Download - Quidway AR 4945 Router System Description

AR 4945 Router System Description Security Level: Secret

2010-10-28 All Rights Reserved of 55

Version Confidentiality

8048 V300R002 Secret

Huawei Technologies Co., Ltd.

Product Name: Quidway

AR4945 Router system

Description

Total Pages: 55

AR4945 router System Description-V2.00

Huawei Technologies Co., Ltd.

All Rights Reserved.



Revision History

Date Revised

Version

Description Author

2007-7-30 V1.00 Initial version Su baowu

2009-04-08 V2.00 1. Adding new features AR

4945 support. Such as 3G

2.Adding the new interface

card (2E1/high density

analog voice)ordering

information

3.Revise some description of

the products.

Ding Juan 00125437



Contents

Huawei Technologies Co., Ltd.......................................................................................... 1

All Rights Reserved. ......................................................................................................... 1

1 Product Overview........................................................................................................... 5

2 Product Features............................................................................................................ 7 2.1 Multiple Services Integration........................................................................................................ 7 2.2 New Storage Media ..................................................................................................................... 8

2.2.1 USB.................................................................................................................................... 8 2.2.2 CF card............................................................................................................................... 9

2.3 Convergence of Routing and Switching ....................................................................................... 9 2.4 IPv6 .......................................................................................................................................... 10 2.5 A Rich of Interfaces.....................................................................................................................11 2.6 Abundant Services .....................................................................................................................11 2.7 Powerful Forwarding/Service Processing................................................................................... 13 2.8 High Reliability .......................................................................................................................... 13 2.9 Superior QoS ............................................................................................................................ 14 2.10 Perfect Security Mechanism .................................................................................................... 15 2.11 Robust Route Policy ................................................................................................................ 15 2.12 Globalization Design................................................................................................................ 16 2.13 3G Supported.......................................................................................................................... 16

3 System Structure.......................................................................................................... 17 3.1 Product Appearance.................................................................................................................. 17

3.1.1 AR 49-45 Router View....................................................................................................... 17 3.2 System Description.................................................................................................................... 18 3.3 Main Process Unit (MPUF) ........................................................................................................ 19

3.3.1 MPUF ............................................................................................................................... 19 3.3.2 MSCA............................................................................................................................... 24

3.4 Interface Attributes .................................................................................................................... 25 3.5 Supported Interface Cards......................................................................................................... 31

3.5.1 Supported SIC Interface Cards.......................................................................................... 31 3.5.2 FIC Interface Cards........................................................................................................... 32 3.5.3 ESM Modules ................................................................................................................... 33



3.5.4 Voice modules .................................................................................................................. 33

4 System Feature List and Performance Index............................................................. 34 4.1 Quidway AR 4945 Feature List .................................................................................................. 34 4.2 System Performance Specifications of Quidway AR 4945 Routers ............................................. 39

5 Applications and Solutions ......................................................................................... 40 5.1 Network Application of Integrated Multiple Services ................................................................... 40 5.2 Network Application of Comprehensive Services in Enterprises ................................................. 41 5.3 Carrier Network Applications...................................................................................................... 41 5.4 IPv6 Network Application........................................................................................................... 42 5.5 MPLS VPN Network Application ................................................................................................ 43 5.6 Network Application of Voice Services ....................................................................................... 44 5.7 Network Application of Security Services ................................................................................... 45 5.8 Network Application of Integrated Routing and Switch................................................................ 46

6 Ordering Guide............................................................................................................. 48 6.1 Host .......................................................................................................................................... 48 6.2 Interface Modules Available for AR 49-45................................................................................... 49

A Acronyms and Abbreviations ..................................................................................... 55



1 Product Overview

AR19/29/49 series routers are the next generation of AR series routers that Huawei brought into the market on the basis of success in R series and AR 18/28/46 series routers. Upgraded and enhanced comprehensively based on the original routers in terms of hardware/software, this series of routers has improved price/performance ratio and multi-service integration capability significantly.

It is further divided into three series: AR 19, AR 29 and AR 49, which are positioned in ascending order. AR 19 and AR 29 series can be used as the edge access equipments of large networks or carrier networks, and the core of branches or small businesses; AR 49 series can be used as the core of large and medium-size enterprise networks as well as the edge/aggregation access equipments of large networks or carrier networks.

With VRP V5 network OS platform from Huawei, AR19/29/49 series routers continuously support software features of original R series and AR 18/28/46 series. For example, it offers a diversity of network security delivers backup center- and VRRP-based backup solutions; supports MPLS L3/L2 VPN, ADSL access, PPPoE Server/Client, IP multicast; and provides a rich of QoS (Quality of Service) features and so on. At the same time, VRP V5 OS platform supports IPv6 and other rich features. Additionally, AR19/29/49 series routers use international standards-based hardware and software, guaranteeing the interoperability with other products on all layers, and thus protecting users’ existing investments. As a result, the next generation of AR series routers, combined with other series of Quidway routers and LAN Switches, can provide all-around and end-to-end network solutions for users in such industries as telecom, ISP (Internet Service Provider), tax, police, railway, education and electric power as well as large and medium-size enterprise users.

Here are the features of Quidway AR 4945 routers:

l New software architecture: with the next generation of powerful, multi-services, scalable and componentized advanced OS platform VRP V5 that Huawei has invested heavily, this series of routers provides a full support of IPv6 and the compatibility with IPv4. It not only supports the existing software features of VRP V3, but also delivers a diversity of functions, satisfying the demanding requirements of networks and services.

l Smoothly scalable and advanced hardware architecture: The built-in encryption engine can enhance encryption and meet increasingly security demands. Time Division Multiplex (TDM) slot switching function can bring higher local call completion rate and quality. High-density voice boards, crypto-accelerator boards and switching boards can improve performance and service integration. Use of common pinch cards and common LPUs makes it possible to smoothly integrate



diverse services modules. In addition, a variety of extended services are available and new storages like USB and CF Flash are supported.

l Integration of multiple services: By combining security, switching and voice services, this series of routers improves the integration of multiple services. For example, it provides world-class and innovative network security functions. As a result, you can realize a comprehensive integration of LAN switches and deploy voice gateways flexibly and conveniently.

l High performance/price ratio: By using the latest technologies in the industry, faster network processors and high integrated chipsets, AR 4945 improves IP forwarding, service processing and data encryption performances greatly whiling expanding interface density and strengthening software functions and services integration.

l Intelligent and auto-sensing network: AR 4945 router come with quality analysis tools. You can dynamically adjust configuration according to the real network status, so as to provide a portfolio of solutions, such as service auto-sensing, security auto-sensing, reliability auto-sensing and intelligent management.

l Investment protection: AR 4945 router is fully compatible with all the modules and all the features of AR 18/28/46 series modularized routers to provide investment protection. At the same time, interface modules and software functions developed on the new series of routers can meet the application requirements of users at present and in the future, realizing investment protection in the future.

l Brand new and stylish design: this series changes the simple and concise appearance design of the AR 18/28/46 Series. Instead, this series merges the fashionable elements into the modern and simple design style, better highlighting the external and internal value of the products.



2 Product Features

Quidway AR 4945 is the high-end products of the next generation of AR series routers. With IP forwarding and data encryption performances higher than AR 19/29 routers, it is primarily designed for the center of small- and mid-sized businesses as well as the aggregation layer of carrier networks. Quid way AR 4945 router use a modularized structure to provide integrated high-speed Ethernet interfaces and a rich of optional smart interface cards.

Major features of the new-generation AR 4945 router

2.1 Multiple Services Integration The next generation of AR series routers allows enterprises to build a data, voice and IP phone integrated network on a single platform. Higher data and voice integration density brings voice over IP applications into a new stage while streamlining network management and reducing maintenance costs.

I. Comprehensive routing and switch convergence

Quidway AR 4945 router has realized integrated design and implementation in terms of hardware and software. You can use all the features of routers and switches seamlessly. See section 2.3 Convergence of Routing and Switching for details.

II. Voice Services

Quidway AR 4945 use VRP Version 5 provides users mainstream voice communication protocols like H.323 and SIP, and implements diverse voice services such as emergency call, help in power off, dial-in policy, fax and E-PHONE, and offers a variety types of voice interfaces including FXS/FXO/VE1/BSV.

With an expansible architecture, Digital Signal Processor (DSP) resources are allocated consistently in the next generation of AR series routers. This brings for higher DSP resource utilization and access density. At the same time, local TDM switching is supported. On the one hand, voice quality is guaranteed. On the other hand, DSP resource occupation resulted from local calls is avoided and DSP resources are saved.

The next generation of AR series routers provides flexible pinch card design. You can select it if necessary.



III. Security

Nowadays, security has become a basic network function. As security needs to be embedded inside the entire network, routers play an important role in the network defense strategy. The new-generation AR Series Routers feature advanced, integrated, point-to-point security, and can provide security services in collaboration with various other services.

The VRP V5 software platform further expands and improves the security feature set and provides such security functions as Firewall, IPSec VPN, MPLS VPN, CA, Secure Shell (SSH) protocol 2.0, intrusion protection, Simple Network Management Protocol (SNMP v3), etc.

