Passport 8600 - OCS Distribution

Download Report

Transcript Passport 8600 - OCS Distribution

Passport 8600
Product Update
November 2002
NORTEL NETWORKS CONFIDENTIAL
Recap
• Modular Platform
–
–
–
–
Passport 8000 family
Layer 2 Switching
Layer 3 IP, IPMC and IPX Routing
Layer 4-7 Application Switching
• Ethernet
– 10/100TX, 100FX
– Gigabit SX, LX, ZX, XD & CWDM
– 10 Gigabit LR & LW
• ATM and SONET
– DS3, OC-3 and OC-12
– Gateway functions
– Switching/Routing done in Ethernet
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 2
Key Requirements
• High Availability
– 99999s Reliability means uptime all the time. Bandwidth,
Security and Quality of Service ensuring application delivery
with fail-over schemes that preserve application integrity.
• Operational Simplicity
– Simple to install, Simple to maintain, Simple to manage.
Reduced complexity through a ‘leaner’ more integrated
intelligent infrastructure design.
• Low Cost of Ownership
– Reduced purchase, installation and maintenance costs
through reduced complexity, the ability to consolidate
resources and a lower box count.
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 3
Flexible Platform
It fits in the wiring closet delivering high
density (384) 10/100 Ethernet ports for user
connections
It fits in the network center delivering high density
(128) Gigabit Ethernet ports for aggregation, riser
and MAN connections
It fits in the data center delivering high density
L4-7 application switching for server selection
& load balancing
It fits in MAN/WAN delivering
Gigabit Ethernet, 10 Gig E,
CWDM , ATM and SONET
connections
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 4
Wiring Closet Developments
• Hardware Developments
– 8632TXE – 32x10/100+2xGBIC
– 8616GTE – 16x1000Base-T
• Software Developments
–
–
–
–
Multimedia Filters – Single Click QoS deployment !
OPS 3.0 Support – Network based QoS deployment
Layer 2 Fast Fail-Over (HA mode)
Multicast Developments
•
•
•
•
•
PIM-SM
IGMP v.2 extensions
IGMP v.3 plus extensions
DVMRP Enhancements
Fast Join/Leave +LMQI timer
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 5
Network Center Developments
• Hardware Developments
– 10 Gig LAN Module – Single port 1319nm Serial
– ‘M’ Modules – Increased memory version of existing modules
• Increased MAC Tables
• Increased Route Tables – BGP Scaling
• Software Developments
–
–
–
–
–
Split-MLT - Spanning tree replacement
Hitless CPU Fail-Over (HA mode)
Jumbo Frames
ECMP (Equal Cost Multi-Path)
VRRP Enhancements
• Fast Hello Timers
• Backup Master Capability
– Multicast Enhancements
• Scaling 2000 S,Gs
• DVMRP Policies – Security & Control
• Static RPs - Interoperability
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 6
Data Center Developments
• Hardware Developments
– Alteon Web Switching Module – L4-7 Capabilities
• Load balancing, Content Switching, NAT
• 296k sessions per second
– 8616GTE – Gigabit Server Connectivity
• Software Developments
– Global, Local, Streaming Media and WAP Server Load Balancing
– Anti-DoS with delayed binding, Syn Alarms,
– WebOS 10.0
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 7
MAN/CO Developments
• Hardware Developments
–
–
–
–
–
8010CO Chassis – NEBS compliant 10 slot chassis
10 Gig WAN Module – Single port OC192 Framing
DS3 MDA – Twin port MDA for ATM modules
CWDM Optical Networking
‘M’ Modules – Increased memory version of existing modules
• Increased MAC Tables
• Increased Route Tables – BGP Scaling
• Software Developments
– BGP-4
• Superior Routing Table Scaling
– Hitless CPU Fail-Over (HA mode)
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 8
Management Developments
• Optivity Switch Manager
– Topology display of network
– Discovers network with a given seed
IP address
– Zoom-In/Zoom-Out for more/less
detail
– Launch point for “sub-manager”
applications
•
•
•
•
Device Manager
VLAN Manager
Multicast Manager
Multi-link trunk Manager
• Optivity Policy Services
– Single Click QoS provisioning
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 9
Security Updates
• SNMP v.3
–
HMAC-MD5-96 or HMAC-SHA-96
• Secure Shell (SSH)
– Server Mode
–
–
DES/3DES
Secure file transfers
• Encrypted Password Files
– Logging & Traps
• Radius Enhancements
– Accounting
– Authentication – Access Challenge
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 10
Campus LAN Solution
NORTEL NETWORKS CONFIDENTIAL
Traditional Design
Access Layer
