RIP, OSPF, IS-IS and BGP-4, and all the
routing environment such as routing oscillation.
IPv6
Comprehensively supports the dual protocol stack, IPv4 and IPv6;

Supports rich transition technologies from IPv4 to IPv6: Manual
tunnel configuration, automatic tunnel configuration, 6to4 tunnel and
implementation of NAT-PT by hardware;
> 1-14
Router Series
Supports the IPv6 static routing, and supports such dynamic routing
protocols as BGP4+, RIPng, OSPFv3, ISISv6;
Supports ICMPv6 MIB, UDP6 MIB, TCP6 MIB and IPv6 MIB.
MPLS VPN
Can serve as P and PE. Supports MPL VPN, meeting the RFC2547bis
protocol; supports three cross-domain implementation mode; supports
the integration with the Internet service, providing VPN-based multiinstance NAT; supports HoPE; supports the multi-role host. Supports
MPLS L2VPN in Martini, Kompella, VPLS modes.
NAT
Provides the dedicated NAT service processing board to implement

the bi-directional Gigabit wire-speed address translation capability;
each board supports 1 million concurrent connections; 200,000
new connections are processed per second; 500,000 NAT entries
Ethernet
Switch
are refreshed per second; supports the NAT-PT function of IPv6/IPv4;

provides a perfect security log.
QoS
Perfect QoS mechanism. Each line board provides 8k queues,

supporting the advanced scheduling technologies such as CBQ, LLS/NLS
and PBS, it adopts WRED, supporting the discard priority with eight
levels; provides the exact traffic policing and traffic shaping functions;
provides the function of defining the complex rules and it can
discriminate the streams with fine granularity. Can provide the perfect
QoS guarantee based on DiffServ.
Multicast
Supports IGMP, static multicast configuration, PIM-DM/SM, MSDP and

MBGP multicast routing protocol; supports the interoperability between
multiple multicast protocols; supports the multicast policy processing,
including the policy processing of multicast routing protocol and
multicast forwarding as well as multicast QoS. Provides the multicast
reproduction function at two levels, switching fabric and line board, to
reach the optimal multicast effect.
Reliability
Provides the protection mechanisms such as IP/MPLS fast re-routing,

virtual routing redundancy protocol (VRRP) and RPR. Provides the
software hot patching technology to implement the full smooth
upgrading of equipment software; uses the passive back-panel design;
redundancy backup of key parts (including route processing module,
switching fabric, power supply), the integrated system has no singlepoint faults; all the components can be hot swapped, supporting the
> 1-15
Router Series
status-based hot backup switching as well as non-stop forwarding of NSF and

fast link detection of APDP and BFD.
Architecture
Integrated chassis structure supports 19-inch standard rack
Input power
DC: -36 ~ -72V
< 5000W
442mm x 600mm x 1,600mm
< 200kg
configuration
Environmental
requirements
Short-term operation: 5 ~ 55C

Order Information
Name
Item
Configuration
Remarks
1. Host system
CR52-22
Assembly cabinet-NE80E-CR5B1TSR-2.2 high-
Optional
Mandatory
Mandatory,
end router assembly cabinet

CR52-BKPA
Components for the NE 80E integrated

chassis
CR52-MPUA
Main processing board, with L3 clock module,

CF card and memory can be configured
2 pieces
otherwise.
CR52-SFUA
NE 80E switching fabric board
recommended
4
Mandatory,
4 pieces
recommended
CR52-PWRA
SWP-CR52
Specially-made secondary power supply-
Mandatory,
2 pieces
75VDC- primary channel 160A
recommended
NE 80E core router IP/MPLS forwarding host

software (VRP5)
> 1-16
6500W--5degC-55degC--38V--75V--36-
Mandatory
Router Series
CR52-MPUA-
CFB
Mandatory, 1
flash card for 1
MPUA
CR52-MPUA-
MEMB
Mandatory, 1
memory bar for 1
MPUA

CR52-P1XZ
16
Optional
16
Optional
16
Optional
16
Optional, SFP

CR52-P1XQ

CR52-P1XV

interface
Ethernet
Switch

CR52-P4UF
needs to be
configured
CR52-10GE-
10G LAN Ethernet interface single-mode
LAN-IRL-LC
middle-distance line board, LC interface,
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional, SFP
10KM at maximum
CR52-10GE-
LAN-LRE-LC
long-haul line board, LC interface, 40KM at

maximum
CR52-10GE-
10G WAN Ethernet interface single-mode
WAN-IRL-LC
middle-distance line board, LC interface,

10KM at maximum
CR52-10GE-
WAN-LRE-LC

maximum
CR52-10xGE-
SFP
needs to be
configured
3. SFP
SFP-1.25G-
0.55KM
0.55km
16
Optional
> 1-17
Router Series
SFP-1.25G-
Optical transceiver module-SFP-1310-
10KM
1.25G-10km
SFP-1.25G-
40KM
1.25G-40km
SFP-1.25G-
80KM
1.25G-80km
SFP-1.25G-
100KM
1.25G-100km
SFP-2.5G-2KM
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
2km
SFP-2.5G-15KM
Optical transceiver module-SFP-1310-2.5G15km
SFP-2.5G-40KM
SFP-2.5G-80KM
XFP-STM64-SM-
Optical transceiver module-XFP-1310-STM64-
2km
2km
> 1-18
Router Series
Product Overview
The Quidway NetEngine 40E service router (hereinafter called the NE40E) is the NE40
enhanced high-end network product launched by Huawei, it is mainly applied in the
edge position of the IP backbone network, IP MAN and the large-sized IP network. It
provides the wire-speed 10G interface and high density Ethernet interface, to meet the
requirements of high-density service access and processing.
Based on the distributed network processor hardware forwarding and non-blocking
switching technology, the NE40E is available with an outstanding expansion capability,
Ethernet
Switch
and comprehensively supports IPv6. The NE40E integrates the powerful IP service
processing capability and L3 Ethernet switching capability of the core router, and
provides richer services, more flexible networking and more ideal performance cost. The
NE40E is the important source power for the development of IP backbone network and
IP MAN towards the nature of broadband, security and service.
Product Appearance
NetEngine 40E core router
> 1-19
Router Series
Product Features
th
The NE40E, as the 5th generation router, adopts the industry-leading high performance
network processor (NP) technologies, fully inheriting the architecture of the full
performance of hardware organically, thus providing line speed forwarding performance
and rapid service upgrading and expanding capacities and guaranteeing customers
investment to the largest extent, to speed up the development of a more broadband,
security, service and intelligence-natured IP network.
Rich Service Capability and High-quality Service Performance

The NE40E provides the high-quality QoS to implement the intelligent service awareness,
advanced queue scheduling algorithm and congestion control algorithm, to exactly
ensure the bandwidth, delay and jitter of different services, and to meet the requirements
of QoS for different users and at different service levels.
The NE40E is available with the high-performance network service capability based on
the distributed hardware processing, competent in the high-performance MPLS VPN P/PE
application. It provides such service solutions as high-quality, secure and comprehensive
MPLS VPN, MPLSTE, multicast and NAT.
In addition, the NE40E has various Layer 2 service features, including L2 VPN, virtual
private LAN service (VPLS), virtual leased line (VLL) and relevant features of VLAN.
The NE40E has both the powerful service processing capability of the high-end router
and rich L2 service features. The NE40E is available with a fast expansion capacity,
comprehensively supporting IPv6, and can fast implement the new services that cannot
be predicted, to assist users in improving their competition. It can be said a solid
foundation for the future IP telecommunication network (IPTN).
The key parts of NE40E are of redundancy hot backup to implement the hot switching
and non-stop routing forwarding based on status; all the components support hotswapping; adopts the passive backplane design; provides the hot patching technology to
implement the fully smooth upgrading of software; provides the protection mechanisms
> 1-20
Router Series
such as IP/MPLS fast re-routing, virtual routing redundancy protocol (VRRP) and RPR, to
effectively ensure the high-speed and reliability of the whole-network running, to realize
the system availability of 99.999%.
Item
NE40E
Switching capacity
400Mpps
Number of interface
board slots
OC-192c/STM-64c POS
10GE-WAN/LAN
OC-48c/STM-16c POS
GE
OC-12c/STM-4c POS
FE
OC-3/STM-1 POS
E1
OC-48/STM-16 cPOS is channelized to 155M
OC-12c/STM-4c ATM
OC-3/STM-1 cPOS is channelized to E1/T1
OC-3/STM-1 ATM
OC-48c/STM-16c RPR
OC-192c/STM-64c RPR
Routing protocol
Ethernet
Switch
Interface type

IPv6

protocols as BGP4+,RIPng,OSPFv3, ISISv6;
L2 service feature
Supports the basic VLAN feature; supports various L2 features as VLAN

convergence, VLAN TRUNK, multicast VLAN, VLAN Translation, STP/RSTP/
MSTP, and HGMP.
> 1-21
Router Series
MPLS VPN
NAT

QoS
Perfect QoS mechanism. Each line board provides 8k queues,

supporting the advanced scheduling technologies such as CBQ, LLS/
NLS and PBS, it adopts WRED and the advanced congestion control
algorithm, supporting the discard priority with eight levels; provides
the exact traffic policing and traffic shaping functions; provides the
function of defining the complex rules and it can discriminate the
streams with fine granularity. Can provide the perfect QoS guarantee
based on DiffServ.
Multicast

MBGP multicast routing protocol, and can provide 64K multicast routes;
supports the interoperability between multiple multicast protocols;
supports the multicast policy processing, including the policy processing
of multicast routing protocol and multicast forwarding as well as
multicast QoS. Provides the multicast reproduction function at two levels,
switching fabric and line board, to reach the optimal multicast effect.
Reliability
Provides the protection mechanisms such as IP/MPLS fast re-routing, virtual

routing redundancy protocol (VRRP) and RPR . Provides the software
hot patching technology to implement the full smooth upgrading of
equipment software; uses the passive back-panel design; redundancy
backup of key parts (including route processing module, switching fabric,
power supply), the integrated system has no single-point faults; all the
components can be hot swapped, supporting the status-based hot
backup switching as well as non-stop forwarding of NSF and fast link
detection of APDP and BFD.
> 1-22
Router Series
Architecture
Input power
DC: -36 ~ -72V
< 3000W
442mm x 600mm x 889mm (22U high)
< 200kg
configuration
Environmental
requirements

Ethernet
Switch
Order Information
Name
Item
Configuration
Remarks
1. Host system
CR52-22
Assembly cabinet -NetEngine80E-CR5B1TSR-2.2
Optional
Mandatory
Mandatory,
high-end router assembly cabinet

CR52-BKPB
Data communication-Integrated chassis of the

NE40E router
CR52-SRUA
NE40E route switching board, with L3 clock

module, CF card and memory can be configured
2 pieces
otherwise.
CR52-SFUD
NE40E switching fabric board
recommended
2
Mandatory,
2 pieces
recommended
CR52-PWRB
-48V DC power supply module
Mandatory,
2 pieces
recommended
SWP-CR52
NE40E router IP/MPLS forwarding host software
Mandatory
(VRP5)
> 1-23
Router Series
CR52-MPUA-
CFB
Mandatory, 2
flash cards for 1
SRU
CR52-
MPUA-MEMB
Mandatory,1
flash card for 1
SRU

CR52-P1XZ
10G POS interface single-mode short-distance
Optional
Optional
Optional
Optional, SFP
line board, LC interface, 2KM at maximum

CR52-P1XQ

CR52-P1XV

CR52-P4UF

interface
needs to be
configured
CR52-10GE-
LAN-IRL-LC
middle-distance line board, LC interface, 10KM
Optional
Optional
Optional
Optional
Optional, SFP
at maximum
CR52-10GE-
LAN-LRE-LC

maximum
CR52-10GE-
WAN-IRL-LC
middle-distance line board, LC interface, 10KM

at maximum
CR52-10GE-
WAN-LRE-LC

maximum
CR52-10xGE-
SFP
needs to be
configured
3. SFP
> 1-24
SFP-1.25G-
0.55KM
0.55km
16
Optional
Router Series
SFP-1.25G-
10KM
1.25G-10km
SFP-1.25G-
40KM
1.25G-40km
SFP-1.25G-
80KM
1.25G-80km
SFP-1.25G-
100KM
1.25G-100km
SFP-2.5G-2KM
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
2km
SFP-2.5G-15KM

Ethernet
Switch
SFP-2.5G-40KM
40km
SFP-2.5G-80KM
XFP-STM64-SM-
2km
2km
XFP-STM64-SM-
40km
40km
> 1-25
Router Series
Quidway NetEngine 80 Core Router
Product Overview
The Quidway NetEngine 80 core router (hereinafter called the NE80) is the high-end
network product launched by Huawei, mainly applied in the key position of IP backbone
network, IP MAN and various large-scale IP networks.
The switching capacity of the NE80 system is 128Gbps, with 16 line board slots, and
the NE80 provides the service interfaces ranging from 64Kbit/s to 2.5Gbit/s, applied in
the requirements for the networking and expansion of the backbone equipment. The
NE80 is based on the distributed network processor hardware forwarding and nonblocking switching technology, and its carrier-class reliability, wire-speed forwarding
performance, perfect QoS mechanism, rich service processing capacity and outstanding
expansion capacity meet the increasing requirements of the data and Internet
services for the network backbone equipment. The NE80 supports the IPv6 function
implemented basing on hardware in the mode of smooth software upgrading. The
NE80 is the important source power for the development of the Internet backbone
network and the IP MAN towards the nature of broadband, security and service, and it
can cooperate with the network products of Huawei or other manufacturers, providing
users with the integrated solutions.
Product Appearance
NE80 core router

> 1-26
Router Series
Product Features
th
The NE80, as the 5th generation router, adopts the industry-leading high performance
performance of hardware organically, thus providing line speed forwarding performance,
rapid service upgrading, expanding capacities and guaranteeing customers investment
to the largest extent.
All the NE80s in the existing network can provide the IPv6 forwarding performance
of hardware in the mode of software upgrading, without the need of buying any IPv6
hardware equipment again, which saves a lot of expenses of users and fully protects the
Ethernet
Switch
user investment, it reflects the outstanding expansion capability of 5th generation routers.
The excellent expandability of NE80 accelerates the development of the IP network
towards the nature of broadband, security, service and intelligence.
The high-quality QoS capability lays a solid technical foundation for the network service.
The NE80 implements the intelligent service awareness, provides the advanced queue
scheduling algorithm and SARED congestion control algorithm, to exactly ensure the
bandwidth, delay and jitter of different services, and to meet the requirements of
different users and at different service levels.
The NE80 is available with rich service capabilities and high-quality, secure and
comprehensive MPLS VPN solutions based on the distributed hardware processing, and it
provides the high-efficiency multicast forwarding capability; it provides the services such
as Gigabit wire-speed NAT.
The NE80 is available with a fast expansion capacity, comprehensively supporting
Flexible Networking Capability

It owns a great variety of interface types, supports the RPR ring network technology,
provides the perfect protocol function and is able to deal with various complex
> 1-27
Router Series
networking to meet the requirements of IP MAN, backbone network and operation

supporting network.
The NE80 provides such security measures as packet filtering, traffic sampling, port
imaging and security log, and it is an ideal device for constructing the highly secure and
maintainable network.
High Reliability
The key parts of NE80 include the route processing system, the switching fabric system,
the clock system and the power supply system, and the management buses are all
redundancy hot backup, to realize the hot switching based on status; all the components
support hot swapping; they adopt the passive backplane design, providing the hot
patching technology to implement the full smooth upgrading of software; support
the dynamic routing protocol and MPLS traffic engineering; provide the protection
mechanisms such as IP/MPLS fast re-routing, virtual routing redundancy protocol (VRRP)
and RPR, with the Fast Routing Backup function; support the APDP and BFD fast link
detection and the NSF non-stop forwarding function to effectively ensure the high-speed
and reliable running of the whole network.
Item
NE80
Switching capacity
96Mpps
Number of interface
16
board slots
Interface type
OC-48c/STM-16c POS
GE
OC-12c/STM-4c POS
FE
OC-3/STM-1 POS
E1
OC-48/STM-16c POS is channelized to 155M

OC-12c/STM-4c ATM
OC-3/STM-1c POS is channelized to DS0
OC-3/STM-1 ATM
OC-48c/STM-16c RPR
> 1-28
Router Series
Routing protocol
IPv6

MPLS VPN
Ethernet
Switch
MPLS L2VPN in Martini, Kompella modes.
NAT

QoS
Perfect QoS mechanism. Each line board provides 2k queues, supporting

the advanced scheduling technologies such as CBQ, LLS/NLS and PBS,
it adopts WRED and the advanced SA-RED algorithm, supporting the
discard priority with eight levels; provides the exact traffic policing and
traffic shaping functions; provides the function of defining the complex
rules and it can discriminate the streams with fine granularity. Can
provide the perfect QoS guarantee based on DiffServ.
Multicast

> 1-29
Router Series
Reliability
Provides the protection mechanisms such as IP/MPLS fast re-routing, virtual

routing redundancy protocol (VRRP) and RPR. Provides the software
Architecture
Input power
DC: -40 ~ -72V;
< 1800W
600mm x 800mm x 2,200mm
< 400kg
AC: 150 ~ 280V
configuration
Environmental
requirements

Order Information
Name
Item
Configuration
Remarks
1. Host system
CR-B08011-
Assembly cabinet of the core router (2.2m)
Optional
CR-K08011
Backplane subrack of the core router
Mandatory
CR-MPUB
Main control processing unit
Mandatory,
2.2M
2 pieces
recommended
> 1-30
Router Series
CR-NETB
Switching net board
Mandatory,
2 pieces
recommended
CR-PW-AC
Functional module- Quidway S8016-
Mandatory
Mandatory
16
Optional, GBIC
RS0M1GSR-220V AC power supply system

(dual input)
SWP-CR-
NE80 IP/MPLS forwarding host software
NE80
CR-E4GC
4-port GBIC optical interface line board
needs to be
configured
16-port FE SFP optical interface line board
16
Optional, SFP
Ethernet
Switch
CR-EGFF
needs to be
configured
CR-E8FB
4 x FE-RJ45 electrical interface and 4 x FE-SFP
16
optical interface line board
Optional, SFP
needs to be
configured
CR-EGFEE
16-port 100M Ethernet electrical interface
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional, SFP
line board (100m, RJ45)- enhanced

CR-EWFEE

CR-P1UZ
1-port 2.5G POS single-mode 1310nm 2km

LC optical interface line board
CR-P1US

CR-P1UL

CR-P1UV

CR-P2HM
2-port 622M POS multi-mode optical

interface line board (1310nm, 500m, SC)
CR-P4CF
4-port OC-3c/STM-1 POS optical interface line

process card (SFP)
needs to be
configured
> 1-31
Router Series
CR-P8CF
8-port OC-3c/STM-1 POS optical interface line
16
process card (SFP)
Optional, SFP
needs to be
configured
CR-P1RZ
1-port 2.5G channelized POS single-mode
16
Optional
16
Optional
16
Optional, SFP
1310nm 2km LC optical interface line boardchannelized to 155M POS

CR-P1RS
1-port 2.5G channelized POS single-mode

1310nm 15km LC optical interface line boardchannelized to 155M POS
CR-C4CF
4-port 155M channelized POS optical

interface line board-SFP-channelized to E1
needs to be
configured
CR-C2CF
2-port 155M channelized POS optical
16
interface line board-SFP-channelized to E1
Optional, SFP
needs to be
configured
CR-R1UZ
1-port 2.5G RPR single-mode 1310nm 2km
16
Optional
16
Optional
16
Optional
16
Optional
16
Optional, SFP

CR-R1US

CR-R1UL

CR-R1UV

CR-A2HF
2-port 622M ATM single-mode optical

interface line board (SFP)
needs to be
configured
CR-A8CF
8 - p o r t 1 5 5 M AT M m u l t i - m o d e o p t i c a l
16
interface line card (SFP)
Optional, SFP
needs to be
configured
CR-8*E1
> 1-32
8-port E1 interface line board -RJ45 interface
16
Optional
Router Series
3. Service board
CR-NAT
Network address translation service board +
16
Optional
16
Optional
network address translation software

CR-NetStream-1
NetStream billing statistics service board
Ethernet
Switch
> 1-33
Router Series
Quidway NetEngine 40 Core Router Series
Product Overview
The Quidway NetEngine 40 universal switching router series (USR) (hereinafter called
the NE40) fully inherits the design philosophy and key technology of the NE80 core
router, and it is launched by Huawei to cater to large-scale enterprise network, industrial
network, IP MAN and IP backbone network.
Based on the distributed network processor hardware forwarding and non-blocking
switching technology, the NE40 is available with an outstanding expansion capability, and
comprehensively supports IPv6. The NE40 integrates the powerful IP service processing
capability and L3 Ethernet switching capability of the core router, and provides richer
services, more flexible networking and more ideal performance cost. The NE40 is the
important source power for the development of IP backbone network and IP MAN
towards the nature of broadband, security and service.
Product Appearance
NE40-8
> 1-34
NE40-4
NE40-2
Router Series
Product Features
th
The NE40, as the 5th generation router, adopts the industry-leading high performance
performance of hardware organically, thus providing line speed forwarding performance,
rapid service upgrading, expanding capacities and guaranteeing customers investment
to the largest extent.
All the NE40 in the existing network can provide the IPv6 forwarding performance of
hardware in the mode of software upgrading, without the need of buying any IPv6
hardware equipment again, which saves a lot of expenses of users and fully protects the
Ethernet
Switch
user investment, it reflects the outstanding expansion capability of 5th generation routers.
The excellent expandability of NE40 accelerates the development of the IP network
towards the nature of broadband, security, service and intelligence.
The high-quality QoS capability lays a solid technical foundation for the network service.
The NE40 implements the intelligent service awareness, provides the advanced queue
scheduling algorithm and SARED congestion control algorithm, to exactly ensure the
bandwidth, delay and jitter of different services, and to meet the requirements of
different users and at different service levels.
The NE40 is available with rich service capabilities and high-quality, secure and
comprehensive MPLS VPN solutions based on the distributed hardware processing, and it
provides the high-efficiency multicast forwarding capability; it provides the services such
as Gigabit wire-speed NAT. The NE40 is a high cost-effective service router.
The NE40 is available with a fast expansion capacity, comprehensively supporting
Flexible Networking Capability

It owns a great variety of interface types, supports the RPR ring network technology,
provides the perfect protocol function and is able to deal with various complex
> 1-35
Router Series
networking to meet the requirements of IP MAN, backbone network and operation

supporting network.
The NE40 provides such security measures as packet filtering, traffic sampling, port
imaging and security log, and it is an ideal device for constructing the highly secure and
maintainable network.
High Reliability
The key parts of NE40 include the route processing system, the switching fabric system,
the clock system and the power supply system, and the management buses are all
redundancy hot backup, to realize the hot switching based on status; all the components
support hot swapping; they adopt the passive backplane design, providing the hot
patching technology to implement the full smooth upgrading of software; support
the dynamic routing protocol and MPLS traffic engineering; provide the protection
mechanisms such as IP/MPLS fast re-routing, virtual routing redundancy protocol (VRRP)
and RPR, with the Fast Routing Backup function; support the APDP and BFD fast link
detection and the NSF non-stop forwarding function to effectively ensure the high-speed
and reliable running of the whole network.
Ideal Cost Performance

USR of the NE40 series bases itself upon the localized design and production with the
features of L3 switch integrated on the basis of the core router. It is available with both
a powerful processing capability to meet the requirements of the IP backbone network
and rich L2 features. It reflects an extremely high cost performance by greatly saving the
network construction cost in addition to satisfying the service application, so it can be
applied in the peripheral layer of the IP backbone network and MAN.
> 1-36
Router Series
Item
Switching capacity
NE40-8
NE40-4
NE40-2
64Gbps, non-
32Gbps, non-
16Gbps, non-
blocking switching
blocking switching
blocking switching
48Mpps
24Mpps
12Mpps
Number of interface
board slots
Interface type
OC-48c/STM-16c POS
GE
OC-12c/STM-4c POS
FE
OC-3/STM-1 POS
E3
OC-48/STM-16 cPOS is channelized to 155M T3

E1/cE1
OC-48c/STM-16c RPR
T1/cT1
Ethernet
Switch
OC-3/STM-1 cPOS is channelized to E1/T1
OC-12c/STM-4c ATM
OC-3/STM-1 ATM
Routing protocol
IPv6

Layer-3 switch feature
Serves as the universal core router, supports L2 switching and L3

forwarding function, provides rich switch features, including IEEE802.1ad,
IEEE 802.1d, IEEE 802.3, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z, IEEE
802.1Q, IEEE 802.1p, IEEE 802.1D/802.1w, MSTP, supports VLAN
convergence (Super VLAN); supports access control list based on the MAC
address and ports, supports 1438B.
MPLS VPN
Can serve as P and PE. Supports MPLS VPN, meeting the RFC2547bis
> 1-37
Router Series
NAT

QoS
Perfect QoS mechanism. Each line board provides 2k queues, supporting

the advanced scheduling technologies such as CBQ, LLS/NLS and PBS,
it adopts WRED and the advanced SA-RED algorithm, supporting the
discard priority with eight levels; provides the exact traffic policing and
traffic shaping functions; provides the function of defining the complex
rules and it can discriminate the streams with fine granularity. Can
provide the perfect QoS guarantee based on DiffServ.
Multicast

Reliability
Provides the protection mechanisms such as IP/MPLS fast re-routing,

virtual routing redundancy protocol (VRRP) and RPR. Provides the software
> 1-38
Architecture
Input power
DC: -42 ~ -60V
AC: 100V ~ 240V
Router Series
< 1000W
< 600W
< 600W
482.6mm x 420mm
482.6mm x 420mm
482.6mm x 420mm
x 797.3mm
x 352.8mm
x 219.5mm
< 85kg
< 50kg
< 35kg

configuration
Environmental
requirements

Operating humidity: 5% ~ 85%, non-condensing;
Ethernet
Switch
Order Information
NE40-8
Name
Item
Configuration
Remarks
1. Host system
CHASSIS-N68-
Assembly cabinet of the N68-22 router
Optional
UR-NE40-8-
NE40-8 integrated chassis-dual-DC power
Mandatory
CHASSIS-DC
supply
UR-SRUB-64G
NE40-8/NE40-4/NE40-2 route switching
Mandatory,
22
board
2 pieces
recommended
SWP-CR-NE40
Mandatory
Optional, GBIC

CR-E4GC
needs to be
configured
CR-E8FB
Optional, SFP
needs to be
configured
CR-EGFEE
Optional
> 1-39
Router Series
CR-EGFF
16-port Fast Ethernet optical SFP interface
16
line board-enhanced
Optional, SFP
needs to be
configured
CR-EWFEE
Optional
Optional
Optional
16
Optional, SFP

RS-E4GC
4-port Gigabit Ethernet GBIC interface line

board -LAN
UR-EGFEE
16-port 100M Ethernet RJ45 electrical

interface line board processing unit- switching
board enhanced
UR-EGFF

line board processing unit-switching board
needs to be
enhanced
UR-EWFEE
configured
8
Optional
Optional
Optional
Optional
Optional
Optional, SFP

board enhanced
CR-P1UZ

CR-P1US

CR-P1UL

CR-P1UV

CR-P2HM

needs to be
configured
CR-P2HS
2-port 622M POS single-mode optical
interface line board (1310nm, 15km, SC)
Optional, SFP
needs to be
configured
CR-R1UZ

Optional, SFP
needs to be
configured
> 1-40
Router Series
CR-R1US
Optional
Optional
Optional
Optional, SFP

CR-R1UL

CR-R1UV

CR-A2HF

needs to be
configured
CR-A8CF
16
Optional, SFP
needs to be
configured
8-port E1 interface line board-RJ45 interface
Optional
Optional
16
Optional
16
Optional
16
Optional, SFP
Ethernet
Switch
CR-8*E1
3. Flexible card-insertion series

UR-LPUF
Line board (supports flexible card insertion, a

maximum of two sub-cards configured)
UR-PIM-
16-port 100M Ethernet sub-card, routing
16xFE-WAN-
board, RJ45 interface
RJ45
UR-PIM-
16-port 100M Ethernet sub-card, switching
16xFE-LAN-
RJ45
UR-PIM-
8-port FE SFP optical interface sub-card,
E8FF-WAN
routing board
UR-PIM-
E8FF-LAN
switching board
needs to be
configured
16
Optional, SFP
needs to be
configured
UR-PIM-
2-port Gigabit Ethernet sub-card, routing
2xGE-WAN-SFP
board, SFP interface
16
Optional, SFP
needs to be
configured
> 1-41
Router Series
UR-PIM-2xGE-
2-port Gigabit Ethernet sub-card, switching
LAN-SFP
16
Optional, SFP
needs to be
configured
UR-PIM-1xGE-
WAN-SFP
16
Optional, SFP
needs to be
configured
UR-PIM-1xGE-
LAN-SFP
UR-PIM-
8-port E1 sub-card, which can be channelized
8xCHE1-RJ45
to 64k, RJ45 interface
UR-PIM-3xE3-
16
Optional, SFP
needs to be
configured
16
Optional
3-port E3 sub-card, SMB interface
16
Optional
16
Optional, SFP
SMB
UR-PIM-P2CS
interface sub-card (SFP)
needs to be
configured
UR-PIM-P4CS
16
Optional, SFP
needs to be
configured
4. Service board
CR-NAT
Optional
Optional

CR-NetStream-1
NE40-4
Name
Item
Configuration
Remarks
1. Host system
CHASSIS-N68-
Optional
UR-NE40-4-
Mandatory
CHASSIS-DC
supply
UR-SRUB-64G
NE40-8/NE40-4/NE40-2 route switching
Mandatory,
22
board
2 pieces
recommended
> 1-42
Router Series
SWP-CR-NE40
Optional
Optional, GBIC

CR-E4GC
needs to be
configured
CR-E8FB
Optional, SFP
needs to be
configured
CR-EGFEE
Optional
16
Optional, SFP

CR-EGFF

line board-enhanced
needs to be
Optional
Optional
Optional
16
Optional, SFP
Ethernet
Switch
configured
CR-EWFEE

RS-E4GC

board -LAN
UR-EGFEE

board- enhanced
UR-EGFF
UR-EWFEE

needs to be
enhanced
configured
Optional
Optional
Optional
Optional
Optional

board- enhanced
CR-P1UZ

CR-P1US

CR-P1UL

CR-P1UV

> 1-43
Router Series
CR-P2HM
Optional
Optional
Optional
Optional
Optional
Optional
Optional, SFP

