odn 000103 quidway ma5200g system overview and hardware

5/14/2018 ODN 000103 Quidway MA5200G System Overview and Hardware - slidepdf.com

http://slidepdf.com/reader/full/odn-000103-quidway-ma5200g-system-overview-and-hardware 1/51

ISSUE 1.0

Fixed Network Curriculum

Development Section

ODN 000103 Quidway MA5200GSystem Overview and Hardware


http://slidepdf.com/reader/full/odn-000103-quidway-ma5200g-system-overview-and-hardware 2/512Confidential Information of Huawei.

No Spreading without Permission.Security Level: Internal

Objectives

Grasp the system structure and basic working theory

Understand the service features of MA5200G

Describe networking solution

Describe the technical specifications

Upon completion of this course, you will be able to




Contents

System Overview

Hardware Introduction

Service Features

Networking Application

Specifications




System Overview

Huawei MA5200G Broadband Access Server

(hereafter called the MA5200G) aims to overcome

the inherent deficiencies of the broadband network

technology, such as poor user management

capability, poor service control capability, and

unreliable network security.




System Overview

The MA5200G series includes MA5200G-8,

MA5200G-4 and MA5200G-2. The three types of

products use the same kind of Service Forwarding

Unit (SFU), and are consistent in functional features.

The major differences lie in the quantity of access

users allowed in the system and the switching

capacity.




System Overview

The MA5200G is applicable to various access

networks, including Ethernet, Digital Subscriber

Line (xDSL) network, Hybrid Fiber-Coaxial (HFC)

network, & Wireless LAN (WLAN).

It provides the functions of user management,

accounting control, address management, service

control, and security management.




Features

Powerful route forwarding function Larger capacity and high integration

Flexible network interfaces

Diversified access modes

Flexible authentication methods

Effective IP address solution

Completed accounting scheme

Enriched service control policies

Powerful network security management




MA5200G Typical Networking




Contents

System Overview


Service Features


Specifications




Appearance——MA5200G-8

Fan Module

SFU SFU SFU SFU SFU SMU SMU SFU SFU SFU

Cabling Trough

Air Intake

Power SupplyModule

Power SupplyModule





Power SupplyModule

Power SupplyModule

SMU

SMU

SFU

SFU

SFU

SFU

Fan



Confidential Information of Huawei.



Power Supply Power Supply

SMU

SFU

SFU

Fan





Hardware components

Integrated chassis

19-inch standard chassis

Integrated with one high-speed passive backplane, two power

modules and one fan module.

SMU（Service Management Unit）

Includes the main control system, the switching system and the clock

system.

Provides the functions of system management, equipment maintenance,routing management, data switch, and the provisioning of clock signals.

Supports hot plugging and "1+1" hot backup.





Hardware components

SFU（Service Forwarding Unit）

Provides the functions of user access control, user

management and service forwarding

Provides various network interfaces

It adopts a high-performance NP (network processor) to

satisfy the requirements of flexibility and high performance of

the services.





Hardware Components——System Frame

SMU board

(redundance)

switch control

Clock

Fan Power supply

NP Powered

Passive backboard：switching capacity 256Gbps

Non-blocked switch： 8×8/4×4 crossbar，interface and channel capacity

8Gbps， switching capacity 64Gbps

Distributing service board：high capability CPU＋NP service control＋ASIC

Service board

Service board

Service board

Service board Service board

Service board

Service board

Service board





Hardware components——SMU

SMU Module Describe

SMUWith 64Gbps switching capabilities, it can beused on all MA5200G platforms

SMUCWith 16Gbps switching capabilities, it can onlybe used on the MA5200G-2 platform.

SMU includes main control CPU、switching board and clock

system；

SMUC includes main control CPU、 clock system，but it has

no switching board;Main control CPU provides system management、 route、

service control；

Non-blocked switch by switching board ；





Hardware components——SFU

Composed of the CPU subsystem and

NP subsystem.

The CPU subsystem is responsible for

the processing of routing protocols, user

access control packets and user access

procedures. It also manages the SFU

module, and controls the user service

management policies of the NP

subsystem.

The NP subsystem processes user datapackets according to the defined policies,

and queries the routing table for packet

forwarding.

CPU

(Control)

NP

(Policy-basedforwarding)

Controlchannel

Controlchannel

Datachannel

Datachannel

Extermalinterface

Internalinterface



18Confidential Information of Huawei.