IV. Balanced services and performance

The new-generation AR Series Routers can provide users with various upper-layer applications that have integrated data, security, voice and video services, satisfying the current and future Internet demands of users. Moreover, the original data transmission performance is not affected at all.

2.2 New Storage Media The next generation of low-end and mid-range routers supports the use of new storage media like USB Flash and CF card for flexible scalability and investment protection. At the same time, a simple and convenient means is available for security and automatic service implementation.

2.2.1 USB USB, the short of Universal Serial Bus, supports connecting several devices at a rate higher than common parallel ports and serial ports. There are two specifications of USB: USB 1.1 and USB 2.0, with up to 12Mbit/s and 480Mbit/s rates respectively. . USB is hot-swappable and plug-and-play.

Now, AR 4945 router support USB 1.1. With it, you can enjoy mission-critical storage and security functions. For example, it can provide a lot of Flash memory for applications and configuration, store security VPN certification to build a secure VPN connection and distribute configuration safely.

I. USB Flash memory

The USB flash memory is connected to the router via the USB interface. The PnP function enables the router to detect the USB flash memory automatically. And users only need to insert the USB flash memory into the USB interface on the router when they want to use it. The router USB flash memory provides an optional backup storage function. VRP software mirroring, the configuration file or other files can be copied into the USB flash memory for storage; also, they can be copied onto the router from the USB flash memory. Its reliability is equivalent to the Compact Flash (CF) card in terms of saving and restoring files.

With regard to the file formats supported, the USB flash memory supports all the file formats that the CF card supports (FAT16 and FAT32). The configuration file can be automatically transferred to the router from the USB flash memory, thus implementing automatic configuration and deployment of routers.



Our company supports the USB flash memories specifications as 256MB.The USB flash memory offers users a mechanism for backing up the CF card. As the flash memory is widely used, using it to back up and restore files can provide users with great convenience and reliability.

II. USB application

When a router offers the USB interface, the router configuration file can be saved in the USB flash memory. After the USB flash memory with the configuration file saved is inserted into the USB interface of a router, the router can automatically obtain the configuration file from the USB flash memory, implementing the upgrade of the router configuration file and update of the router configuration automatically. Thus, the “zero-touch configuration deployment” can be implemented. That is, enterprise customers or telecom carriers can load the boot configuration file of a router into the USB flash memory. With help of the boot configuration file, remote sites can establish connections to the main site and then load the complete configuration file, thus implementing the router deployment.

With the above USB features, enterprise customers or telecom carriers can implement network deployment of routers without loading any configuration onto the routers before delivery and deployment, thus implementing less-touch or zero-touch configuration and deployment. In addition, routers can be sold to the end users from the manufacturer without making any configuration, which is closer to the practical requirements of users in terms of product usability.

2.2.2 CF card An advanced mobile storage, Compact Flash Card (CF card) features high speed, high capacity, compact factor, light and low power consumption.

AR 4945 router support CF card. You can upgrade and replace CF card without opening the chassis. The design vision of personalization is reflected properly in terms of easy of use. As the software features and services of routers are changing, the size of VRP5 software platform is increasingly growing. A design to fix storage capacity is a risk and obstacle for software upgrading. Use of CF card can solve this issue. You can protect investments perfectly and provide ongoing service scalability for users.

2.3 Convergence of Routing and Switching SIC/FIC slots in the next generation of AR series routers support many kinds of Layer 2 switching modules. In which AR 4945 router support 4/9/16/24-port SIC/DSIC/FIC/DFIC switching modules. Coupled with the switching functions of VRP5 software platform, AR 4945 ensures comprehensive routing & switch convergence.

The Ethernet switch modules of the next generation of AR series routers are capable of realizing Layer 2 switch LAN interface-to-Layer 3 WAN interface conversion. In case of access to Ethernet, up to four Layer 3 WAN interfaces can be configured to facilitate flexible networking.

The Ethernet switch modules of the next generation of AR series routers allow for perfect Layer 2 Ethernet switch features and related protocols, for example, VLAN, MAC address management, STP, port aggregation LACP, 802.1x and QoS/ACL and so on. Where SIC/DSIC cards are designed to implement low density access switches that provide basic Layer 2 switch feature; FIC/DFIC cards are designed to implement high density access and aggregation switches that provide intelligent and scalable Layer 2 switch feature.



FIC/DFIC cards are hot-swappable and have photoelectric Combo GE interface to support access in different distances. At the same time, GE interface interconnection can be used to realize expansion of ports and VLAN domain between modules.

Plug-in cards with different densities and different features can adapt to different user requirements while streamlining networking. Multi-services routers work well when switch modules forward data at wire speed on L2, meeting the requirements of routing and switch integration and replacing the networking of traditional routers and Ethernet switches in deed. As a result, you can use and manage devices flexibly.

2.4 IPv6 Today’s Internet is running on the basis of IPv4 protocol. With the rapid development of the Internet, limited address space defined by IPv4 will be exhausted. Short of address will make an adverse effect on the continuous development of the Internet, and severely restrict the application of IP technologies and the prospect of networks in the future. . IPv6 as the basis of the next generation of networks is broadly recognized for its outstanding technical advantages, which are shown as follows:.

l Flexible header format l Larger address space l Valid hierarchical addressing and routing system l Full state and stateless address configuration l Built-in security l QoS l Robust negotiation mechanism for neighbor discovery l Scalability l Meeting mobile requirements (3GPP determined to use IPv6 to build the next

generation of IPv6 core network)

The next generation of AR series routers supports the following IPv6 features:

l IPv6 address l Local link unicast address l Local site unicast address l Global unicast address l Multicast address l IPv6 Neighbor Discovery l Neighbor Discovery (ND) host l Neighbor Discovery (ND) router l IPv6 Path MTU l IPv6 ACL l IPv6 routing protocol l IPv4 to IPv6 migration

Network Address Translation-protocol Translation) NAT-PT l Packet and message translation l IPv6-IPv4 tunneling



2.5 A Rich of Interfaces The next generation of AR series routers comes with a rich of physical interfaces. General interfaces include: syn/asyn serial interface, Ethernet interface, E1 interface, E1-F interface, CE3 interface, ISDN BRI/PRI interface, analog modem (AM) interface, voice interface, xDSL interface, SDH interface and Ethernet port and so on.

l Ethernet interfaces: FE and GE; l Frame relay interfaces: E1, E1-F, syn serial interface, E3; l X.25 interfaces: E1, E1-F, syn serial interface, E3; l ISDN interfaces: ISDN BRI, ISDN PRI; l PSTN interfaces: asyn serial interface, E1, AM, ADSL2+; l DDN network interfaces: syn/asyn serial interface, E1, E1-F, E3; l Voice interfaces: analog voice interfaces (including FXS/FXO/BSV), digital voice

interfaces (including VE1); l USB interface: USB 1.1; l Layer 2 Ethernet ports; l POS interface.

2.6 Abundant Services The next generation of AR series routers provides a large number of services as follows:

I. xDSL

The next generation of AR series routers has an optional SIC-ADSL2+ interface card. SIC-ADSL2+ offers common phone interfaces. By leveraging digital code modulation technology, you can access digital subscriber line access multiplexer (DSLAM) devices through the existing copper phone lines and obtain higher data transmission capacity.

With ATM adaptation layer 5 (AAL5) as the ATM adaptation layer protocol, the next generation of AR series routers provides traffic services like constant bit rate (CBR), variable bit rate (VBR) and unspecified bit rate (UBR). Many issues, such as IP packet over ATM, authentication and accounting, are also solved through IPoA, PPPoA and PPPoEoA technologies. This series of routers is applicable to high speed data services and transmission of larger data packets and helpful for small- and medium-sized enterprises networks to access the Internet directly through broadband.

II. MPLS VPN and traditional VPN

The next generation of AR series routers supports Layer 2 and Layer 3 tunneling protocols. Layer 2 tunneling protocol (L2TP) is helpful for users to enable dial-in virtual private data network (VPDN) and leased-line VPN services. Layer 3 tunneling protocol is enabled based on generic routing encapsulation (GRE) protocol. Combined with IPSec technology, it provides a full set of network security solutions for leased-line VPN, including access control, connectionless integrity and data source authentication, anti-replay, encryption and traffic classification and encryption. Both tunneling protocols can be used independently or jointly to provide better services.



MPLS is the combination of IP and ATM. It uses a short, fixed long label to replace IP header to identify data flows and as the basis of forwarding to provide higher forwarding rate. With the support of IP routing protocol and control protocol, MPLS can meet the network requirements of diverse new applications. In a MPLS network, tagged packets are transferred along the label switched path (LSP) made up of a series of label switch routers (LSRs). Using MPLS to enable VPN is of natural advantages because LSP itself is a tunnel on the public network. MPLS VPN refers to combine the geographical branches of a private network into a unified network. It supports the reuse of IP addresses between branches and interoperation between VPNs. AR 19/29/49 series routers can function as not only label edge routers (LERs) but also label switch routers (LSRs). When AR 19/29/49 series routers locate at the edge of a label domain, they as LERs can connect MPLS domains and non-MPLS domains as well as different MPLS domains, and classify services, distribute labels, encapsulate or strip off multi-tier labels. When the next generation of AR series resides in a MPLS domain, it as LSR can exchange label packets.