CR-P2HS

CR-R1UZ

CR-R1US

CR-R1UL

CR-R1UV

CR-A2HF

needs to be
configured
CR-A8CF
16
Optional, SFP
needs to be
configured
CR-8*E1
Optional
Optional

UR-LPUF

UR-PIM-
16xFE-WAN-
Optional
Optional
RJ45
UR-PIM-
16xFE-LAN-
RJ45
> 1-44
Router Series
UR-PIM-E8FF-
WAN
routing board
Optional, SFP
needs to be
configured
UR-PIM-E8FF-
LAN
switching board
Optional, SFP
needs to be
configured
UR-PIM-2xGE-
WAN-SFP
UR-PIM-2xGE-
LAN-SFP
Optional, SFP
needs to be
configured
Optional, SFP
needs to be
configured
WAN-SFP
Optional, SFP
Ethernet
Switch
UR-PIM-1xGE-
needs to be
configured
UR-PIM-1xGE-
LAN-SFP
Optional, SFP
needs to be
configured
UR-PIM-8xCHE1-
Optional
RJ45
UR-PIM-3xE3-
Optional
Optional, SFP
SMB
UR-PIM-P2CS
needs to be
configured
UR-PIM-P4CS
Optional, SFP
needs to be
configured
4. Service board
CR-NAT
Optional
Optional

CR-NetStream-1
> 1-45
Router Series
NE40-2
Name
Item
Configuration
Remarks
1. Host system
CHASSIS-N68-
Optional
UR-NE40-2-
Mandatory
CHASSIS-DC
supply
UR-SRUB-16G
NE40-2 route switching board
Mandatory, only
22
for NE40-2
SWP-CR-NE40
Mandatory
Optional, GBIC

CR-E4GC
needs to be
configured
CR-E8FB
Optional, SFP
needs to be
configured
CR-EGFEE
Optional
16
Optional, SFP

CR-EGFF

needs to be
configured
CR-EWFEE
RS-E4GC
UR-EGFEE
UR-EGFF
> 1-46
board -LAN
board- enhanced
16
Optional
Optional
Optional
Optional, SFP
needs to be
enhanced
configured
Router Series
UR-EWFEE
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional, SFP

board- enhanced
CR-P1UZ

CR-P1US

CR-P1UL

CR-P1UV

CR-P2HM
Ethernet
Switch

CR-P2HS

CR-R1UZ

CR-R1US

CR-R1UL

CR-R1UV

CR-A2HF

needs to be
configured
CR-A8CF
16
Optional, SFP
needs to be
configured
> 1-47
Router Series
CR-8*E1
Optional
Optional
Optional
Optional
Optional, SFP

UR-LPUF

UR-PIM-
16xFE-WAN-
RJ45
UR-PIM-
16xFE-LAN-
RJ45
UR-PIM-E8FF-
WAN
routing board
UR-PIM-E8FF-
LAN
switching board
needs to be
configured
4
Optional, SFP
needs to be
configured
UR-PIM-2xGE-
WAN-SFP
Optional, SFP
needs to be
configured
UR-PIM-2xGE-
LAN-SFP
Optional, SFP
needs to be
configured
UR-PIM-1xGE-
WAN-SFP
UR-PIM-1xGE-
LAN-SFP
Optional, SFP
needs to be
configured
Optional, SFP
needs to be
configured
UR-PIM-
8xCHE1-RJ45
Optional
UR-PIM-3xE3-
Optional
Optional, SFP
needs to be
SMB
UR-PIM-P2CS
configured
> 1-48
Router Series
UR-PIM-P4CS
Optional, SFP
needs to be
configured
4. Service board
CR-NAT
Optional
Optional

CR-NetStream-1
Ethernet
Switch
> 1-49
Router Series
Quidway NetEngine 20 High-end Router Series
Product Overview
The Quidway NetEngine 20 high-end router series (hereinafter called the NE20)
inherits the design philosophy of Huaweis high-end router, and can serve as the highperformance peripheral and convergence equipment in the operator IP backbone
network for the construction of service operation and supporting network with its highperformance advantage and as the core router or high-performance convergence router
in the industrial network and enterprise network.
The NE20 high-end router series adopts the modular structure and provides multiple
optional interface modules. In the design, it inherits Huaweis rich experiences in
telecommunication field, with the comprehensive backup and security technology
adopted. All the interface cards support hot swapping, providing two power supply
solutions, AC and DC. They support power supply 1+1 backup, and the power supply
module and fan module support hot swapping, to better meet the requirements of the
carrier-class network for high reliability.
The NE20 high-end router series adopts the mainstream NP (Network Processor)
technology in this industry, providing rich services and powerful packet forwarding
performance, fully representing the technical features of the 5th generation router. The
main control part of the NE20 router adopts the high-speed PowerPC microcomputer and
real-time OS, with the VRP (versatile Routing Platform) that Huawei has the independent
intellectual property rights as the foundation, and it provides rich service features
combining with the equipment and network management technology. The forwarding
part adopts the high-performance network processor for hardware forwarding, and
the dedicated IP network processor technology that can be programmed in the key
IP forwarding and service processing, and it provides the powerful routing searching,
packet forwarding and service acceleration features.
The NE20 high-end router series owns the consistent network interface, subscriber
interface and management interface, with powerful flexibility and configuration nature
and it supports a variety of interfaces and service features, integrating the recently
> 1-50
Router Series
growing MPLS (Multi-protocol Label Switching), VPN (Virtual Private Network), QoS
(Quality of Service), traffic engineering, multicasting and user management, in addition,
it supports a variety of link layer protocols, which ensures its advantages of highperformance and high quality. In terms of networking application, the NE20 highend router series provides a comprehensive service processing capability as a highend convergence equipment, and it also provides an all-round and flexible networking
solution to effectively improve the network value and save the network building cost.
The software/hardware features of the NE20 high-end router series conform to the
international standard, and guarantee its interworking with the products of other
manufacturers at different levels, to protect users existing investment to the largest
extent.
Ethernet
Switch
NE20-2
NE20-4
NE20-8
NE20E-8
Product Features
th
The 5 Generation Router Concept
The NE20 differs from the past router products of the same type that adopt the CPU
software for forwarding, it adopts the high-performance network processor technology
to implement the centralized forwarding of the high-speed interface packets, organically
combining with the flexibility of software and high-performance of hardware. In addition,
> 1-51
Router Series
it provides the wire-speed forwarding performance, so the NE20E-8 performance can

reach up to 6Mpps and the performance of NE20-8, NE20-4, and NE20-2 can reach up
to 4.5Mpps.
The NE20 adopts the technology of high-speed interface forwarding and control
plane splitting, and the forwarding engine of the high-speed interface uses the high
performance network processor, which improves the forwarding performance, control
capability, reliability and security of the equipment.
High-quality QoS Capability

The perfect QoS mechanism and the excellent QoS performance can ensure the service
quality of different services under the heavy load, and they can provide the perfect QoS
mechanism based on DiffServ. It supports the classification of complex streams and
the precise traffic policing and shaping; provides the queue scheduling and congestion
avoidance function, supporting the advanced scheduling technologies such as CBWFQ,
LLS/NLS and PBS. It adopts WRED and the advanced SA-RED algorithm, and RED supports
the discard priority of eight levels, which ensures the bandwidth, delay and jitter indices
of different services, to meet the Discrimination service requirements of users at various
service levels.
High Reliability
Adopts the high-reliability modular design. All the boards, fans and power supply
modules support hot swapping; provides the dual-power (1+1) module that can be
mutual backup, and the design mode of passive backplane; provides the software hot
patching technology to implement the fully smooth upgrading, thus effectively ensuring
the high-speed and reliable running in the whole network. The integrated system realizes
the non-stop running for 7 x 24 hours.
The NE20E-8 is the further enhancement of NE20, adopting the bus technology of the
core router, and the bandwidth of the backplane reaches 40G at present, with a very
strong expandability. The NE20E-8 route processing board and the network processing
board provide (1+1) redundancy backup, with the characteristic function of FRB (Fast
Routing Backup), to implement the status-based hot switching and non-stop route
forwarding and provide the high-quality service guarantee.
> 1-52
Router Series
Powerful MPLS Processing Capability
Supports MPLS VPN and MPLS TE, provides high-quality, secure and multi-level MPLS
VPN solution, used as the cost-effective MPLS PE equipment.
Service Capability
The software system is based on the VRP software platform that Huawei owns the
independent intellectual property rights, supporting VPN in multiple modes (L2TP, GRE,
MPLS VPN), and it is available with the NAT function and provides rich interworking
functions such as Ethernet /VLAN, PPP/MP, PPPoE, Frame Relay, HDLC, ATM, X.25, HDLC
and LAPB.
Routing Processing Capability

Ethernet
Switch
Supports such unicast routing protocols as RIP, OSPF, BGP and IS-IS and such multicast
routing protocols as IGMP, PIM-DM/SM, MBGP and MSDP; supports routing policy and
policy routing.
IPv6 Routing Capability

Comprehensively supports the double-protocol stack of IPv4 and IPv6 to implement the
hardware IPv6 forwarding and provides rich IPv6 protocols. Supports multiple transition
technologies from IPv4 and IPv6: Manual tunnel configuration, automatic tunnel
configuration, 6to4 tunnel, NAT-PT; supports the IPv6 static route and such dynamic
routing protocols as BGP4+, RIPng, OSPFv3 and ISISv6; supports ICMPv6 MIB, UDP6 MIB,
TCP6 MIB and IPv6 MIB.
Maintainability
Supports the automatic fault diagnosis function; helps engineers to locate the system
faults quickly and accurately through the fault diagnosis software running on the PC.
> 1-53
Router Series
Item
NE20-8
NE20-4
NE20-2
NE20E-8
Bus bandwidth
8G
8G
8G
40G
Packet forwarding rate
4.5Mpps
4.5Mpps
4.5Mpps
6Mpps
Routing table capacity
600,000
600,000
600,000
600,000
Maximum configuration
of service interface board

Interface type
Synchronous serial port/interface module

E1/CE1 interface module
T1/CT1 interface module
E3/CE3 interface module
T3 interface module
OC-3c/STM-1 interface module
OC-3c/STM-1 interface module
FE interface module
GE interface module
CPOS interface module
436.2mm x 420 mm
436.2 mm x 420 mm
436.2 mm x 420 mm
436.2 mm x 480 mm
x 219.5 mm
x 130.5 mm
x 130.5 mm
x 263.9 mm
Weight
27.5Kg
17.5Kg
15Kg
32.5kg
Maximum output power
320W
240W
240W
350w
Working environment
0 ~ 45C
temperature
Relative working
5%RH~ 85% RH, no condensing
humidity
Security specification
Obtained the security specification certification such as CE, UL, FCC
certification
PART15, ISTA and VCCI that are recognized in multiple countries.
Order Information
NE20-8
Name
Item
Configuration
Remarks
1. Host system
RT-NE20-8CHASSIS
> 1-54
NE20-8 (Chassis + Fan)
Mandatory
Router Series
RT-NE20-RPU-
RPU (Route Processing Unit), 256M memory,
256M
with two FE/E interfaces
Mandatory
RT-NE20-NPU
NPU (Network Processor Unit)
Mandatory
RT-NE20-DC
NE20 DC power supply
Mandatory,
2 pieces
recommended
SWP-RT-NE20
NE20 software expense
Mandatory
Optional, SFP
2. Line interface module

NE-HIC-STM1/
1-port POS/155M high-speed interface
POS-SFP
module (SFP)
needs to be
configured
2xSTM1/POS-
module (SFP)
needs to be
SFP
configured
NE-HIC-
4xSTM1/POS-
module (SFP)
Optional, SFP
needs to be
SFP
NE-HIC-GE-SFP
Optional, SFP
Ethernet
Switch
NE-HIC-
configured
1-port Gigabit Ethernet high-speed interface
module, SFP interface
Optional, SFP
needs to be
configured
NE-HIC-2xGE-
SFP
Optional, SFP
needs to be
configured
NE-HIC-8xFE-
8-port 100M Ethernet high-speed interface
RJ45
module (RJ45)
NE-HIC-4xFE-
RJ45
module (RJ45)
NE-HIC-2xFE-
RJ45
module (RJ45)
NE-HIC-8xFE-
SFP
module (SFP optical interface)
Optional
Optional
Optional
Optional, SFP
needs to be
configured
NE-HIC-4xFE-
SFP
Optional, SFP
needs to be
configured
> 1-55
Router Series
NE-HIC-2xFE-
SFP
Optional, SFP
needs to be
configured
NE-FIC-CPOS-E1
Router 1-port 155M cPOS E1-standard
Optional
Optional
4 ports -E1-DB68-120ohm- interface module
Optional
Optional
8 ports -E1 DB68-120ohm- interface module
Optional
Optional
NE-FIC-4xcT1-
4 ports - channelized T1-DB68-100ohm-
Optional
100ohm
interface module
NE-FIC-4xcE1-
4 ports - channelized E1-DB68-75ohm-
Optional
75ohm
interface module
NE-FIC-4xcE1-
Optional
120ohm
interface module
NE-FIC-8xcT1-
Optional
100ohm
interface module
NE-FIC-8xcE1-
Optional
75ohm
interface module
NE-FIC-8xcE1-
Optional
120ohm
interface module
NE-FIC-CE3
1-port E3/CE3 compatible interface module
Optional
NE-FIC-T3
1-port T3/T3 compatible interface module
Optional
RT-FIC-4SAE
4-port enhanced synchronous/asynchronous
Optional
Optional
module
NE-FIC-CPOS-T1
Router 1-port 155M cPOS T1-standard

module
NE-FIC-4xE1120ohm
NE-FIC-4xE175ohm
NE-FIC-8xE1120ohm
NE-FIC-8xE175ohm
interface module
NE-FIC-STM1/
1- p o r t AT M / 1 5 5 M m u l t i - m o d e o p t i c a l
ATM-MM/1310-
interface module (1310nm, 2km, SC)
2km-SC
> 1-56
Router Series
NE-FIC-STM1/
1-port ATM/155M single-mode optical
ATM-MM/1310-
Optional
Optional
15km-SC
NE-FIC-STM1/
1-port ATM/155M single-mode long-haul
ATM-MM/1310-
optical interface module (1310nm, 30km, SC)
30km-SC
NE20-4
Name
Item
Configuration
Remarks
1. Host system
Mandatory
RT-NE20-RPU-
Mandatory
256M
RT-NE20-NPU
Mandatory
RT-NE20-DC
Mandatory,
Ethernet
Switch
RT-NE20-4CHASSIS
2 pieces
recommended
SWP-RT-NE20
Mandatory
Optional, SFP

NE-HIC-STM1/
POS-SFP
module (SFP)
NE-HIC-
2xSTM1/POS-
module (SFP)
needs to be
configured
3
needs to be
SFP
configured
NE-HIC-
4xSTM1/POS-
module (SFP)
Optional, SFP
needs to be
SFP
NE-HIC-GE-SFP
Optional, SFP
configured
Optional, SFP
needs to be
configured
> 1-57
Router Series
NE-HIC-2xGE-
SFP
Optional, SFP
needs to be
configured
NE-HIC-8xFE-
RJ45
module (RJ45)
NE-HIC-4xFE-
RJ45
module (RJ45)
NE-HIC-2xFE-
RJ45
module (RJ45)
NE-HIC-8xFE-
SFP
Optional
Optional
Optional
Optional, SFP
needs to be
configured
NE-HIC-4xFE-
SFP
Optional, SFP
needs to be
configured
NE-HIC-2xFE-
SFP
Optional, SFP
needs to be
configured
NE-FIC-CPOS-E1
Optional
Optional
4 port -E1-DB68-120ohm- interface module
Optional
Optional
Optional
Optional
module
NE-FIC-CPOS-T1

module
NE-FIC-4xE1120ohm
NE-FIC-4xE175ohm
NE-FIC-8xE1120ohm
NE-FIC-8xE175ohm
> 1-58
NE-FIC-4xcT1-
100ohm
interface module
NE-FIC-4xcE1-
75ohm
interface module
Optional
Optional
Router Series
NE-FIC-4xcE1-
120ohm
interface module
Optional
NE-FIC-8xcT1-
Optional
100ohm
interface module
NE-FIC-8xcE1-
75ohm
interface module
Optional
NE-FIC-8xcE1-
Optional
120ohm
interface module
NE-FIC-CE3
NE-FIC-T3
Optional
Optional
RT-FIC-4SAE
Optional
Optional
Optional
Optional
interface module
ATM-MM/1310-
Ethernet
Switch
NE-FIC-STM1/
2km-SC
NE-FIC-STM1/
ATM-MM/1310-
15km-SC
NE-FIC-STM1/
ATM-MM/1310-
30km-SC
NE20-2
Name
Item
Configuration
Remarks
1. Host system
RT-NE20-2-
Mandatory
RT-NE20-RPU-
Mandatory
256M
RT-NE20-NPU
Mandatory
RT-NE20-DC
Mandatory,
CHASSIS
2 pieces
recommended
> 1-59
Router Series
SWP-RT-NE20
Mandatory
Optional, SFP

NE-HIC-STM1/
POS-SFP
module (SFP)
NE-HIC-
2xSTM1/POS-
module (SFP)
needs to be
configured
2
needs to be
SFP
configured
NE-HIC-
4xSTM1/POS-
module (SFP)
Optional, SFP
needs to be
SFP
NE-HIC-GE-SFP
Optional, SFP
configured
Optional, SFP
needs to be
configured
NE-HIC-2xGE-
SFP
NE-HIC-8xFE-
RJ45
module (RJ45)
NE-HIC-4xFE-
RJ45
module (RJ45)
NE-HIC-2xFE-
RJ45
module (RJ45)
NE-HIC-8xFE-
SFP
Optional, SFP
needs to be
configured
Optional
Optional
Optional
Optional, SFP
needs to be
configured
NE-HIC-4xFE-
SFP
NE-HIC-2xFE-
SFP
Optional, SFP
needs to be
configured
Optional, SFP
needs to be
configured
NE-FIC-CPOS-E1
> 1-60
module
Optional
Router Series
NE-FIC-CPOS-T1
Optional
Optional
Optional
Optional
Optional
NE-FIC-4xcT1-
Optional
100ohm
interface module
NE-FIC-4xcE1-
Optional
75ohm
interface module
NE-FIC-4xcE1-
Optional
120ohm
interface module
NE-FIC-8xcT1-
Optional
100ohm
interface module
NE-FIC-8xcE1-
Optional
75ohm
interface module
NE-FIC-8xcE1-
Optional
120ohm
interface module
NE-FIC-CE3
Optional
NE-FIC-T3
Optional
RT-FIC-4SAE
Optional
Optional
Optional
Optional
module
NE-FIC-4xE1120ohm
NE-FIC-4xE175ohm
NE-FIC-8xE1120ohm
NE-FIC-8xE175ohm
Ethernet
Switch
interface module
NE-FIC-STM1/
ATM-MM/1310-
2km-SC
NE-FIC-STM1/
ATM-MM/1310-
15km-SC
NE-FIC-STM1/
ATM-MM/1310-
30km-SC
> 1-61
Router Series
NE20E-8
Name
Item
Configuration
Remarks
1. Host system
RT-NE20E-8-
NE20E-8 (Chassis + Fan)
Mandatory
RT-NE20E-RPU-
Mandatory,
256M
with two GE/FE/E interfaces, supporting SFP
CHASSIS
2 pieces
recommended
RT-NE20E-NPU
Mandatory,
2 pieces
recommended
RT-NE20-DC
Mandatory,
2 pieces
recommended
SWP-RT-NE20
NE 20 software expense
Mandatory
Optional, SFP

NE-HIC-STM1/
POS-SFP
module (SFP)
NE-HIC-
2xSTM1/POS-
module (SFP)
needs to be
configured
3
Optional, SFP
needs to be
SFP
configured
NE-HIC-
Optional, SFP
4xSTM1/POS-
module (SFP)
needs to be
SFP
NE-HIC-GE-SFP
configured
Optional, SFP
needs to be
configured
> 1-62
NE-HIC-2xGE-
Optional, SFP
SFP
needs to be
configured
NE-HIC-8xFE-
Optional
RJ45
module (RJ45)
Router Series
NE-HIC-4xFE-
RJ45
module (RJ45)
NE-HIC-2xFE-
RJ45
module (RJ45)
NE-HIC-8xFE-
SFP
Optional
Optional
Optional, SFP
needs to be
configured
NE-HIC-4xFE-
SFP
Optional, SFP
needs to be
configured
NE-HIC-2xFE-
SFP
NE-FIC-CPOS-E1
Optional, SFP
needs to be
Optional
Optional
Optional
Optional
Optional
Optional
NE-FIC-4xcT1-
Optional
100ohm
interface module
NE-FIC-4xcE1-
Optional
75ohm
interface module
NE-FIC-4xcE1-
Optional
120ohm
interface module
NE-FIC-8xcT1-
Optional
100ohm
interface module
NE-FIC-8xcE1-
Optional
75ohm
interface module
Ethernet
Switch
configured
8
module
NE-FIC-CPOS-T1

module
NE-FIC-4xE1120ohm
NE-FIC-4xE175ohm
NE-FIC-8xE1120ohm
NE-FIC-8xE175ohm
> 1-63
Router Series
NE-FIC-8xcE1-
120ohm
interface module
Optional
NE-FIC-CE3
Optional
NE-FIC-T3
Optional
RT-FIC-4SAE
Optional
Optional
Optional
Optional
interface module
NE-FIC-STM1/
ATM-MM/1310-
2km-SC
NE-FIC-STM1/
ATM-MM/1310-
15km-SC
NE-FIC-STM1/
ATM-MM/1310-
30km-SC
> 1-64
Router Series
Quidway NetEngine 16E/08E/05 High-end Router Series
Product Overview
The Quidway NetEngine 16E/08E/05 high-end router series (hereinafter called the
NE16E/08E/05) is the high-end products among Huaweis router series, with the
advanced distributed forwarding architecture and flexible networking capability. It has
the peripheral access feature, which determines its application in multiple networks. It
can provide users with an all-round solution to maximally meet customers requirements.
This product is mainly applied in the carrier-class operation network and the enterpriseclass core network, available with the powerful dedicated-line access and VPN service
capability, and it provides rich service functions, available with the perfect QoS and
Ethernet
Switch
security feature, applicable to operators, governments, education, finance, electrical

power and the internal network and service network of enterprises. It can cooperate
with the access server and IP telephone gateway device.
The NE high-end router is developed by the powerful professional R&D team of
Huawei, and this team takes active part in the work of the international standardization
organization, meanwhile keeping its close tracing the advanced technologies of this
industry, to constantly improve the technical level of products, provide users with the
powerful service support and fully satisfy their service requirements. The NE high-end
router has provided with the IPv6 function in all aspects, and it is the first IPv6 router in
China that has passed the network access test.
Up till now, the NE high-end router has been widely applied in telecommunication
operators and government, finance, education, electrical power and enterprise networks,
and won users trust.
> 1-65
Router Series
Product Appearance
NE16E
NE08E
NE05
Product Features
CPCI Bus Technology
With the CPCI bus technology, its bandwidth and performance is better than the similar
products that were adopting the earlier bus technology, Cybus.
High Reliability
The redundancy design of the main control board; the active/standby switching realizes
zero packet-loss rate; 2+1 or 1+1 power hot backup; interface backup and port binding
realize the high reliability of links; VRRP ensures the reliability between devices; the main
control board and the interface board support hot swapping; the integrated system
realizes the non-stop running for 7x24 hours.
High Performance
Distributed forwarding architecture, the high-performance CPU cooperates with the IP
TurboEngineTM technology of independent intellectual property rights, the integrated
forwarding performance of NE16E exceeds 4.8Mpps, the integrated NE08E forwarding
performance exceeds 2.4Mpps and the integrated NE05 forwarding performance
exceeds 1.6Mpps.
> 1-66
Router Series
Policy NAT
It supports the distributed NAT, available with the policy and the security management
function, and it is able to prevent the evil subscribers from attacking the NAT connections
and provides a perfect security log.
Security
Supports the packet filtering firewall and dynamic firewall ASPF, the authentication of
subscribers and routing protocols, the IPSEC and IKE of the standard protocols and the
IspKeeper anti-traffic attacking technology of Huawei.
Routing Processing Capability

Supports static routing and such unicast routing protocols as RIP, OSPF, BGP and IS-IS;
Ethernet
Switch
supports policy routing and multicast routing protocols, IGMP, PIM-DM/SM, MBGP and
MSDP.
IPv6 Routing Capability

Comprehensively it supports the double protocol stack of the IPv4 and IPv6, and provides
a rich IPv6 protocols. Supports multiple transition technologies from IPv4 and IPv6:
Manual tunnel configuration, automatic tunnel configuration, 6to4 tunnel, NAT-PT, 6PE;
supports the IPv6 static route and such dynamic routing protocols as BGP4+, RIPng,
OSPFv3 and ISISv6; supports ICMPv6 MIB, UDP6 MIB, TCP6 MIB and IPv6 MIB.
Powerful QoS Capability

Supports traffic policing, traffic shaping, congestion control and multi-queue scheduling.
Service Capability
Supports dedicated line access, PPPOE access, PPPOA access, PPPOEOA access, Ethernet
VLAN access, Portal, Web authentication, port leasing, DHCP RELAY, DNS, and DLSW.
Powerful VPN Service Capability

Supports L2TP, GRE, IPSEC, FR, VPN services such as L3 MPLS VPN, L2 MPLS VPN;
provides tunnel integration and VPN interworking, and provides the secure and multilevel MPLS VPN solution.
> 1-67
Router Series
High-density Port
The NE16E provides 12 universal I/O slots, and the maximum loading capacity of a single
frame is: 24 155M POS interfaces, 60 100M Ethernet interfaces, 192 E1/CE1 interfaces;
the NE08E provides six universal I/O slots, and the maximum loading capacity of a single
frame is: 12 155M POS interfaces.
Item
NE16E
NE08E
NE05
Bus bandwidth
4G
2G
2G
Packet forwarding rate
4.8Mpps
2.4Mpps
1.6Mpps
Routing table capacity
250,000 ~ 700,000
250,000 ~ 700,000
120,000
Maximum configuration
12 (Each interface
6 (Each interface
4 (Each interface
of service interface board
board can be matched
with two interface
with two interface
with two interface
modules)
modules)
modules)
Connection mode
Synchronous serial port

E1/CE1 interface
T1/CT1 interface
E3/CE3 interface
T3/CT3 interface
E1 ATM reverse multiplex interface
T1 ATM reverse multiplex interface
ATM over E3 interface
ATM over T3 interface
OC-3c/STM-1 ATM interface
OC-3c/STM-1 POS interface
Channelized OC-3c/STM-1 POS interface
FE interface
GE interface
Integrated interface
3-port 100M Ethernet electrical interface + 1-port Gigabit Ethernet optical
module
interface integrated module

3-port 100M Ethernet electrical interface + 1-port Gigabit Ethernet
electrical interface integrated module
3-port 100M Ethernet electrical interface integrated module
> 1-68
Router Series
Weight
Maximum output power
482.6 mm x 420 mm x
482.6 mm x 420 mm x
482.6 mm x 420 mm x
619.5 mm
441.7 mm
175 mm
63.5kg (3-power
45kg (Dual-power
22kg (Dual-power
supply module, full
supply module, full
supply module, full
configuration of board)
configuration of board) configuration of board)
460W
460W
350W
(single power supply)

Working environment
0 ~ 45C
temperature
Relative working humidity
5%RH ~ 85%RH, no condensing
Security specification
Obtained the security specification certification such as CE, UL, FCC
certification
PART15, ISTA and VCCI that are recognized in multiple countries
Ethernet
Switch
Order Information
NE16E
Name
Item
Configuration
Remarks
1. Host system
CHASSIS-
NE16E rack
Optional
NE16E assembly cabinet (DC)
Mandatory
RT-NE-ALU
System monitoring management unit
Mandatory
RT-NE-RSU
Route switching unit front processing board
Mandatory,
NE-N68-22
RT-NE16E
CHASSIS/3DC
2 pieces
recommended
RT-NE-RSEU
Route switching extended unit
Mandatory,
2 pieces
recommended
RT-NE-HAU
System CPCI hot swapping control bridge
board
Mandatory,
2 pieces
recommended
SWP-VRP
Expense for NE16E VRP software
Mandatory
Versatile interface unit front processing board
12
Optional
-256 M memory
2. Versatile interface unit

RT-NE-VIUB
> 1-69
Router Series
RT-NE-VIEU
Versatile interface unit back transfer board
12
Optional
RT-NE-VIU4B
G4 versatile interface unit front processing
12
Optional
12
Optional
24
Optional
24
Optional
24
Optional
24
Optional
board-256M memory
RT-NE-VIU4BE

board-256M memory performance enhanced
3. Versatile interface card

4-port SA synchronous serial port/interface card
RT-NE-SAPA
4-port synchronous serial port front

processing board
RT-NE-SAKA
4-port synchronous serial port back transfer

card (DB100 female connector)
4-port E1/CE1 interface card

RT-NE-CEPA
4-port E1/CE1 interface front processing card
24
Optional
RT-NE-QEKA
4-port E1/CE1 75 ohm/120 ohm electrical
24
Optional
24
Optional
interface back transfer card (DB68 female

connector)
RT-NE-8EPA
24
Optional
RT-NE-8EKA
8-port E1/CE1 75-ohm electrical interface
24
Optional
24
Optional
back transfer card (DB68 female connector)

RT-NE-8EKB
8-port E1 IMA interface card

RT-NE-E8IP
8-port E1 ATM reverse multiplex interface
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
front processing card