PCs, Printers, etc.
High Density 10/100
L2 Ethernet switching
Floor 1…………..Floor x
Design Issues
Aggregation Layer
Consolidation point
Mixture 10/100 & Gigabit
L2/L3 Ethernet switching
Building
Core
Nucleus, Servers, Metro
Campus
High Density Gigabit
L3 Routing
At layer 2 these extra links need to
be blocked to prevent network
loops. This is usually implemented
using a protocol called spanning
tree (802.1d)
Spanning tree protocol prevents
these loops by deciding the best
links to use and blocking all the rest.
Basically you’re paying for stuff you
can’t use !
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 12
Two-Tier Infrastructure design
Edge
High density 10/100
Ethernet ports for user
connections and Gigabit
Ethernet for riser
connections. Access
security controls and
QoS mapping.
Core
High Density Gigabit Ethernet for
riser connections. ATM, SONET and
Optical connections for MAN/WAN
access and L4-7 Applications
switching for Data Center
integration.
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 13
S-MLT Link Aggregation
• Split Multi-Link Trunking
– A Fresh approach to the spanning tree
problem
• Description
–
–
–
–
Edge switches normally dual-homed for resilience.
Current network rules mean that one connection must
be blocked.
Split MLT makes two core switches act as one.
Now both Links are active and appear as one.
• Advantages
–
–
Fail-over reduced to <1sec
No wasted - You can use what you pay for!
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 14
Stegosaurus Design
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 15
Optical Metro Solution
NORTEL NETWORKS CONFIDENTIAL
Metro Bandwidth Challenge
• New multimedia applications require more bandwidth
– Multi channel Gigabit metro solution is the answer, but…
– Normally this would require
•
•
Multiple expensive leased fiber runs for resilience or
Expensive and complex DWDM equipment to reduce fibers
• Challenge is to provide High bandwidth services,
while….
•
•
•
Keeping leased fiber costs to a minimum
Without wasting fibers (dead sparing)
Maintaining reliability (Application state)
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 17
3 Part Metro Optical Solution
16 Gigs On
a Single
Fiber
1. Colored GBICs in Switches
–
–
Standard interface
8 ‘flavors’ Long reach (90km)
1. Optical MUX
–
–
Fiber Saver
Distributed 10 Gig Solution 8 Gigs in
One fiber Out
1. Optical Add/Drop MUX
–
–
Splits Wavelength in two
Doubles the bandwidth
NORTEL NETWORKS CONFIDENTIAL
Breakout one,
pass the rest
Passport 8600 Update - 18
CWDM Metro Design
Gigabit channel bonded
together with MLT for high
bandwidth and faster fail-over
OADM
1 Gigabit East
and 1 Gigabit
West deliver
resiliency
Simple plug and play operation
reduces deployment costs
OMUX
OMUX
8600
8600
NORTEL NETWORKS CONFIDENTIAL
‘RED’ channel used for
additional IST link to increase
bandwidth and redundancy in a
distributed POP environment.
Passport 8600 Update - 19
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 20
Backup Information
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Campus
3 Slot chassis with SX Gig blades,
configured as an L2 aggregator device
with QoS enforced through Diffserv
interrogation and hardware queuing
10 Slot CO chassis with mixture of SX,
LX and XD Gig, configured as on ramp
to Service provider OE network.
10 Slot chassis with mixture of SX and
LX Gig blades, configured as an L3 core
routing device with IP routing and QoS
enforced through Diffserv interrogation
and hardware queuing
10 Slot chassis with 10/100 blades,
configured as an L2 edge device with
QoS enforced through Diffserv marking
and hardware queuing
6 Slot chassis with mixture of SX Gig
and 10/100 Gig blades, configured as an
L2 edge device in the server farm.
Intelligent content switching through
WSM blade.
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 22
Web Switching Module
•
Session Processing:
–
–
–
–
–
–
–
–
•
Connection setup
Processing traffic filters
Session parsing
Server selection
Splicing connections
Translating session addresses
Metering and controlling bandwidth usage
Collecting statistics
Background Functions:
–
–
–
–
Updating network topology
Health-checking servers, applications and server sites
Measuring server performance
Providing fault tolerance
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 23
Passport 8000 Chassis Options
Sparing Option
Power
CPU/Switch Fabric
3 Slot