III. DCC

The next generation of AR series routers provides a perfect dial-in solution, with two dial-in modes supported: Circular DCC and Resourced-Shared DCC. In some cases, a connection is built and communication is carried out between routers only when there are messages need to transfer. So the transferred messages are time-free, small in volume and unexpected. DDC comes into being to offer a flexible and cost-effective solution for users. Especially, Resource-Shared DCC is rather perfect. It allows more than one dial-in user to share physical interfaces and make different calls through dialer pool. In real circumstances, DCC generally is used in backup mode to guarantee the master line communication. When the master line cannot communicate services for a line failure or other reasons, DCC provides a backup line to guarantee the operation of services. In addition, DCC can enable callback, including PPP callback, ISDN calling line identification callback.

IV. Voice

The next generation of AR series routers provides mainstream voice communication protocols like H.323 and SIP for a variety of voice services such as emergency call/dial-in policy/fax/E-PHONE, and a variety of voice interfaces such as FXS/FXO/VE1

By employing high performance digital signal process (DSP) chipset and high compression ratio coding/decoding algorithm, combined with the features from VRP V5 software platform like security, QoS and policy-based routing, the next generation of AR series routers can ensure the transmission of voice over IP through silence compression, comfortable noise and anti-jitter measures.

Two connection modes are supported: quick connection and non-quick connection. The next generation of AR series routers carries out out-band transmission of dual tone multi-frequency (DTMF) codes with tunneling while offering busy tone detection and some special services for PBX (for example, Do-Not-Disturb, transfer in busy and alarm clock).

Voice processing module (VPM) is also supported. It is a DSP array and easy of upgrading and expansion. All VE1 interface cards share DSP resources of VPM, saving user investments and maximizing hardware resources.

The next generation of AR series routers provides a rich of voice interfaces that can not only directly connect to general phones/faxes, but also connect to PBX switches through trunks like AT0 and E1. It realizes interoperation with voice gateways from



other vendors well in addition to high density and qualified voice and fax communications, protecting the existing investments of users effectively. When E1 trunk is used to connect a PBX, R2 signaling as well as DSS1 and Q.SIG signaling on ISDN PRI interface are supported. One-stage/dual-stage dial-in services are available. Synchronous transmission of voice and data on PRI interface is also supported. As a result, the utilization is improved and the scope of supported services is enlarged.

The next generation of AR series routers offers Gateway Keeper (GK) Client function that maintains communications with GK Server through Registration, Admission and Status (RAS) signaling. In this way, GK Server provides Quidway voice gateway services like access permission, address translation, bandwidth management and voice gateway management. At the same time, it can network with mainstream voice gateway flexibly. This makes the next generation of AR series routers fit for large- and medium- sized voice communications in enterprises.

By compressing redundant information like voice header on low-speed PPP serial links, IP Header Compression (IPHC) reduces the bandwidths used by voice channels significantly and maximizes network resources.

The next generation of AR series routers provides voice RADIUS function. When a voice call occurs, the router reports statistics including call duration, number of packets and number of bytes to RADIUS Server for accounting.

2.7 Powerful Forwarding/Service Processing IP packet forwarding efficiency is a key index of performance measurement. When the router forwards a packet according to general procedure, it needs to look up the routing table based on the network layer information of the packet to determine a best path for forwarding. And each subsequential packet will be processed by this process repeatedly. In addition to flexible services and protocol processing, the next generation of AR series routers uses advanced quick route search algorithm to enable fast forwarding, improving forwarding and services processing capabilities significantly. The next generation of AR series routers supports fast forwarding on a variety of high speed link interfaces. It can also forward packets rapidly in conjunction with QoS and firewall.

2.8 High Reliability I. Hot-swappable power supply/interface card/fan

According to carrier-class product requirements, the next generation of AR series routers is designed to support dual-power supply hot backup as well as hot-swappable power supplies/FIC interface cards/fan racks. Replacement is performed without affecting services so as to meet the high reliability requirements of carrier-class networks on devices.

II. Backup center and VRRP

With Backup Center and VRRP, the next generation of AR series routers provides a backup solution in case of a communication line or device failure to guarantee smooth data communication, and thus boosting network robusticity and reliability effectively. Backup Center supports backup load balancing.



III. External storages like CF card and USB Flash memory

CF card and USB Flash memory can be used to store many system files and configuration to improve system reliability. External storages can accommodate a large volume of system logs and security logs for backing up, browsing and archiving.

2.9 Superior QoS The next generation of AR series routers are developed based on VRP5 platform. The QoS of V5 platform has inherited all the QoS features of previous VRP versions. That is, it supports Diff-Serv standard well. At the same time, it adds the supports of IPV6 QoS as well as MPLS Traffic Engineering (MPLS TE) and MPLS Resource Reservation Protocol (MPLS RSVP).

QoS Diff-Serv model includes traffic classification, traffic policing, traffic shaping, queue management and queue scheduling that completely enables six sets of PHB services (EF, AF1 to AF4, BE) defined in standards. This allows network operators to provide users different levels of service guarantee, making the Internet a real data, voice and video integrated network.

The enablement of Differentiated Service (Diff-Serv) includes traffic classification, traffic policing (CAR), traffic shaping (GTS), congestion management (PQ/CQ/WFQ/CBQ) and congestion avoidance (WRED).

l Traffic classification: identify interesting objects by a certain matching rule. Traffic classification is the premise for differentiated services.

l Traffic policing: monitor the specifications of the specified traffic flowed into the router. Once the traffic has exceeded the specifications, you can take restriction or punishment measures to protect business interests and network resources of operators.

l Congestion management: measures you must take to settle resource competition in case of network congestion. Generally, it places packets in a queue for caching and uses a scheduling algorithm to determine the forwarding order.

l Congestion avoidance: too congestion may damage network resources. Congestion avoidance monitors the utilization of network resources. When it finds that the congestion is aggravating, it drops packets proactively and relieve network overload by adjusting traffic.

l Traffic shaping: a traffic control measure that actively adjusts the traffic output rate. Generally, it is used to adapt to the available network resources from the downstream routers and avoid unnecessary packet drop and congestion.

MPLS traffic engineering (MPLS TE) is a QoS technology based on Int-serv module. By combining traffic engineering and MPLS, you can establish a LSP tunnel to the designated path and reserve resources. So network traffic can bypass congested nodes for the purpose of balancing. The next generation of AR series routers can use QoS in a MPLS network flexibly. Furthermore, it can use original QoS of Diff-Serv for CE and PE routers and QoS of Int-Serv for MPLS aggregation/core networks to realize real end-to-end QoS guarantee.



2.10 Perfect Security Mechanism The next generation of AR series routers has many authentication methods (plain text authentication and MD5) and supports two kinds of user authorization modes: local authentication and RADIUS authentication. it can authenticate user IDs and authorization to prevent from illegal configuration of devices.

The ACL feature of the next generation of AR series routers is used to create a combination of rules that permit or deny based on source/destination IP address segments (including host address) or source/destination ports. This is applicable to the following cases where you can control access to the traffic on the user side or the network side and set the rights to access local information network or WAN by users for the purpose of protecting key servers, protecting system users, restricting foreign access, preventing from network attacks and supporting real-time updating.

The network address translation (NAT) feature of the next generation of AR series routers allows for translation and recovery of IP addresses and ports. At the same time, it allows the Intranet to provide limited access to internal hosts by user configurations. The feature can also meet high capacity and high performance to adapt to the position of the next generation of AR series routers in a network. In addition to above mentioned basic functions, the NAT feature of the next generation of AR series routers limits the number of concurrent connections of individual users. As a result, it can reduce network strike from malicious resource occupation while meeting general network applications. You can output address translation information through logs to analysis network failures and locate hidden security troubles. The NAT feature provides application layer gateway (ALG) function for common specific application layer FTP and ICMP.

Furthermore, Quidway AR 4945 routers have plenty of statistics including traffic statistics, traffic sample and NAT information statistics.

2.11 Robust Route Policy Route policy consists of a series of rules which are broken into three types used for route publication, route receiving and route import respectively. Route policy is referred to as route filter, because the definition of a policy is equivalent to the definition of a set of filters and applying these filters before receiving/publishing route information or exchanging route information between different protocols.

Route policy is used with routing protocols to strengthen the control of routing protocols. When exchanging route information with the peer, a upper layer routing protocol may need to only receive or publish a part of route information meeting the specified conditions; when importing the route information of other routing protocols, the route protocol may need to only import a part of route information meeting the conditions, and set some attributes of the imported route information to satisfy the requirements of the protocol. Route policy provides a way to enable these functions for route protocols.

Route policies supported on the next generation of AR series routers include route policy definition, route import and distribution definition and restriction rules like route prefix, autonomous system path, community attribute and access list. The use of route policy is of great practical value to enhance the manageability of networks.



2.12 Globalization Design According to UL, CE and FCC standards, the next generation of AR series routers is designed to conform to certification requirements in home, Europe and North American

2.13 3G Supported AR 4945 router as the new-generation AR Series Router that provide the 3G wireless option offers a cost-effective, convenient deployment, reliable backup solution. AR 4945 router with 3G feature can be deployed in small businesses, enterprise small branch office. 3G wireless can be used for the scenario describe below

² The new building with out cable. ² The primary WAN connectivity where wire line service such as XDSL is not available

or too expensive to deploy. ² The cable for the building can not reach .such as the communication must deploy

among mountains or islands. ² It is very convenient for mobile office.