Ethernet interface

SFU Description

CR-EG8FE 8 port electric FE interface card（100m，RJ45）

CR-EG8FS8 port single mode optical FE interface card（1310nm，15km，LC）

CR-EG8FM8 port multi-mode optical FE interface card （1310nm，2km，LC）

CR-EGFE 16 port electric FE interface card（100m，RJ45）

CR-EGFS16 port single mode optical FE interface card（1310nm，15km，LC）

CR-EGFM16 port multi-mode optical FE interface card （1310nm，2km，LC）

CR-E1GC 1 port 1000BASE GE interface card（GBIC）







ATM interface

SFU Description

CR-A4CM4 port 155M ATM multi-mode optical interface card

（1310nm，2km，LC）

CR-A4CS4 port 155M ATM single mode optical interface card

（1310nm，15km，LC）

CR-A8CM8 port 155M ATM multi-mode optical interface card

（1310nm，2km，LC）

CR-A8CS 8 port 155M ATM single mode optical interface card（1310nm，15km，LC）





POS interface

SFU Description

POS

4 port 155M POS multi-mode optical interface card（1310nm，2km，LC）

4 port 155M POS single mode optical interface card（1310nm，15km，LC）

2 port 622M POS multi-mode optical interface card（1310nm，500m，SC）

2 port 622M POS single mode optical interface card（1310nm，15km，SC）

1 port 2.5G POS multi-mode optical interface card（1310nm，2km，LC）

1 port 2.5G POS single mode optical interface card（1310nm，

15km，LC）

1 port 2.5G POS single mode optical interface card（1310nm，40km，LC）

1 port 2.5G POS single mode optical interface card（1550nm，70km，LC）





Contents

System Overview


Service Features


Specifications





Route forwarding

User access

AAA & Radius

Users accounting

Users management

Address management

Security management

multicast management

QoS

VPN

Service Features





Routing Ability

Unicast

RIP OSPF BGP IS-IS

Supporting up to 256K unicast routes

Multicast

IGMP PIM-DM PIM-SM MSDPSupporting up to 10K multicast routes

Forwarding capabilities

The MA5200G-2 has 6Mpps forwarding capabilities.







User Access--Various Access

LAN Switch AP CMTS DSLAM

MA5200G

Ethernet WLAN HFC xDSL

LAN Switch AP CMTS DSLAM

MA5200G


FE FE FE ATM





User Access--Logical Ports

LAN Switch

MA5200G

VLAN1 VLAN2 VLAN1 VLAN2

PORT1 PORT2

MA5200G

PORT1

+VLAN1

PORT1

+VLAN2

PORT2

+VLAN1

PORT2

+VLAN2

LAN Switch

MA5200G

VLAN1 VLAN2 VLAN1 VLAN2

PORT1 PORT2

MA5200G

PORT1

+VLAN1

PORT1

+VLAN2

PORT2

+VLAN1

PORT2

+VLAN2





User Access—Types of Users

Ordinary subscriber

VLAN subscriber (support static user)

ATM subscriber (support static user)

Leased line subscriber

VLAN leased line Layer 2 access

Layer 3 access

PPP leased line





User Authentication

Access equipment Access mode Authentication modes

LAN Switch

IP DSLAM

PPPoE PPP

DHCP

Binding authentication

Web authentication

Fast authentication

ATM DSLAM

IPoEoA

Binding authentication

Web authentication

Fast authentication

PPPoA PPP

PPPoEoA PPP





User Authentication

The MA5200G conducts authenticationfor users. It supports Local

authentication、Remote authentication:

Authentication policy

None

Local

Remote

Local＋ Remote Remote＋ Local





Accounting policy No accounting

Radius accounting

Time/traffic based accounting

Real-time accounting

Switching of charging rates

Accounting information storage

(Rom 48K，Hard disk 256K)

Sending user's accounting information

（ based on ISP/physics station）

Accounting failure policy: 256 policies

User Accounting





User Management

Access user types on the logical ports

Authentication modes on the logical ports

Quantity of access users using the logical ports User access based on the logical ports

Leased line access based on the logical ports

Quantity of online users sharing the same account

Binding user accounts based on the logical ports

User group based access

User group based mutual access

Bandwidth control

Based on the logical port (Physical PORT＋VLAN/PVC), it can greatlyenhance the granularity of user .





Address Management

Allows a user to access the network with a configured static IP

address or with a dynamic IP address

MA5200G supports the built-in DHCP server, DHCP relay and

DHCP proxy

It can allocate an address to the user from the local address

pool or remote address pool

The IP address can be allocated to the user through the

RADIUS server .

Supports up to 4K address pools, and can maximally manage

96K IP addresses in the local and remote address pools.





Security Management

Resource protection

Rate limiting：based on physical ports, MAC addresses, IP

addresses, and user accounts. Through rate limiting, the

MA5200G ensures that no user can maliciously occupy

bandwidth.

+ }logical ports（access port +VLAN ID/PVC）

MACaddress

IPaddress

PPPoE Session ID

+ +

binding





Access control： Through the standard ACL or EACL, the

MA5200G implements fine control over user access authorities.

Based on the user access control policies, the MA5200G classifies

users into different groups for management.

Sophisticated ACL functions include:

Standard ACL

Extended ACL (EACL)

User-based ACL (UCL)

Security Management





Security Management





QoS

Supports the Differentiated Services (DiffServ) model；

Supports eight levels of user priorities；

Supports the mapping between Class of Service (CoS) codes

and Differentiated Services Code Point (DSCP) codes；

According to different user priorities, differentiated services

will be carried out ,

the layer 2 access equipment based on 802.1p

the layer 3 routers based on DSCP

Supports complex traffic classification。





QoS——CAR

The MA5200G supports CARs. On the MA5200G, the peak

rate, average rate and basic rate can be configured for users.