RT-NE-8EKA

RT-NE-8EKB

8-port T1 IMA interface card

RT-NE-T8IP
8-port T1 ATM reverse multiplex interface

RT-NE-8TKA
8-port T1/CT1 100-ohm electrical interface

> 1-70
Router Series
1-port channelized CE3 interface card
24
Optional
RT-NE-CE3P
24
Optional
24
Optional
1-port E3 interface card
24
Optional
RT-NE-E3PA
1-port E3 interface front processing board
24
Optional
RT-NE-CE3K
1-port E3/cE3/ATM E3 75-ohm electrical
24
Optional
1-port ATM over E3 interface card
24
Optional
RT-NE-AESP
24
Optional
24
Optional
24
Optional
RT-NE-AEDP
24
Optional
24
Optional
1-port T3 interface card
24
Optional
RT-NE-T3PA
1-port T3 interface front processing card
24
Optional
RT-NE-CT3K
1-port channelized T3 interface card
24
Optional
1-port ATM over T3 interface card
24
Optional
RT-NE-ATSP
24
Optional
24
Optional
24
Optional
RT-NE-ATDP
24
Optional
24
Optional
1-port fast Ethernet interface card
24
Optional
RT-NE-ETPA
24
Optional
24
Optional
1- p o r t c h a n n e l i z e d E 3 i n t e r f a c e f ro n t
processing card
RT-NE-CE3K

interface back transfer card (SMB)
1-channel ATM over E3 interface front

processing board
Ethernet
Switch
RT-NE-CE3K

processing board
RT-NE-E3DK
2-channel ATM over E3 interface back

board
1-channel ATM over T3 interface front

processing board
RT-NE-CT3K

processing board
RT-NE-T3DK
2-channel ATM over T3 interface back board
1- p o r t 1 0 0 M E t h e r n e t i n t e r f a c e f ro n t
processing card
RT-NE-ETKA
1-port 100M Ethernet electrical interface back

transfer card (RJ45)
> 1-71
Router Series
RT-NE-ETKB
1-port 100M Ethernet single-mode optical
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
12
Optional
12
Optional
12
Optional
12
Optional
interface back transfer card (1310nm, 15km, SC)

RT-NE-ETKC
1-port 100M Ethernet multi-mode optical

1-port 155M POS interface card

RT-NE-POPB
1-port OC3/STM1 POS interface front

processing card
RT-NE-PAKB
1-port OC3/STM1 POS/ATM/CPOS multimode optical interface back transfer card

(1310nm,2km, SC)
RT-NE-PAKA
1-port OC3/STM1 POS/ATM/CPOS multi-mode

short-haul optical interface back transfer card
(1310nm, 15km, SC)
RT-NE-PAKC
1-port OC3/STM1 POS/ATM/CPOS single-mode

long-haul optical interface back transfer card
(1310nm, 40km, SC)
1-port 155M ATM interface card

RT-NE-ATPB
1 - p o r t O C 3 / S T M 1 AT M i n t e r f a c e f r o n t
processing card
RT-NE-PAKB

optical interface back transfer card (1310nm,
2km, SC)
RT-NE-PAKA

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)
1-port channelized 155M POS to the E1 interface

RT-NE-CPOP
1-port channelized OC3/STM1 POS interface

RT-NE-CPOC

RT-NE-PAKB

(1310nm,2km, SC)
> 1-72
Router Series
RT-NE-PAKA
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
24
Optional
12
Optional
12
Optional

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)
1-port channelize 155M POS to the T1 interface

RT-NE-CPOB
1-port OC3/STM1 channelized POS interface

RT-NE-PAKB

(1310nm,2km, SC)
Ethernet
Switch
RT-NE-PAKA

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)
1-port Gigabit Ethernet interface card

RT-NE-GEPA
1-channel Gigabit Ethernet optical interface

RT-NE-GEKA
1-port Gigabit Ethernet single-mode optical

interface back transfer card (1310nm,10km, SC)
RT-NE-GEKB
1-port Gigabit Ethernet multi-mode optical

interface back transfer card (1310nm,500km, LC)
RT-NE-GEKC
1-port Gigabit Ethernet single-mode long-haul

40km, LC)
RT-NE-GEKD
1-port Gigabit Ethernet single-mode extra

(1550nm, 70km, LC)
3FE electrical interface integrated module unit

RT-NE-3FEMK
The rear panel of module provides 3FE electrical

interface + 1 empty card position
> 1-73
Router Series
3FE electrical interface + 1GE optical interface (GBIC)
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
integrated module unit

RT-NE-1GOMK
The rear panel of module provides 3FE

electrical interface + 1 GE optical interface
(GBIC)
RT-NE-1GOMP
The front panel of module provides 3FE

(256M SDRAM)
3FE electrical interface + 1GE electrical interface

RT-NE-1GEMK
The rear panel of module provides 3FE

electrical interface + 1 GE electrical interface
RT-NE-1GEMP

(256M SDRAM)
NE08E
Name
Item
Configuration
Remarks
1. Host system
CHASSIS-
NE08E rack
Optional
NE08E assembly cabinet (DC)
Mandatory
RT-NE-ALU
Mandatory
RT-NE-RSU
Mandatory,
NE-N68-22
RT-NE08E
CHASSIS/3DC
2 pieces
recommended
RT-NE-RSEU
Mandatory,
2 pieces
recommended
> 1-74
Router Series
RT-NE-HAU
System CPCI hot swapping control bridge
board
Mandatory,
2 pieces
recommended
SWP-VRP
Expense for NE08E VRP software
Mandatory
Optional
2. Versatile interface unit

RT-NE-VIUB
Versatile interface unit front processing

board-256 M memory
RT-NE-VIEU
Optional
RT-NE-VIU4B
Optional
Optional
12
Optional
RT-NE-SAPA
12
Optional
12
Optional
12
Optional
RT-NE-CEPA
12
Optional
RT-NE-QEKA
12
Optional
12
Optional
RT-NE-8EPA
12
Optional
RT-NE-8EKA
12
Optional
12
Optional
12
Optional
RT-NE-E8IP
12
Optional
12
Optional
board-256 M memory
RT-NE-VIU4BE

board-256 M memory-performance enhanced
4-port synchronous serial port front processing
Ethernet
Switch
board
RT-NE-SAKA


connector)

RT-NE-8EKB

8-port E1 ATM reverse multiplex interface

RT-NE-8EKA

> 1-75
Router Series
RT-NE-8EKB
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
RT-NE-CE3P
12
Optional
12
Optional
12
Optional
RT-NE-E3PA
12
Optional
RT-NE-CE3K
12
Optional
12
Optional
RT-NE-AESP
12
Optional
12
Optional
12
Optional
RT-NE-AEDP
12
Optional
12
Optional
12
Optional
RT-NE-T3PA
12
Optional
RT-NE-CT3K

RT-NE-T8IP
8-port T1 ATM reverse multiplex interface

RT-NE-8TKA

1- p o r t c h a n n e l i z e d E 3 i n t e r f a c e f ro n t
processing card
RT-NE-CE3K


processing board
RT-NE-CE3K


processing board
RT-NE-E3DK
2-channel ATM over E3 interface back

board
12
Optional
12
Optional
RT-NE-ATSP
12
Optional
12
Optional
12
Optional

processing board
RT-NE-CT3K
> 1-76
Router Series
RT-NE-ATDP
2 - c h a n n e l AT M o v e r T 3 i n t e r f a c e f ro n t
12
Optional
12
Optional
12
Optional
RT-NE-ETPA
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
processing board
RT-NE-T3DK
1-port 100M Ethernet interface front

processing card
RT-NE-ETKA

RT-NE-ETKB
1-port 100M Ethernet single-mode

optical interface back transfer card
(1310nm,15km,SC)
RT-NE-ETKC

RT-NE-POPB
1-port OC3/STM1 POS interface front
Ethernet
Switch
interface back transfer card (1310nm,2km,SC)
processing card
RT-NE-PAKB

(1310nm,2km, SC)
RT-NE-PAKA

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)

RT-NE-ATPB
1 - p o r t O C 3 / S T M 1 AT M i n t e r f a c e f r o n t
processing card
RT-NE-PAKB

(1310nm,2km, SC)
RT-NE-PAKA

(1310nm, 15km, SC)
> 1-77
Router Series
RT-NE-PAKC
1-port OC3/STM1 POS/ATM/CPOS single-
12
Optional
1-port channelize 155M POS to the E1 interface
Optional
RT-NE-CPOP
Optional
Optional
Optional
Optional
Optional
1-port channelize 155M POS to the T1 interface
Optional
RT-NE-CPOB
Optional
Optional
Optional
Optional
mode long-haul optical interface back

transfer card (1310nm, 40km, SC)

RT-NE-CPOC

RT-NE-PAKB

(1310nm,2km, SC)
RT-NE-PAKA

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)

RT-NE-PAKB

(1310nm,2km, SC)
RT-NE-PAKA

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)
> 1-78
Router Series

RT-NE-GEPA
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
12
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional

RT-NE-GEKA

interface back transfer card (1310nm,10km, SC)
RT-NE-GEKB

interface back transfer card (1310nm,500km, LC)
RT-NE-GEKC

40km, LC)
RT-NE-GEKD


RT-NE-3FEMK
Ethernet
Switch
(1550nm, 70km, LC)

RT-NE-1GOMK
T h e re a r p a n e l o f m o d u l e p ro v i d e s 3 F E
(GBIC)
RT-NE-1GOMP

(256M SDRAM)
3FE electrical interface + 1GE electrical

interface integrated module unit
RT-NE-1GEMK

interface + 1 GE electrical interface
RT-NE-1GEMP

(256M SDRAM)
> 1-79
Router Series
NE05
Name
Item
Configuration
Remarks
RT-NE05
NE05 chassis-Dual DC power supply module
Mandatory
CHASSIS/2DC
configuration
RT-NE-ALU
Mandatory
RT-NE-RSU
Mandatory
RT-NE-RSHC
Mandatory
SWP-VRP
Expense for NE05 VRP software
Mandatory
Optional
Optional
1. Host system
2.Versatile interface unit

RT-NE-VIUA
Versatile interface unit front processing board

-128 M memory
RT-NE-VIUB
Versatile interface unit front processing

board-256 M memory
RT-NE-VIEU
Optional
RT-NE-VIU4A
Optional
Optional
Optional
Optional
Optional
RT-NE-SAPA
Optional
Optional
Optional
RT-NE-CEPA
Optional
RT-NE-QEKA
Optional
board-128 M memory (NE05 dedicated)

RT-NE-VIU4B

board-256 M memory
RT-NE-VIU4AE

board -128 M memory-performance enhanced
(NE05 dedicated)
RT-NE-VIU4BE

board-256 M memory-performance enhanced
4-port synchronous serial port front processing

board
RT-NE-SAKA


connector)
> 1-80
Router Series
Optional
RT-NE-8EPA
Optional
RT-NE-8EKA
8-port E1/CE1 75-ohm electrical interface back
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
transfer card (DB68 female connector)

RT-NE-8EKB


RT-NE-E8IP
8-port E1 ATM reverse multiplex interface front

processing card
RT-NE-8EKA
8-port E1/CE1 75-ohm electrical interface back

transfer card (DB68 female connector)
RT-NE-8EKB
RT-NE-T8IP
8-port T1 ATM reverse multiplex interface front
Ethernet
Switch

processing card
RT-NE-8TKA


RT-NE-CE3P
1-port channelized E3 interface front processing

card
RT-NE-CE3K


RT-NE-E3PA
RT-NE-CE3K
Optional
Optional
Optional
Optional
Optional

RT-NE-AESP
1- c h a n n e l AT M o v e r E 3 i n t e r f a c e f ro n t
processing board
RT-NE-CE3K


RT-NE-AEDP
2 - c h a n n e l AT M o v e r E 3 i n t e r f a c e f ro n t
Optional
RT-NE-E3DK
processing board
Optional
2-channel ATM over E3 interface back board
> 1-81
Router Series
Optional
RT-NE-T3PA
Optional
RT-NE-CT3K
Optional
Optional
RT-NE-ATSP
Optional
Optional
Optional
RT-NE-ATDP
Optional
1- c h a n n e l AT M o v e r T 3 i n t e r f a c e f ro n t
processing board
RT-NE-CT3K
2 - c h a n n e l AT M o v e r T 3 i n t e r f a c e f ro n t
processing board
Optional
Optional
RT-NE-ETPA
Optional
Optional
Optional
Optional
Optional
RT-NE-POPB
Optional
Optional
Optional
Optional
Optional
RT-NE-ATPB
Optional
RT-NE-T3DK
1-port 100M Ethernet interface front processing

card
RT-NE-ETKA

RT-NE-ETKB
1-port 100M Ethernet single-mode optical

RT-NE-ETKC

1-port OC3/STM1 POS interface front processing

card
RT-NE-PAKB

2km, SC)
RT-NE-PAKA

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)
1-port OC3/STM1 ATM interface front processing

card
> 1-82
Router Series
RT-NE-PAKB
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional

2km, SC)
RT-NE-PAKA

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)
1-port channelized 155M POS to the E1 interface

RT-NE-CPOP

Ethernet
Switch
RT-NE-CPOC

RT-NE-PAKB

2km, SC)
RT-NE-PAKA

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)
1-port channelized 155M POS to the T1 interface

RT-NE-CPOB

RT-NE-PAKB

2km, SC)
RT-NE-PAKA

(1310nm, 15km, SC)
RT-NE-PAKC

(1310nm, 40km, SC)
> 1-83
Router Series
Optional
RT-NE-GEPA
Optional
Optional
Optional
Optional
Optional
Optional
RT-NE-3FEMK
Optional
Optional
Optional
Optional
Optional
Optional
Optional

RT-NE-GEKA

RT-NE-GEKB

interface back transfer card (1310nm, 500km, LC)
RT-NE-GEKC

40km, LC)
RT-NE-GEKD

(1550nm, 70km, LC)


RT-NE-1GOMK
T h e re a r p a n e l o f m o d u l e p ro v i d e s 3 F E
(GBIC)
RT-NE-1GOMP

(256M SDRAM)
RT-NE-1GOMP-
128M

(128M SDRAM)
3FE electrical interface + 1GE electrical interface integrated

module unit
RT-NE-1GEMK

interface + 1 GE electrical interface
> 1-84
Router Series
RT-NE-1GEMP
Optional
Optional

(256M SDRAM)
RT-NE-1GEMP-
128M

(128M SDRAM)
Ethernet
Switch
> 1-85
memo
Router Series
> 1-86
Ethernet
Switch
memo
Router Series
> 1-87
memo
Router Series
> 1-88
Router Series
Quidway AR46 Series Intelligent Service Central Routers
Based on the design concept of paying equal attention to services and performances, and
smooth evolution of services, we launch high-performance, high-reliability multi-service
routers, the Quidway AR46 Series Intelligent Service Central Routers that orient overall
service and open service model, for enterprise core, industry and operator networks.
The Quidway AR46 series routers have three models, namely, AR46-80, AR46-40 and
AR46-20, which provide eight slots, four slots and two slots respectively. According to the
network scale, the AR46 router can serve as a core router in a corporation network, as an
edge router in a carrier network and as a convergence router in a large industry network.
Ethernet
Switch
Quidway AR46-20
Quidway AR46-40
Quidway AR46-80
Product Features
Highly-effective Dual-bus Architecture
The Quidway AR46 router adopts a unique dual-bus architecture that consists of
two independent PCI buses, high-performance PowerPC, and the IP Turbo EngineTM
technology with intellectual property right, thus greatly improving system forwarding
capabilities. Its forwarding capacity reaches up to 350 Kpps (155M interface line speed
forwarding), which is much greater than the equivalences in the industry. The AR 46
router provides high-performance service; so its forwarding performance does not fall
observably in processing various services.
End-to-end Reliability Guarantee

The Quidway AR46 router takes high reliability into consideration in networking
applications. It enhances technologies of high-end routers and adopts redundancy design
for key components, such as bus, power supply, heat dissipation system, and BootROM.
In addition, it adopts dual power modules with redundancy (1 + 1 standby) and supports
AC and DC input. Note that the bus here is not designed with redundancy.
> 1-89
Router Series
Hot Swap for Key Modules:
All the interface cards, power supplies, fans of the Quidway AR 46 router support
hot swap, thus meeting the requirements for network maintenance, upgrade, and
optimization.
Software Online Patch:

The Quidway AR 46 router provides the unique software online patch function, thus
guaranteeing the service is not interrupted during software optimization.
Abundant Network Redundancy:

The Quidway AR 46 router has abundant functions, such as link backup, link binding,
routing backup, dial-in backup, and VRRP, thus ensuring the reliability of network nodes
and the entire network.
Through overall guarantee, the Quidway AR46 router can implement 7 x 24 hour
uninterrupted operation.
Easy to Maintain and Human-centered Design

The Quidway AR 46 router fully takes design for testability (DFT) into consideration, and
provides a unique fault location and analysis tool based on DFT. Network engineers can
locate system faults rapidly and accurately through running the fault diagnosis software
on the PC. In addition, the system provides query of system status and alarm information,
and rich diagnosis test methods.
High Integration Security

The Quidway AR46 router is integrated with multiple security features, such as
packet filtering firewall, dynamic firewall, ISPKeeper DOS defense system, NAT, user
authentication, security log, equipment security, VPN encryption, service isolation (VR). In
this case, the AR46 router tailored a security policy for network users in time, space, and
network layer.
Overall Capabilities with Excellent Adaptation

The Quidway AR46 router has perfect service capabilities, such as routing, MPLS, VPN,
multicast, voice, security, QoS, IPv6, wideband access, three-in-one networking. All the
services are specially designed for enterprise core environments. The Quidway AR46
> 1-90
Router Series
router is integrated with such functions as router, FW, intrusion detection, VPN gateway,
voice gateway, wideband access gateway, layer 2 switch, which completely adapts to the
requirements for network integration. Further, it can flexibly implement a combination of
multiple equipment functions and services based on different application environments.
Item
AR46-80
AR46-40
AR46-20
256M (512M maximum)
256M (512M maximum)
256M (512M maximum)
Flash
32M (default)
32M (default)
32M (default)
BootROM
1,024K
1,024K
1,024K
NVRAM
512K
512K
512K
Fixed interface
Two 10/100M Ethernet interfaces
Ethernet
Switch
Memory
One AUX interface
One console port
Number of slots
Packet
350 Kpps
forwarding rate
Input voltage
AC: 100V to 240V (+/-10%) 50/60 Hz

DC: -48V to -60V (+/-20%)
Dimensions (mm) 436.2 x 420 x 219.5
436.2 x 420 x 130.5
436.2 x 420 x 130.5
17.5kg
15kg
126W
86W
H x W x D
Weight
27.5kg
Maximum power 213W
Safety certification Compliance with CE, UL, and TUV

Working
0C to 40C
environment
temperature
Environment
10% to 90% no condensing
relative humidity
> 1-91
Router Series
Order Information
The Quidway AR46 series routers are enterprise-class products. You can choose and
purchase host, interface module, and cable suite as required.
Host Purchase
The Quidway AR46 router provides two types of hosts: AC supply and DC supply. You
can purchase it as required.
Reference Table for Purchasing the Quidway AR46 Router Host
Item
Quantity
Remarks
Host
Mandatory
Memory (SDRAM)
Mandatory (256M default)
Flash
Mandatory (32M default)
Power module and
1/2
One power supply and cable are mandatory; two powers
power cable
and cables are required for redundant power supplies.
Protection
Mandatory
grounding wire
Console cable
AUX cable
Ethernet cable
Fan
Mandatory
Mandatory
1/2
Mandatory
Mandatory
Notes:
1) Mandatory indicates the item is shipped with the purchased host without purchase.
2) Optional indicates the item is not shipped with the purchased host and requires
purchase.
> 1-92
Router Series
Interface Module Purchase

Interface modules provided by the Quidway AR46 router are fixed (for example,
including packing and cable). You can purchase them by yourself, independent of host
delivery.
Actually, interface module purchase includes two parts: interface module to be chosen
and relevant cable. Generally, an interface module has its fixed type of cable without
choice. If there are multiple types of cables for choice, you need to purchase the relevant
cable in the external cable suite according to line feature and interface quantity. For more
information, see the following table.
Reference Table for Purchasing the Quidway AR46 Router Interface Module
Module Description
Cable
Remarks
RT-FIC-1FE
1-port FE Interface Module Ethernet cable
Cable, mandatory
RT-FIC-2FE
2-port FE Interface Module Ethernet cable
Cable, mandatory
RT-FIC-1SFX
1-port 100M Ethernet
Single-mode optical
Optional in external suite
single mode optical cable
of optical cables
Ethernet
Switch
Interface Module
Interface Module
RT-FIC-1MFX
Multi-mode optical
Multi-mode optical
cable
of optical cables
Interface Module
RT-FIC-2SAE
2-port Enhanced
Multiple serial port
Choosing the relevant cable
Synchronous/Asynchronous cables
based on the required protocol
Serial Interface Module
(such as V.35, V.24, X.21
RS449, RS530 DTE/DCE)
RT-FIC-4SAE
4-port Enhanced
(such as V.35, V.24, X.21
RT-FIC-8SAE
8-port Enhanced
(such as V.35, V.24, X.21
> 1-93
Router Series
> 1-94
RT-FIC-4BS
4-Channel ISDN S/T
S port cable
Cable, mandatory
Interface Module
RT-FIC-8ASE
8-port Asynchronous
AUX cable
Cable, mandatory
RT-FIC-16ASE
16-port Asynchronous
AUX cable
Cable, mandatory
RT-FIC-6AM
6-Channel Enhanced
Analog Modem Interface line
Magnetic ring telephone
Mandatory
Module
RT-FIC-12AM
12-Channel Enhanced
Analog Modem Interface line
Module
RT-FIC-1E1/E1-F
1-port cE1/PRI Interface
E1 75 ohm coaxial cable
Module( 1-port E1&
and coaxial connector
of optical cables
Fractional E1 Interface
E1 120 ohm twisted pair
Module)
cable and network port
Magnetic ring telephone Mandatory
connector
RT-FIC-2E1/E1-F
E1 75 ohm coaxial cable Optional in external suite
Module ( 2-port
andcoaxial connector
Module)
E 1&
of optical cables
connector
RT-FIC-4E1/E1-F
4E1 75 ohm transit cable 4E1 transit cable is
Module( 4-port E1&
and 4E1 120 ohm transit
mandatory ; other cables
cable
are optional in external
Module)
E1 75 ohm coaxial cable
cable suite.
and coaxial connector;
connector
RT-FIC-1T1/T1-F
1-port cT1/PRI Interface
T1 G.703 100 ohm
The impedance of the
Module (1-port T1& Fract
balanced cable
network cable is generally
ional T1 Interface Module)
100 ohm. You can purchase
network cables according
to port count.
Router Series
RT-FIC-2T1/T1-F
T1 G.703 100 ohm
Module (2-port T1&
balanced cable
Fractional T1 Interface
Module)
to port count.
RT-FIC-4T1/T1-F

T1 G.703 100 ohm
Module (4-port T1&
balanced cable
Fractional T1 Interface
Module)

to port count.
RT-FIC-1cE3
1-port E3/cE3
E3 cable
Mandatory
Compatible Interface
Module
RT-FIC-1cT3
1-port T3/cT3
T3 cable
Mandatory
Compatible Interface
Module
RT-FIC-1ATM-
1-port ATM/155M
Multi-mode optical cable
OC3MM
Multimode Interface
of optical cables
Module
RT-FIC-1ATM-
1-port ATM/155M Single
OC3SM
mode Interface Module
RT-FIC-1ATM-
1-port ATM/155M Single
OC3SML
mode Long Reach
Ethernet
Switch
Single-mode optical cable Optional in external suite

of optical cables
Single-mode optical cable Optional in external suite

of optical cables
Interface Module
RT-FIC-1/2ADSL
1/2-port ADSL over
Magnetic ring telephone
POTS Interface Module
line
RT-FIC-1/2
1(2)-port ADSL over
S port cable
Mandatory
ADSL-I
ISDN Interface Module
RT-FIC-2/4FXS
2(4)-port Voice
S port cable
Mandatory
Processing Board
Subscriber Circuit
S port cable
Mandatory
Interface Module
RT-FIC-2/4FXO
2(4)-port Voice
Processing Board Loop
Trunk Interface Module
Mandatory
> 1-95
Router Series
RT-FIC-2/4E&M
2(4)-port Voice
Processing Board E&M
Trunk Interface Module
RT-FIC-1GEE
Electrical Interface
Module
S port cable
Mandatory
Ethernet cable
Mandatory
Notes:
1) Mandatory indicates the cable is shipped with the purchased interface module without
purchase.
2) Optional indicates the cable is not shipped with the purchased interface module and
requires purchase.
3) External cable suite/external optical cable suite is a set of cable/optical cable for choice,
independent of host delivery.
> 1-96
Router Series
Quidway AR28-40/80 Series Access Routers
Adopting the modular structure, high speed CPU technology and fast routing strategy,
the Quidway AR 28-40/80 Routers provide abundant low speed service interfaces to
meet the requirements of such leased line services as DDN, packet-switching network
and Frame Relay, and to satisfy the networking requirements of such dial-up line
services as PSTN and ISDN. Latest xDSL technology is also adopted to meet the trend of
broadband IP network.
They can be used as the core and branch routers for medium and small enterprises to
provide secure and reliable multiple network solution in combination with other Huawei
Ethernet
Switch
network products. The Quidway AR 28-40/80 support ATM/GE/MPLS.

The Quidway AR 28-40 provides 4 multifunction interface module (MIM) slots, and the
AR 28-80 provides 8 MIM slots. The two models use the same multifunction interface
module (MIM).
Quidway AR 28-40 router rear view
> 1-97
Router Series
Product Features
Powerful Backup Function
Support the function of interface backup, link backup and route backup. The routers can
be configured in the active/stand-by mode between the leased line and the dial-up link,
between the leased line and the virtual link, or between two dial-up links. They can also
be active/standby configured between the DDN, FR, X.25, PSTN, ISDN, etc.
Higher Access Speed and More Powerful Processing Capacity

The Quidway AR 28-40/80 Series Routers each support up to 112 (AR 28-80) analog
dial-up users or 56 (AR 28-80) ISDN BRI dial-up users, capable of providing a high-density
remote office solution. It can access up to 28 (AR 28-80) 2M synchronous interfaces
for connecting DDN, frame relay and X.25 networks. The Quidway AR 28-40/80 Series
Routers can serve as not only the core routers in the small and medium size Intranets but
also the access routers in the large networks.
Enterprise Core Router

The Quidway AR 28-40/80 Series Routers usually work at the core layer of enterprise
network and provide GE or ATM uplink to intranet. The Quidway AR 28-40/80 Series
Routers also provide comprehensive security solutions. The security solution contains:
packet filtering firewall, network address translation, VPN, Call Back technique, AAA, log
administration, and so on.
> 1-98
Router Series
Description
AR 28-40
AR 28-80
4 Slots for MIM
Fixed interfaces
1 AUX Port
8 Slots for MIM
1 Console Port
BootROM
512KB
Default SDRAM
128MB
Maximum SDRAM
256MB
Flash
32MB
Performance capacity
120Kpps
Dimensions (W X H X D)
442 X 44.3 X 413 mm
442 X 88.2 X 413 mm
(include the rubber feet)
(include the rubber feet)
Weight
8kg
14kg
Input voltage
AC: 100 ~ 240V 50/60Hz
AC: 100 ~ 240V 50/60Hz
DC: -48 ~ -60V
DC: -48 ~ -60V
80W
120W
Operating temperature
0C to 40C
Operating humidity
10% to 90%, non-condensing
Ethernet
Switch
Module slots
Order Information

Description
Quantity
AR 28-40
Quidway AR 28-40-RTSM12840-Router
AR 28-80
> 1-99
Router Series
Adopting the modular structure, high speed CPU technology and fast routing
mechanism, the Quidway AR 28-30/31 Routers provide abundant low speed service
interfaces to meet the requirements of such leased line services as DDN, packet-switching
network and Frame Relay, and to satisfy the networking requirements of such dial-up line
services as PSTN and ISDN. Latest x DSL technology is also adopted to meet the trend of
broadband IP network.
They can be used as the core and branch routers for SME to provide secure and reliable
network solution in cooperation with other Huawei network products.
The Quidway AR 28-30 Series Routers contain two types: the AR 28-30 and the AR
28-31. The Quidway AR 28-30 provides one 10/100 Mbps Ethernet port and three
network module slots (for MIM). The AR 28-31 provides two 10/100 Mbps Ethernet ports
and three network module slots (for MIM).
> 1-100
Router Series
Product Features
Integrated Voice Solutions
The Quidway AR 28-30/31 Routers are key components of huawei integrated voice
over packet solutions, which include a rich family of Voice Gateway, GK and billing
systems. The Quidway AR 28-30/31 Routers deliver high quality and density VoIP
and VoFR services to enterprises. By supporting standard H.323 and SIP protocols,
Huawei integrated voice over packet solutions can inter-operate with other mainstream
manufacturers equipments.
Perfect Security Protecting System

The Quidway AR 28-30 Series Routers provide comprehensive security solutions. The
security solution contains: packet filtering firewall, network address translation, VPN, Call
Ethernet
Switch
Back technique, AAA, log administration, and so on.
Description
AR 28-30
AR 28-31
Module slots
3 Slots for MIM
Fixed interfaces
1 10/100Mbps Ethernet Interface
1AUX Port
1 Console Port
BootROM
512KB
Default SDRAM
128MB
Maximum SDRAM
256MB
Flash
32MB
90Kpps
Dimensions (W X H X D)
442 X 44.3 X 413 mm (including the rubber feet)
Weight
8kg
Input voltage
AC: 100 ~ 240V 50/60Hz
DC: -48 ~ -60V
80W
0C to 40C
Operating humidity
2 10/100Mbps Ethernet Interfaces
> 1-101
Router Series
Order Information

Description
AR 28-31
> 1-102
Quantity
AR 28-30
Router Series
Adopting the modular structure, high speed CPU technology and fast routing policy,
the Quidway AR 28-10/11 Routers provide abundant service interfaces to meet the
requirements of such leased line services as DDN, packet-switched network and Frame
Relay, and to satisfy the networking requirements of such dial-up line services as PSTN
and ISDN. Latest x DSL technology is also adopted to meet the trend of broadband IP
network.
The Quidway AR 28-10/11 Routers can be used as the core routers for SME and
industrial users to provide secure and reliable network solutions in cooperation with
Ethernet
Switch
other Huawei network products.