AR 4945 router support the latest 3G standards (High-Speed Packet Access [HSPA]) and are backward-compatible with Universal Mobile Telecommunications Service (UMTS), Enhanced Data rates for Global Evolution (EDGE), and General Packet Radio Service (GPRS).

The detailed information of 3G feature’s application, you can find them in “ARx9 3G Feature Guidance” in 3ms. http://3ms.huawei.com/mm/docMaintain/mmMaintain.do?method=showMMDetail&f_id=ME20090

2060096

http://3ms.huawei.com/mm/docMaintain/mmMaintain.do?method=showMMDetail&f_id=ME20090



3 System Structure

Quidway AR 4945 router use an integrated design. And it is 3U high (1U = 44.45mm). Quidway AR 49 can be installed in 19in standard racks.

3.1 Product Appearance 3.1.1 AR 49-45 Router View

Product Front view

Figure 3-1 Front view of the AR 49-45 routers



Product Rear view

Figure 3-2 Rear view of the AR 49-45 routers

AR 49-45 router is 3U high. There are nine slots on the front panel. Slot 0 is a MPU slot supporting two fixed 10/100/1000M Ethernet interface (Combo interface); slot 1 through slot 4 are SIC card slots and slot 5 through slot 8 are FIC card slots. MSCA slots on the rear panel are multi-service card slots. Multi-service card supports VCPM, VPM and ESM modules to enable a rich of services.

3.2 System Description Table 3-1 Quidway AR 49-45 router system description

Item AR 49-45 description

SIC slot 4

FIC slot 4

MSCA slot 1

Console port

1

AUX port 1

USB interface

2 (USB 1.1)

Fixed interfaces

GE interface

Two GE Combo interfaces

Dimension (H × W × D)

130.7 X 436.2 X 424mm (5.15 X 17.17 X 16.70 inch)

Weight (pending) 16.18 kg (39.68lb)

Input voltage

AC Rated voltage range: 100 VAC to 240 VAC; 50/60Hz Maximum voltage range: 85 VAC to 264 VAC; 47/63Hz



Item AR 49-45 description

DC Rated voltage range: –48 VDC to –60 VDC Maximum voltage range: –36 VDC to –75 VDC

Maximum power (power supply)

350 W

Operating temperature

0°C to 40°C (32°F to 104°F)

Relative humidity (noncondensing)

5% to 90%

l Memory specification is optional and up to 1GB is supported. CF card is supported from

defaulted to1GB. The Flash capacity on the MPU is 4M. l You can select a single power supply or 1+1 redundant power supply as required. A single

power supply is configured as a standard. Dual-power supplies work in redundancy backup mode.

3.3 Main Process Unit (MPUF) MPUF is the core of a product, which is designed to enable protocol handling, packet forwarding, interface control and failure detection functions. Status monitoring information, such as fan operation, power supply and system health, can be represented directly by the indicators on the MPUF. It also can be reported to the back-end and monitored through network management systems. Furthermore, MPUF has a hardware reset button RESET.

3.3.1 MPUF

View

Figure 3-3 MPUF front view



Figure 3-4 MPUF front view

Specifications

Table 3-2 MPUF specifications

Item Item

Interface Two 10/100/1000M Ethernet interface (Combo interface supporting SFP optical module) One Aux port One CON port

Processor 833MHz

Boot ROM 4M

DDR SDRAM Default: 512MB Maximum: 1GB

CF CARD Default: 256MB Maximum: 1GMB

USB Two USB 1.1 interfaces, where USB 0 supports Host or Device mode; USB 1 supports only Host mode.



l Boot ROM holds the boot files used for startup. l DDR SDRAM, also known as DDR memory, holds the data that the system communicates

with CPU. l CF card slot supports one CF card (64M to 256M) and holds software system and

configuration. When the software is reading or writing from/to a CF card, the CF card indicator is flashing. At this time you cannot draw out the CF card. Otherwise the files stored in the CF card will be damaged.

l GE Combo interface means that there is only one GE interface in the board, but one electrical interface and one optical interface are available outside. You can use them if necessary. Using electrical interface and optical interface simultaneously is prohibited. When cables and optical fibers are connected simultaneously, by default the electrical interface works.

Indicators and buttons

Figure 3-5 Indicators and buttons

Figure 3-6 Implications of in indicators

(1)(2)(3)(4)

(5)(6)(7)(8)

( 9 )(10)(11)(12)(13)

(15)

(16)

(17)

(18)(14) (19)

(20)

(22)

(21)(23)

(24)

(25)

(1) System LED (SYS) (2) Fan LED (FAN) (3) Power LED1 (PWR1) (4) Power LED0 (PWR0) (5) VPM LED3 (VPM3) (6) VPM LED2 (VPM2) (7) VPM LED1 (VPM1) (8) VPM LED0 (VPM0) (9) VCPM LED (VCPM) (10) ESM LED1 (ESM1) (11) ESM LED0 (ESM0) (12) USB Slave port LED (USB0) (13) Fixed 1000M electrical interface0 LED (14) Fixed 1000M electrical interface1 LED (15) Fixed 1000M optical interface0 LED (16) Fixed 1000M optical interface1 LED (17) USB port0 (18) USB port1 (19) Console port (20) Auxiliary port (21) Fixed 1000M electrical interface0 (22) Fixed 1000M electrical interface1



(23) Fixed 1000M optical interface0 (24) Fixed 1000M optical interface1 (25) RESET LED

Table 3-3 MPUF indicator and button implications

Indicator Monochromatic/dichromatic

Quantity Status Function

Off No input voltage or MPU failure

Green, flashing (0.5Hz)

Indicates that the board works according to the configuration and is put in work state

Green, flashing (4Hz)

The board is starting up.

SYS Dichromatic 1

Yellow/Yellow, flashing

Failure

Off Power supply 1 is off.

Green Power supply 1 is on and works well.

PWR0 Dichromatic 1

Yellow Failure

Off Power supply 2 is off.

Green Power supply 2 is on and works well.

PWR1 Dichromatic 1

Yellow Failure

Off Fan is off.

Green Fan works well.

FAN Dichromatic 1

Yellow Failure

Off VPMx is off.

Green VPMx is on and valid.

VPM 0-3

Dichromatic 4

Yellow Failure

Off ESMx is off.

Green ESMx is on and valid.

ESM0-1 Dichromatic 2

Yellow Failure





Off VCPM is off.

Green VCPM is on and valid.

VCPM Dichromatic 1

Yellow Failure

Off No LINK

Green SFP optical module gigabit LINK

Green, flashing

SFP optical module is receiving and sending data.

SFP0-1 Dichromatic 2

Yellow Failure to SFP examination

Off No CF card

Green CF card is on and success in host examination.

Green, flashing

The system is accessing CF card. Do not draw out.

CF Dichromatic 1

Yellow Failure to CF card examination

Off Not being attained to the Host

Green Attained to HOST and hot-swappable

USB0-1 (device)

Monochromatic 1

Green, flashing

Transmitting data. Do not draw out.

Off No connection is established.

Green A gigabit connection is established

Green, flashing

Receiving and sending data. Active

Yellow 10M/100M connections are established.

GE0/0 Dichromatic 1

Yellow, flashing






Off No connection is established.

Green A gigabit connection is established

Green, flashing


Yellow 10M/100M connections are established.

GE0/1 Dichromatic 1

Yellow, flashing


3.3.2 MSCA

View

Figure 3-7 MSCA front view

Figure 3-8 MSCA rear view

Specifications

Table 3-4 MSCA specifications

Item Description

VPM slot number 4



Item Description

VCPM slot number 1

ESM slot number 2

3.4 Interface Attributes Console port

Table 3-5 Console port attributes

Metrics Parameter

Interface standard RS232

Connector RJ45

Rate 9600bps to 115200bps

FE electrical interface

Table 3-6 FE electrical interface attributes

Metrics Layer 2 FE electrical interface parameter

Layer 3 FE electrical interface parameter

Interface standard 10/100Base-TX 10/100Base-TX

Interface type MDI/MDIX MDI

Connector RJ45 RJ45

Rate 10/100Mbps 10/100Mbps

Operating mode 10/100Mbps auto-sensing Full duplex/ half duplex Supporting only Layer 2 switching

10/100Mbps auto-sensing Full duplex/ half duplex

GE Interface MPUF has two 10/100/1000Mbps Ethernet interfaces. Each GE interface supports optical/electrical two connectors. In which electrical interface uses RJ45 connector



and optical interface uses Small Form-Factor Pluggable (SFP) module. Users can select it as required.

MPUF provides five kinds of 1000Base-FX SFP pluggable optical interface modules. You can select short haul multi mode (850nm), mid-haul single mode (1310nm), long haul single mode (1310nm), long haul single mode (1550nm) and ultra long haul single mode (1550nm) optical modules if necessary. All optical modules come with LC interface and are hot-swappable.

