Académique Documents
Professionnel Documents
Culture Documents
Product Description
Issue Date 01 2013-06-30
Copyright Huawei Technologies Co., Ltd. 2013. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.
Notice
The purchased products, services and features are stipulated by the contract made between Huawei and the customer. All or part of the products, services and features described in this document may not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and recommendations in this document are provided "AS IS" without warranties, guarantees or representations of any kind, either express or implied. The information in this document is subject to change without notice. Every effort has been made in the preparation of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this document do not constitute a warranty of any kind, express or implied.
Website:
Issue 01 (2013-06-30)
Symbol Conventions
The symbols that may be found in this document are defined as follows. Symbol Description
DANGER
Indicates a hazard with a high level or medium level of risk which, if not avoided, could result in death or serious injury. Indicates a hazard with a low level of risk which, if not avoided, could result in minor or moderate injury. Indicates a potentially hazardous situation that, if not avoided, could result in equipment damage, data loss, performance deterioration, or unanticipated results. Provides a tip that may help you solve a problem or save time.
WARNING
CAUTION
TIP
Issue 01 (2013-06-30)
ii
Symbol
NOTE
Description Provides additional information to emphasize or supplement important points in the main text.
Security Conventions
l Password setting When configuring a password in plain text, the password is saved in the configuration file in plain text. The plain text has high security risks. The cipher text is recommended. To ensure device security, change the password periodically. When you configure a password in cipher text that starts and ends with %@%@ (the password can be decrypted by the device), the password is displayed in the same manner as the configured one in the configuration file. Do not use this setting. l Encryption algorithm Currently, the device uses the following encryption algorithms: DES, AES, SHA-1, SHA-2, and MD5. DES and AES are reversible, and SHA-1, SHA-2, and MD5 are irreversible. The encryption algorithm depends on actual networking. If protocols are used for interconnection, the locally stored password must be reversible. It is recommended that the irreversible encryption algorithm be used for the administrator password. l Personal data Some personal data may be obtained or used during operation or fault location of your purchased products, services, features, so you have an obligation to make privacy policies and take measures according to the applicable law of the country to protect personal data.
Change History
Updates between document issues are cumulative. Therefore, the latest document issue contains all the updates made in previous issues.
Issue 01 (2013-06-30)
iii
Contents
Contents
About This Document.....................................................................................................................ii 1 Product Positioning and Characteristics...................................................................................1
1.1 Product Positioning.........................................................................................................................................................2 1.2 Product Characteristics...................................................................................................................................................2 1.2.1 Carrier-Class Reliability..............................................................................................................................................3 1.2.2 Service Integration Capability.....................................................................................................................................3 1.2.3 Hardware Extensibility................................................................................................................................................3 1.2.4 Remote Maintenance Capability.................................................................................................................................3
2 Network Applications..................................................................................................................4
2.1 WAN Access..................................................................................................................................................................5 2.2 VPN Access....................................................................................................................................................................6 2.3 Application of Enterprise Intranet Security....................................................................................................................6 2.4 Voice Application...........................................................................................................................................................7 2.5 FTTx...............................................................................................................................................................................8 2.6 OSP Application.............................................................................................................................................................9
3 Product Characteristics...............................................................................................................11
3.1 Feature List...................................................................................................................................................................12 3.2 Key Features.................................................................................................................................................................20 3.2.1 Voice..........................................................................................................................................................................21 3.2.2 WAN..........................................................................................................................................................................23 3.2.3 VPN...........................................................................................................................................................................24 3.2.4 Security......................................................................................................................................................................25 3.2.5 QoS............................................................................................................................................................................27 3.2.6 WLAN.......................................................................................................................................................................28 3.2.7 IPv6............................................................................................................................................................................29
4 Appearance...................................................................................................................................30
4.1 AR150 Series................................................................................................................................................................31 4.2 AR160 series.................................................................................................................................................................35 4.3 AR200 Series................................................................................................................................................................37 4.4 AR1200 Series..............................................................................................................................................................41 4.5 AR2200 Series..............................................................................................................................................................45 4.6 AR3200 Series..............................................................................................................................................................51 Issue 01 (2013-06-30) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd. iv
Contents
6 Technical Specifications.............................................................................................................57
6.1 AR150 series.................................................................................................................................................................58 6.2 AR160 series.................................................................................................................................................................60 6.3 AR200 series.................................................................................................................................................................62 6.4 AR1200 series...............................................................................................................................................................64 6.5 AR2200 series...............................................................................................................................................................66 6.6 AR3200 series...............................................................................................................................................................70
Issue 01 (2013-06-30)
Issue 01 (2013-06-30)
IP/MPLS
Laptop PC
AR
AR SIPUE
Enterprise headquarters
Fax
l AR150&160&200 series, AR2201-48FE and AR2202-48FE do not support subcards. l The WSIC card can be installed in the WSIC or XSIC slot.
Issue 01 (2013-06-30)
2 Network Applications
2
About This Chapter
2.1 WAN Access 2.2 VPN Access 2.4 Voice Application 2.5 FTTx 2.6 OSP Application
Network Applications
Issue 01 (2013-06-30)
2 Network Applications
WAN interfaces depend on the device model and the boards installed.