The Quidway AR 28-10/11 routers can provide not only integrated Fast Ethernet
interfaces (FE), AUX ports and synchronous/asynchronous serial interfaces, but also
abundant optional SICs (Smart Interface Cards) and MIMs (Multifunction Interface
Modules). The AR 28-10 provides one fixed FE port, and AR 28-11 provides two.
Quidway AR 28-10 rear view
Quidway AR 28-11 rear view
> 1-103
Router Series
Product Features
Abundant Interface Types
The Quidway AR 28-10/11 Routers support many different service interfaces, including
synchronous serial interface, asynchronous serial interface, FE, E1/T1/PRI, ISDN BRI,
E3, FXS, FXO, E&M, E1VI, T1VI, ATM, ADSL and so on. They also fully meet various
networking requirements of DDN, Frame Relay, X.25, PSTN, ISDN, ATM and etc.
Perfect Security Protecting System

The Quidway AR 28-10/11 Routers provide comprehensive security solutions. The
security solution contains: packet filtering firewall, network address translation (NAT),
Authentication, Authorization and Accounting (AAA), VPN, Call Back service, log
administration, and so on.
Constructing VPN
Intranet VPN interconnects distributed points of the Intranet through the public network
so as to serve as the extension or replacement of the traditional leased line network
or other Intranets. Access VPN helps set up secure channels for small size users such
as SOHO to access the resources of the company headquarters through PSTN/ISDN.
Extranet VPN extends the Intranets to the partners or the clients, so as to enable different
Intranets to conduct secure and private communications to each other through the public
network. The Quidway AR 28-10/11 routers mainly serve as LNS (L2TP Network Server).
> 1-104
Router Series
Description
28-10
AR 28-11
Module slots
2 SIC Slots 1MIM Slot
Fixed interfaces
1 10/100Mbps Ethernet Interface
1 Synchronous/Asynchronous Serial Interface
1 AUX Port
1 Console Port
BootROM
512KB
Default SDRAM
128MB
Maximum SDRAM
128M
Flash
32MB
80Kpps
Dimensions
442 X 44.4 X 315 mm (including the rubber feet)
2 10/100Mbps Ethernet Interfaces
Ethernet
Switch
(W X H X D)
Weight
6kg
Input voltage
AC: 100V to 240V 50/60Hz
DC: -48V to -60V
Max. power
60W
consumption
0C to 40C
Operating humidity
Order Information

Description
Quantity
AR 28-10
AR 28-11
> 1-105
Router Series
Quidway AR 28-09 Intelligent Service Branch Router
The Quidway AR28-09 intelligent service branch router is an edge access router. It
adopts a modular architecture and provides integrated Fast Ethernet interfaces, AUX
interface and synchronous/asynchronous serial interfaces. Further, it also offers optional
Smart Interface Card (SIC) and Multifunctional Interface Module (MIM). Compared with
its equivalences, the Quidway AR 28-09 intelligent service branch router has higher
performance cost and extensible capabilities. It can act as an access router in some
large branches and as a core router in small- and mid-sized enterprise networks. Further,
the Quidway AR 28-09 intelligent service branch routers can work together with the
Quidway series routers, Ethernet switches to provide overall end-to-end network
solutions for industry users and mid- and large-sized enterprise users, such as telecom,
ISP, finance, tax, public security, and railway.
Quidway AR 28-09 intelligent service branch router
Product Features
Interconnection Protocols
Ethernet, bridge, frame relay, X.25, HDLC, SDLC, LAPB, SLIP, PPP, PPP head compression,
MP, ISDN, PPPoE Client, dial-in on demand, dial-in string cyclic backup, PPP/ISDN callback,
layer 2 tunnel based on L2TP, layer 3 tunnel based on GRE, and wideband access.
Network Protocols
DHCP, VLAN, IPX, DLSw, RIP-1/RIP-2, OSPF, BGP, policy routing, multicast, routing load
sharing, address unnumbered, TCP packet head compression, and routing policy.
> 1-106
Router Series
Application Layer Protocols and Service Features
Telnet, SSH, Rlogin, dumb terminal, terminal access server with enhanced security
features, finance POS access, RTC, LPD, FTP, Ping, NTP application layer protocols or
service features.
Network Security
Login user authentication, RADIUS/Tacacs+ authentication/accounting, IPSEC, IKE,
hardware encryption card, firewall support for filtering interface/time segment/MAC
address, and high-performance NAT.
Network Reliability
Inter-interface/subinterface physical layer backup, inter-virtual link/virtual template/dial-
Ethernet
Switch
in interface/logical interface link layer backup, network layer backup for dynamic routing,
equipment layer backup for VRRP.
Voice Characteristics
Mute compression, comfort noise, voice jitter prevention, volume adjustment, PBX switch
function simulation, calling number identification, auto busy tone detection, flexible VOIP
routing and backup policy, IP fax, voice RADIUS, GK Client, IPHC, and voice QoS.
Quality of Service
Traffic classification and traffic policing (CAR/LR), traffic shaping (GTS), congestion
management (PQ/CQ/WFQ/CBQ), and congestion avoidance (WRED).
Configuration Management
Chinese and English languages, command hierarchical protection, tracert/ping/debugging
fault diagnosis function, RMON, SNMPv1/v2c/v3, system log, system upgrade through
FTP or TFTP, configuration through Console/AUX/X.25 PAD/Telnet/reverse Telnet.
> 1-107
Router Series
Item
AR 28-09 Description
Slot
2 SIC slots, 1 MIM slot
Fixed interface
1 console port (CON), 1 auxiliary port (AUX)
1 high-speed synchronous/asynchronous serial port module
1 Fast Ethernet interface
Extended
LAN interface SIC-1FE (10/100Base-TX Fast Ethernet intelligent interface card)
module
module
SIC-1ETH (10M Ethernet intelligent interface card)
1FE (10/100Base-TX Fast Ethernet interface module)
1SFX (100Base-FX Ethernet single-mode optical interface module)
1MFX (100Base-FX Ethernet multi-mode optical interface module)
GE (Gigabit electrical interface module)
WAN interface SIC-3AS (asynchronous serial port intelligent interface card)
module
SIC-1SA (high-speed synchronous/asynchronous serial
intelligent interface card)
SIC-EPRI (channelized cE1/PRI intelligent interface card)
SIC-1E1-F (non-channelized E1 intelligent interface card)
SIC-TPRI (channelized cT1/PRI intelligent interface card)
SIC-1T1-F (non-channelized T1 intelligent interface card)
SIC-1/2BS (ISDN-S intelligent interface card)
SIC-1/2BU (ISDN-U intelligent interface card)
SIC-1/2AM (analog Modem intelligent interface card)
2/4/8SAE (enhanced high-speed synchronous/asynchronous
serial interface module)
8/16ASE (enhanced asynchronous serial interface module)
1/2/4E1 (channelized cE1/PRI module)
1/2/4E1-F (non-channelized E1 module)
1/2/4T1 (channelized cT1/PRI module)
1/2/4T1-F (non-channelized T1 module)
6/12AM (analog Modem module)
1ATM-OC3MM (155M ATM multi-mode interface module)
1ATM-OC3SM (155M ATM single-mode interface module)
1ATM-OC3SML (155M ATM single-mode long haul interface module)
> 1-108
Router Series
Voice module 2/4FXS (FXS interface voice module)
SIC-1/2FXS (FXS intelligent interface card)
2/4FXO (FXO interface voice module)
SIC-1/2FXO (FXO intelligent interface card)
POS access
2/4/6FCM (finance POS access module)
module
Other
modules
NDEC (encryption card module)

200MHZ Motorola 8241
70 KPPS
BootROM
512 KB
Flash
32 MB
SDRAM
128 MB
Dimensions (mm)
376.2 X287.9 X79.4 (plastic foot included)
Ethernet
Switch
Processor
heightX width X depth

Weight
2.5kg
Input power
Rated voltage range: 100-240 V, 50/60 Hz
Maximum voltage range: 90-264 V, 50/60 Hz
Current: 0.5A-1A
Maximum power
50 W
Working environment
0C to 40C
temperature
Environment humidity
10% to 90% noncondensing
> 1-109
Router Series
Order Information
Host
AR 28-09
Quantity Remarks
Quidway AR 28-09 router host
Mandatory
SIC slot:Serial interface card

RT-SIC-3AS
3-port asynchronous serial interface card
Optional
RT-SIC-1SA
1-port synchronous/asynchronous serial interface card
Optional
E1/CE1/T1/CT1/PRI interface card

RT-SIC-TPRI
1-port T1/CT1/PRI interface card
Optional
RT-SIC-EPRI
1-port E1/CE1/PRI interface card
Optional
RT-SIC-T1-F
1-port non-channelized T1 interface card
Optional
RT-SIC-E1-F
1-port non-channelized E1 interface card
Optional
ISDN interface card

RT-SIC-1BS
1-port ISDN basic rate S/T interface card
Optional
RT-SIC-1BU
1-port ISDN basic rate U interface card
Optional
RT-SIC-2BS
2-port ISDN basic rate S/T interface card
Optional
RT-SIC-2BU
2-port ISDN basic rate U interface card
Optional
Ethernet interface card

RT-SIC-1FEA
1-port 10/100M Fast Ethernet electrical interface card
Optional
RT-SIC-1ETH
1-port 10 Ethernet electrical interface card
Optional
Analog Modem interface card

RT-SIC-1AM
1-port analog Modem interface card
Optional
RT-SIC-2AM
2-port analog Modem interface card
Optional
POS access module

RT-2FCM
2-port finance POS access module
Optional
RT-4FCM
Optional
RT-6FCM
Optional
Voice interface processing card

RT-SIC-1FXO
1-channel voice processing board loop trunk interface card
Optional
RT-SIC-1FXS
1-channel voice processing board user circuit interface card
Optional
RT-SIC-2FXO
2-channel voice processing board loop trunk interface card
Optional
RT-SIC-2FXS
2-channel voice processing board user circuit interface card
Optional
> 1-110
Router Series
MIM slot:Ethernet interface module

RT-1FE
1-port 100BASE-T interface module
Optional
RT-1SFX
1-port 100M single-mode optical interface Ethernet interface
Optional
module
RT-1MFX
1-port 100M single-mode optical interface Ethernet interface
Optional
module
Analog Modem interface module

RT-6AM
6-port analog Modem interface module
Optional
RT-12AM
12-port analog Modem interface module
Optional
Serial interface module

2-port enhanced synchronous/asynchronous interface module
Optional
RT-4SAE
Optional
RT-8SAE
Optional
RT-8ASE
8-port enhanced asynchronous serial interface module
Optional
RT-16ASE
16-port enhanced asynchronous serial interface module
Optional
Ethernet
Switch
RT-2SAE
E1/T1 module
RT-1E1
1-port E1/CE1/PRI module
Optional
RT-2E1
Optional
RT-4E1
Optional
RT-1E1-F
1-port non-channelized E1 interface module
Optional
RT-2E1-F
Optional
RT-4E1-F
Optional
RT-1T1
1-port T1/CT1/PRI module
Optional
RT-2T1
Optional
RT-4T1
Optional
RT-1T1-F
1-port non-channelized T1 interface module
Optional
RT-2T1-F
Optional
RT-4T1-F
Optional
Optional
Optional
Network data encryption card

RT-NDEC
Network data encryption card
Voice interface module

RT-2FXO
2-channel voice processing board loop trunk interface module
> 1-111
Router Series
RT-2FXS
2-channel voice processing board user circuit interface module
Optional
RT-4FXO
4-channel voice processing board loop trunk interface module
Optional
RT-4FXS
4-channel voice processing board user circuit interface module
Optional
> 1-112
Router Series
Quidway AR 18-30/31/32/33/34/35
Intelligent Service Access Routers
The Quidway AR 18-3X Series Access Router is a new generation of fixed-port routers
developed by Huawei Technologies intended for providing interconnection to the smallsized enterprises and branches and offices. It is characterized by streamline shapes, easy
and feasible installation and maintenance, providing abundant network security features,
VPN services and the backup center technology. As a result, the Quidway AR 18-3X
Series Router acquires wide application as branch routers in many network solutions.
Ethernet
Switch
Rear panel of Quidway AR18-30 router
Rear panel of Quidway AR 18-31 router
> 1-113
Router Series
Quidway AR18-32 rear view
> 1-114
Router Series
Product Features
Diverse and Flexible Interface
The Quidway AR 18-3x Series x DSL Router has 4-port fast Ethernet switch and different
DSL interfaces or ISDN backup interface according to different models. Customers can
flexibly select ADSL over POTS, ADSL over ISDN, G.SHDSL or common ISDN as WAN link.
Powerful Packet Forwarding Capability

Advanced CPU technology, highly effective, real time and multi-task operating system
and unique software are used to substantially enhance its capability to process packets.
Users can get good use of the wire-speed of all kinds of DSL technology.
Rich and Cost-Effective VPN Solutions

Ethernet
Switch
The Quidway AR 18-3x Series Router could provide a lot of VPN solutions, such as
dynamic VPN, L2TP, GRE, IPSec, IKE, as well as MPLS VPN. It could be used in Intranet
VPN and Access VPN, and will greatly reduce customers costs.
Abundant Service
The Quidway AR 18-3x Series Router can support services such as AAA, firewall, ASPF
(Application Specific Packet Filtering), IKE, IPSec, GRE, NAT, L2TP, PPPoE, DHCP, etc.
Description AR 18-30
AR 18-31
AR 18-32 AR 18-33
AR 18-34
AR 18-35
Interfaces
One ADSL One ADSLover One ADSL
One
One G.SHDSL
One ADSL over
over POTS POTS (WAN)
G.SHDSL
Interface
ISDN Interface
(WAN)
Interface
One ISDN BRI
One ISDN BRI
S/T Interface
S/T Interface
over ISDN
One ISDN BRI Interface
S/T interface
(ISDN BRI)
Four 10/100M Ethernet Interfaces
One Console Port
SDRAM
64MB
Flash
8MB
Max. power 10W

consumption
> 1-115
Router Series
Power
Input: Rated voltage: 100-240v AC; 50/60Hz; Current: < 0.5A
supply
module
Output: Voltage: 12V DC; Current: < 1A
(external)
Dimensions 300 x 180 x 45mm (maximum dimensions)
(W x H x D)
Weight
1kg
Operating 0C to 40C
temperature
Operating 10% to 90%, non-condensing
humidity
Order Information

Description
Quantity
AR 18-30 functional module - Quidway AR 18-30-RTSM11830
- router host
- router host
- router host
- router host
- router host
- router host
> 1-116
Remarks
Router Series
Quidway AR18-20/20S Series Ethernet Routers

The Quidway AR 18-2x Series Ethernet Router is Ethernet broadband SOHO router. With
plentiful fast Ethernet interfaces, robust packet processing capability, abundant services,
and also streamline outlook, the Quidway AR 18-2x Series Router features high costperformance ratio, and can be applied in SOHO solutions and SME as a branch router.
The Quidway AR 18-2x Series includes two type: AR 18-20, AR18-20S.
The Quidway AR 18-20/20S router is integrated with layer 2 switching module. With
security and ease to use, the Quidway AR18-20/20S router provides rich network security
features, such as System Network Architecture (SNA), VLAN, bridge, VPN, IP multicast, and
Ethernet
Switch
Quality of Service (QoS). Compared with the Quidway AR 18-20, the Quidway AR 18-20S
adopts hardware encryption providing superior security performance. The appearance of
the AR 18-20/20S router is shown in the following figure:
Rear view of Quidway AR18-20/20S router
> 1-117
Router Series
Product Features
Plentiful Fast Ethernet Interfaces
The Quidway AR 18-20/20S Ethernet Router totally has five Ethernet interfaces, one
10M Ethernet interface for WAN, 4 Fast Ethernet interfaces for LAN, forming a 4-port
Fast Ethernet switch.
Powerful Packet Forwarding Capability

Advanced CPU technology, highly effective, real time and multi-task operating system
and unique software are used to substantially enhance its capability to process packets.
Rich and Cost-Effective VPN Solutions

The Quidway AR 18-20/20S Ethernet Router can provide a lot of VPN solutions, such
as dynamic VPN, L2TP, GRE, IPSec, IKE, as well as MPLS VPN. It could be used in Intranet
VPN and Access VPN, and will greatly reduce customers costs.
Abundant Service
The Quidway AR 18-20/20S Ethernet Router can support services such as AAA, firewall,
ASPF (Application Specific Packet Filtering), IKE, IPSec, GRE, NAT, L2TP, PPPoE, DHCP etc.
> 1-118
Router Series
Item
AR 18-20S Description
Interface name
One console port
One console port
One 10M Ethernet interface (WAN)
One 10M Ethernet interface (WAN)
Four 10/100M Ethernet interfaces
Four 10/100M Ethernet interfaces (LAN)
(LAN)
Processor
MPC859DSL 80 MHz
SDRAM
64MB
Flash
8MB
Maximum power 10W

consumption
Input:
(external)
Rated voltage range: 100-240 VAC, 50/60 Hz
Maximum voltage range: 90-264 VAC, 50/60 Hz
Current: 0.5A-1A
Output:
Voltage: 12 VDC
Current: 4A
Dimensions
300 mm X 180 mm X 45 mm (all sizes are maximum from the highest point
(W x H x D)
of plastic panel arc)
Weight
1kg
Environment
0C to 40 C
Ethernet
Switch
Power module
temperature
Environment
10% to 90% noncondensing
relative humidity
Order Information

Description
Quantity Remarks
AR 18-20 Functional module-Quidway AR 18-20-RTSM11820-Router host
> 1-119
Router Series
Quidway AR18-1X Series Routers
The Quidway AR18-1X router provides abundant, flexible interfaces, including Ethernet
interface, multi-protocol synchronous/asynchronous serial interface, AUX interface, ISDN
BRI S/T and U interfaces, cT1/PRI interface, and E1-F interface. Synchronous/asynchronous
serial interfaces support multiple protocols, such as V.24 DTE/DCE, V.35 DTE/DCE, X.21
DTE/DCE, RS449 DTE/DCE, and RS 530 DTE. You only need to choose the relevant cable
to meet the requirements for diversification of serial interfaces. You can flexibly select
a networking scheme based on multiple WAN technologies, such as PSTN/ISDN, Frame
Relay, X.25, Digital Data Network (DDN), and T1/E1 line.
The appearance of the AR 18-1X router is shown in the following figure:
Rear panel of Quidway AR18-15 router
> 1-120
Router Series
Ethernet
Switch
Product Features
Network Security: The Quidway AR 18-1X router provides rich network security
features, such as firewall, packet filtering, address translation, AAA, Callback. You can
select different security policies to build enterprise networks.
Building VPN Networks: Intranet Virtual Private Network (VPN), as an extension
and substitution of traditional dedicated line networks or other enterprise networks,

can connect to various branches of the enterprise through a public network. Access
VPN can build a secure channel to access resources of the corporate headquarters for
small users such as SOHO through PSTN/ISDN. Extranet VPN can extend the enterprise
network to partners and customers to make different enterprises able to perform
secure and private communications. The Quidway AR 18-1X router is mainly used for
the access end of VPN.
Dial Control Center (DCC): The Quidway AR 18-1X router provides users with
perfect dial-in solutions, supports standard DCC and flexible DCC dial modes. In addition,
it supports multiple link layer protocols (PPP) and multiple network layer protocols (IP and
IPX), and provides capabilities of running multiple dynamic routing protocols on the dial
interface. All these advantages can satisfy the needs for various network topologies. The
function of flexible DCC is more perfect. It can enable multiple dial-in users to share the
physical interface through Dialer Pool to implement different call functions.
> 1-121
Router Series
Reliability: The Quidway AR 18-1X router adopts the backup center technology,
thus greatly improving network reliability. It can utilize synchronous, asynchronous, CT1/
PRI, and ISDN BRI interface features to implement backup of various lines, thus meeting
the requirements for high reliability.
2B+D Data Transmission: The AR 18-13/18-15/18-31/18-34 routers are embedded
with Terminal Adapter (TA) functions and respectively provide ISDN BRI S/T interface and
U interface, thus implementing 2B+D data transmission.
TI/E1 Dedicated Line and PRI Dial-in Service: The AR 18-16/18-18 routers provide
CT1/PRI interface and E1-F interface, respectively. A CT1/PRI interface can be bound into
either channel-group to flexibly provide Nx 64k or 56kbps data bandwidth, or pri-group
to provide dial-in service for remote users. An E1-F interface only supports CE1 binding
and not provides PRI dial-in service.
Structure Appearance: It adopts a plastic chassis that can shield electromagnetic
radiation, with streamlined appearance and small dimensions. In addition, it can

effectively shield various electromagnetic interferences and operate stably and reliably.
Item
Interface
One console port
AR 18-13/18-15 Description
One console port
AR 18-16/18-18 Description
One console port
name
One 10/100M Ethernet One 10/100M Ethernet
One 10/100M Ethernet
interface
interface
interface
One AUX interface
One AUX interface
One AUX interface
Two multi-protocol
One multi-protocol synchronous
One CT1/PRI interface
synchronous
/asynchronous serial interface
(AR 18-16)
/asynchronous serial
One ISDN BRI S/T interface
One E1-F interface
interfaces
(AR 18-13)
(AR 18-18)
One ISDN BRI U interface
(AR 18-15)
> 1-122
Router Series
Processor
MPC860T 50 MHz
SDRAM
64MB
Flash
8MB
Maximum
10W
power
consumption
Power
Input: Rated voltage range: 100-240 VAC, 50/60 Hz
module
Maximum voltage range: 90-264 VAC, 50/60 Hz
(external)
Output: Voltage: 12V
Current: 0.5A-1A
Current: < 1A
Dimensions 251 mm x 42.5 mm x 187 mm (all sizes are maximum from the highest point of plastic
(W x H x D)
panel arc)
Weight
0.85kg
Ethernet
Switch
Environment 0 oC to 40 oC
temperature
Environment 10% to 90% noncondensing
relative
humidity
Order Information

Description
Quantity
AR 18-12
Functional module-Quidway AR 18-12-RTKM21612-Router host
AR 18-13
AR 18-15
AR 18-16
AR 18-18
Functional module-Quidway AR 18-18-RTJM1E1RM-Router host
> 1-123
memo
Router Series
> 1-124
Ethernet
Switch
memo
Router Series
> 1-125
memo
Router Series
> 1-126
Ethernet
Switch
Ethernet Switch Series
Contents
Quidway S8500 Series 10G Multi-service Core Routing Switches...................... 2-1
Quidway S6500 Series High-end Multi-service Switches.....................................2-9
Quidway S5600 Series L3 Intelligent Gigabit Ethernet Switches.......................2-20
Quidway S5000 Series L2 Intelligent Gigabit Ethernet Switches......................2-28
Quidway S3900 Series Switches......................................................................2-34
Quidway S3500 Series Security Intelligent Switches........................................2-44
Quidway S2000-EI Series Intelligent Switches................................................2-60
BRAS
Quidway S3000 Series Intelligent Switches.....................................................2-52

Quidway S8500 Series 10G Multi-service Core Routing Switches
The Quidway S8500 series 10G multi-service core routing switch (referred to as the
S8500 series switch hereinafter) is a new-generation high performance routing switch.
It is extensively applied as the core layer of e-government networks, campus networks,
education MANs, and enterprise networks, and the core layer and convergence layer of
carriers IP MANs.
Based on the 10G platform, it supports the new-generation high-performance 10Gbps
interface and can provide super high-speed links for MANs, campus networks and data
centers to construct end-to-end Ethernet featuring low cost, high performance and
capabilities to support abundant services. It provides L2 and L3 wire-speed forwarding
performance of high capacity, high density and modularization to support the MPLS
distributed wire-speed forwarding. It also provides rich service functions, powerful QoS
guarantee, complete security management mechanism and carrier-class high reliability
design to fully satisfy the requirements of high-end users for multiple services, high
reliability and high capacity and large bandwidth.
BRAS
Quidway S8505
Quidway S8508
Quidway S8512
Product Features
Advanced System Structure
Distributed structure design is adopted for the S8500 series switch, powerful ASIC chips
are used for high-speed routing, and the Crossbar technologies are adopted for highspeed packet switching, all of which greatly improve the forwarding performance and
> 2-
expansion capabilities of the routing switch. Passive backplane is adopted for the switch,
thus structure keeps the backplane is more reliable. Built in the main control board
without taking up the equipment slot, the Crossbar switching chip provides a switching
capacity up to 720G and can be set to work in the active/standby or load-sharing mode
via software configuration. The interface board is connected to the crossbar switching
fabric on the two main control boards via several 10G buses, thus realizing the hot
backup of dual main controls and dual switching fabric in the real sense and greatly
improving the system reliability.
The new-generation high performance ASIC chip design, the routing mode of maximum
matching and the packet-by-packet forwarding mode are adopted for the S8500 series
switch. As the design technologies develop and the techniques and integration improve,
the ASIC chip can implement the wire-speed maximum matching based on the existing
low cost, and removes the defects of former ASIC chips that can only process the precise
matching table and can realize the maximum matching table function only via software.
Thus, while keeping the wire-speed performance and relying on the low cost, the S8500
series switch revolutionarily removes the defects of traditional switches, and effectively
combats network viruses like Worm. Blaster. It is more applicable to large-scale networks
with multiple services and complex visit flows and caters more to the Ethernet MAN
development.
High Capacity, High-density Wire-speed Switching

The S8500 series switch can provide a backplane bandwidth of 1.8T, a switching capacity
of 720Gbps and forwarding capabilities of 428Mpps. High-density interface boards can
be provided for the switch to support wire-speed forwarding. In addition, while keeping
the wire-speed forwarding performance, the switch supports different high-density
interface boards and combined interface boards to satisfy the core layers requirements
for high density and high throughput.
It also has powerful hardware platform upgrade capabilities. A large number of bus
interfaces are reserved on the backplane for future system expansion. The system
switching capacity can be smoothly expanded to terabits to meet the ever-increasing
bandwidth needs of and protect and save users investments to the utmost.
> 2-

Support for New-generation 10G Interfaces
The new-generation 10G Ethernet interface provides richer bandwidths and powerful
processing capabilities while preserving the compatibility and simple usage of Ethernet
for easy upgrade. Meanwhile, the 10G Ethernet provides pertinent solutions for MAN
and WAN applications to simplify the network architecture and reduce the network
construction costs.
The new-generation 10G Ethernet provided by the S8500 series switch overcomes a
number of limitations of the earlier 10G Ethernet, provides powerful QoS guarantee based
on wire-speed forwarding, and supports rich features such as ACL, strategic routing and
security. It can support wire-speed MPLS forwarding, provide better IP VPN services and
transparent LAN services, and provide the traffic engineering function via the MPLS TE.
In addition to standard LAN interfaces, the S8500 series switch provides 10GBASE-LX4
interfaces that employ the wavelength division multiplexing technologies to greatly raise
the flexibility of user networking.
Carrier-class Reliability Design

Distributed structure is adopted for the S8500 series switch to support dual main control
switching boards. The switch supports passive backplane design and all the boards
BRAS
support hot plugging. The 1+1 redundant hot backup mechanism is adopted for the
power supply system and dual power inputs are supported. The switch supports the
STP/RSTP/MSTP and VRRP protocols and can meet strict requirements for carrier-class
network reliability (up to 99.999%).
Complete Security Mechanism

The S8500 series switch supports clear text and MD5 encrypted text authentication
of OSPF, RIP v2 and BGP v4 packets. It adopts the 802.1x mode for access user
authentication, and supports secure SNMPv3 NM protocol, configuration security for user
authentication. Users of different levels have different configuration rights and two user
authentication modes are provided: local authentication and RADIUS authentication. The
switch supports rich traffic control mechanisms; ACL based on source and destination IP
address is supported. Source and destination port based ACL is also supported.
> 2-
The system can support 4096 VLANs. Port based and protocol based VLAN is supported.
The 802.1Q standard is compliant. The switch provides VLAN management function by
protocol GVRP.
The S8500 series switch also supports the standard Radius protocol, provides the Radius+
function. As for switch access safely, SSH is supported by the switch. 802.1x protocol is
compliant also.
MPLS Distributed Wire-speed Supported

The S8500 series switch complies with the design concept that attaches importance to
both services and performance. On the one hand, the bandwidth and network scale
increase push the performance improvement and capacity increase of core routing
switch. On the other hand, the service development requires the core switch be more
intelligent and have more powerful service provision capabilities. The S8500 series switch
adopts the powerful ASIC chip to realize the MPLS distributed wire-speed forwarding.
Attribute
S8505
S8508
S8512
Switching capacity
300Gbps
480Gbps
720Gbps
Backplane capacity
750Gbps
1.2Tbps
1.8Tbps
Packet forwarding
178Mpps
285Mpps
428Mpps
Number of slots
10
14
Number of slots for
12
speed
service boards
> 2-
L2 functions
4K VLAN
802.1q priority
STP/RSTP/MSTP
GARP/GVRP/GMRP
IGMP snooping
Port binding/port mirroring
802.1X
Broadcast storm suppression
Compatible with Ethernet_II/Ethernet_SNAP/IEEE 802.2/IEEE 802.3
MDI/MDI-X adaptation
L3 functions
ARP Proxy
Rich routing protocols: RIP, OSPF, IS-IS, BGP4
128k routing forwarding table
Route load sharing
Policy routing
1k route interfaces
VRRP
DHCP-RELAY
Multicast
Multicast routing protocols: IGMP, PIM-DM, PIM-SM, MSDP/MBGP
Controllable multicast service
MPLS VPN
MPLS label space: 128K
LER/LSR
MPLS VPN service
QoS
DiffServ
Each port supporting 8 priority queues.
Detailed bandwidth management with the granularity of 3k
Congestion prevention algorithm: WRED and tail drop
Queue scheduling algorithms: SP, WRR and SP+WRR
Traffic shaping
Reliability
MTBF:>200,000 hours
Dual main control boards
Dual power supplies
Boards hot pluggable
System architecture
Integrated chassis that can be installed in a 19-inch rack
Outline dimensions
436 x 450 x 486
436 x 450 x 619
436 x 450 x 753
65 kg
80 Kg
100 kg
Label stack levels: 4
MTTR < 0.5 hours
BRAS
(mm) (W x D x H)
Weight (in maximum
configuration)
Environmental
Working temperature: 0C ~ 40C
requirements
Relative humidity: 10% ~ 85%
Power supply
DC: Input voltage: -36V ~ -72V (operating range)
requirements
AC: Input voltage: 90V ~ 264V (operating range), 47 ~ 63Hz
Maximum output power: 1200W/2000W
Order Information
The S8500 series switch is a core switch. Users can purchase the chassis, power supplies
and service modules as actually required.
> 2-

S8505
Cabinet Configuration Guide

Description
Quantity Remarks
Assembly cabinet-Quidway S8505-LSBB1HLAN-integrated assembly 1
Mandatory
chassis
Assembly cabinet-Quidway S8505-LSBB2HLAN-2.2m assembly cabinet 1
Optional
Optional
Power Supply Configuration Guide

You can select either DC or AC power supply.