Here are the features of MPUF GE interface:

Table 3-7 GE electrical interface attributes

Item Description

Connector type RJ45

Interface type MDI/MDIX auto-sensing

Frame format Ethernet_II Ethernet_SNAP

Operating mode 10/100/1000Mbps auto-sensing Full duplex/ half duplex (Configuring 1000Mbps and half duplex simultaneously is prohibited)

Table 3-8 GE optical interface attributes

Attributes Description

Connector type SFP/LC

Interface standard 802.3, 802.3u and 802.3ab

Type Short haul multimode (850nm)

Mid-haul single mode (1310nm)

Long haul (1310nm)

Long haul (1550nm)

Ultra long haul (1550nm)

Min. -9.5dBm -9dBm -2dBm -4dBm -4dBm

Transmitted optical power

Max. 0dBm -3dBm 5dBm 1dBm 2dBm

Receiving sensitivity -17dBm -20dBm -23dBm -21dBm -22dBm

Core wavelength 850nm 1310nm 1310nm 1550nm 1550nm

Optical fiber type 62.5/125 um multimode optical fiber

9/125 um single mode optical fiber


9/125um single mode optical fiber





Maximum transmission distance

0.55km 10km 40km 40km 70km

Operating mode 1000Mbps Full duplex

l Using 10/100/10000Mbps Ethernet electrical interface and optical interface simultaneously

is prohibited. When cables and optical fibers are connected, electrical interface works by default.

AUX port

Table 3-9 Aux port attributes

Metrics Parameter

Interface standard RS232 (supporting remote Modem configuration)

Connector RJ45

Rate 9600bps to 115200bps

Synchronous serial port

Table 3-10 Synchronous serial port attributes

Metrics Parameter

Interface standard V.24 (DTE/DCE), V.35 (DTE/DCE), X.21 (DTE/DCE), RS449 (DTE/DCE) and RS530 (DTE/DCE)

Connector DB28

Rate 1200bps to 2.048Mbps (baud rate(bps):1200, 4800, 9600, 19200, 38400, 115200, 56000, 64000, 72000, 128000, 384000 and 2048000)



Asynchronous serial port

Table 3-11 Asynchronous serial port attributes

Metrics Parameter

Interface standard V.24 (DTE/DCE)

Connector RJ45

Rate 300bps to 115.2Kbps (baud rate(bps):300, 600, 1200, 4800, 9600, 19200, 38400, 57600 and 115200)

AM interface

Table 3-12 AM interface attributes

Metrics Parameter

Interface standard G.712

Connector RJ45

Bandwidth 300 to 3400Hz

CE1/PRI interfaces

Table 3-13 CE1/PRI interface attributes

Metrics Parameter

Interface standard G.703 and G.704

Connector DB15 (FIC-1E1/FIC-2E1) DB25 (FIC-4E1)

Rate CE1/PRI: 2.048Mbps (n×64k bps, n=1...31)

E1-F interfaces

Table 3-14 E1-F interface attributes

Metrics Parameter




Metrics Parameter

Connector DB15 (FIC-2E1-F) DB25 (FIC-4E1-F)

Rate E1: 2.048Mbps (n×64kbps, n=1...31)

Standard CE3 interface

Table 3-15 CE3 interface attributes

Metrics Parameter


Connector SMB

Rate CE3: 34.368Mbps

ISDN BRI interface

Table 3-16 ISDN BRI interface attributes

Metrics Parameter

Interface standard ISDN BRI interface

Connector RJ45

Rate 64Kbps and 2B+D

155M ATM interface

Table 3-17 155M ATM interface attributes

Metrics Parameter

Interface standard SDH/SONET

Connector FE optical connector supporting single mode optical fiber and multimode optical fiber

Rate OC-3/STM-1 (155Mbps)



ADSL2+ interface

Table 3-18 ADSL2+ interface attributes

Metrics Parameter

Interface standard ITU-T 992.1 G.DMT ITU-T 992.2 G.Lite ITU-T G992.3 ADSL2 ITU-T G992.5 ADSL2+ ANSI T1.413 Issue 2

Connector RJ11

Rate Up to 1024kbits/s on the upstream and 24Mbit/s on the downstream

Services ADSL2+ access over common phone lines

ADSL-I Interface

Table 3-19 ADSL-I Interface attributes

Item Parameter

Interface standard G. 992.1

Connector RJ11

Interface rate Up to 8Mbps on the downstream and 1024kbps on the upstream

Services ADSL access over ISDN lines

Analog voice interfaces (E&M, FXO and FXS)

Table 3-20 Analog voice interfaces (E&M, FXO and FXS) attributes

Metrics Parameter

Interface standard G.712

Connector RJ48

Bandwidth 300Hz to 3400Hz



VE1 voice interface

Table 3-21 VE1 voice interface attributes

Metrics Parameter


Connector DB15

Rate CE1/PRI: 2.048Mbps (n×64k bps, n=1...31)

3.5 Supported Interface Cards 3.5.1 Supported SIC Interface Cards

Quidway AR 49-45 routers provide many kinds of SIC interface cards as follows:

Ethernet interface cards l 1-port 10Base-T/100Base-TX Ethernet interface card (SIC-1FEA) l 1-port 10M/100M/1000M electrical and optical Ethernet SIC interface card

(SIC-1GEC)

WAN interface cards l 1-port enhanced high-speed syn/asyn serial port interface card (SIC-1SAE) l 1-port nonchannelized E1 interface card (SIC-1E1-F) l 2-port nonchannelized E1 interface card (SIC-2E1-F) l 1-port E1/CE1/PRI compatible interface card (SIC-1EPRI) l 1-port ADSL over POTS interface card (SIC-1ADSL) l 1-port analog Modem interface card (SIC-1AM) l 2-port analog Modem interface card (SIC-2AM)

Voice interface cards l 1-port voice subscriber circuit interface card (SIC-1FXS) l 2-port voice subscriber circuit interface card (SIC-2FXS) l 1-port voice FXO interface card (SIC-1FXO) l 2-port voice FXO interface card (SIC-2FXO) l 1-way E1 voice SIC interface card (SIC-1VE1)

Ethernet switching cards l 4-port 10M/100M Ethernet Layer 2 switching card (SIC-4FSW) l 9-port 10M/100M Ethernet Layer 2 switching card (SIC-9FSW)



3.5.2 FIC Interface Cards Quidway AR 49-45 routers provide many kinds of FIC smart interface cards as follows:

Ethernet interface cards l 1-port 10M/100M Ethernet electrical FIC interface module (RJ45)-FIC-1FE l 2-port 10M/100M Ethernet electrical FIC interface module (RJ45)-FIC-2FE l 1-port 1000M Ethernet electrical FIC interface module (RJ45)-FIC-1GBE l 2-port 1000M Ethernet electrical FIC interface module (RJ45)-FIC-2GBE l 1-port 1000M Ethernet optical FIC interface module-FIC-1GEF l 2-port 1000M Ethernet optical FIC interface module-FIC-2GEF

WAN interface cards l 2-port enhanced high-speed syn/asyn serial port FIC interface card-FIC-2SAE l 4-port enhanced high-speed syn/asyn serial port FIC interface card-FIC-4SAE l 8-port enhanced high-speed syn/asyn serial port FIC interface card-FIC-8SAE l 8-port asyn serial port FIC interface module (RJ45)-FIC-8SAE l 16-port asyn serial port FIC interface module (RJ45)-FIC-16SAE l 1-port E1/CE1/PRI FIC interface card-FIC-1E1 l 2-port E1/CE1/PRI FIC interface card-FIC-2E1 l 4-port E1/CE1/PRI FIC interface card-FIC-4E1 l 8-port E1/CE1/PRI FIC interface card (75ohm)-FIC-8E1 (75) l 2-port nonchannelized E1 FIC interface card-FIC-2E1-F l 4-port nonchannelized E1 FIC interface card-FIC-4E1-F l 8-port nonchannelized E1 FIC interface card (75ohm)-enhanced-FIC-8E1(75)-F l 1-port E3/CE3 FIC interface module-FIC-1CE3 l 1-port ATM/155M optical interface module FIC-1ATM-OC3 l 1-port ATM-E3 interface module-FIC-1AE3 l 1-port POS interface card-FIC-1POS l 1-port channelized SDH/SONET interface card (E1 mode)-FIC-1CPOS (E)

Voice interface cards l 1-way E1 voice FIC interface module-FIC-1VE1 l 2-way E1 voice FIC interface module-FIC-2VE1 l 4-port voice subscriber circuit module-FIC-4FXS l 4-port voice FXO interface module-FIC-4FXO l 24FXO+24FXS High Density Voice Double FIC Interface Module

RT-DFIC-24FXS24FXO l 24FXS HIGH DENSITY FXS FIC Interface Module RT-FIC-24FXS



Ethernet switching cards l 16-port 10M/100M and 1-port 1000BASE-T/1000BASE-X (COMBO) Ethernet

Layer 2 switching FIC interface card-FIC-16FSW l 24-port 10M/100M and 2-port 1000BASE-T/1000BASE-X (COMBO) Ethernet

Layer 2 switching DFIC interface card-FIC-24FSW

3.5.3 ESM Modules l Advanced network data encryption ESM module-ESM-ANDE l Standard network data encryption ESM module-ESM-SNDE

In addition to IPSec protocol, ESM modules support hardware encryption/decryption and hash operation as well as accelerate the encryption of IP packets through hardware to provide a powerful and high reliable encryption function for routers.