6 Slot
10 Slot
10 Slot CO








Cooling

NEBS
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 24
Ethernet Modules
• Hot swappable
• Wire speed routing
• Gigabit connectivity with copper and fiber
Module
Ports
Type
Density
8648TXE
48
10/100 BaseTX (RJ45)
384
8624FXE
24
100 BaseFX (MT-RJ)
192
8608SXE
8
1000 BaseSX (SC)
64
8608GBE
8
1000 Base GBIC (GBIC)
64
8608GTE
8
1000 BaseTX (RJ-45)
64
8616SXE
16
1000 BaseSX (MTRJ)
128
8632TXE
32+2
10/100 BaseTX (RJ-45)+GBIC
256+16
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 25
ATM and SONET Modules
• Hot Swappable
• RFC 1483 routed and bridged PVCs
• 512 PVCs per Module
Module
Ports
Type
Density
8672 ATME
2 MDAs
4 port OC-3
1 port OC-12
16 OC-3s
4 OC-12s
8683 PoSE
3 MDAs
2 port OC-3
1 port OC-12
24 OC-3s
12 OC-12s
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 26
Express Classification (XC)
CPU
• Custom ASIC Filtering
• Wire speed L2-4 Classification
• Application Intelligence
– Source – IP, Subnet or MAC
– Destination – IP, Subnet or MAC
– Application - TCP/UDP socket
DA
• Traffic Prioritization
SA
policy
filters
policy
filters
XC
XC
IP-SA IP-DA
TCP-Port
– 802.1p/802.1Q for Layer 2
– DiffServ (RFC2474) for IP
– Port, MAC address, VLAN for
non-IP traffic
• Hardware queuing
– 8 queues per port: strict and/or
weighted
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 27
DATA
FCS
To I/O card
Switch Fabric/
CPU Module
To I/O card
4
3
To CPU
5
6
I/O Module
Queue
Manager
XC
2
6. Packet is sent to outbound I/O card and
buffered if necessary
7. Packet is transmitted on outbound
interface
1
PowerPC
CPU
7
I/O
Interface
This Entire Process
Always Takes Less
than 10uS
NORTEL NETWORKS CONFIDENTIAL
Passport 8600 Update - 28
Memory
To I/O card
Switch
Fabric
To I/O card
1. Packet arrives
2. Queue Manager sends packet header to
XC
3. XC implements packet policy, sends
packet to Queue Manager
4. Queue Manager sends packet to Switch
Fabric
5. Switch fabric schedules packet forwarding
into one of eight queues based on priority
To I/O card
Forwarding
To I/O card
To I/O card
Switch
Fabric
To CPU
3. CPU copies new information to all
XCs simultaneously
XC
All updates performed
out of band
1
Queue
Manager
2
I/O
Interface
NORTEL NETWORKS CONFIDENTIAL
PowerPC
CPU
Passport 8600 Update - 29
3
I/O Module
Memory
2. Route/SPT updates and unknown
addresses passed to CPU
Switch Fabric/
CPU Module
To I/O card
1. Policy downloaded by CPU to
all XCs at startup
To I/O card
To I/O card
Learning