According to the configured parameters, the MA5200G can

limit the traffic rate for a user. The range of control is 8Kbps to

1Gbps. The bandwidth control granularity is 8Kbps.The MA5200G supports six levels of priority queues. It

provides differentiated services and implements traffic

shaping for the AF1 –AF4, EF and BE services. The

MA5200G supports 802.3x-based traffic control, and the

Weight Random Early Detection (WRED) algorithm. Thereby,

congestion can be avoided from occurrence





VPN-VPDN

As a L2TP Access Concentrator (LAC) equipment，

MA5200G automatically negotiates with the remoteL2TP Network Server (LNS) to establish a L2TP tunnel

and session. LNS

IP

PPP

PPPoE

MAC

MA5200G supports 8Ktunnels，each board

supports 8K sessions。

IP

PPP

PPPoE

PPP

PPPoE

VLAN

MAC

L2TP

UDP

IP

MAC

VLAN

MACMAC

IP

Remote terminal

MA5200G（LAC）





Contents

System Overview


Service Features


Specifications





Carrier Broadband MAN

Core network

LAN Switch APCMTS

DSLAM

MA5200G

Authentication andaccounting platform

NM platform Service platform


GSR GSRGSR

MA5200G MA5200G

GSR

Core layer

Convergence layer

Access layer

LAN Switch





Application in Enterprise Network

Quidview

CAMSService serverHeadquarters

S3026

S3026 S3026

S2026 S2026

Eudemon

100

S2026 S2026 S2026

Service

server

BranchMA5200G-8

MA5200G-8

INTERNETIP

Tunnel

Eudemon

100

S2026

GSR





Application in Campus Network





Application in Government Data Network

Government backbone network(MPLS VPN)

PE

R3680

NE-40

PE

CE

CE

Governmentaldepartment

S3026 S3026 S3026

MA5200G

S6506S6506R

CE

MA5200G-2








Application in Intelligent Office Building





Application in Intelligent Residential Community





Contents

System Overview


Service Features


Specifications



47Confidential Information of Huawei.No Spreading without Permission.

Security Level: Internal

Performance Parameters(1)

Parameter name

Performance Parameters

MA5200G-8 MA5200G-4 MA5200G-2

Number of slots10 slots, 2 for SMUs and

8 for SFUs.

6 slots, 2 for SMUs, and

4 for SFUs.

3 slots, 1 for SMU, and 2

for SFUs.

Switching capability of the

backplane256G bit/s 256G bit/s 64G bit/s

Switching capability of the

whole equipment64G bit/s 64G bit/s 16G bit/s

Forwarding performance 3Mpps per board.

Number of configured users

Up to 32K users per SFU,

up to 256K users per

MA5200G.

Up to 32K users per

SFU, up to 128K

users per MA5200G

Up to 32K users per

SFU, up to 64K users

per MA5200G.

Number of concurrent users


up to 48K users per

MA5200G.


up to 24K users per

MA5200G.


up to 12K users per

MA5200G.






Parameter namePerformance Parameters

MA5200G-8 MA5200G-4 MA5200G-2

Routing protocol and

routing table

Routing protocols: static routing, RIP, OSPF, IS-IS and BGP.

Routing table: 256K (A maximum of 4K static routes can be configured)

Multicast protocol and

multicast route

Multicast protocols: PIM-SM, PIM-DM, MBGP, MSDP and IGMP V1/V2

Multicast routes: 10K

VLAN

4K per FE/GE port, 32K

per board, up to 256K

per MA5200G.


per board, up to 128K

per MA5200G.


per board, up to 64K per

MA5200G.

PVC 2K per OC3 port. 2K per OC3 port. 2K per OC3 port.






Parametername

Performance Parameters

MA5200G-8 MA5200G-4 MA5200G-2

ISP 1k

Address pool4K address pools,

96K addresses.

4K address pools,

48K addresses.

4K address pools,

24K addresses.Leased line 4k

L2TP

Up to 8K L2TPsessions per SFU, upto 8K L2TP tunnelsand 48K L2TPsessions perMA5200G.








Parameter namePerformance Parameters

MA5200G-8 MA5200G-4 MA5200G-2

MPLSEach SFU supports up to 10K LSPs. The whole equipment supportsup to 10K LSPs.

MPLS VPN The equipment supports 1K VRFs, and supports up to 1K routes perVRF.

ACL 5K rules.

UCLThe equipment supports up to 1024 user groups, and each group

supports up to 1024 rules.

CARThe range of CAR control is 8Kbps to 1Gbps. The granularity is8Kbps. The error rate is less than 5%.

odn 000103 quidway ma5200g system overview and hardware

Documents