Encryption pinch card is optional. When the pinch card is inserted, the MPU in the router carries out the routing and forwarding of IP packets. A VPN with encryption feature is enabled, where encryption is performed by an encryption card.

Table 3-22 Encryption pinch card attributes

Item Description

Protocol IPsec

Hardware enablement algorithm Key algorithm (DES, 3DES, AES) Authentication algorithm (HMAC-MD5-96, HMAC-SHA-1-96)

3.5.4 Voice modules Voice Processing Module (VPM) is designed for voice compression/decompression, echo cancellation (EC) and comfortable noise generation (CNG).

Voice Co-Processing Module (VCPM) is used with VPM modules to process voice data.

l Voice co-processing module RT-VCPM l 8-way voice processing module RT-VPM8 l 16-way voice processing module RT-VPM16 l 24-way voice processing module RT-VPM24 l 32-way voice processing module RT-VPM32



4 System Feature List and Performance Index

4.1 Quidway AR 4945 Feature List Table 4-1 Quidway AR 4945 feature list


Network interconnection

LAN protocol l ARP (proxy ARP, free ARP, authorization ARP) l Ethernet_II l Ethernet_SNAP l VLAN (PORT-BASED VLAN/MAC-BASED VLAN/VLAN-BASED

PORT ISOLATE/ VOICE VLAN) l 802.3x l LACP(802.3ad) l 802.1p l 802.1Q l 802.1x l RSTP(802.1w) l MSTP(802.1s) l IGMP Snooping l GVRP l PORT LOOPBACK l PORT MUTILCAST suppression



WAN protocols l PPP, and MP l PPPoE Client, and PPPoE Server l PPP/MP over FR l FR, and MFR l FR Fragment, FR Compress, and FR over IP l FRTS l ATM (IPoA, IPoEoA, PPPoA and PPPoEoA) l DCC, and Dialer Watch l HDLC l LAPB l X25, X25 over TCP and X25 to TCP l X25 PAD, X25 Huntgroup and X25 CUG l MODEM l 3G Modem

IP services l Fast forwarding (unicast/multicast) l TCP l UDP l IP Option l IP unnumber l Policy routing (unicast/multicast)

Non-IP services l IPX l Netstream l Terminal access

Network protocols

IP application l Ping and Trace l DHCP Server l DHCP Relay l DHCP Client l DNS client l DNS Static l DDNS l NQA l IP Accounting l UDP Helper l NTP l Telnet l TFTP Client l FTP Client l FTP Server



IP route l Static routing management l Dynamic routing protocols

RIP/RIPng OSPF OSPFv3 BGP IS-IS

l Multicast routing protocols IGMP PIM-DM PIM-SM MBGP MSDP

l Routing policy

MPLS l LDP l LSPM l MPLS TE l MPLS FW l MPLS/BGP VPN l L2VPN

IPv6 IPv6 basic functions l IPv6 ND l IPv6 PMTU l IPv6 FIB l IPv6 ACL l IPv6 Fast-forwarding IPv6 transition technologies l NAT-PT l IPv6 tunneling l 6PE IPv6 routing l IPv6 static routing management Dynamic routing protocols l RIPng l OSPFv3 l IS-ISv6 l BGP4+ Multicast routing protocols l MLD l PIM-DM l PIM-SM l PIM-SSM

Port security l PPPoE Client&Server

l PORTAL 2.0 l 802.1x

AAA l Local authentication

l Radius l HWTacacs



Firewall l ASPF l ACL l FILTER l Attack Protection

Data security l IKE l IPSec l Encryption card l Portal l Portal+

Other security technologies

l L2TP l NAT/NAPT l PKI l RSA l SSH V1.5/2.0 l SSL l URPF l GRE l EAD

Reliability l Supports VRRP l Supports the backup center

L2 QoS l SP l WRED(Port) l CAR l LR l Flow-base QOS Policy l Port-Based Mirroring l Flow-Based Mirroring l Cos-Based HOLB(Head of Line Blocking)Prevention l Packet Remarking l Flow Redirect l Flow Accounting l Priority Mapping l Port Trust Mode l Port Priority l Flow Filter l FlowControl&Backpressure l ACL

Traffic supervision l Supports CAR (Committed Access Rate) l Supports LR (Line Rate)

Congestion management

l FIFO, PQ, CQ, WFQ, CBQ and RTPQ

Congestion avoidance

l WRED/RED

Traffic shaping l Supports GTS (Generic Traffic Shaping)

QOS

Other QOS technologies

l FR QOS l MPLS QOS l MP QoS/LFI l cRTP/IPHC l ATM QOS l Sub-interface QOS l User Profile



Codec l G.711A law l G.711U law l G.723R53 l G.723R63 l G.729a l G.729R8

Media Process l RTP/cRTP l IPHC

Conformed standard l 802.11b l 802.11g l WPA l WPA 2 l WMM

MAC address management

l Multi-SSID, SSID hiding l Station aging, station keepalive l Power-saving mode, access authentication l 802.11 DCF scheduling l Short-retry threshold, long-retry threshold l Frame-rx lifetime, frame-tx lifetime l Frame fragmentation l Preamble-length type l AP radio interfaces record statistics l Automatically adjust transmit data rate l 802.11g protection l Multi-SSID-VLAN binding l Layer 2 forwarding l Layer 3 forwarding

Security l Open system authentication l Shared-key authentication l Advertisement of RSNA capability l Negotiate about WPA capability l 802.1x authentication l EAP l PMK (pairwise master key) l PTK (pairwise transient key) l WEP-40, WEP-104 l TKIP l AES-CCMP l Use different cipher suites in different ESS static blacklist l Supporting combination of multiple algorithms

Wireless

RF l RF-related parameters customizable

Maintainability Network management

l SNMP V1/V2c/V3 l MIB l SYSLOG l RMON l Web-based network management system l CWMP(TR-069)



Local management l Command line management l File system management l Auto-config l Dual image l Hotfix l User Profile

User access management

l Supports console interface login l Supports AUX interface login l Supports TTY interface login l Supports telnet (VTY) login l Supports SSH login l Supports FTP login l Supports X25 PAD login l XMODEM

4.2 System Performance Specifications of Quidway AR 4945 Routers

Table 4-2 System performance index of Quidway AR 4945 routers

Specification AR 49-45

Packet processing capacity 600Kpps

Frame delay (64Bytes in the maximum of 100% traffic)

< 0.1 ms

Frame loss rate (in the maximum of 110% traffic)

< 10%

System startup time <120s



5 Applications and Solutions

5.1 Network Application of Integrated Multiple Services By leveraging pinch cards directly embedded in the main board and the new VRP5 software platform from Huawei, the next generation of AR series routers provides a full set of services integrating switching, voice and security applications in order to implement a variety of services applications cost-effectively and conveniently, including voice applications.

Figure 5-1 Networking diagram for the integrated multi-service application

AR -NG router provide：VPN State firewallNATQOSFAX /PSTN /VOICEIntelligent management

BIMS

E 1/T1 High-density voiceNetwork analysis and

performance detectionSwitch

Branche Headquarters

Voice

Access

VPN

Access

Internet

Access

Voice and Fax

Servers and PC

Web servwers

Voice and Fax

AR 49

AR 19/29

AR 19/29



5.2 Network Application of Comprehensive Services in Enterprises

For small- and medium-sized businesses (SMBs), a full series of AR 19/29/49 routers can be used for comprehensive services networks, where AR 4945 routers serve as the core in enterprises and AR 19/29 series routers as the access devices in branches. A variety of services are available, including data, video, voice and fax. For large or ultra large enterprises, Quidway NE series high-end and core routers are used as the core in enterprises and AR 29/49 routers as the access devices on the edge and aggregation layer in branches. The following illustrates a typical network application where AR 4945 routers serve as the core.

Figure 5-2 Integrated networking diagram for the medium and big-sized enterprises

Headquarters

BranchOffice

AR 19/29

AR 49

PBX

PBX PBX

Client Client

Client

PC

PC

PC

Sever MCU

E1

Carrier

Network

AR 19/29

Quidway AR 4945 routers are used in the headquarters and connected to branch networks through Ethernet, digital data network (DDN), frame relay, X.25 or synchronous digital hierarchy (SDH) to form a backbone. Quidway AR 19/29 series routers are used in branches and connected to remote users through Ethernet, PSTN/ISDN to provide access services for home office and mobile office users.

Lots of network services are available, including popular services at present, for example, data transfer, VoIP, fax and video.

5.3 Carrier Network Applications Quidway AR 19/29/49 series is applicable to networks in enterprises. In addition, it can be used as routers on the aggregation or access layer in carriers’ networks to



form a comprehensive data communication network with high-end and core routers, high-end and core switches, low-end and mid-range routers and firewall. Here is a typical network.

Figure 5-3 Networking application in the carrier network or big-sized network

BackboneNE Series

Bank

AR 49

Switch Switch

AR 19/29

Switch

155M/1000M100M2M

Firewall

Quidway NE series high-end and core routers are used in the core to form a backbone ring network. NE40, NE16E and NE08E can function as core routers. 155M POS or GE links are used in the backbone. At the same time, dual devices are used in each stage for higher reliability of backbone.