Description
Quantity Remarks
Quidway S8505 DC power supply module 1-2
Optional
Quidway S8505 AC power supply module 1-2
Optional
Board Configuration Guide

You should select the service boards according to the specific conditions.

Item Description
Quantity Remarks
Quidway S8505 switching & route processing board 1-2
Mandatory
48-port FE electrical interface board (RJ45) 0-5
Optional
20-port FE optical interface board (SFP, LC) 0-5
Optional
12-port GE electrical interface board (RJ45) 0-5
Optional
12-port GE optical interface board (SFP, LC) 0-5
Optional
1-port 10GBASE-R/LX4 service board (XENPAK) 0-5
Optional
8-port GE optical interface (SFP) + 4-port ATM interface (RJ45) service 0-5
Optional
board
32-port FE Ethernet electrical interface + 4-port GE optical interface 0-5
Optional
(SFP) service board

8-port OC-3POS interface (SFP) + 8-port GE optical interface (SFP) 0-5
Optional
service board
> 2-
24-port GE optical interface board (SFP) 0-5
Optional
Optional
Optional
2-port 10GE optical interface board (XFP) 0-5
Optional
Optional

S8508

Description
Quantity Remarks
Assembly cabinet-Quidway S8508-LSBB1HLAN-integrated assembly 1
Mandatory
chassis
Optional
Optional


Description
Quantity Remarks
Optional
Optional

Item Description
Quantity Remarks
Mandatory
Optional
Optional
Optional
Optional
Optional
8-port GE optical interface +4-port ATM interface board 0-8
Optional
32-port FE Ethernet interface + 4-port GE optical interface board 0-8
Optional
8-port OC-3POS interface (SFP)+8-port GE optical interface (SFP) 0-8
Optional
BRAS
service board
Optional
Optional
Optional
Optional
Optional
> 2-
S8512

Description
Quantity Remarks
Assembly cabinet- Quidway S8512-LSBB1HLAN -integrated assembly 1
Mandatory
chassis
Optional
Optional


Description
Quantity Remarks
Optional
Optional


Item Description
Quantity Remarks
Mandatory
Optional
Optional
Optional
Optional
Optional
8-port GE optical interface +4-port ATM interface board 0-12
Optional
32-port FE Ethernet interface + 4-port GE optical interface board 0-12
Optional
8-port OC-3POS interface (SFP)+8-port GE optical interface (SFP) 0-12
Optional
service board
> 2-
Optional
Optional
Optional
Optional
Optional

Quidway S6500 Series High-end Multi-service Switches
The Quidway S6500 series 10 GE multi-service switches are high performance, highdensity, and modular L2/3 line speed Ethernet switching products. Ideal for IP MANs,
large enterprise Intranets and district networks, S6500 could be deployed as core
switches of enterprises or MAN aggregation layer switches. This series consists of S6502 (2
slots), S6503 (4 slots), S6506 (7 slots), and S6506R (8 slots).
The Quidway S6500 provides high-speed interface to create low-cost, highperformance, multi-service networks platform. The Quidway S6500 series products
possess a broad range of service functions, powerful QoS assurance, refined security
management mechanism and carrier-class high-reliability design, completely meeting
the needs of industry customers and operators for multiple services, high reliability, large
capacity and modular design.
Furthermore, a new generation of Quidway S6500 Series Product has just been
released, which has brand new chassis, powerful new Salience III series super engines,
and new interface boards with abundant services. Furthermore the new generation
BRAS
S6500 switches are much more cost effective than the old ones: lower price, higher
performance and more features.
S6502
S6503
S6506
S6506R
> 2-
Product Features
Advanced Architecture
With distributed processing structure and modular design, the S6502, as a whole,
supports 2 high-speed service slots; the S6503, as a whole, supports 3 high-speed
service slots; the S6506/S6506R, as a whole, support 6 high-speed service board slots,
and provide smooth investment and service expandability.
High-density L2/3 Full Line Speed Interface

The backplane bandwidth of the S6500 series switches is up to 1.68Tbps. In full
configuration, the S6500 can provide up to 292GE or 288FE. Supporting up to 64K
routing table entries, and based on Longest Prefix Match (LPM) routing, which ensures
all packets have the same forwarding performance, and enable the switch inherently
immune against Code red worm and Worm blaster. Powerful processing capacity
is an important assurance for building reliable, stable, and high-speed IP network
platforms.
Carrier-class Reliability Design

With distributed architecture, the S6506R supports dual main control boards. All boards
of the S6500 series are hot swappable, and the power system is in N+1 redundancy.
Dual power cord input also enhances the system reliability. The system supports STP/
RSTP /MSTP and VRRP, meeting strict carrier-class network reliability requirements.
Highly Reliable System Resource Configuration

They support the patented flexible resource allocation system technology, to achieve
optimal distribution of the system backplane, the switching engine bandwidth and
performance. They support the VRPTM 3.x network operating system to provide a broad
range of network features and functions.
Serialized Super Engine

The Salience series switching route engine based on the new generation Crossbar
technology combines L2/3/4 line speed forwarding and a broad range of QOS and ACL
features, which are important assurance for building high-reliability, low-delay core
networks. The S6500 provides serialized engines that can be configured flexibly on
serialized cabinet based on the specific needs of the user.
> 2-10
The Salience III is a complete new generation engine for S6500 series switches. It delivers
much high switch capacity with XGBUS technology. It also provides abundant optional
LPU boards including full wire-rate GE LPU boards, PoE LPU boards and 10GE LPU boards.
The Salience III is compliant with all the traditional LPU boards, and can be applied in
S6503 (4 slots), S6506 (7 slots), and S6506R (8 slots). Except Salience III series engines,
there are another two interface boards T12PE, P12TE are designed specifically for S6502,
which could work as switching engines.
Refined User Management

The granularity of bandwidth control can reach 64Kbps. This series offers powerful
user management and authentication, and billing support. It supports CAMSTM
(Comprehensive Access Management Server) system and provides professional user
management and billing solutions. It features built-in IEEE 802.1x authentication server.
Perfect Security Mechanism

Supports standard Radius, and provides Radius+; HWTACACS support; ensures accurate
authentication.
Practical Management System

BRAS
They support SNMP, and can support general NM platforms such as Open View, and the
Quidview, iManager network management systems. They support RMON, and HGMP
cluster management, which make easier equipment management. And SSH promise the
secure management access.
Attribute
S6502
S6503
S6506
S6506R
Number of service slots
280G
640G
1.6T
1.6T
Backplane capacity
Layer 2 switching
Port-based VLAN (802.1Q)
YES (4K)
Protocolo-based VLAN (IP,IPX
YES
and etc)
MAC table number
16K/module
IEEE802.3x flow control
YES
IEEE802.1p
YES
IEEE802.3ad link-aggregation
YES. MAX 8 ports/link group. MAX. 64 groups
> 2-11
Link-aggregation between
YES
boards
Layer 3 switching
LACP
YES
GVRP/GMRP/GARP
YES
Port mirroring
YES
STP
YES
RSTP
YES
MSTP
YES (support 16 instances)
Broadcast storm suppression
YES
Q-in-Q
YES
Jumbo-frame
YES (support MAX 9216 bytes)
Middle frame
YES (support MAX 1600 bytes)
Port auto negotiation
YES
IGMP snooping (v1,v2)
YES
L2 static unicast addresses
YES
Multicast groups
YES
LPM(Longest Prefix Match)
YES
Static route
YES
RIP1/2, OSPF, IS-IS, BGP
YES
VRRP
YES
ARP
YES
Local ARP proxy
YES
DHCP relay
YES
DHCP server
YES
SuperVLAN
YES (up to 64)
SubVLAN
YES (127 SubVLAN per SuperVLAN, totally 1024

SubVLAN per system)
> 2-12
IGMP (v1, v2)
YES
PIM-DM, PIM-SM
YES
ECMP
YES
Switched virtual interfaces
1K
Traceroute
YES
BootP client
No
IPX (software switched)
YES
RADIUS, HWTACACS
YES
Security
QoS
802.1x
YES
ACL
YES
SSHv1.5/2.0
YES
Unicast MAC filter
YES
Per-port QoS configuration
YES
ACL capacity
128/port
CAR
YES (granularity: 64Kbps)
Queues per port
Traffic classification
Strict priority queuing;

WRR (Weighted Round Robin) provided through
bandwidth;
SP + WRR;
Supports priority queue based on VLAN port,
IEEE802.1P;
Supports up to 8 FIFO, SP, WRR queues for each
port Remarking of packets based on priority:
Auto classification
Selectable prioritization
Type of Service (ToS)
IEEE 802.1p Class of Service (CoS)
BRAS
IP precedence
Local precedence: physical port, source/destination
MAC address, VLAN information, Ethernet type,
Layer 3 protocol, source/destination IP address,
datagram type, IP layer 4 protocol, IP layer 4 ports
flows identified through Access Control Lists (ACLs)
System
Configuration through CLI
configuration/
Console, Telnet and Modem
system
FTP/TFTP
YES
management
Web management
NO
HGMPv2
YES
Other
Provides system logs
YES
Provides user-level alarming

Optional CF card
Management VLAN
YES
> 2-13
Power distribution
AC power distribution box
box
with two inputs, each with a
110-120V/220-240V AC; 50-60Hz; 9.0A/5.0A
separate ON/OFF switch

DC power distribution box
Rated voltage: -60 to -48 V DC

Maximum tolerance: -72 to -36 V DC
PoE input voltage
-46V to -55V; 55.0A
0oC to 45oC
Operating humidity (non-condensing)
10% to 90%
MTBF (Mean Time Between Failures)
99,999 h
MTTR (Mean Time To Repair)
1h
Weight (maximum in full configuration)

Maximum power consumption (all slots inserted
216,000 h
146,000 h
223,000 h
20kg
50kg
70kg
80kg
AC: 300W
AC: 350W
AC: 650W
AC: 800W
with boards)
DC: 300W
DC: 300W
DC: 550W
DC: 700W
Physical dimensions (W x H x D)
436 x 130.5
436 x 352.8 436 x 486.2 436 x 530.6
x 400 mm
x 480 mm
x 480 mm
x 480 mm
(17.17 x
(17.2 x
(17.2 x
(17.2 x
5.14 x
13.9 x
19.1 x
20.9 x
15.75 in.)
18.9 in.)
18.9 in.)
18.9 in.)
Order Information
S6502
Host Purchase
S6502 Series Ethernet Switches Host Configurations

Description
Quantity Remarks
S6502 Ethernet switch chassis with fan and document, supports PoE
and XGBUS, 2 power cord input. No power module
> 2-14
Optional
Optional Switching Route Processing Boards

S6502 Series Ethernet Switches Optional Switching Route Processing Boards

Description
Quantity Remarks
S6502 switch and route processing module with 12-port 10/100/
Optional
Optional
1000BASE-T RJ-45 and 4-port 1000BASE-X SFP

S6502 switch and route processing module with 12-port 1000BASE-X
SFP and 4-port 10/100/1000BASE-T RJ-45
Optional Service Interface Modules

S6502 Series Ethernet Switches Optional Interface Modules

Description
Quantity Remarks
48-port 10/100BASE-TX Ethernet interface module, RJ45
Optional
48-port 100BASE-FX Ethernet optical interface module, SFP Req.
Optional
Enhanced 20-port 10/100/1000BASE-T Ethernet interface module, RJ45
Optional
48-port 10/100/1000BASE-T enhanced Ethernet interface module, RJ45
Optional
Enhanced 20-port 1000BASE-X Ethernet optical interface module, SFP
Optional
Enhanced 1-port 10GE interface module, Xenpak Req.
Optional
48-port 10/100/1000Bae-T Ethernet interface module, RJ45 (PoE)
Optional
48-port 10/100BASE-TX Ethernet interface module, RJ45 (PoE)
Optional
12-port 10/100/1000BASE-T RJ45 and 4-port 1000BASE-X SFP
Optional
12-port 1000BASE-X SFP and 4-port 10/100/1000BASE-T RJ45
Optional
Req.
BRAS
S6502 Series Ethernet Switches Optional Optical Modules

Description
Quantity Remarks
100BASE-FX SFP transceiver, multi-mode (1310nm, 2km, LC)
Optional
100BASE-LX SFP transceiver, single mode (1310nm, 15km, LC)
Optional
100BASE-LH40 SFP transceiver, single mode (1310nm, 40km, LC)
Optional
Optional
1000BASE-T SFP
Optional
1000BASE-SX SFP transceiver, multi-mode (850nm, 550m, LC)
Optional
> 2-15
Optional
Optional
Optional
Optional
Optional
1000BASE-LH70 CWDM SFP transceiver, single mode
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
(1530nm, 70km, LC)

(1510nm, 70km, LC)
(1490nm, 70km, LC)
(1470nm, 70km, LC)
(1610nm, 70km, LC)
(1590nm, 70km, LC)
(1570nm, 70km, LC)
(1550nm, 70km, LC)
10GBASE-SR XENPAK module, multi-mode
(850nm, 300m, SC)
10GBASE-LR XENPAK module, single mode
(1310nm, 10km, SC)
10GBASE-ER XENPAK module, single mode
(1550nm, 40km, SC)
Optional Power Modules

S6502 Series Ethernet Switches Power Modules

> 2-16
Description
Quantity Remarks
DC power supply module, only for S6502
Optional
AC power supply module, only for S6502
Optional
S6503/S6506/S6506R
Host Purchase

S6503/S6506/S6506R Ethernet Switches Host Configurations

Description
Quantity Remarks
S6503 Ethernet switch chassis (DC 48V) with fan, 1 DC power and
Optional
Optional
Optional
Optional
Optional
Optional
document, support PoE and XGBUS, 2 power cord input

S6503 Ethernet switch chassis (AC 110/220V) with fan, 1 AC power
and document, support PoE and XGBUS, 2 power cord input
S6506 Ethernet switch chassis (DC 48V) with fan, 2 DC power and
S6506 Ethernet switch chassis (AC 110/220V) with fan, 2 AC power
S6506R Ethernet switch chassis (DC 48V) with fan, 2 DC power and
S6506R Ethernet switch chassis (AC 110/220V) with fan, 2 AC power
Note: S6506R has double main control units.

BRAS
Optional Switching Route Processing Boards

S6503/S6506/S6506R Ethernet Switches Optional Switching Route Processing Boards

Description
Quantity Remarks
S6503,S6506 and S6506R: switch and route processing module,
Optional
Optional
Salience III Edge-96G with 4 1000BASE-X interface, SFP Req.

S6503,S6506 and S6506R: switch and route processing module,
Salience III 384G, with 4 1000BASE-X interface, SFP Req.
> 2-17
Optional Service Interface Modules

S6503/S6506/S6506R Ethernet Switches Optional Interface Modules

Description
Quantity Remarks
48-port 10/100BASE-TX Ethernet interface module, RJ45
Optional
48-port 100BASE-FX Ethernet optical interface module, SFP Req.
Optional
Enhanced 20-port 10/100/1000BASE-T Ethernet interface module, RJ45
Optional
48-port 10/100/1000BASE-T enhanced Ethernet interface module, RJ45
Optional
Enhanced 20-port 1000BASE-X Ethernet optical interface module, SFP
Optional
Enhanced 1-port 10GE interface module, Xenpak Req.
Optional
48-port 10/100/1000Bae-T Ethernet interface module, RJ45 (PoE)
Optional
48-port 10/100BASE-TX Ethernet interface module, RJ45 (PoE)
Optional
12-port 10/100/1000BASE-T RJ45 and 4-port 1000BASE-X SFP
Optional
12-port 1000BASE-X SFP and 4-port 10/100/1000BASE-T RJ45
Optional
Req.
S6503/S6506/S6506R Ethernet Switches Optional Optical Modules

Description
Quantity Remarks
100BASE-FX SFP transceiver, multi-mode (1310nm, 2km, LC)
Optional
Optional
Optional
Optional
1000BASE-T SFP
Optional
1000BASE-SX SFP transceiver, multi-mode (850nm, 550m, LC)
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
(1530nm, 70km, LC)

(1510nm, 70km, LC)
> 2-18
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
Optional
(1490nm, 70km, LC)

(1470nm, 70km, LC)
(1610nm, 70km, LC)
(1590nm, 70km, LC)
(1570nm, 70km, LC)
(1550nm, 70km, LC)
10GBASE-SR XENPAK module, multi-mode
(850nm, 300m, SC)
10GBASE-LR XENPAK module, single mode
(1310nm, 10km, SC)
10GBASE-ER XENPAK module, single mode
(1550nm, 40km, SC)
BRAS
Optional Power Modules

S6503/S6506/S6506R Ethernet Switches Power Modules

Description
Quantity Remarks
DC power supply module, for S6503, S6506 and S6506R
Optional
AC power supply module, for S6503, S6506 and S6506R
Optional
Note:
To ensure robustness of the system, the S6500 series switches support load sharing,
plugging/unplugging, fault detection. S6506/S6506R can support 2+1 redundancy
backup of the power modules and ensure the normal working of the system with
only two power modules configured. S6502 and S6503 can support 1+1 redundancy
backup of the power modules and ensure the normal working of the system with only
one power module. And also dual power cords can be supported for S6502/S6503/
S6506/S6506R.
> 2-19

Quidway S5600 Series L3 Intelligent Gigabit Ethernet Switches
The Quidway S5600 series switches are innovative switches that powered by Intelligent
Resilient Framework. The innovative highlights of S5600 Series switches are high
stacking bandwidth up to 96G, high-density GE ports, 10GE uplink, and hot-swappable
power suppliers. Quidway S5624P/S5648P can be upgraded to S5624P-PWR/S5648PPWR by replacing the power suppliers. This product series represents the next generation
desktop switches. Quidway S5600 series switches can be used in access layer of Gigabit
Ethernet network or in aggregation layer with high availability as well as scalability.
The Quidway S5600 series switches include 5 models namely S5624P, S5624P-PWR,
S5648P, S5648P-PWR and S5624F.
The Quidway S5624P/S5624P-PWR have 24 Ethernet 10/100/1000 Base-T ports, 4
1000BASE-X SFP (combo), 2 dedicated stacking ports and one expansion slot. S5624PPWR supports PoE, which transmit power over Ethernet to endpoint-devices.
The Quidway S5648P/S5648P-PWR have 48 Ethernet 10/100/1000Base-T ports, 4
1000BASE-X SFP (combo), 2 dedicated stacking ports and one expansion slot. S5648PPWR model supports PoE, which transmit power over Ethernet to endpoint-devices.
The Quidway S5624F has 24 Ethernet 1000Base-X SFP ports, 4 10/100/1000Base-T ports
(combo), 2 dedicated stacking ports and one expansion slot.
S5624P/S5624P-PWR
S5648P/S5648P-PWR
> 2-20
S5624F
Innovative IRF Technology
The Quidway S5600 Series adopts an innovative technology, Intelligent Resilient
Framework, so bandwidth can be expanded and upgraded smoothly. With IRF
technology, the S5600 series switches can be stacked up to 8 units, forming a distributed
switching fabric with up to 96G stacking bandwidth between any two units. From the
management and configuration perspective, the distributed switches act as one switching
device and run as one logical entity, while from a performance perspective, each switch
in the IRF framework can make local forwarding decision in layer2 and layer3, the unit in
the fabric can backup each other.
Most importantly, IRF can provide the features that users are pressing for: reliability,
scalability and manageability.
New Wire-speed, Multi-layer Switch

The Quidway S5600 series switches have 88G or 136G switching capacity and
65.47Mpps or 101.18Mpps throughput. The Quidway S5600 series switches offer
L2/L3 wire-speed switching capacity. The product series supports maximum 448GE or
384GE+16*10GE, offers 10GE uplink speed, satisfies the most demanding. The hardware
BRAS
supports L3 wire-speed switching, and is able to identify and process the traffic flows
from L4-L7. With independent packet filters, all ports distinguish different flows and
forward them with corresponding priority.
PoE Supply Feature

The Quidway S5600 series supply PoE function for endpoint devices, providing power
over copper Ethernet cable to endpoint (such as IP phone, WLAN AP). As IEEE802.3af
compliant PSE (Power Sourcing Equipment), the Quidway S5600 PWR series can provide
up to 15.4W/port of power on every 10/100/1000 port. With PoE and Voice Vlan
technology, the S5600 can provide an ideal solution for a converged voice and data
network.
> 2-21

Flexible Security Control Policies
Based on the longest-prefix matching routing policy, This function can prevent the attack
of some virus or worm, such as Code Red and Worm Blaster.
The S5600 series switches support centralized MAC and 802.1X authentication. It
verifies users legality when they access the network. In addition, the S5600 can prevent
unauthorized access the network by binding IP, MAC and port in any combination. The
S5600 series switches can support dynamic Vlan assignment which allows identity-based
security policy regardless of where the user is connected.
The S5600 series switches support Disconnect Unauthorized Device (DUD) authentication.
The switch filters out all the traffic of a connected device once it detects the device is
unauthorized. The S5600 series switches support SSH.
High Reliability
The Quidway S5600 switches are IRF enabled. With IRF, there will be redundancy in the
stacking fabric not only in the control plane but also in the data plane. There is no single
point of failure in a fabric.
The Quidway S5600 supports STP/RSTP, and Multi-Vlan based MSTP, which greatly
improves the reliability of the whole networks.
The Quidway S5600 series switches support VRRP and can build a VRRP backup group
with other VRRP supported L3 switches.
The Quidway S5600 supports up to 4 ECMP (Equal Cost Multi-path Protocol) routing,
which can be used for load balance and routing redundancy.
Power supply can be AC or RPS DC to meet different customers demands. Power module
can be hot-swappable.
Abundant QoS Policies

The Quidway S5600 supports L2 to L7 flow classification. The rules can be based on
source/destination MAC address, source/destination IP address, TCP/UDP ports and
protocols. The S5600 series switches can support 100 flows rule per port.
> 2-22
The Quidway S5600 series switches support flexible queue scheduling algorithms, which
can be defined based on port and queue at the same time. Strict Priority (SP), Weighted
Round Robin (WRR), SP + WRR can be configured for queue scheduling. Congestion
avoidance algorithm can support 8 queues.
The Quidway S5600 series switches support Committed Access Rate (CAR) which has a
granularity of 64Kbps for GE port, and 1Mbps for 10GE port.
Diverse Management Mode

The Quidway S5600 series switches support Simple Network Management Protocol
(SNMP). The SNMPv1/v2c/v3 are all supported. They can be managed by general
network management platform such as OpenView, and Quidview network management
system. In addition, Command Line Interface (CLI), Web network management and telnet
are supported.
Product Features
S5624P S5624P-PWR S5648P S5648P-PWR
Fixed port
24 10/100/1000Base-T
48 10/100/1000Base-T,
24 1000Base-X SFP ports,
ports, 4 1000BASE-X
4 1000BASE-X SFP
4 10/100/1000BASE-
SFP (Combo) ports, and
(Combo) ports, and 2
T(Combo), and 2
2 dedicate high speed
dedicate high speed
dedicate high speed
stacking ports
stacking ports
stacking ports
Expansion slot
Expansion module
S5624F
BRAS
Port configuration
(1) 8 ports 1000Base-X SFP module

(2) 1 port Xenpak 10GE Module
(3) 2 ports XFP 10GE module
MTBF (Years)
MTTR (hours)
Performance
32.30
23.99
32.30
23.99
23.99
<2
<2
<2
<2
<2
Switch capacity: 88Gbps Switch capacity: 136Gbps Switch capacity: 88Gbps

Throughput: 65.47Mpps Throughput: 101.18Mpps Throughput: 65.47Mpps
Layer 2 feature
Flash
16M
16M
16M
16M
16M
> 2-23
Vlan
4k Vlan (IEEE802.1Q)
Voice Vlan
Port-based Vlan
Link aggregation
Link aggregation through command lines

Dynamic link aggregation through LACP
Link aggregation across switches
Up to eight GE or four 10GE ports in each aggregation group
Up to 32 aggregation groups(each aggregation port must be of the same
speed)
Mirroring
Many-to-one port mirroring (multiple monitored ports to one monitor port)

Traffic mirroring
MAC address table
Address self-learning
IEEE 802.1D standard
Up to 16K MAC addresses
STP/RSTP/MSTP
STP
RSTP
MSTP
PoE
Flow control
No
Yes
No
Yes
IEEE 802.3x (full duplex)

Back-pressure based flow control (half duplex)
IRF
Up to 8 units in one stacking group

Up to 448GE or 384GE and 16 10GE in one stacking group
Stacking bandwidth :96Gbps
Layer 3 feature
IP routing
Static
RIPv1/v2
OSPF
4 ECMP(Equal Cost Multi-Path)
IP Routing Table
16K
Multicast
256 multicast groups

IGMP
IGMP Snooping
PIM-DM
PIM-SM
> 2-24
No
Network protocol
DHCP Relay
NTP
ARP
VRRP
Management
CLI
Telnet
Console
SNMPv1/v2c/v3
RMON1/2/3/9 groups of MIBs
Huawei Quidview NMS
Web-based management
System logging
Hierarchical alarming
Quality of Service
Committed Access Rate (CAR), GE port with granularity of 64 Kbps and
(QoS)/
10GE port with the granularity of 1 Mbps
Access Control List
Eight output queues on each port
(ACL)
Three scheduling algorithms per port and scheduling algorithms can be:
strict priority (SP), weighted round robin (WRR) or SP + WRR
Remapping 802.1p or DSCP preference values of packets
Packet filter from layers 2 to layer 4
BRAS
Time-based QoS
Profile-based QoS
Security
Hierarchical user management and password protection

IEEE 802.1x authentication
Disconnect Unauthorized Device (DUD) authentication
SSH1.5
Denial of Service (DoS) attack prevention
MAC address authentication
Portal authentication
Packet filtering
Port isolation
Hardware configuration
Outline dimension
440mm x 43.6mm x 420mm (W x H x D)
Weight
<7.5Kg
<8Kg
<7.5Kg
> 2-25
Power
PSL130-AD: 130 W system output, AC/RPS DC input
module
PSL480-AD24P: 180 W system output + 300 W PoE output with 24 ports,

AC/RPS DC input
PSL180-AD: 180 W system output, AC/RPS DC input
PSL480-AD48P: 180 W system output + 300 W PoE output with 48 ports,
AC/RPS DC input
Input
AC:
voltage
Rated voltage: 100V to 240V, 50 Hz to 60Hz

Maximum tolerance:90V to 264V, 50 Hz to 60Hz
Power
DC:
supply
Rated voltage: -48V to -60V

Maximum tolerance: -36V to -72V
Input DC
The S5624P-PWR/S5648P-PWR must use the external PoE PSU RPS1000-A
voltage of
as its DC input, but not the -48VDC power supply generally available in the
PoE power
equipment room. Otherwise, the device may be damaged.
module
DC input of the PoE power module:

Rated voltage: -53.5 V
Max voltage range: -52 to -55 V
RPS power
Maximum power
Supported
170W
consumption
DC: 540W
230W
AC: 560W
0C to 45C
Operating humidity
10% to 90%
DC: 970W
170W
AC: 640W
(non-condensing)
Order Information
S5600 Series Host Configurations

Description
S5624F (PSL130-AD dual input power module, 220/110VAC, -48VDC to -60VDC)

S5624P (PSL130-AD dual input power module, 220/110VAC, -48VDC to -60VDC)
S5624P-PWR (PSL480-AD24P dual input PoE power module, 220/110VAC,-52VDC to
-55VDC)
S5648P (PSL180-AD dual input power module, 220/110VAC, -48VDC to -60VDC)
S5648P-PWR (PSL480-AD48P dual input PoE power module, 220/110VAC, -52VDC to
-55VDC)
> 2-26
S5600 Optional Interface Card Modules

Description
8-port 1000Base-X SFP interface card

1-port 10GE XENPAK interface card
2-port 10GE XFP interface card
S5600 Optical Modules

Description
1000Base-SX-SFP module
1000Base-LX-SFP module
1000Base-LH30-SFP module
1000Base-T-SFP module
10GBase-SR-XFP module
10GBase-LR-XFP module
10GBase-SR-XENPAK module
BRAS
10GBase-LR-XENPAK module
10GBase-ER-XENPAK module
> 2-27
Quidway S5000 Series L2 Intelligent Gigabit Ethernet Switchs

The Quidway S5000 series intelligent switches are L2 wire-speed Gigabit Ethernet
switching products providing high capacity and more features. With the highperformance ASIC and flexible modular structure, they provide L2~L7 intelligent flow
classification and ACL policies. They implement complete service control and user
management, so they are suitable for the access layer switches in enterprise networks
and MANs.
The S5000 series Gigabit switches comprise S5012G, S5012T and S5024G. The Quidway
S5000 switches are used for Gigabit L2 convergence and the Gigabit access application with
high QoS requirement.
The Quidway S5012G Ethernet switch is a box-type equipment of 1U high. It can
be installed in the 19 rack and can run independently. The system provides 12
10/100/1000BASE-T auto-negotiation Ethernet ports (RJ-45 connectors) and 4 Combo
Gigabit Interface Converters (GBICs).
The Quidway S5012T Ethernet switch is a box-type equipment of 1U high. It can be
installed in the 19 rack and can run independently. The system provides 10 GBIC ports,
2 10/100/1000BASE-T Ethernet ports and 2 Combo 10/100/1000BASE-T ports.
The Quidway S5024G Ethernet switch is a box-type equipment of 1U high. It can
be installed in the 19 rack and can run independently. The system provides 20
10/100/1000BASE-T Ethernet ports (RJ-45 connectors) and 4 GBIC ports.
Note:
Combo indicates that the ports from a combination, out of which only one can be
used. The last 4 electrical interfaces of S5012G form a combination with 4 GBIC
ports, while the last 2 GBIC ports of S5012T form a combination with the first 2
electrical interfaces.
> 2-28
S5012G
S5012T
S5024G
BRAS
Full Wire-speed Multi-layer Switching

The S5000 series intelligent switches perform switching at wire-speed, so that they can
forward packets rapidly even under a heavy load. Their hardware can identify and process
the application traffic flows from L2~L7. All ports have an independent data packet filter,
and differentiate different application flows for different management and control.
Comprehensive Security Control Policies

The Quidway S5000 series support 802.1x authentication to identify users who attempt
to access the network. They can also prevent unauthorized access to the network by
binding any combination of MAC, IP, VLAN and PORT.
The Quidway S5000 series support multiple ACL policies to set the authorities for users
to access the network resource, so that access to the network can be controlled.