AR 19/29/49 series routers are used on the aggregation layer and the access layer to access the networks on the corresponding layers. These devices use 155M, 100M Ethernet and 2M lines as their communication links.

Other high-end, mid-range and low-end devices from Quidway are used as switches and firewall in the network.

5.4 IPv6 Network Application The next generation of AR series routers provides a full support for IPv6, one of its important features. To protect user investments and the compatibility with the existing IPv4 networks, IPv4 is also supported. With dual-stacking technology, the next generation of AR series routers can ensure the concurrent operation of pure IPv4 devices and pure IPv6 devices in a network properly. The following figure is an IPv6 network application.



Figure 5-4 IPv6 network diagram

IPv4 Internet

IPv6 Internet

DDN/ATM/FR

DSTN/ISDN

Branch (IPv4)

Dial -in network(IPv4)

Branch stack

IPv4 host IPv6 host

Dual -stacking server

IPv6 over IPv 4

IPv6 / IPv4 hybrid link

IPv6 to IPv4 tunnelIPv6 link

IPv4 link

NAT -PT，DSTMHeadquarters

Dual -stacking server AR 19/29

AR 19/29

AR 19/29

AR 49

AR 49

AR 49

AR 4945 routers with IPv6/IPv4 dual-stacking technology are used in the headquarters and AR 19/29 series routers are used in branches. You can use IPv4 independently or IPv6/IPv4 dual-stacking technology for networking. For network communications from IPv6 to IPv4, tunneling also can be used to realize seamless communications between IPv6 and IPv4 networks.

5.5 MPLS VPN Network Application The next generation of AR series routers supports MPLS VPN technology that can be used to build a network. Quidway NE series high-end and core routers and AR 4945 routers are used in the headquarters; Quidway AR 19/29 series routers are used in branches or partners’ networks. . NE series routers can function as P devices and AR 4945 routers can function as PE devices to access the networks in branches. More than one VPN can be built for different services so as to guarantee security between them.

The following figure is a typical network.



Figure 5-5 MPLS VPN network application

PE

PE PE

PE

Quidway AR 49AR 49

AR 49

Network management

center in headquarters

Accounting center in

headquarters

Network management in

branch

Network management in

branch

OA or accounting center in

headquarters

OA or accounting center in

headquarters

Quidway AR19/29

Branch node 1 Branch node 2

VPN of Network

management

VPN of accounting

VPN of OATE tunnel

Logical services network

OA center in headquarters

MPLS BackboneQuidway

Quidway

Quidway AR19/29Quidway AR19/29

Quidway AR19/29

Quidway NE series high-end and core routers are used as P devices in the headquarters. AR 4945 routers are also used as PE devices to access the service networks of branches. With VPF technology, diverse services in branches are partitioned into different VPN networks through PE devices, guaranteeing the security and reliability of services.

AR 19/29 series routers are used in branches to connect to AR 4945 routers in the headquarters. Different services are separated through physical networks in branches. When there are many services in a physical network, the VRF feature of AR 49 can realize logical separation of service networks.

You can use different ways to build tunnels for MPLS VPN services. Using MPLS TE tunnel to carry VPN services is of great benefits in many aspects. As a result, VPN services have superior security and reliable QoS guarantee. Additionally, carriers can customize MPLS TE tunnels with different features to meet VPN user requirements.

5.6 Network Application of Voice Services The next generation of AR series routers provides mainstream voice communication protocols like H.323 and SIP for a variety of voice services such as emergency call/help in power off/dial-in policy/fax/E-PHONE and a variety of voice interfaces such as FXS/FXO/VE1 /E&M.

By leveraging an extensible structure, the next generation of AR series routers allocates DSP resources consistently for higher DSP resource utilization, higher access density and local TDM switching. On the one hand, it provides qualified voice



services. On the other hand, it avoids DSP resource occupation of local calls and saves DSP resources.

If you do not need voice services, AR series provide flexible pinch card design to help save investments.

Figure 5-6 Networking diagram for voice services

PBX

PBX

PBX

PBX

PBX

AR 49

GK

GK

E1

E1

AT0/E1

PBX

PSTN/ISDN

Headquarters

Level- 2 Center

Edge

Analog Phone /EHPONE

GWE1

IP Network

DDN/Frame Relay /IP

AR 29/49

Level- 3 Center

DDN /Frame Relay/IP

DDN /Frame Relay /IP

DDN/Frame Relay /IP

AR 29/49 AR 29/49

AR 29/49

AR 19/29 AR 19/29/49

AR 19/29

AR 29/49 AR 29/49

5.7 Network Application of Security Services By inheriting all security features of previous versions of VRP software platform and supporting the routing and switch convergence feature of VRP5 version, the next generation of AR series routers allows to implement a secure VPN network through the existing Internet.

AR 4945 routers are used as the core in enterprises and AR 19/29 series routers are used as the access devices in branches. By combining robust service performances of AR 29/49 routers, enterprises can implement a qualified and multi-services comprehensive security network.

The following is a typical security network application of AR 29/49 series routers.



Figure 5-7 Networking diagram for security services

00

`

Mobile User

Branch

SOHO

IntranetHeadquarters

Firewall

External Firewall

AR 19/29

AR 29

AR 19/29AR 49

CA

VPN Server

Internet Server

IDS

Switching Modules:VLAN Isolation

Port Access Authentication

QuidviewAuthentication

Log Server

PSIN/ISDN

L2TP+IP

SECL2TP+IPSEC

IPSEC

LAC

Combined with robust performances of security services, AR 49 routers are used in the headquarters as the application security service gateway. At the same time, it can function as an external firewall to protect the security of the Intranet. With VLAN separation and 802.1x functions, you can carry out security access authentication for the Intranet users directly through switching modules.

AR 29 routers are used in branches as access to VPN and IPSec. At the same time, AR 29 routers can function as VPN access gateway to provide VPN access for SOHO and mobile employees.

5.8 Network Application of Integrated Routing and Switch

The next generation of AR series routers has realized an integrated design and implementation in terms of software and hardware. You can use all features of routers and switches smoothly. For small- and medium-sized businesses (SMBs), a full series of AR 19/29/49 routers can be used for comprehensive services networks, where AR 4945 routers serve as the core in enterprises and AR 19/29 series routers as the access devices in branches. A variety of services are available, including data, video, voice and fax. For large or ultra large enterprises, Quidway NE series high-end and core routers are used as the core in enterprises and AR 29/49 series routers as the access devices on the edge and aggregation layer in branches. The following illustrates a typical network application where AR 4945 routers serve as the core.



Figure 5-8 Networking diagram of routing and switching convergence

Headquarters

BranchOffice

AR 19/29

AR 49

PBX

PBX PBX

Client Client

Client

PC

PC

PC

Sever MCU

E1

Carrier

Network

AR 19/29

Quidway AR 4945 routers are used in the headquarters and connected to branch networks through Ethernet, digital data network (DDN), frame relay, X.25 or synchronous digital hierarchy (SDH) to form a backbone.

Quidway AR 19/29 series routers are used in branches and connected to remote users through Ethernet, PSTN/ISDN to provide access services for home office and mobile office users.

Lots of network services are available, including popular services at present, for example, data transfer, VoIP, fax and video.



6 Ordering Guide

6.1 Host Table 6-1 List of AR 49 Router Chassis

Name Description remark

RT-AR 49-45-AC-OVS Quidway AR 49-45 Router Chassis (w/One AC Power), 4FIC, Overseas Version

-

RT-AR 49-45-DC-OVS Quidway AR 49-45 Router Chassis (DC), 4FIC, Overseas Version

-

RT-MPUF Quidway AR 49 Main Processing Unit, 2GE, 4SIC, 256F/256D

MPUF is required for AR 49-45, with two GE combo interfaces

RT-MSCA Quidway AR 49 Multi-Service Module

MSCA required if purchasing multiple service modules such as ESM, VPM and VCPM; with 2 ESM slots, and 1 VCPM slot, as well as 4 VPM slots

AC-PSR350-A10-OVS Quidway AR 49 Router AC Power Module,PSR350, Overseas Version

One AC power supply provided for RT-AR49-45-AC-OVS, being configured if 1+1 power supply backup is required

DC-PSR350-D10 Quidway AR 49 Router DC Power Module,PSR350

One DC power supply provided for RT-AR49-45-DC-OVS, being configured if 1+1 power supply backup is required



6.2 Interface Modules Available for AR 49-45 Table 6-2 List of SIC interface modules of AR 49-45


RT-SIC-4FSW 4-Port 10M/100M Ethernet L2 Switch Module(RJ45)

Two modules capable; only for slot 2 and slot 4; cables not provided for modules

RT-DSIC-9FSW 9-Port 10M/100M Ethernet L2 Switch Module(RJ45)

Two modules capable; cables not provided for modules

RT-SIC-1GEC 1-Port 10M/100M/1000M Combo Ethernet Interface SIC Module

Two modules capable; only for slot 2 and slot 4; either electrical interface mode or optical interface ; when both interfaces coexist, electrical interface is prior; in the optical interface mode, you need to purchase SFP optical module and cable independently