The Quidway S5000 series intelligent L2 switches support L2~L7 complex flow
classification based on the source MAC address, the destination MAC address, the source
> 2-29
IP address, the destination IP address, the port, or protocol. They provide three particular
queue scheduling algorithms: Strict-Priority Queue (PQ), Weighted Round Robin (WRR),
and Delay bounded WRR.
They support Committed Access Rate (CAR), and limit the traffic speed by the 1Mbit/s
granularity.
High Reliability
The Quidway S5000 series support STP/RSTP and multi-VLAN based MSTP, thus greatly
improving the redundant backup for links and the fault tolerance capability, so that the
network can run stably.
Product Features
Specifications
S5012G
S5012T
S5024G
Performance
Port capacity: 24Gbps
Port capacity: 48Gbps
Throughput: 17.8Mpps
Layer 2 switching
> 2-30
MAC address
16K MAC addresses
Latency
<10s
VLAN
4K VLANs (IEEE 802.1Q)
Supports 4K VLAN Pass-through
GVRP (GARP VLAN Registration Protocol)
Supports VLAN isolate
Supports VLAN trunk
Link
Supports FE (Fast Ethernet) port aggregation
aggregation
Supports GE (Gigabit Ethernet) port aggregation
Supports maximum of 6 groups aggregation ( Max. 8 ports per group) of S5012G
and S5012T
Supports maximum of 12 groups aggregation ( Max. 8 ports per group) of S5024G
Traffic control
IEEE 802.3x full-duplex flow control
Back pressure flow control for half-duplex
STP/RSTP/
IEEE 802.1D Spanning Tree Protocol (STP)
MSTP
IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)
IEEE 802.1s Multi Spanning Tree Protocol (MSTP)
Multicast
256 Multicast routes
IGMP (Internet Group Management Protocol) snooping on Layer 2 interfaces
GMRP (GARP Multicast Registration Protocol)
Network
DHCP Snooping (Dynamic Host Configuration Protocol Snooping)
protocol
ARP
Convergence
Priority queues Eight hardware queues per port
QoS(Quality of Supports 3072 flow rules of S5024G
Service)/ACL
Supports 1536 flow rules of S5012G and S5012T
(Access Control Flow-based QoS profiles

List)
Ingress and egress
DSCP (DiffServ Code Point)

Flows identified through Access Control Lists (ACLs)

Minimum and maximum thresholds:
1Mbit/s increments
128 flows per port
Supports flexible queuing algorithms:
PQ (Priority Queuing)
WRR (Weighted Round Robin)
BRAS
Security
Network login
IEEE 802.1X user authentication
Supports proxy detection of double network cards
Supports ACL filter
Management
System
Supports CLI (Command Line Interface) configuration mode
configuration
Supports configuration via the console (control console) port
and
Supports local/remote configuration via Telnet
management
Supports remote configuration via modem dial-up
Supports system configuration with SNMPv1/v2/v3
Supports RMON (Remote Monitoring)
Supports Quidview and network management system
Supports WEB management system
Supports hierarchical alarms
> 2-31
Supports system log
Supports HGMPv2 (Huawei Group Management Protocol)
System
Supports FTP and TFTP
Supports HGMPv1
maintenance
Hardware Configuration
Attribute
S5012G
S5012T
S5024G
Port
(1) 12 10/100/1000M
(1) 2 10/100/1000M
(1) 20 10/100/1000M
configuration
Base-T slots
Base-T slots
Base-T slots
(2) 4 Combo GBIC slots
(2) 2 Combo 10/100/1000M (2) 4 GBIC slots
(3) 1 console slot
Base-T slots
(3) 10 GBIC slots
(4) 1 console slot
Extended
1000BASE-SX-GBIC module
module
1000BASE-LX-GBIC module
1000BASE-LH30-GBIC module
1000BASE-ZX70-GBIC module
1000BASE-STACK-HSSDC-GBIC module
Outline
44*436*240
(3) 1 console slot
dimensions
(mm) HxWxD
Weight
4kg
RPS
Support
redundancy
power
Input voltage
AC : 100V ~240V, 50/60Hz
DC: -48 ~ -60V
Maximum
60W
system power
consumption
> 2-32
Environment
Working temperature: 0C ~45C
Storage temperature: -40C ~ 70C
Relative humidity: 10%~90%, non-condensing
6kg
Order Information
Host Configurations

Description
S5012G-DC host (-48V, DC)

S5012G host (220V, AC)
S5012T-DC host (-48V, DC)
S5012T host (220V, AC)
Optional Interface Module Configurations

Description
BRAS
> 2-33

Quidway S3900 Series Switches
The Quidway S3900 Series Ethernet Switches are a new line of premier multilayer
switches that entirely fulfills the enterprise customers requirement of designing and
implementing a unified, highly resilient network. One of the most important and
innovative highlight of S3900 Series Ethernet Switches is the IRF technology (Intelligent
Resilient Framework) which represents the most advantage stackable technology. IRF
technology, which is a completely innovative technology, allows network managers to
build affordable networks with high resilient, flexibility and exceptional performance.
S3928TP-SI

S3928F-EI

S3928P-SI / S3928P-EI / S3928P-PWR-EI
S3952P-SI / S3952P-EI / S3952P-PWR-EI
> 2-34

With flexible software options, the Quidway S3900 Series switch is available in the
Standard Software Image (SI) and the Enhanced Software Image (EI), offering a costeffective path for meeting current and future service requirements from enterprises and
commercial businesses. The SI feature set includes advanced quality of service (QoS), ratelimiting, access control lists (ACLs), static and Routing Information Protocol (RIP) routing,
and basic IRF function. In addition to these features, the EI feature set provides a richer
set of enterprise-class features such as advanced hardware-based IP unicast, multicast
routing, and advanced IRF functionality.
IRF Technology
Intelligent Resilient Framework (IRF) is an innovative resilient network technology that
allows enterprise customers to design and implement high availability Fast Ethernet core
and aggregation backbones that are affordable and provide exceptional performance,
scalability and availability. With IRF technology, the Quidway S3900 Series switches
can be interconnected together to behave as a single logical switching entity called
a Distributed Fabric. From management and configuration perspective, the Fabric
appears as a single device; while from a performance perspective, each switch in the
BRAS
Distributed Fabric can make its own forwarding decisions, both a Layer 2 and Layer 3
for traffic that appears on its ports.
Distributed Device Management (DDM)

Distributed Device Management is the control system of IRF technology, responsible
for distributing management and control information across the IRF Distributed Fabric.
DDM allows the entire IRF Distributed Fabric to be managed as a single logical entity.
Management tasks are all performed across the Distributed Fabric, minimizing complexity
and administration overheads. In addition, the management IP address is shared across
all units in the IRF Distributed fabric, ensuring continuous device management and
monitoring, in the event of an outage in one of the interconnected switches.
> 2-35

Distributed Resilient Routing (DRR)
Distributed Resilient Routing, provided by Enhanced Image, is an advanced routing
implementation that allows multiple interconnected switches in an IRF Distributed Fabric
to behave as a single active routing entity. Unlike resilient Layer 3 implementations such
as VRRP and HSRP, DRR intelligently distributes the routing load across all switches in
the Distributed Fabric to optimize routing performance and make full use of bandwidth
capacity.
Distributed Link Aggregation (DLA)

Distributed Link Aggregation, provided by Enhanced Image, allows networks and IRF
Distributed Fabrics to be coordinated with switches at edge of the network. With the
ability to multi-home across different units in the IRF Distributed Fabric, the availability
of the entire network is dramatically increased. Traffic is forwarded across all links in the
Aggregated Link to the fabric to optimize the use of available capacity. DLA guarantees
high levels of resiliency since failure in one of the members of the Aggregated Link results
in automatic redistribution of traffic across the remaining links.
Excellent PoE (Power over Ethernet) Supply Function

The Quidway S3900 series switches support PoE function for the LAN switching
infrastructure, which provides power over a copper Ethernet cable to an endpoint
(Powered Device). With the Quidway S3900, up to 15.4W/port of power on every
10/100 port ensures maximum device support for IP telephony and wireless LAN
deployments. As PSE (Power Sourcing Equipment) devices, the Quidway S3900 series are
802.3af compliant PoE switches. With PoE and Voice VLAN technology, the Quidway S3900
series switches can supply a perfect solution for a converged voice and data network.
Full Wire-speed, Multi-layer Switching

The Quidway S3900 series offer L2/L3 wire-speed switching capability for all ports
of the switch. The system offers 4 GE to meet one piece of equipments requirement
for multiple Gigabit uplinks and for access to the Gigabit server, thus greatly saving
the equipment investment. The Hardware supports L3 wire-speed switching, and is
able to identify and process the application traffic flows from L2~L7. All ports have an
independent data packet filter, and distinguish different application flows for different
management and control.
> 2-36

Flexible Security Control Policies
Based on the longest match routing policy, Quidway S3900 series forward the
packets one by one so that the packets acquire the same forwarding performance. This
function can guard the network against the attack by Code Red and Worm Blaster, thus
guaranteeing the equipment security.
The Quidway S3900 series support 802.1x authentication to identify users who attempt
to access the network. They can also prevent unauthorized access to the network by
binding any combination of MAC, IP, VLAN and PORT.
Secure Shell (SSH) offers security information protection and powerful authentication
function to safeguard the Ethernet switch from attacks such as IP address spoofing and
plain text cipher interception.
High Reliability
The Quidway S3900 series support the optional RPS (Redundant Power Supply, provided
by Enhanced Image) and can provide power redundancy for four pieces of equipments,
BRAS
thus improving the fault tolerance capability and normal network operation duration.
The Quidway S3900 series support VRRP (provided by Enhanced Image), and can build a
VRRP backup group with other L3 switches. They can build a redundant route topological
structure when a fault occurs to guarantee communication continuity and reliability,
keeping network stable status.
The Quidway S3900 series implement redundant backup routes by configuring multiple
equivalent routes. When the active uplink route becomes faulty, it will automatically
switch to the next backup router, thus achieving multi-level backup for uplink routes.

The Quidway S3900 series support L2~L7 complex flow classification based on source
MAC address/destination MAC address/source IP address/destination IP address/ ports/
protocols.
> 2-37
set on the basis of port and queue at the same time. They support Strict Priority (SP),
Weighted Round Robin (WRR), Weighted Fair Queuing (WFQ), SP+WRR, and SP+WFQ;
8 priority queues and 2 discarding priorities; WRED congestion avoidance algorithm and
port traffic shaping.
The Quidway S3900 series support Committed Access Rate (CAR), and limit the traffic
speed in the 64Kbit/s granularity.
Diversified Management Modes

The Quidway S3900 series support Simple Network Management Protocol (SNMP)
and can be managed by general network management platform such as Open View,
and the Quidview network management system. In addition, Command Line Interface
(CLI), Web network management, TELNET, and HGMP cluster management make the
equipment management more convenient.
Product Features
Port
S3928P-SI
S3928TP-SI
S3928F-EI
Configuration S3928P-EI
S3952P-EI
S3952P-
S3928P-PWR-EI
PWR-EI
Fixed port
(1) 24 10/100M Ethernet (1) 24 10/100M
(1) 24 100M SFP
(1) 48 10/100M
ports
Ethernet ports
optical ports
Ethernet ports
(2) 1 console slot
(2) 2 1000M BASE (2) 2 1000M BASE-T (2) 1 console
-T ports
ports
(3) 1 console slot
(3) 1 console slot
Extended slot
4 1000M SFP extended
2 1000M SFP extended module slots
4 1000M
module slots
SFP extended
> 2-38
S3952P-SI
Extended
(1) SFP-T
1000M SFP
(2) SFP-SX (0.55km)
module
(3) SFP-LX (10km)
(4) SFP-LH30 (30km)
(5) SFP-LH40 (40km)
(6) SFP-ZX70 (70km)
slot
module slots
Port capacity
12.8 Gbps
17.6 Gbps
Forwarding
9.53 Mpps
11.78 Mpps
rate
SDRAM
64 M
Buffer
32 M
Layer 2
S3900-SI
S3900-EI
Switching
Address self-learning
IEEE 802.1D standard
16K MAC addresses
Up to 64 static MAC addresses
Up to 256 static MAC addresses
Flash
8M
16M
Latency
<10s
VLAN
Voice VLAN
Supports Port-based VLAN
N/A
BRAS
MAC address
Supports Protocol-based VLAN
Super VLAN
QinQ
Link
Dynamic link aggregation through
Dynamic link aggregation through LACP
aggregation
Link Aggregation Control Protocol
and across devices
(LACP)
Manual link aggregation through command lines
Aggregation of FE/GE ports
Up to 8 FE or 4 GE ports in each aggregation
Flow control
STP/RSTP/
MSTP
IEEE 802.1s Multiple Spanning Tree Protocol instances (MSTP)
> 2-39
Stack
Supports maximum of 8 units
Supports maximum bandwidth of 4G
Extends to maximum of 384FE or 16GE
N/A
IRF Stack supports DLA. DLA supplies the
capacity that multiple switches in a stack
can create a link aggregation connection.
Loss of an individual switch will not affect
connectivity for the other switches
RPS
N/A
Support
Layer 3 Switching
IP routing
Static routing
RIP-1/2 (Routing Information Protocol-1/2)
1K IP Routes
6K IP Routes
OSPF (Open Shortest Path First)
3 ECMP (Equal Cost Multipath)
Policy-based Routing
Multicast
256 Multicast Numbers
N/A
IGMPv1
IGMPv2
PIM-DM
PIM-SM
MSDP (Multicast Source Discovery
Protocol)
Network
DHCP Relay (Dynamic Host Configuration Protocol Relay)
protocol
DHCP Client
ARP (Address Resolution Protocol)
NTP (Network Time Protocol)
BOOTP (Bootstrap Protocol)

N/A

VRRP (Virtual Router Redundancy
Protocol)
Web cache
Support
Convergence
Priority queues 8 hardware queues per port
> 2-40
QoS(Quality of Limitation on packet receiving/sending rate on ports;

Service) /ACL
Packet redirection;
(Access Control Supports CAR (Committed Access Rate) with the granularity of 64 kbps;
List)
WRED (Weighted Random Early Detect/Discard);
Five scheduling algorithms that can be set based on port and queue at the same
time:

SP(Strict Priority)
WFQ (Weighted Fair Queue)
SP + WRR
SP + WFQ
Packet tagging based on 802.1p or DSCP preference;
Packet filter at the layers 2 through 4, providing filtering based on source/destination
MAC address, source/destination IP address, port, protocol, VLAN, VLAN range,
MAC address range, or invalid frame;
Time range setting;
QoS profile management, allowing QoS service scheme customization.
Security
SSH (Secure Shell)
N/A
BRAS
Network login
Support Portal authentication
Management
System
configuration
and
management
Supports RMONv1(Remote Monitoring), 1/2/3/9 groups of MIBs
Supports Quidview network management system
Supports system log
System
Detailed alarm/debug information
maintenance
Supports Ping and Traceroute
> 2-41
Supports remote maintenance via Telnet
Hardware
S3928P-SI
S3952P-SI
S3928P-PWR-EI
configuration
S3928TP-SI
S3952P-EI
S3952P-PWR-EI
S3928P-EI
S3928F-EI
Outline
43.6mm*440mm*260mm
43.6mm*440mm*420mm
3.5kg
S3928P-PWR-EI: 5.8kg
dimensions
(mm)
(H x W x D)
Weight
4kg

Input voltage
The S3900-SI series are AC-powered. The S3900-EI series can be AC-powered
and DC-powered.
AC: 100V ~ 240V, 50/60Hz
DC: -48 ~ -60V DC
Maximum
40W (except S3928F-EI)
system power 65W (S3928F-EI)
> 2-42
S3952P-PWR-EI: 6.2kg
50W
S3928P-PWR-EI
DC: 430W/AC: 450W
consumption
S3952P-PWR-EI
DC: 820W/AC: 465W
Environment
Operation temperature: 0C ~45C
Order Information

Description
S3928P-SI host (AC)

S3928TP-SI host (AC)
S3952P-SI host (AC)
S3928P-EI host (AC & DC)
S3952P-EI host (AC & DC)
S3928P-PWR-EI host (AC & DC)
S3952P-PWR-EI host (AC & DC)
S3928F-EI host (AC & DC)
S3900 Optional 1000M SFP Module Configurations

Description
1000BASE-SX-SFP module
BRAS
1000BASE-LX-SFP module
1000BASE-LH30-SFP module
1000BASE-ZX70-SFP module
1000BASE-T-SFP module
> 2-43

Quidway S3500 Series Security Intelligent Switches
The Quidway S3500 series routing switches are box-type layer 3 wire-speeds Ethernet
switches with 10/100M aggregation in service provider data centers, server cluster,
wiring cabinet and metropolitan area networks. The Quidway S3500 series high
performance Ethernet switches include such types as: S3528G, S3528P, S3552G,
S3552P and S3552F. Running on the VRP (Versatile Routing Platform) network operating
system, the Quidway S3500 series switches provide abundant routing protocols,
VLAN switching, traffic management, QoS, powerful bandwidth control and user
management.
S3528G
S3552G/3552P
S3528P
S3552F
Full Wire-speed, Multi-layer Switching
The Quidway S3500 series offer a 32Gbps bandwidth to provide the L3 wire-speed
switching capability for all ports of the switch. The system offers 4 GE to meet a single
piece of equipments requirement for multiple Gigabit uplinks and for access to the
Gigabit server, thus greatly saving the equipment investment. The equipment provides a
maximum of 512 subnet route interfaces. Hardware supports L3 wire-speed switching,
and is able to identify and process the application traffic flows from L4 to L7. All ports
have an independent data packet filter, and distinguish different application flows for
different management and control.
> 2-44

Based on the longest match routing policy, the Quidway S3500 series forward the
packets one by one so that the packets acquire the same forwarding performance.
This can guard the network to against the attack by Code Red and Worm Blaster, thus
guaranteeing the equipment security.
The Quidway S3500 series support 802.1x and Web Portal authentication to identify
users who attempt to access the network. They can also prevent unauthorized access to
the network by binding any combination of MAC, IP, VLAN and PORT.
High Reliability
The Quidway S3500 series support the optional Redundant Power System (RPS) and
can provide power redundancy for four pieces of equipments, thus improving the fault
tolerance capability and normal network operation duration.
The Quidway S3500 series support Virtual Route Redundancy Protocol (VRRP), and can
build a VRRP backup group with other L3 switches. They can build a redundant route
topological structure when a fault occurs to guarantee communication continuity and
BRAS
reliability, so that the network can keep stable.

The Quidway S3500 series implement redundant backup routes by configuring multiple
equivalent routes. When the active uplink route becomes faulty, it will automatically
switch to the next backup router, thus achieving multi-level backup for uplink routes.

The Quidway S3500 series support L2~L7 complex flow classification based on the
source MAC address, the destination MAC address, the source IP address, the destination
IP address, the port, or protocol. They can support 1K flow rules.
The Quidway S3500 series support flexible queue scheduling algorithms, which can be
set on the basis of port and queue at the same time. They support Strict Priority (SP),
Weighted
> 2-45
Round Robin (WRR), and SP+WRR; 8 priority queues and 3 discarding priorities; WRED
congestion avoidance algorithm and port traffic shaping.
The Quidway S3500 series support Committed Access Rate (CAR), and limit the traffic
speed in the 8Kbit/s granularity.

The Quidway S3500 series support Simple Network Management Protocol (SNMP),
the general network management platform such as Open View, and the Quidview
network management system. They support Command Line Interface (CLI), Web network
management, TELNET, and HGMP cluster management, so that equipment management
becomes more convenient.
Product Features
Specifications
S3528G/S3528P
S3552G/S3552P/S3552F
Performance
Port capacity: 12.8Gbps
Throughput: 9.6Mpps
Layer 2 Switching
MAC address
12K MAC addresses
Latency
<10s
VLAN
Supports Port-Based VLAN
Link aggregation
Supports maximum of 7 groups aggregation ( Max. 8 ports per group)
Traffic control
STP/RSTP/MSTP
IEEE 802.1s Multiple Spanning Tree Protocol instances (MSTP)
Layer 3 Switching
> 2-46
IP routing
512 Route Interfaces
4K IP Routes
Static Routing
RIPv1/v2 (Routing Information Protocol); supports Split Horizons
OSPFv1/v2 (Open Shortest Path First)
BGP4 (Boarder Gateway Protocol)
ECMP (Equal Cost Multipath)
Multicast
256 Multicast Routes
IGMP (Internet Group Management Protocol) snooping on Layer 2
interfaces
IGMPv1/v2
PIM-DM (Protocol Independent Multicast-Dense Mode)
PIM-SM (Protocol Independent Multicast-Sparse Mode)
Network protocol
DHCP Relay (Dynamic Host Configuration Protocol Relay)
TCP/IP protocol stack
ARP
Resilience
VRRP (Virtual Router Redundancy Protocol)
Convergence
Eight hardware queues per port
QoS(Quality of Service)/
Supports 1K flow rules
ACL(Access Control List)
Flow-based QoS profiles
Ingress and Egress
DSCP (Diffserv Code Point)
Type of Service (ToS)
Local precedence: physical port, source/destination MAC address,
VLAN information, Ethernet type, Layer 3 protocol, source/destination IP
address, DSCP, datagram type
Supports CAR (Committed Access Rate)
8Kbit/s increments
128 flows per GE port
64 flows per FE port
WRED (Weighted Random Early Detect/Discard)
SP (Strict Priority) Queuing
BRAS
Priority Queues
> 2-47

SP + WRR
Security
Network login
Supports Portal authentication
SSH (Secure Shell)
Management
System configuration
and management
Supports Quidview network management system
Supports system log
Supports HGMP (as server)
Supports NTP (Network Time Protocol)
System maintenance
Detailed alarm/debug information
Supports Ping and Traceroute
Supports remote maintenance via Telnet
Supports HGMP (as server)
Attribute
S3528G
S3528P
Outline dimensions (mm)
42*436*240
S3552G
S3552P
42*436*360
S3552F
86*436*390
(H x W x D)
Weight
4kg
5kg
6kg
RPS redundancy power
Support
Support
Support
Input voltage
AC: 100V~240V, 50/60Hz
DC: -48 ~ -60V DC
Maximum system power
40W
45W
54W
consumption
Environment
> 2-48
Working temperature: 0C ~45C
Storage temperature: -40C~ 70C
Port Configuration S3528G

Fixed ports
(1) 24

S3552G
(1) 48
10/100M 10/100M
S3528P
3552P
S3552F
(1) 24
(1) 48
10/100M
10/100M 10/100M
N/A
Ethernet
Ethernet
Ethernet
Ethernet
ports
ports
ports
ports
(2) 1 con- (2) 1 con-
(2) 1 cons- (2) 1 con-
sole slot
sole slot
ole slot
sole slot
Extended slots
4 GBIC
4 GBIC
4 GE SFP
4 GE SFP (1) 4 GBIC extended module
extended
extended
extended extended slots
module
module
module
module
(2) 6 extended module slots
slots
slots
slots
slots
supporting 4 kinds of 8-port FE
extended modules
Extended modules
(1) GBIC-T
(1) SFP-T
(1) GBIC-T
(2) GBIC-SX(0.55km)
(2) SFP-SX(0.55km)
(2) GBIC-SX (0.55km)
(3) GBIC-LX(10km)
(3) SFP-LX(10km)
(3) GBIC-LX (10km)
(4) GBIC-LH30(30km)
(4) SFP-LH30(30km)
(4) GBIC-LH 30 (30km)
(5) GBIC-LH40(40km)
(5) SFP-LH40(40km)
(5) GBIC-LH
(6) GBIC-ZX70(70km)
(6) SFP-ZX70(70km)
(6) GBIC-ZX70 (70km)
(7) GBIC-STACK
40 (40km)
(8) 8*10/100Base-TX (RJ-45)
module (supports 100m)
(9) 8*100 Base-FX (LC) module
(multi mode supports 2km)
(10) 8*100 Base-FX (LC) module
(single mode supports 15km)
(11) 8*100 Base-X SFP module
BRAS
(7) GBIC-STACK
> 2-49
Order Information

Description

S3528P-DC host (-48V, DC)
S3528P host (220V, AC)

Description

S3552P-DC host (-48V, DC)
S3552P host (220V, AC)
S3552F-DC host (-48V, DC)
S3552F host (220V, AC)
S3552P/S3528P Optional Interface Module Configurations

Description
1000BASE-SX-SFP module
1000BASE-LX-SFP module
1000BASE-ZX70-SFP module
1000BASE-T-SFP module
> 2-50
S3552G/S3528G Optional Interface Module Configurations

Description
1000BASE-T-GBIC module
S3552F Optional Interface Module Configurations

Description
8-port 10/100BASE-TX module

8-port 100BASE-FX MMF FE module
8-port 100BASE-FX SMF FE module
100BASE-X SFP module
BRAS
> 2-51

Quidway S3000 Series Intelligent Switches
The Quidway S3000 series intelligent switches are L2 wire-speed Ethernet switches
which fully meet the needs for secure large-capacity switching and high QoS
requirements. The system adopts high-performance ASIC and uses a flexible module
structure to provide intelligent L2~L7 flow classification, complete QoS, implementing
comprehensive service control and subscriber management. It can be used as an access
layer switch that focuses on service control and management and network security
guarantee in enterprise networks and MANs.
The following models used in the access layer of enterprise networks and MANs, are
included in this series switches: S3026C, S3026G, S3026T, and S3050C. The S3000 series
switches provide gigabit uplink interfaces and powerful QoS capabilities to adapt to the
access requirements of multiple services.
> 2-52
S3050C
S3026C
S3026G
S3026T
All the S3000 series switches guarantee fast package forwarding capacity with full wirespeed switching, even in heavy traffic load. In addition, their hardware can identify and
process application flows of L2~L7 and all ports can filter data packets, identify and
manage/control different application flows according to different flows.

The Quidway S3000 series intelligent L2 switch supports 802.1x authentications and
identifies users in their access to the network. It supports flexible binding of MAC
address, IP address, VLAN and port to prevent illegal users from accessing the network
effectively.
It also supports multiple ACL policies to set users rights for accessing network resources
and thus guarantees the controlled access to network resources.

The Quidway S3000 series intelligent L2 switch supports the L2~L7 complicated flow
classification based on source/destination MAC address, source/destination IP address,
port and protocol. It also provides three queue dispatching algorithms, which are Strict-
BRAS
Priority Queue (PQ), Weighted Round Robin (WRR) and Delay bounded WRR.
It supports Committed Access Rate (CAR) and the traffic granularity is 1Mbit/s.

The Quidway S3000 series intelligent L2 switch can support SNMP, OpenView versatile
network platform and Quidview NM system. And it also supports CLI, Web network
management, Telnet, HGMP to facilitate the equipment management.
High Reliability
The Quidway S3000 series intelligent L2 switch supports STP/RSTP (Spanning Tree
Protocol/Rapid Spanning Tree Protocol) as well as the MSTP based on multiple VLANs.
Thus the redundancy backup and error tolerance capability of the link can be greatly
improved to guarantee the network stability.
It supports the optional Redundant Power System (RPS).
> 2-53
Product Features
Specifications
S3050C
S3026C/G/T
Performance
Layer 2 Switching
MAC address 8K MAC addresses
Latency
<10s
VLAN
256 VLANs (IEEE 802.1Q)
Supports 4K VLAN Pass-through
Supports VLAN isolate
Supports VLAN trunk
Link
aggregation
Supports maximum of 6 groups aggregation ( Max. 8 ports per group)
Traffic control IEEE 802.3x full-duplex flow control

Supports full-duplex 8.8G in maximum with S3026G/T/C
Supports full-duplex 13.6G in maximum with S3050C
STP/RSTP/
MSTP
IEEE 802.1s Multi Spanning Tree Protocol (MSTP)
Multicast
256 Multicast routes
Network
protocol
ARP
Convergence
Priority queues Four hardware queues per port
QoS(Quality of Supports 1K flow rules
> 2-54
Service)/ACL
Flow-based QoS profiles
(Access
Ingress and egress
Control List)
DSCP (Diffserv Code Point)
1Mbit/s increments
128 flows per GE port
64 flows per FE port
SP (Strict Priority) Queuing
Delay bounded WRR
Security
Network login IEEE 802.1X user authentication

Supports proxy detection of double network cards
Supports ACL filter
Management
System
configuration Supports configuration via the console (control console) port

and
management Supports remote configuration via modem dial-up

Supports Quidview and iManager N2000 network management system
Supports system log
Supports HGMPv1 Server
System
Supports FTP, TFTP, Ping, and Tracerouter
BRAS
maintenance
Attribute
S3050C
S3026C/G/T
Outline
42*436*360
42*436*245
dimensions
(mm)(H x W x D)
> 2-55
Weight
6kg
3kg
RPS
Yes
Yes
redundancy
power
Input voltage AC : 100V ~ 240V, 50/60Hz

DC: -48 ~ -60V
Maximum
55W
30W
system power
consumption
Environment
Working temperature: 0C ~ 45C
Relative humidity: 10% ~ 90%, non-condensing
Attribute
Fixed Port Extended Slot

(1) 48 10/
2 extended
(1) 1*1000Base-T (RJ-45) module;
100M
module slots
(2) 1*1000Base-SX (SC) module (multi mode supports
Ethernet
in rear.
500m);
(3) 1*1000Base-LX (SC) module (single mode supports
ports;
(2) 1
10km, multi mode supports 550m);
console slot.
(4) 1*1000Base-LX (LC) GL middle distance module
> 2-56
Extended Module
S3050C
(single mode supports 40km);
(5) 1*1000Base-ZX (LC) long distance module (single
mode supports 70km);
(6) 1*100Base-FX (MTRJ) module (multi mode
supports 2km);
(7) 1*100Base-FX (MTRJ) module (single mode
supports 15km);
(8) 1 stackable module.
S3026C
(1) 1*1000Base-T (RJ-45) module;
(1) 24 10/
2 extended
100M
module slots
(2) 1*1000Base-SX (SC) module (multi mode supports
Ethernet
in front.
500m);
ports;
(3) 1*1000Base-LX (SC) module (single mode supports
(2) 1
10km, multi mode supports 550m);
console slot.
(4) 1*1000Base-LX (LC) GL middle distance module
(single mode supports 40km);
(5) 1*1000Base-ZX (LC) long distance module (single
mode supports 70km);
(6) 1*100Base-FX (MTRJ) module (multi mode
supports 2km);
(7) 1*100Base-FX (MTRJ) module (single mode
supports 15km);
(8) 1*100Base-FX module (single mode supports 40km)
(9) 1 stackable module.
S3026G
(1) 2 GIBC
(1) GBIC-T
extended
(2) GBIC-SX (0.55km)
module slots
(3) GBIC-LX (10km)

(4) GBIC-LH30 (30km)
(5) GBIC-LH40 (40km)
(6) GBIC-ZX70 (70km)
(7) GBIC-STACK
S3026T
(1) 24 fixed N/A
N/A
10/100M
Ethernet
ports;
(2) 2
extended
module slo-
ts supports
10/100/
1000BASE
-T module;
(3) 1
console slot
BRAS
> 2-57

Order Information

S3050C Host Configurations
Description
S3050C-DC host (-48V, DC)

S3050C host (220V, AC)
S3026C/G/T Host Configurations

Description
S3026C-DC host (-48V, DC)

S3026C host (220V, AC)
S3026T-DC host (-48V, DC)
S3026T host (220V, AC)
S3050C Optional Interface Module Configurations

Description
1*1000BASE-T module
1*1000BASE-SX module
1*1000BASE-LX module
1*100BASE-FX multi mode fiber module
1*100BASE-FX single mode fiber module
1*1000BASE-LH40 middle distance module
1*1000BASE-ZX long distance module
Stackable module
> 2-58
S3026C Optional Interface Module Configurations

Description
1*1000BASE-T module
1*1000BASE-SX module
1*1000BASE-LX module
1*100BASE-FX multi mode fiber module
1*100BASE-FX single mode fiber module
1*100BASE-FX single mode fiber middle distance module
1*1000BASE-LH40 middle distance module
1*1000BASE-ZX long distance module
Stackable module
S3026G Optional Interface Module Configurations

Description
BRAS
> 2-59

Quidway S2000-EI Series Intelligent Switches
The Quidway S2000-EI series intelligent switches are L2 wire-speed Ethernet switches
to fully meet the needs for secure switching. The system adopts high performance
ASIC and uses a flexible module structure to provide comprehensive service control
and subscriber management. The Quidway S2000-EI series intelligent switches provide
flexible bandwidth distribution and access control function. So these switches are ideal
for an access layer that focuses on service control, management and network security
guarantee in enterprise networks and MANs.
The Quidway S2000-EI series switches include 3 models namely S2008-EI, S2016-EI,
S2403H-EI.
The S2008-EI provides 8 fixed 10/100BASE-TX auto-sensing ports and one console port.
The S2016-EI provides 16 fixed 10/100BASE-TX auto-sensing ports, one console ports,
and one expansion slot where an expansion 100BASE-FX module can be installed. This
expansion module can be a single mode/multi-mode/medium-haul optical interface
module or a 10/100BASE-TX Power over Ethernet (PoE) electrical interface module.
Through a 10/100BASETX electrical PoE module, a DC-powered S2016-EI can be
connected to a remote power supply and becomes a Powered Device (PD).
The S2403H-EI provides 25 fixed 10/100BASE-TX auto-sensing ports, one console port,
and one expansion slot where a 100BASE-FX single mode/multimode/medium-haul
optical interface module using SC connector can be installed.
S2008-EI
S2016-EI
> 2-60
S2403H-EI
All the Quidway S2000-EI series intelligent switches employ full wire-speed switching to
ensure their capability to forward packets fast even in a heavy load.
High Reliability
The Quidway S2000-EI series intelligent L2 switches support STP/RSTP/MSTP (Spanning
Tree Protocol/Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol). Thus the
redundancy back-up and error tolerance capability of the link can be greatly improved to
guarantee the network stability.

The Quidway S2000-EI series intelligent L2 switches support 802.1x authentications
and identify users when they access the network. It supports flexible binding of MAC
addresses, IP addresses, VLANs and ports to prevent illegal users from accessing the
network effectively.
BRAS

The Quidway S2000-EI series intelligent L2 switches can support SNMP v1/v2/v3 and
can be managed by Quidview NMS. They also support CLI, Web network management,
Telnet, HGMP to facilitate the equipment management.
> 2-61
Product Features
Feature
S2008-EI
S2016-EI
S2403H-EI
Performance
Switching
1.6Gbps
3.4Gbps
5.2Gbps
1.19Mpps
2.53Mpps
3.87Mpps
capacity
Throughput
Layer 2 Switching
MAC Address
4K MAC addresses
Latency
<10s
VLAN
512 VLANs (IEEE 802.1Q)

Supports 4K VLAN Transparent Transfer
Port-based VLAN
Link
Up to 4 maximum
Up to 8 maximum
Up to 12 maximum
Aggregation
aggregation groups,
aggregation groups,
aggregation groups,
each containing up to 8
ports
ports
ports
Traffic control

Back-pressure based flow control (half duplex)
STP/RSTP/
MSTP

IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)
Multicast
2K Multicast groups
Network
protocol

ARP
Convergence
Priority queues
Four hardware queues per port
QoS(Quality
of Service)

HQ+WRR (High-Priority Queuing + WRR)
Supports bi-directional port rate-limiting with the granularity of 64kbit/s
Security
> 2-62
Network login
Hierarchical user management and password protection

Port-based and MAC-based 802.1X authentication
Local authentication server
PEAP/TLS (Protected Extensible Authentication Protocol/Transport Layer Security)
Management
System
configuration
Supports configuration via the console port
and management

Supports RMON (Remote Monitoring),1/2/3/9 groups of MIB
Supports Quidview and iManager N2000 network management system
Supports system log
System
Debugging information output
maintenance
Ping and Tracert

Remote maintenance through Telnet
S2008-EI
S2016-EI
S2403H-EI
Outline
40 x 216 x 117
42 x 436 x 200
42 x 436 x 240
Weight
< 2kg
3kg
3kg
Input voltage
AC:100V~240V, 50/60Hz
AC: 100V~ 240V, 50/60Hz
BRAS
Attribute
dimensions (mm)
(H x W x D)
DC: -48 ~ -60V

Maximum system
8W
12W
15W
power
consumption
Environment
Working temperature: 0 ~ 45C

Storage temperature: -40 ~ 70C
Relative humidity: 10% ~ 90%, non-condensing
Fixed ports
(1) 8 10/100BASE-TX
(1) 16 10/100BASE-TX
(1) 25 10/100BASE-TX
Ethernet ports
Ethernet ports
Ethernet ports
(2) 1 console port
(2) 1 console port
(2) 1 console port
> 2-63
Extended slot
N/A
1 extended module slot
1 extended module slot
Extended module
N/A
(1) 1*100BASE-FX single
(1)1*100BASE-FX single
mode module
mode module
mode medium-haul
mode medium-haul
module
module
(3)1*100BASE-FX multi-
(3)1*100BASE-FX multi-
mode module
mode module
(4)1*10/100BASE-TX PoE
electrical interface module
Order Information
S2000-EI Series Host Configurations

Description
S2008-EI(AC)
S2016-EI (AC)
S2016-EI (DC)
S2403H-EI (AC)
S2403H-EI (DC)
S2016-EI Optional Interface Module Configurations

Description
1*100Base-FX multi-mode fiber module

1*100Base-FX single mode fiber module
1*100Base-FX single mode medium-haul fiber module
1*10/100Base-TX PoE electrical interface module
> 2-64
S2403H-EI Optional Interface Module Configurations

Description
1*100Base-FX multi-mode fiber module

1*100Base-FX single mode fiber module
1*100Base-FX single mode medium-haul fiber module
BRAS
> 2-65
memo
> 2-66
BRAS
memo
> 2-67
memo
> 2-68
BRAS Series
BRAS
BRAS Series
Contents
Quidway MA5200 Series Broadband Access Server...........................................3-2
Firewal
BRAS Series
> 3-
BRAS Series
MA5200 Series Broadband Access Server
Product Model
Feature
Quidway MA5200 Series
To prevent such problems as the poor capability of the
Broadband Access Server
broadband network in user management, service control and

network security, Huawei launched its MA5200 broadband
access server series, to implement the function of authentication,
billing, service control, security and QoS guaranteeing for
broadband access users.
Supports the access of users in various modes such
as Ethernet, xDSL, HFC and WLAN; supports various
authentication access modes such as Web, PPP, 802.1x, port
binding and plug-&-play; the authentication mode can be
flexibly selected for different access ports as required by the
network operation.
It can correctly collect users billing information, including
duration and traffic. Supports billing on the equipment and
the remote Radius server; supports the copying of the billing
information to the specified server; supports the accounting
and settlement of tiered operations.
Supports the authorization and management of user
attributes, including user bandwidth restrictions, Access
right control, users mutual access right control, QoS
attribute control and policy route authorization; provides the
subscriber login log and user online service log.
By means of user isolation, access identity authentication,
Firewal
access control (ACL), network resource application control

and user online service log record, the security of network
resources can be guaranteed and the forgery of addresses
and the attacking to the network, which is provided with a
identification function for network attacks.
It is designed based on the architecture of the advanced G5
router and has an extremely powerful routing function to
support such services as the routing of the edge router and
MPLS/VPN.
> 3-
BRAS Series
Quidway MA5200 Series Broadband Access Server
Product Overview
To prevent such problems as the poor capability of the broadband network in user
management, service control and network security, Huawei launched its MA5200
broadband access server series, to implement the function of authentication, billing,
service control, security and QoS guaranteeing for broadband access users, it can meet
the requirements of operation networks, financial office networks, education networks
and e-Government networks for user management, service control and high security.
The MA5200 product series includes MA5200F and MA5200G. The MA5200F-2000
supports a maximum of 2,000 subscribers online concurrently. The MA5200G is the
product series based on the distributed hardware architecture and high-capacity nonblocking hardware switching, including MA5200G-2, MA5200G-4 and MA5200G-8.
These three products are different in such performance specifications as the quantity of
service boards, the number of accessed subscribers and the switching capacity, support a
maximum of 12,000, 24,000 and 48,000 concurrent online subscribers.
The MA5200 product series can meet the requirements of various network scales for the
access server, and it can serve as the broadband access server of the ATM/IP DSLAM end
office with different capacities and be applied in the Ethernet convergent layer to provide
the Ethernet access subscribers with access service, security control and service control,
and it can also serve as the core equipment for subscriber management and security
control in medium to large-sized enterprise networks and industrial networks, meeting
the requirements of diversified, flat-structured and customized networking.
Product Appearance
MA5200F
> 3-
BRAS Series
MA5200G-2
MA5200G-4
MA5200G-8
Features of MA5200F
Flexible access authentication mode: Supports the access of subscribers via Ethernet,
xDSL, HFC and WLAN. Supports various authentication access modes such as Web,
PPPoE, 802.1x, port binding and plug-&-play; different subscribers can flexibly select
different authentication modes. And it supports the PPPoE authentication, the WEB
authentication, the fast authentication and the 802.1x authentication on a port.
Supports various authentication policies, including local authentication and remote
authentication, as well as local preference authentication and remote preference
authentication.
Effectively addresses management functions: Supports DHCP Relay and embedded

DHCP Server, dynamically allocates addresses for the subscribers configured
with DHCP, acts as the DHCP agent for the PPP dialing subscribers, and applies
for addresses from the external DHCP server, with the DHCP Proxy function. It
can manage the address resources in the address pool, to allocate addresses for
subscribers from the local address pool and the remote DHCP server address pool,
allows subscribers to access networks through dynamically obtaining addresses or
statically configure addresses. It supports secondary address allocation. The private IP
is allocated before subscriber authentication and addresses are re-allocated according
to the domains selected by subscribers after the authentication, to solve the problem
of insufficient public network addresses and to improve the utilization of public
network addresses.
Support for multiple billing solutions: It can correctly collect users billing information,
including duration and traffic. In addition, it supports the copying of the billing
> 3-
Firewal
and be able to support the address allocation for subscribers via the AAA server. It
BRAS Series
information to the specified billing server, as well as local billing and remote billing.
Both of them support real-time billing to ensure the correctness of the billing
information. The remote the AAA server can implement the integrated pre-payment
service based on duration and traffic, and it supports the rate switching function
and other discounting functions, so different rates can be adopted for charging
according to the access type.
Powerful subscriber management function: Supports the authorization and

management of subscriber attributes, including subscriber bandwidth restriction,
restriction of NAT connections, access right control, mutual access right control,
QoS attribute control and policy route authorization; provides the subscriber login
log and user subscriber access service log. It can specify the type of the specified
logic port access subscriber, for example, WLAN subscriber and ADSL subscriber,
and carry out different control policies against different subscribers, and it can
report the information about subscriber access types to the authentication billing
server. The access control function based on subscriber groups can divide them into
different UCL-Group, on which the ACL rule is executed, to implement the grouping
management of subscriber access control; the mutual-access control function based
on subscriber groups can divide the subscribers into the different InterGroups, and
the mutual-access rights between the mutual-access rights and the InterGroup of
the internal subscribers of InterGroup can be configured, thus implementing the
grouping management of subscriber mutual-access.
Perfect security mechanism provides the perfect security functions such as Identity
discrimination, address forgery prevention, attack protection and security auditing by
means of identity authentication, ACL, resource protection and subscriber log. The
unique packet binding check technology can realize the binding check in terms of logic
port (access port + VLAN ID) + MAC address + IP address on each packet of users after
their passing of authentication, and discarding of the unmatched packets. This function
can thoroughly prevent various forgery acts of users and provide a guarantee for the
network security. The number of accessed subscribers, address allocation request and
PPP dialing request are accessed via the same port to control and filter various illegal
packets, and to prevent users from attacking the network.
Rich service functions provide a great variety of services as CAR, QoS, VPDN, multiISP, portal service, multicast, PnP and NAT.
> 3-
BRAS Series
Powerful routing function is based on the design of the advanced G5 router

architecture of Huawei and can run serving as the standard router, supporting static
route, RIP1/2, OSPF, BGP, PIM-SM, PIM-DM and IGMPv1/v2, as well as the L2TP
tunnel protocol.
Operation-level management and maintenance adopts the HGMP protocol to manage

the subscriber access switch in a centralized way, to simplify the management and
maintenance of the Ethernet access. It provides the online log function, to generate
user MAC, VLAN ID, IP address and the access destination IP and duration by
recording the online status of subscribers on the equipment. It provides the operation
log function, which can track the equipment running in full range by recording all the
operations on the equipment. It provides a perfect NM platform to implement the
operation-level management function such as topology, configuration, performance,
failure and security.
MA5200F Product Specifications

MA5200F
Item
Architecture
2U high case-shape equipment, which can be installed in 19-inch

standard cabinet;
Dimensions (mm)
482.6 (19) x 381 x 88.9 (2U)
WxDxH
Full service function 3Mpps (2GE bi-directional linear speed forwarding)
Switching fabric
Shared buffer switching network, with the switching capacity of 10Gbps
Subscribers/entries
MAC address: 4K
Firewal
Forwarding capability
Routing entry: 4K
VLAN terminated quantity (Integrated system): 8K
Number of concurrent subscribers (Integrated system): MA5200F-2000:
2K subscribers
Supported protocols
802.1x, PPPoE, DHCP Server/DHCP Relay/DHCP Client, RIP/RIPv2, OSPF,

BGP, IGMP, RADIUS, SNMP.
Security
Available with the function of identity discrimination, resource protection,

attack prevention, address forgery prevention, security log and auditing.
IP+MAC+VLAN ID binding, limit on the number of VLAN ID-accessed
> 3-
BRAS Series
subscribers
CAR restricts users available bandwidth: Minimum: 64Kbps~1Gbps; step:
1Kbps
NMS
Adopts iManager; supports SNMP; can independently run in the

e n v i ro n m e n t o f U N I X ( S U N , H P ) a n d O R AC L E / SY B AS E ; c a n b e
imbedded into the existing commercial NM platform such as HP
OpenView;
Supports HGMP to conduct the cluster management of the accessed
Ethernet switches;
Provides the service management functions as VPN management and
QoS policy management.
Provides multi-language support.
Environment
Long-term operating temperature: 0 ~ 45 oC
Short-term operating
temperature: -5 ~ 55 oC
Storage temperature: -30 oC ~ 60 oC.
Operating humidity: 10%~90%
Operating voltage: DC -C36 ~ 72V; AC 90 ~ 264V, 47 ~ 63Hz
Power consumption at full configuration: <60W.
Mean Time Between Failure (MTBF): 130000H
MA5200F Order Information

Item
Product Description
Configuration
Remarks
MA5200F
MA5200F-2000 broadband IP access
Mandatory,
MA5200F host
-2000-48V
equipment host (-48V DC power supply)
Supports 2K
provides various
concurrent
service interfaces
subscribers
by configuring the
MA5200F
MA5200F-2000 broadband IP access
Mandatory,
following interface
-2000-220V
equipment host (220V AC power supply)
Supports 2K
modules
concurrent
subscribers
H5-E6FC
6-port fast Ethernet interface module (RJ45)
Optional
MA5200F can
H5-FCBA
6-port fast Ethernet optical interface module
Optional
configure a
(1310nm, multi-mode, 2km, LC)

H5-FCFA
> 3-
6-port fast Ethernet optical interface module
maximum of four
Optional
fast Ethernet
BRAS Series
(1310nm, single-mode, 15km, LC)

H5-1GCAA
1-port Gigabit Ethernet optical interface
interface modules
Optional
module (850nm, multi-mode, 500m, LC)

H5-1GCEA
available with
Optional
module (1310nm, single-mode, 10km, LC)

H5-1GCG
Optional
Optional
Optional
4-port POS OC-3C/STM-1 interface module
POS interface
module should be
Optional
module (SFP)
H5-P4CC
the SFP interface

module and the

H5-O2GD
or POS interface
module. Here,
Optional

H5-2GCI
modules, or SFP
interface module

H5-2GCG
kinds of Gigabit
optical interface
Optional
module (850nm, multi-mode, 500m, LC)

H5-2GCEA
it can be matched
with various

H5-2GCAA
a GE extended
module slot, and
Optional

H5-1GCI
MA5200F is
configured with
another SFP/POS
Optional
optical module in
their use.
Features of MA5200G
High capacity and high density: The back-plane capacity of MA5200G-2/MA5200G-4/
MA5200G-8 is 64Gbps/256Gbps/256Gbps, the system switching capacity is 16Gbps/
64Gbps/64Gbps, 2/4/8 service slots are provided, and 32 GEs/128 FEs/64 ATMs,
155M/32 POSs, 155M/16 POSs, 622/8 POSs, 2.5G, supporting 12,000 /24,000/48,000
concurrent online subscribers, with a high capacity and high port density, to meet the
requirements of high-capacity BRAS networking and expansion.
Linear forwarding performance and powerful routing capability: Adopting the

mainstream network processor technology in this industry to implement the linearspeed forwarding of IP, MPLS and multicast for all the interfaces with the GE interface
> 3-
Firewal
BRAS Series
included. The board supports a forwarding capability of 6Mpps, and the forwarding
performance of the MA5200G-2/MA5200G-4/MA5200G-8 integrated system
reaches large routing table as high as 512K, and a wealth of routing protocols
including static routers, RIP1/2, OSPF, BGP, IS unicast routing protocol and such
multicast routing protocols as PIM-SM,PIM-DM,MBGP,IGMPv1/v2, and support such
tunnel protocols as L2TP and LDP LSP as well as the MPLS label switching and the
MPLS VPN service.
Carrier-class reliability: Adopting the distributed hardware forwarding; the key parts
include the route processing system, the service processing system, the switching
fabric system, the clock system, power supply, the system internal management bus
and fans, which are all redundancy hot backups to implement the constant route
forwarding and service processing. With port binding and VRRP, there are three
equivalent routes available upon IP forwarding, and the reliability of the link layer
and the network layer can be ensured.
Flexible access authentication mode: Supports the access of subscribers via Ethernet,
xDSL, HFC and WLAN. The equipment supports various authentication access modes
such as the PPP dialing authentication, WEB authentication, fast WEB authentication
and port binding, and on the same port, the PPP dialing authentication, the WEB
authentication and the fast WEB authentication are supported, or you may limit
them within one or more authentication modes.
Effectively address management function: Supports DHCP Relay and imbedded

DHCP Server, dynamically allocates addresses for the subscribers configured
with DHCP, acts as the DHCP agent for the PPP dialing subscribers, and applies
for addresses from the external DHCP server, with the DHCP Proxy function. It
can manage the address resources in the address pool, to allocate addresses for
subscribers from the local address pool and the remote DHCP server address pool,
and support the address allocation for subscribers via the AAA server. It allows
subscribers to access networks through dynamically obtaining addresses or statically
configuring the mode of addresses.
Support for multiple billing solutions: It can correctly collect users billing
information, including duration and traffic. And it can copy the billing information
> 3-
BRAS Series
to the specified server. The AAA billing supports the providing of a billing protection
mechanism, and such mechanisms as redundancy backup, handshaking and
retransmission of the Radius server can ensure no loss of bills and no generation of
wrong bills in the link failure. When the remote billing server fails to bill, it can save
the bills in the local server, and upload the billing information to the billing server via
TFTP after the recovery of the billing server. It can support various billing policies as
non-billing, post-payment and pre-payment. The pre-payment service supports the
pre-payment based on duration and that based on traffic. Its cooperation with the
AAA server can implement the integrated pre-payment service based on duration and
traffic, and it supports the rate switching function and other discounting functions, so
different rates can be adopted for charging according to the access type.
Powerful user management function supports the authorization and management

of user attributes, including CAR user bandwidth restriction, access right control,
mutual-access right control, QoS attribute control and policy routing authorization.
It can specify the type of the specified logic port access subscriber, for example,
WLAN subscriber and ADSL subscriber, and carry out different control policies
against different subscribers, and it can report the information about subscriber
access types to the authentication-billing server. The access control function based
on subscriber groups can divide them into different UCL-Group, on which the ACL
rule is executed, to implement the grouping management of subscriber access
control; the mutual-access rights and the InterGroup of the internal subscribers of
InterGroup can be configured, thus implementing the grouping management of
subscriber mutual-access.
Powerful QoS support: Providing the QoS function of DiffServ based on priorities to
can implement the QoS guarantee for different service streams on the basis of the
QoS function of DiffServ of the complex stream classification rule. Each interface
board supports 5K stream classification rules. Supports traffic policing and traffic
shaping for 1,024 streams; supports the 802.3x traffic control protocol, uses WRED
to implement the congestion avoidance; WRED supports the discard priority of
eight levels.
> 3-
Firewal
differentiate the QoS requirements of different subscribers. In addition, these rules
BRAS Series
Perfect security mechanism provides the perfect security functions such as

Identity discrimination, ACL, network resource protection, and provides identity
authentication, address forgery prevention and attack prevention. The unique packet
binding check technology can realize the binding check in terms of logic port (access
port + VLAN ID/PVC) + MAC address + IP address + PPPoE Session on the header
of users packets of after their passing of authentication, and discarding of the
unmatched packets. This function can thoroughly prevent various acts of forgery
by users and provide a guarantee for network security. The number of accessed
subscribers, address allocation request and PPP dialing request are accessed via the
same port to control and filter various illegal packets, and to prevent users from
attacking the network.
A variety of service functions provide broadband access, multi-ISP, portal service,

multicast, VPDN, MPLS VPN.
Operation-level management and maintenance provides the operation log function,

which can track the equipment running in full range by recording all the operations
on the equipment. It provides a perfect NM platform to implement the operationlevel management function such as topology, configuration, performance, failure
and security.
MA5200G Product Specifications

Item
Architecture
MA5200G-8
MA5200G-4
MA5200G-2
Integrated chassis structure supports 19-inch standard rack;

Using the network processor to implement high-performance hardware
forwarding
> 3-10
Dimensions (mm)
482.6 x 420 x 797.3
482.6 x 420 x 352.8
482.6 x 420 x 219.5
WxDxH
18U
8U
5U
Backplane capacity
256Gbps
256Gbps
64Gbps
Switching capacity
64Gbps,
64Gbps,
16Gbps,
Non-blocking switching,
Non-blocking switching, Non-blocking
dual backup
dual backup
switching
BRAS Series
Forwarding
48Mpps
24Mpps
12Mpps
Type and quantity of
32 GEs
16 GEs
8 GEs
interface
256 FEs
128 FEs
64 FEs
128 ATM OC-3c/STM-1
64 ATM OC-3c/STM-1
32 ATM OC-3c/STM-1
32 ATM OC-12c/STM-4
16 ATM OC-12c/STM-4
8 ATM OC-12c/STM-4
32 POS OC-3c/STM-1
16 POS OC-3c/STM-1
8 POS OC-3c/STM-1
16 POS OC-12c/STM-4
8 POS OC-12c/STM-4
4 POS OC-12c/STM-4
8 POS OC-48c/STM-16
4 POS OC-48c/STM-16
2 POS OC-48c/STM-16
performance
Number of interface
board slots
Routing protocol
Supports such routing protocols as RIP, OSPF, IS-IS and BGP-4; the routing
table has a high capacity with a total number of 512K routes. All the ports
can keep forwarding at line speed in such complex routing environment as
route oscillation.
MPLS VPN
Supports L3 MPLS VPN (RFC2547bis), and can serve as PE, supporting 1,024
VRF x 1024 routes;
Supports L2 MPLS VPN (Martini)
Supports the access of VPN in L2TP LAC&LNS mode, strictly following the
relevant standards, interworking with other mainstream manufacturers in
full scale.
Supports GRE Tunneling Protocol.
QoS
It provides the QoS function of DiffServ based on subscriber priority and

complex stream classification rule, to implement its QoS guarantee for
different subscribers and service streams. Each interface board supports 5K
Firewal
stream classification rules. Supports traffic policing and traffic shaping for
1,024 streams; supports the 802.3x traffic control protocol, uses WRED to
implement the congestion avoidance; WRED supports the discard priority of
eight levels.
Multicast
Supports IGMP, static multicast configuration, PIM-DM/SM, and MBGP

multicast routing protocol; supports the interoperability between multiple
multicast protocols; supports the multicast policy processing, including the
policy processing of multicast routing protocol and multicast forwarding as
well as multicast QoS.
Reliability
Provides such protection mechanisms for multiple equivalent routes
> 3-11
BRAS Series
and MPLS fast re-routing as port binding, VRRP link backup and IP packet
forwarding
All key parts are available with redundancy backup (including system control
management, route processing module, switching fabric, power supply,
clock, internal system management bus and fan); all the components can be
hot-swapped, and they support the status-based hot backup switching, to
implement the constant route forwarding.
Number of
48K
24K
12K
512K (unicast)
512K (unicast)
512K (unicast)
10K (multicast)
10K (multicast)
10K (multicast)
256K
128K
64K
concurrent
subscribers
(Integrated system)
Routing table
VLAN terminated
quantity (Integrated
system)
Access protocols
Supports PPPoX (PPPoE, PPPoA, PPPoEoA), DHCP, L2TP and ARP
Billing
Supports RADIUS, extended RADIUS+ protocol
Security
Available with the function of identity discrimination, resource protection,

attack prevention, address forgery prevention.
IP+MAC+VLAN ID binding, and the number of subscribers accessed by VLAN
ID can be restricted.
CAR restricts users available bandwidth, with the bandwidth range from
8Kbps to 1Gbps and the step of 8Kbps.
NMS
Adopts Huaweis frame-shaped NM platform, iManager, supporting SNMP

and client/server architecture; can run independently in the environment of
UNIX (SUN, HP), ORACLE/SYBASE, or can be imbedded in users commercial
NM platform, such as HPOpenView.
Provides dynamic topology management, fault management, performance
management, configuration tool, equipment log management, NMS running
monitoring, security and user management.
Provides service management functions such as VPN management and QoS
policy management.
Provides optional offline traffic engineering tools.
Provides multi-language support.
> 3-12
BRAS Series
Input power
DC: -42V ~ 58V / AC (220V): 176V ~ 285V / AC (110V): 85V ~ 154V
Full load power
< 1000W
< 600W
< 350W
Maximum weight in
< 85kg
< 50kg
< 35kg
44 years
33 years
12 years
full configuration
Mean Time Between
Failure (MTBF)
Environmental
Long-term operating temperature: 0 ~ 45 o C; short-term operating
Requirements
temperature: - 5 ~ 55 oC.
Storage temperature: -30 oC ~ 60 oC.
Relative humidity: 10% RH ~ 95%RH.
MA5200G Series Order Information

Item
H5-B-F02A
Product Description
Configuration
Assembly cabinet- MA5200-H57B25200- Optional
Remarks
Assembly cabinet
2.2m B68 assembly cabinet

H5-B-F01A
Assembly cabinet -MA5200-H57B15200- Optional
Assembly cabinet
1.8m B68 assembly cabinet

H5-MA5200G-8- MA5200G-8 integrated chassis-dual-DC Mandatory
CHASSIS-DC
power supply
H5-MA5200G-8- MA5200G-8 integrated chassis-dual-AC Mandatory

CHASSIS-AC
Firewal
MA5200G-4
power supply

CHASSIS-DC
MA5200G-4
power supply

CHASSIS-AC
MA5200G-8
power supply

CHASSIS-DC
MA5200G-8
MA5200G-2
power supply

CHASSIS-AC
power supply
H5-SMU
M A 5 2 0 0 G - 8 / M A 5 2 0 0 G - 4 s y s t e m Mandatory
MA5200G-2
MA5200G-4/-8/-2
management unit
H5-SMUC
MA5200G-2 system management unit
Mandatory
Only applicable to
MA5200G-2
> 3-13
BRAS Series
Ethernet interface processing board

H5-E16FF
16-port flexible 100M Ethernet interface
Optional
line board (RJ45)

H5-E32FF
32-port flexible 100M Ethernet interface
Optional
line board (RJ45)

H5-O8FF
8-port 100M Ethernet optical interface
Optional
line board (SFP)

H5-O16FF
16-port 100M Ethernet optical interface
Optional
line board (SFP)

H5-O2GCG
Optional
line board (SFP)

H5-O4GCG
Optional
line board (SFP)