RT-SIC-1FEA 1-Port 10/100M Ethernet Electrical Interface Board(RJ45)

Two modules capable; only for slot 2 and slot 4

RT-SIC-1SAE 1-Port Enhanced Sync/Async Interface Card

The SAE provides DB28 interfaces. Choose DB28 cables for DTE/DCE according to specific serial interface protocols such as V.35, V.24, X.21, RS530 and RS449

RT-SIC-1AM-V3 1-Port Analog Modem Interface Module

With cables

RT-SIC-2AM-V3 2-Port Analog Modem Interface Module

With cables

RT-SIC-1ADSL 1-Port ADSL over POTS Interface Module

Two modules capable; only for slot 2 and slot 4; ADSL2+ capable, with cables; if splitter necessary, purchase it independently

RT-SIC-EPRI 1-Port E1/CE1/PRI Interface Card

Extra E1 cables of 75 ohm or 120 ohm required

RT-SIC-1E1-F 1-Port E1 Interface Card-Fractional

Extra E1 cables of 75 ohm or 120 ohm required

RT-SIC-2E1-F 2Port E1 Interface Card-Fractional

Extra E1 cables of 75 ohm o required

RT-SIC-1VE1 1-Port E1 Voice SIC Interface Module

RT-MSCA, RT-VCPM and RT-VPM32/VPM24/VPM16/VPM8 are required (the number of VPM depends on configuration demand)If the customer has had the modules such as MSCA, VCPM and VPM




available, those modules mentioned above are optional

RT-SIC-1FXS-V2 1-Port Analog Line Interface Card,FXS-V2

With cables

RT-SIC-2FXS-V2 2-Port Analog Line Interface Card,FXS-V2

With cables

RT-SIC-1FXO-V2 1-Port Analog Trunk Interface Card,FXO-V2

With cables

RT-SIC-2FXO-V2 2-Port Analog Trunk Interface Card,FXO-V2

With cables

RT-SIC-2FXS1FXO 2FXS+1FXO Voice Interface SIC Module

With cables

Table 6-3 List of FIC interface modules of AR 49-45


RT-FIC-16FSW 16-Port 10M/100M and 1-Port 1000BASE-T/1000BASE-X(COMBO) Ethernet L2 Switch FIC Interface Module

With one group of Combo interfaces available, Electrical interfaces prior; in the optical interface mode, you need to purchase SFP optical module and cable independently

RT-DFIC-24FSW 24-Port 10M/100M and 2-Port 1000BASE-T/1000BASE-X(COMBO) Ethernet L2 Switch FIC Interface Module

AR49-45 supports the full configuration of two modules, with 2 groups of Combo interfaces available; Electrical interfaces prior; in the optical interface mode, you need to purchase SFP optical module and cable independently

RT-FIC-1FE-V2 1-Port 10M/100M Ethernet Electrical Interface FIC Module(RJ45)

With cables

RT-FIC-2FE-V2 2-Port 10M/100M Ethernet Electrical Interface FIC Module(RJ45)

With cables

RT-FIC-1GBE-V2 1-Port 1000M Ethernet Electrical Interface FIC Module(RJ45)

With cables

RT-FIC-2GBE-V2 2-Port 1000M Ethernet Electrical Interface FIC Module(RJ45)

With cables

RT-FIC-1GEF-V2 1-Port 1000M Ethernet Extra optical module and optical fibers




Optical Interface FIC Module

required

RT-FIC-2GEF-V2 2-Port 1000M Ethernet Optical Interface FIC Module

Extra optical module and optical fibers required

RT-FIC-2SAE-V2 2-Port Enhanced Sync/Async Serial Interface FIC Module

Cable module provides DB28 interfaces; one cable for one interface; choose DB28 cables for DTE/DCE according to specific serial interface protocols such as V.35, V.24, X.21, RS530 and RS449


Cable module provides DB28 interfaces; one cable for one interface; choose DB28 for DTE/DCE according to specific serial interface protocols such as V.35, V.24, X.21, RS530 and RS449


Cable module provides DB28 interfaces; one cable is for one interface; choose DB28 for DTE/DCE according to specific serial interface protocols such as V.35, V.24, X.21, RS530 and RS449

RT-FIC-8ASE-V2 8-Port Asynchronous Serial Interface FIC Module(RJ45)

Extra cables required

RT-FIC-16ASE-V2 16-Port Asynchronous Serial Interface FIC Module(RJ45)

Extra cables required

RT-FIC-1E1-V3 1-Port E1/CE1/PRI Interface FIC Module

Extra E1 cables of 75 ohm or 120 ohm required; one cable for one interface




Extra E1 cables of 75 ohm or 120 ohm required; one cable is for one cable

RT-FIC-8E1(75)-V2 8-Port E1/CE1/PRI Interface FIC Module(75ohm)

Extra 8E1 cables of 75 ohm (04040117:CAB-75 ohm 8E1-3M-BNC) required; if the peer uses the cables of 120 ohm, choose 04026183 1 E1-120 ohm-75 ohm transfer box cables (BNC socket 14040083) for match of resistance




RT-FIC-2E1-F-V3 2-Port Fractional E1 Interface FIC Module


RT-FIC-4E1-F-V3 4-Port Fractional E1 Interface FIC Module


RT-FIC-8E1(75)-F-V2 8-Port Fractional E1 Interface FIC Module(75ohm)

Extra 8E1 cables of 75 ohm (04040117:CAB-75 ohm 8E1-3M-BNC) required; if the peer uses the cables of 120 ohm, choose 04026183 1 E1-120 ohm-75 ohm transfer box cables (BNC socket 14040083) for match of resistance

RT-FIC-1CE3-V3 1-Port E3/CE3 Interface FIC Module

Extra E3 cables required

RT-FIC-1VE1 1-Port E1 Voice FIC Interface Module

Extra MSCA boards and E1 cables required; choose different VPM modules according to the number of VOIP channels required by customers, with VPM32, VPM16, VPM24 and VPM8 available at present; choose VCPM and VPM modules if TDM switching is required between boards

RT-FIC-2VE1 2-Port E1 Voice FIC Interface Module

Extra E1 cables required; one cable for one interface; choose different VPM modules according to the number of VOIP channels required by customers, with VPM32, VPM16, VPM24 and VPM8 available at present; choose VCPM and VPM modules if TDM switching is required between boards

RT-FIC-4FXS-V3 4-Port Analog Line Interface FIC Module(FXS)

With cables

RT-FIC-4FXO-V3 4-Port Analog Trunk Interface FIC Module(FXO)

With cables

RT-FIC-1ATM-OC3 1-Port OC-3 ATM FIC Module

Extra transceiver(single-mode,multi-mode.long distance single-mode) and optical fibers required

RT-FIC-1AE3-V2 1-Port ATM over E3 Interface FIC Module

Extra E3 cables required

RT-FIC-1CPOS(E)-V2 1-Port Channelized POS 155M to E1 Interface

Channel capable; extra optical module and optical fibers required




Module (SFP, LC)

RT-FIC-1POS-V2 1-Port Packet over SDH/SONET Interface FIC Module

Extra optical module and optical fibers required

RT-FIC-24S24O 24FXO+24FXS High Density Voice Double FIC Interface Module

Extra cable need choose

RT-FIC-24FXS 24FXS HIGH DENSITY FXS FIC Interface Module

Extra cable need choose

The built-in modules of AR 49-45 have two types: Encryption Sub-cards and Voice Processing Sub-cards modules.

Table 6-4 List of Encryption Sub-cards of AR 49-45


RT-ESM-ANDE Advanced Network Data Encryption ESM Module

Required if hardware encryption is configured; built-in on the ESM of multi-service module; saving the slots

RT-ESM-SNDE Standard Network Data Encryption ESM Module

Required if hardware encryption is configured; built-in on the ESM of multi-service module; saving the slots

The multi-service Modules: RT-MSCA is required if such modules as ESM, VCPM and VPM are used; that is, such modules as ESM, VCPM and VPM cannot work without RT-MSCA. If the router of customer has been configured with MSCA, do not use another.

Table 6-5 List of Voice Processing Sub-cards Modules of AR 49-45


RT-VCPM Voice Co-processing Module

Required if voice interface of SIC-1VE1 is configured; it is only available for the local module although it has been integrated with FIC-1/2VE1; required if inter-module local switching necessary,

RT-VPM32 32-Channel Voice Processing Module

Optional for E1 voice module; 32-channel concurrent IP voice (G.711, G.723 and G.729) online capable



A Acronyms and Abbreviations

DFIC Double Width Flexible Interface Card

DMIM Double Width & Height Multi-Functional Interface Module

DSIC Double Width Smart Interface Card

ESM Enhanced Service Module

ESM-ANDE Enhanced Service Module- Advanced Network Data Encryption

ESM-SNDE Enhanced Service Module-Standard Network Data Encryption

FIC Flexible Interface Card

LPU Line Processing Unit

MIM Multi-Functional Interface Module

MPUF Main Process Unit F

MSCA Multi-service Card A

NQA Network Quality Analysis

SIC Smart Interface Card

VCPM Voice Co-Processing Module

VE1 Voice E1

VPM Voice Processing Module

VRP Versatile Routing Platform