H5-G2F8F
2-port GE(SFP) + 8-port FE(SFP) flexible
Optional
interface line board

H5-G2FGF
2-port GE(SFP) + 16-port FE(RJ45) flexible
Optional
interface line board

ATM interface processing board
H5-A8CF
8-port OC-3c/STM-1 ATM optical interface
Optional
line board (SFP)

H5-A16CF
1 6 - p o r t O C - 3 c / S T M -1 AT M o p t i c a l
Optional

H5-A2HF
2 - p o r t O C -1 2 c / S T M - 4 AT M o p t i c a l
Optional

H5-A4HF
4 - p o r t O C -1 2 c / S T M - 4 AT M o p t i c a l
Optional

POS interface processing board
H5-P4CDM
4-port OC-3c/STM-1 POS multi-mode optical
Optional
interface line board (1310nm, 2km, LC)

H5-P4CDS
4-port OC-3c/STM-1 POS single-mode
Optional
optical interface line board (1310nm,

15km, LC)
H5-P2HDM
2-port OC-12c/STM-4c POS multi-mode

500m, SC)
> 3-14
Optional
BRAS Series
H5-P2HDS
2-port OC-12c/STM-4c POS single-mode
Optional

15km, SC)
H5-P1UDZ
Optional
optical interface line board (1310nm, 2km,

LC)
H5-P1UDS
Optional

15km, LC)
H5-P1UDL
Optional

40km, LC)
H5-P1UDZ
Optional

70km, LC)
E1/T1, E3/T3 and CPOS interface processing board
H5-C4CF0
4-port channelized OC-3/STM-1 to T1/E1
Optional
optical interface line board (SFP)

H5-16CE10
16-port channelized E1 Interface line Board
Optional
(RJ45)
H5-16CT10
16-port channelized T1 interface line board
Optional
H5-6E30
(RJ45)
H5-6T30
6-port E3 interface line board(SMB)
Optional
6-port T3 interface line board(SMB)
Optional
Service processing board

Tunnel service processing unit
Optional
H5-SSU
Security service unit
Optional
12V-100AH
VRLA battery (Valve Regulated Lead Acid)
Optional
P-Shelf
Support for components of the storage
Optional
Firewal
H5-SPU
Other modules
battery
Four batteries per

group, configured with
group as the unit
Mandatory in the
configuration of
storage battery, 2
groups can be placed

> 3-15
memo
BRAS Series
> 3-16
Firewal
memo
BRAS Series
> 3-17
memo
BRAS Series
> 3-18
Firewal Series
Firewal
Firewal Series
Contents
Quidway Eudemon 100/200 Firewall................................................................4-2
Quidway Eudemon 500/1000 Firewall............................................................ 4-10
Firewall Series
Eudemon Firewall Product Series

Product Model
Eudemon100/200 Firewall
Feature
The new generation of high-speed status firewall based
on the professional carrier-class hardware platform and
the VRP software system, and it provides a throughput
of 100M and 400M. The Eudemon firewall series
integrates the Application Specific Packet Filter (ASPF)
and the Virtual Private Network (VPN) with the Network
Address Translation (NAT) in a proper way, providing
users network with an excellent security protection
with outstanding performance and high reliability of
carrier-class equipment.
Applicable to providing security guarantee to small and
medium-sized networks.
Eudemon500/1000 Firewall
The new generation of hardware high-speed status

firewall, that is based on the Network Processor (NP)
technology, separately providing a throughput of 2G
and 3G. The Eudemon firewall series integrates the
Application Specific Packet Filter (ASPF) and the Virtual
Private Network (VPN) with the Network Address
Translation (NAT) in a proper way, providing users
network with an excellent security protection with
outstanding performance and high reliability of carrierclass equipment.
Applicable to the requirements of a large-sized
enterprise network and carrier-class security service.
> 4-
Firewall Series
Quidway Eudemon 100/200 Firewall
Product Overview
The Quidway Eudemon 100/200 Firewall (hereinafter referred to as the Eudemon
100/200) is the new generation of high-speed status firewall, not only supporting a
variety of status detection and address translation functions for protocols, but a powerful
attacking protection capability. It provides such functions as static/dynamic blacklist
filtering as well as a variety of functions in statistical analysis and log. In addition, it
supports such features as QoS and VPN, and provides a perfect networking application
solution. It has a wide application range, properly supporting the voice and video services
(supporting RTSP, H.323, SIP, and RTSP), and is widely applied in NGN and multimedia.
The Eudemon 100 and Eudemon 200 are based on the Huawei carrier-class hardware
platform and the VRP software platform, which are different in performance levels and
interface specifications, applicable to providing security guarantee to the small and
medium-sized networks.
At present, the product has been applied in a great scale both at home and abroad, and
it is sold as far as Europe, Middle-East, South America and Southeast Asia.
Product Appearance
Eudemon 100 Firewall
> 4-
Firewall Series
Product Features
A Powerful Security Protector
The Eudemon 100/200 100M firewall adopts the latest security technology in this
industry, with its core based on ASPF (Application Specific Packet Filter) of streams, to
implement the maintenance and monitoring of each connection status information
and dynamically filtering the data packets, and it is a powerful protection for internal
networks.
It is effectively protected from all kinds of network attacks, for example,
eavesdropping packets, IP address spoofing, source route attacks, address port

scanning, Deny of service attacks; application layer attacks (detection of Java, ActiveX
controls, Trojan); as well as intelligent worm virus protective function.
It provides support for a variety of protocols, and implementing status monitoring on
HTTP, FTP, RTSP, SIP, H.323 (including T.120, Q.931, RAS, H.245), HWCC and general
TCP and UDP application.
It has a perfect traffic monitoring feature; Monitoring the data traffic and connection
status, dynamically controlling the connections and bandwidth of each IP, which
can effectively and flexibly prevent the ISP and IDC network from traffic attacks. The
perfect QOS feature can implement the bandwidth control service of such feature
streams as user-defined traffic and attack traffic.
Support for a variety of firewall logs, providing the follow-up function. And it can
output the log in the binary format, except for the text format, in a high-speed way
to meet the application environment requirements for heavy traffic.
The enhanced blacklist function can control the network authority of the users being
attacked by viruses, through which the service of next step can be provided (such as
announcement and online virus-killing).
It provides an open IDS cooperative interface protocol and LIB, which can quickly
cooperate with the IDS system of other manufacturers, such as VenusTech, Is-One,
Orient Legendmaker, Kingnet Security, to jointly construct a comprehensive network
security protection. It adopts the embedded operating system dedicated to Huawei,
which avoids the security holes that are exposed to the general operating system on
which common firewalls are used.
> 4-
Firewall Series
It implements the AAA concept according to the RADIUS protocol, to construct the
distributed customer/server security access application control.
Full-featured VPN GW
The Eudemon 100/200 100M firewall is still a full-featured VPN gateway that can
securely transmit data via public networks, and it can construct various kinds of VPN
networking such as remote access and network-to-network. Huawei was the first to
put forward the philosophy of dynamic VPN in this industry, and its headquarters and
branches can be accessed with the dynamic IP address or private IP address, and the
(maintenance) tunnels can be automatically created between the VPN equipments.
The DVPN technology can realize the establishment of only N -1 channels for the
interconnection of the whole network, and the addition of a VPN node requires only
one maintenance link, with a good expandability. Compared to the traditional IP
VPN network, it is lower in the maintenance cost and more flexible in the network
application. The dynamic VPN provides a perfect authentication and encryption feature,
to totally ensure the network security of users.
The Eudemon series supports multiple IP VPN access modes, for example, L2TP, GRE
and IPSec, as well as the DVPN that is dedicated to Huawei.

It supports multiple encryption algorithms, 56-bit data encryption standard (DES) or
168-bit 3DES, and it implements the key exchange function following the ISAKMP
protocol frame, IKE.
To obtain a more powerful encryption performance, the Eudemon200 supports the
high-speed encryption card. It also provides a dedicated VPN client software, and is
user friendly.
Various VPN protocols are implemented strictly following the RFC or related
standards, to ensure that the product can be interconnected and interworked with
the VPN equipment of other manufacturers.
NAT Service with Multiple Services

With the development of the Internet, the shortage of IP addresses has become an
increasingly serious problem. In view of the position and technical features of a firewall,
it is appropriate to provide the perfect address translation technology on the Eudemon.
> 4-
Firewall Series
The Eudemon series can implement such features as multi-to-multi-address
translation, restriction of local address translation and internal server service. It can
simultaneously translate addresses and ports (PAT), and provide a Privacy protection
to the internal network.
The service features of the Eudemon firewall support NAT, including FTP, ICMP, NBT,
QQ and MSN, and it can pass the User defined ALG functions.
It supports the perfect multimedia service. It can implement the service that is based
on H.323 (including T.120, RAS, Q.931 and H.245), SIP and RTSP, and it can be
flexibly networked with multimedia MCU, GK, videoconferencing terminal and the
VOIP equipment, supporting the calls between public network and private network
and between private networks.
The Eudemon firewall can not only ensure the security of the multimedia service
network, but it can also implement the isolation of data service from voice service.
Carrier-class Firewall Product

Outstanding processing performance
The firewall requires the configuration of a large amount of ACL rules in the actual
application, especially in the current spreading of the worm virus. There are a great
number of ACL configurations to close the related ports. The Eudemon 100/200
firewall adopts a fast stream classification algorithm, and the performance of the
system cannot be affected basically in its searching among millions of ACL rules, and
its processing speed keeps unchanged, thus ensuring the high speed of ACL searching
to improve the integrated performance of the system. The Eudemon 100/200 firewall
is based on a dedicated hardware structure. Compared with those firewalls at the
same level, it provides a high capacity for adding connections per second, which gives
the firewall a powerful anti-attacking capacity.
Flexible service and routing feature
The Eudemon series supports such dynamic routing protocols as RIP and OSPF as well
as policy route. It is available with the multi-ISP function, that is to say, the firewall
can allocate traffics on the ISP line with different bandwidths as needed so that
the users can adjust different Internet-accessing lines based on charges when there
> 4-
Firewall Series
are several ISP egresses. When a line fails, the traffic can be switched to other lines
automatically to improve the reliability.
Perfect configuration management
The system can be maintained through dialup or remote logging, and it supports
the remote management of the VPN tunnel (IPSec); supports two kinds of user
management interface modes, CLI and GUI; supports SNMP (V1/V2c/V3). It can be
uniformly managed under the large-sized integrated NM software; in addition, it can
provide a dedicated high capacity log server software for supporting purposes, as
well as a powerful analysis functions and the free mini-log server software.
High Reliability
The Eudemon firewall gives a complete consideration on the high reliability of

network application, with the reliability technology of the telecommunication
equipment integrated, for example, the chassis and board hardware of Eudemon 200
is of special design; it supports the dual power (1+1 backup), supports the monitoring
of the temperature inside the chassis, automatically adjusts the rotary speed of the
fans; supports AC/DC input power module, the power supply can adapt to the great
changes in AC 85V ~ 264V and DC 36 ~ 75V; interface card, fan and power supply
support hot swapping, to fully meet the requirements of network maintenance,
upgrading and optimization.
It provides the hot backup mechanism for dual-system status, supporting the ActiveActive and Active-Standby mode. Two or more equipments form a hot backup group
to avoid the single-point fault of networking, to meet the most complex networking
and high reliability requirements for such industries as telecommunication.
Certification and sales license
It obtained the UL, CE, FCC and security specification certification in China, North
America, Europe, Austria and Japan and other countries and areas, as well as
sales license from the Security Ministry, and such competent authorities as China
Information Technology Security Certification Center (CNITSEC), State Secrecy Bureau
and the PLA.
> 4-
Firewall Series
At present, this product is being widely applied at home and sold to Europe, Middle
East, South America and Southeast Asia, and it also gets a wide application in NGN,
multi-media, wireless telecommunication network, large/medium-sized enterprise
network and industry network.
Item
Eudemon 100
Eudemon 200
The host carries two FE interfaces,
Two fixed FE ports, two extended
and two extended slots, supporting a
slots, supporting a maximum of six
maximum of four FE ports.
FE ports.
Maximum throughput
100Mbps
400Mbps
Number of connected
200,000 connections
500,000 connections
5,000 connections/second
20,000 connections/second
2,000 Pcs
2,000 Pcs
Processor
MPC8240 200MHz
PowerPC 750 733MHz
NVRAM
128KB
512 KB
BootROM
512 KB
512 KB
SDRAM
128 MB by default
256MB by default
Number of slots
sessions
Number of new
connections per
second
Number of VPN
connections
Maximum: 256MB
Maximum: 512MB
Flash
16MB
32MB
442mm x 413 mm x 44.4 mm
436.2 mm x 420 mm x 130.5 mm
Weight
6kg
18kg
Input voltage
AC: 85 ~ 270V (50/60Hz)
AC: 85 ~ 264V (50/60Hz)
DC: 40V ~ 75V
DC: 36V ~ 75V
Power
60w
100w
Mean Time Between
12.67 years
37.54 years
Failure (MTBF)
> 4-
Firewall Series
Supports the state inspection of SMTP, H.323 (including T.120 and RAS), SIP,
Standard and
HTTP, FTP, TCP, UDP; NAT supports such protocols as H.323 (including T.120
protocol
and RAS) SIP, ICMP, DNS, PPTP, NetMeeting and NBT; supports PPP, PPPOE,
ARP and DHCP Server; supports L2TP, GRE, and IPSec/IKE; supports QoS,
SNMPv3, RADIUS, RIP, OSPF and multiple multicast protocols.
Order Information
Order Information about Eudemon 100
The Eudemon 100 firewall can provide two power supply modes, AC and DC, which can
be chosen by users as needed. The host of Eudemon 100 and its accessories are shown
in the table below:
Item
Amount
Remarks
Eudemon 100
Mandatory; Type: AC host and DC host; composition: shell of
host
chassis, main board, fan, DC/AC power supply.
The Eudemon 100 firewall carries two 1-port Ethernet cards, and you can buy another
interface card of the Ethernet card if two Ethernet interfaces are not enough.
Item
FW-1FE
Cable
Ethernet cable
Remarks
Optional1-port fast Ethernet interface card
Order Information about Eudemon 200

The Eudemon 200 firewall can provide two power supply modes, AC and DC, which can
be chosen by users as needed. The host of Eudemon 200 and its accessories are shown
in the table below:
Item
Amount
Remarks
Eudemon 200
Mandatory; Type: AC/DC host with the standard configuration
host
of 2FE; composition: Shell of chassis, backpanel, fan frame and

fans installed in the fan frame. The host provides the firewall
processing board.
AC/DC power
supply
> 4-
1/2
Optional. The host contains one AC/DC power supply, and the
second one can be selected as the 1+1 backup.
Firewall Series
The Eudemon 200 firewall can be equipped with purchased interface modules except the
host in standard configurations if the number of interfaces is not enough. Note: The host
and these interface modules do not carry cables and optical cables; The Ethernet cable is
generally equipped by users themselves, and purchase is also an option; the optical cable
can be purchased as needed. The Eudemon 200 Gigabit optical interface adopts the SFP
optical modules, whose optical interface is LC connector; the 100M optical interface
module is the SC interface.
Item
FW-FIC-1FE
Cable
Ethernet cable
FW-FIC-2FE
FW-FIC-1SFX
Remarks
Optional. 1-port fast Ethernet card and 2-port
fast Ethernet card
Single-mode optical cable
Optional. 1-port Ethernet optical interface card;

single-mode 1310nm, 30km and SC connector
FW-FIC-1MFX
Multi-mode optical cable
Optional. 1-port Ethernet optical interface card;
FW-FIC-IPSEC
None
Optional. Hardware encryption card
FW-FIC-1GEUB
Ethernet cable
Optional. Gigabit Ethernet electrical interface
single-mode 1310nm, 1km and SC connector
card
FW-FIC-1GE-SFP
Multi-mode or multi-mode
Optional. 1-port and 2-port Gigabit Ethernet
optical cable; selecting the
optical interface card; optical interface is SFP,
GE SFP electrical interface
and the optical module of SFP of different types
module requires the use of
should be selected.
Ethernet cable.
For the SFP optical module, there is multi-mode
Optional
0.55Km; there are single-mode optical modules

with multiple distances, 10Km, 40Km, 70Km and
100Km.
In addition, the Gigabit GE electrical interface
module (RJ45) of SFP is provided, which is
inserted in the optical interface board to provide
the Gigabit electrical interface externally.
> 4-
Firewall Series
Quidway Eudemon 500/1000 Firewall
Product Overview
The Quidway Eudemon 500/1000 firewall (hereinafter called the Eudemon 500/1000)
is the new generation hardware high-speed status firewall that is based on NP (Network
Processor) technology launched by Huawei, and its Gigabit-level performance can
meet the requirements of large-sized enterprise network and carrier-class service. The
Eudemon firewall series integrates the Application Specific Packet Filter (ASPF) and the
Virtual Private Network (VPN) with the Network Address Translation (NAT) in a proper
way, providing users network with an excellent security protection with outstanding
performance and high reliability of carrier-class equipment.
Product Appearance
Product Features
A Powerful Security Protector
The Eudemon 500/1000 Gigabit firewall adopts the latest security technology in this
industry, with its core based on ASPF (Application Specific Packet Filter) of streams, to
implement the maintenance and monitoring of each connection status information and
dynamically filter the data packets, and it is a powerful protection for internal networks.
> 4-10
Firewall Series
Effectively protect from all kinds of network attacks, for example, eavesdropping
packets, IP address spoofing, source route attacks, address port scanning, Deny of
service attacks; application layer attacks (detection of Java, ActiveX controls, Trojan);
as well as intelligent worm virus protective function.
Support for a variety of protocols, and implementing status monitoring on HTTP, FTP,
RTSP, SIP, H.323 (including T.120, Q.931, RAS, H.245), HWCC and general TCP and
UDP application.
Perfect traffic monitoring feature; Monitoring the data traffic and connection status
of the system, dynamically controlling the connections and bandwidth of each

IP, which can effectively and flexibly prevent the ISP and IDC network from traffic
attacks. The perfect QOS feature can implement the bandwidth control service of
such feature streams as user-defined traffic and attack traffic.
Providing the function of follow-up through such functions of firewall as NAT log,
attacking prevention log and traffic monitoring log. And it can output the log in the
binary format, except for the text format, in a high-speed way to meet the application
environment requirements for heavy traffic.
The enhanced blacklist function can control the network authority of the users being
attacked by viruses, through which the service of next step can be provided (such as
announcement and online virus-killing).
Support for the cooperation with the IDS system and anti-virus system to construct
the complete network security protection. This product cooperates with the IDS
system of many manufacturers such as VenusTech, Is-One, Orient Legendmaker,
Kingnet Security, and provides the open IDS cooperative interface protocol and LIB,
which can cooperate with the IDS system of other manufacturers fast.
In addition, it is combined with the dedicated imbedded operating system, to guard
against the security holes for various general operating systems.

It implements AAA according to the RADIUS protocol, to construct the distributed
customer/server security access application control.
> 4-11
Firewall Series
Full-featured VPN GW
The Eudemon 500/1000 Gigabit firewall is still a full-featured VPN gateway that
can securely transmit data via public networks, and it can construct various kinds of
VPN networking such as remote access and network-to-network solutions. Huawei
was the first to put forward the philosophy of dynamic VPN in this industry, and its
headquarters and branches can be accessed with the dynamic IP address or private IP
address, and the (maintenance) tunnels can be automatically created between the VPN
equipments. The DVPN technology can realize the establishment of only N -1 channels
for the interconnection of the whole network, and the addition of a VPN node requires
only one maintenance link, with a good expandability. Compared to the traditional IP
VPN networking, it is lower in the maintenance cost and more flexible in the network
application. The dynamic VPN provides a perfect authentication and encryption feature,
to totally ensure the network security of users.
It supports multiple IP VPN access modes, for example, L2TP, GRE and IPSec, as well
as the DVPN dedicated to Huawei.

It supports multiple encryption algorithms, 56-bit data encryption standard (DES) or
168-bit 3DES, and it implements the key exchange function following the ISAKMP
protocol frame, IKE.
To obtain a more powerful encryption performance, The Eudemon200 supports
the high-speed hardware encryption card. It also provides a dedicated VPN client
software, and is easy to be used.
Various VPN protocols are implemented strictly following the RFC or related
standards, to ensure that the product can be interconnected and interworked with
the VPN equipment of other manufacturers.
NAT Service with Multiple Services

With the development of Internet, the shortage of IP addresses has become a more and
more serious problem. In view of the position and technical features of firewall, it is very
appropriate to provide the perfect address translation technology on the Eudemon.
The Eudemon series can implement such features as multi-to-multi-address
translation, restriction of local address conversion and internal server service. It can
simultaneously translate addresses and ports (PAT), and provide a Privacy protection
> 4-12
Firewall Series
to the internal network.

The service features of the Eudemon firewall support NAT, including FTP, ICMP, NBT,
QQ and MSN, and it can pass the User defined ALG functions.
It supports the perfect multimedia service. It can implement the service that is based
on H.323 (including T.120, RAS, Q.931 and H.245), SIP and RTSP, and it can be
flexibly networked with multimedia MCU, GK, videoconferencing terminal and the
VOIP equipment, supporting the calls between public network and private network
and between private networks.
The outstanding NAT translation performance supports the number of over 800,000
concurrent connections per second, to meet the translation requirements of the

MAN egress. The Eudemon firewall can ensure the security of the multimedia service
network, and implement the isolation of data service from voice service as well.
Carrier-class Firewall Product

Outstanding processing performance
The Eudemon500/1000 firewall differs from the firewall in traditional sense. It adopts
the network processing technology to ensure the continued provision of outstanding
forwarding function even in the case of small packet (64 bytes) and complex
application environment (a great number of ACL rules and providing of the NAT
service), to reach the capability of Gigabit line speed. In addition, it has a capability
of adding over 100,000 connections per second, so it is available with a powerful
guarding capacity against the frequently occurring SYN FLOOD attack on networks.
Flexible service and routing feature
The Eudemon series supports such dynamic routing protocols as RIP and OSPF as well
as policy route. It is available with the multi-ISP function, that is to say, the firewall
can allocate traffics on the ISP line with different bandwidths as needed so that users
can adjust different Internet-accessing lines based on charges when there are several
ISP egresses. When a line fails, the traffic can be switched to other lines automatically
to improve the reliability.
Perfect configuration management
The system can be maintained through dialup or remote logging, and it supports
the remote management of the VPN tunnel (IPSec); supports two kinds of user
> 4-13
Firewall Series
management interface modes, CLI and GUI; supports SNMPv1/v2c/v3. It can be

uniformly managed under the large-sized integrated NM software; in addition, it can
provide large-sized dedicated log server software for supporting purpose, as well as a
powerful analysis function and the free mini-log server software.
High Reliability
The Eudemon firewall gives a full consideration on the high-reliability of network

application, and it integrates the reliability technology of the telecommunication
equipment: redundant hardware design, power 1+1 backup, support for temperature
monitoring in chassis, automatic adjustment of fan rotary speed, interface card, fans
and power supporting hot swapping, all these can fully meet the requirements for
network maintenance, upgrading and optimization.
Through the combination with the dynamic routing protocol, the Eudemon firewall
provides the hot backup mechanism for dual-system status, supporting the ActiveActive and Active-Standby mode. Two or more equipments form a hot backup group
to avoid the single-point fault of networking, which enables the firewall to meet the
most complex networking and high reliability requirements for such industries as
telecommunication.
Certification and sales license
It obtained the UL, CE, FCC and security specification certification in China, North
America, Europe, Austria and Japan and other countries and areas, as well as
sales license from the Security Ministry, and such competent authorities as China
Information Technology Security Certification Center (CNITSEC), State Secrecy Bureau
and the PLA.
At present, this product is being widely applied at home and sold to Europe, Middle
East, South America and Southeast Asia, and it also gets a wide application in NGN,
multi-media, wireless telecommunication network, large/medium-sized enterprise
network and industry network.
> 4-14
Firewall Series
Eudemon 500
Item
Eudemon 1000
Number of extension
Two fixed FE ports and four extended Two fixed FE ports and four extended
slots
slots. Support for 6GE+2FE or 26FE
slots. Support for 6GE+2FE or 26FE
Maximum throughput
2,000Mbps
3,000Mbps
Number of connected
500,000 connections
800,000 connections
>100,000 connections/second
>100,000 connections/second
2,000 PCS
2,000 PCS
Network processor + PowerPC 750
Network processor + PowerPC 750
733MHz
733MHz
NVRAM
512 KB
512 KB
BootROM
512 KB
512 KB
SDRAM
256MB by default
256MB by default
Maximum: 512MB
Maximum: 512MB
Flash
32MB
32MB
Dimensions (Wx D x H)
436.2mm x 420 mm x 130.5 mm
436.2 mm x 420 mm x 130.5 mm
Weight
18.7kg
18.7kg
Input voltage
AC: 85 ~ 264V (50/60Hz)
sessions
Number of new
connections per
second
Number of VPN
connections
Processor
DC: 36V ~ 75V

Maximum power
105w
105w
Mean Time Between
37.54 years
37.54 years
Failure (MTBF)
Standard protocols
Supports the state inspection of H.323 (including T.120, RAS), SIP, RTSP,
HTTP, FTP, TCP and UDP and its NAT ALG; supports PPP, PPPOE, ARP, DHCP
Server, and RAIDUS; supports VPN such as L2TP, GRE, and IPSec/IKE;
supports RIP, OSPF and multiple multicast protocols.
Order Information
Both the Eudemon 500 and 1000 have similar configurations, and they can provide
AC and DC power supply. Users can select them as needed. The host of the Eudemon
500/1000 and their accessories are shown in the table below:
> 4-15
Firewall Series
Item
Amount
Remarks
Eudemon 500

fans installed in the fan frame. The main-control board and the
network processor board are provided in the host.
Eudemon 1000

fans installed in the fan frame. The main-control board and the
network processor board are provided in the host.
AC/DC power supply
1/2
Mandatory: 1; optional: the second one as the 1+1 backup
The Eudemon500/1000 firewall can be equipped with purchased interface modules except
the host in standard configurations. Note: The host and these interface modules do not
carry cables and optical cables; The Ethernet cable is generally equipped by the users
themselves, and purchase is also an option; the optical cable can be purchased as needed.
The Eudemon500/1000 firewall adopts the SFP optical modules, whose optical interface is LC
connector; the selection of optical cables requires the selection of the LC connector for the
end connected to the firewall. The details are shown in the table below:
Item
Cable
Remarks
FW-HIC-8FE
Ethernet cable
Optional. 8-port 100M Ethernet interface card
FW-HIC-4FE
Ethernet cable
FW-HIC-2FE
Ethernet cable
FW-HIC-1GE-SFP
Multi-mode or multi-
Optional. High-speed 1-port and 1-port Gigabit Ethernet
mode optical cable;
optical interface card; optical interface is SFP, and the optical
selecting the GE SFP
module of SFP of different types should be selected.
electrical interface
For the SFP optical module, there is multi-mode 0.55Km;
module requires the
there are single-mode optical modules with multiple
FW-HIC-2GE-SFP
use of Ethernet cable. distances, 10Km, 40Km, 70Km and 100Km.

Optional
In addition, the Gigabit GE electrical interface module (RJ45)

of SFP is provided, which is inserted in the optical interface
board to provide the Gigabit electrical interface externally.
FW-FIC-IPSEC
> 4-16
None
Optional. Hardware encryption card
memo
Firewall Series
> 4-17
memo
Firewall Series
> 4-18
memo
Firewall Series
> 4-19
memo
Firewall Series
> 4-20
HUAWEI TECHNOLOGIES CO., LTD.

Add: Huawei Industrial Base
Bantian Longgang
Shenzhen 518129, P.R.China
Tel : +86-755-28780808
Version No.: M3-080030-20060619-C-3.0
www.huawei.com

Huawei Products

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Huawei Products

Uploaded by

Copyright:

Available Formats

Peyvand Azad Network

Certified partner in IRAN

Peyvand Azad Network

Peyvand Azad Network

Product Quick Reference

Peyvand Azad Network

Huawei Datacom Product Quick Reference

Peyvand Azad Network

Quidway NetEngine 40E Core Router.............................................................. 1-19

Quidway NetEngine 80E Core Router..............................................................1-12

Quidway NetEngine 5000E

The top-class core router oriented towards the Internet

backbone node, MAN core node and data interworking

wire-speed forwarding performance for the IP/MPLS

Quidway NetEngine 80E Core

The high-end core network product oriented towards the

IP backbone network, IP MAN and various large-scale IP

service; the switching capacity of the integrated system

The high-end service router oriented towards the IP

backbone network, IP MAN and various large-scale IP

Quidway NetEngine 80 Core

The high-end core network product oriented towards the

IP backbone network, IP MAN and various large-scale IP

(non-blocking switching); the forwarding performance of

Quidway NetEngine 40 Core

The high-end network product oriented towards the large-

sized enterprise network, industrial network, IP MAN and

and the forwarding performance is 12Mpps.

The 5 th generation multi-service routers with high

end Router Series

performance oriented towards operators, industrial

networks and enterprise network can serve as the edge

with a wealth of NAT functions; provides such

Oriented towards the carrier-class operation network

High-end Router Series

and the enterprise-class core network, available with

active/standby switching realizes zero packet-loss

NE5000E core router

Outstanding Routing Performance

Rich Service Features

2.56Tbps, non-blocking switching

Supports routing protocols OSPF, IS-IS, BGP-4, PIM-DM/SM, MSDP

Comprehensively supports the features and services of IPv6. Implements

Supports MPLS wire-speed forwarding; supports L3/L2 MPLS VPN, as P

Supports the complex traffic classification integrating the L2/L3/L4 packet

The standalone system is of the integrated chassis structure, supporting

Max. power consumption

442mm x 600 mm x 1,600 mm

Maximum weight in full

Long-term operation: 0 ~ 45C

Short-term operation: -5 ~ 55C

Assembly cabinet-NE80E-CR5B1TSR-2.2 high-end

router assembly cabinet

Components for the NE 5000E integrated chassis

Main processing board, with L3 clock module.

Additional CF card and memory should be configured

NE 5000E switching fabric board

Specially-made secondary power supply-6500W-

NE80E core router IP/MPLS forwarding host

Main processing unit 512MB FLASH card

memory bar for 1

Main processing unit 1GB memory bar

2. Line interface board

10G POS interface single-mode short-distance line