As shown in Figure 2-1, enterprise A accesses the Internet using ADSL; enterprise B accesses the Internet using FE and E1/CE1 dual-uplink (E1/CE1 link functions as the backup link of the FE link); enterprise C accesses the Internet using G.SHDSL; enterprise D accesses the Internet using 3G. Figure 2-1 WAN access
Enterprise A
Enterprise B
AR AR ADSL E1/CE1 3G FE
I n t e rn e t
G.SHDSL AR
AR
Enterprise C
Enterprise D
Issue 01 (2013-06-30)
2 Network Applications
Headquarters AR L2TP/SSL/IPSEC VPN GRE/MPLS/IPSEC VPN Employee on business trip GRE/MPLS/IPSEC VPN AR DSVPN AR Branch B
I n t e r n et
Branch A
2 Network Applications
As shown in Figure 2-3, the enterprise intranet is connected to the external network through the AR. The AR can prevent external users from accessing the enterprise intranet. For example, external users can access the enterprise external server but cannot access the enterprise internal server. The financial department and marketing department have individual LANs on the intranet. To allow the users on the intranet to access the external network, configure network address translation (NAT) on the intranet. The AR ensures information security on the enterprise intranet in the following modes: l Enabling packet filtering or stateful firewall on the AR to isolate the enterprise intranet from external networks. This prevents unauthorized external users from accessing the intranet. The AR provides network access control (NAC) to restrict the access permissions of internal users. This ensures that only authorized users can access the intranet.
Financial department
Marketing department
Internal server Data that is allowed to pass through Data that is not allowed to pass through External data
l Among the AR150 series routers, only the AR157VWs and AR158EVWs support the voice features. Among the AR200 series routers, only the AR201VW-Ps, AR207Vs, AR207VWs and AR207V-Ps support the voice features. Among the AR1200 series routers, only the AR1220Vs and AR1220VWs support the voice features. Among the AR2200 series routers, only the AR2204s, AR2220s, AR2240s support the voice features. To use the voice feature on the AR2200 and AR3200 series routers, you are advised to install the DSP module. l To provide voice services for POTS users on AR1200, AR2200 ,and AR3200 series routers, 4FXS1FXO, 16FXS or 32FXS board is required. Thereinto, the AR1200 series routers do not support 32FXS board. l To provide voice services for ISDN users on AR1200, AR2200 ,and AR3200 series routers, 2BST board is required.
Issue 01 (2013-06-30)
2 Network Applications
An enterprise can build a voice communication system over the IP network, reducing operating expenses (OPEX). Within the voice communication system, an AR can function as an SIP access gateway (AG). The AR connects to POTS users (analog phones or fax machines) and SIP user equipment (UE) users (IP phones or PC software terminals) through FXS or Ethernet interfaces. The AR connects to the PSTN through FXO or E1 interfaces or to the IP network through Ethernet interfaces. Based on branch locations, the centralized or distributed call control model can be used. If all branches within an enterprise use the same number segment, the centralized call control model is recommended. If an enterprise has many branches that use different number segments, the distributed call control model is recommended.
2.5 FTTx
By working with the optical line terminal (OLT), the ARs function as optical network unit (ONU) to provide fiber access to the enterprise. As shown in Figure 2-4, the ARs are connected to upstream devices through a passive optical network (PON), and provide fiber-to-the-home, fiber-to-the-building, and fiber-to-the-enterprise services. The ARs provide the fiber-to-the-x (FTTx) service by connecting to upstream PON devices. This provides higher bandwidth than twisted-pair cable and guarantees the development of future high-speed services. Figure 2-4 FTTx
ONU
PON
ONU
ODN
ONU
Issue 01 (2013-06-30)
2 Network Applications
VMware/Linux/Windows
Hardware
SAE Board AR Router
NOTE
SAE boards have two modules: SAE220 (WSIC) and SAE550 (XSIC). Different devices can be equipped with SAE boards of different quantities and models.
Table 2-1 Support for SAE boards Model AR150&160&200 series AR1200 series AR2201-48FE AR2202-48FE AR2204 AR2220 AR2240
Issue 01 (2013-06-30)
SAE220 0 1 0 0 2 2 4
SAE550 0 0 0 0 0 1 2
9
2 Network Applications
Model AR3260
SAE220 6
SAE550 4
Issue 01 (2013-06-30)
10
3 Product Characteristics
3
About This Chapter
3.1 Feature List 3.2 Key Features
Product Characteristics
Issue 01 (2013-06-30)
11
3 Product Characteristics
MAC
None
STP
None
SEP
None
Link aggregation
None
LLDP
None
Issue 01 (2013-06-30)
12
3 Product Characteristics
Feature
Subfeature WLAN
Difference Only the AR151W-P, AR157W, AR157VW, AR158EVW, AR201VW-P, AR207VW, AR1220W, and AR1220VW support WLAN-FAT AP features. WAN interfaces depend on the device model and the boards installed.
WAN
WAN interface
WAN interfaces: FE/GE interfaces, synchronous and asynchronous serial interfaces, Async interfaces, CE1/CT1 PRI interfaces, E3, E1T1-F interfaces, 3G/LTE cellular interfaces, ISDN BRI interfaces, POS interfaces, CPOS interfaces, ADSL interfaces, VDSL interfaces, G.SHDSL interfaces, E1IMA interfaces, and xPON interfaces Link layer protocols such as Point-to-Point Protocol/ Multilink Protocol (PPP/ MLPPP), Frame Relay/ Multilink Frame Relay (FR/ MFR), High-Level Data Link Control (HDLC), and ATM, and Operation, Administration, and Maintenance (OAM) mechanisms complying with link layer protocols Multi chassis MLPP and PPP compression FR compression and FR over IP Access of PPPoE IPv4 or IPv6 host and PPPoE dial-up
On the AR150, AR160, and AR200, the link layer protocol cannot be FR, MFR, or HDLC.
Dialing
Dial control center (DCC) function and logical interfaces that transmit the dialing service EPON and GPON working modes, and connection with an OLT
None
PON
The AR150 series, AR160 series, and AR200 series do not support PON.
Issue 01 (2013-06-30)
13
3 Product Characteristics
Feature
Description Bridge between Ethernet interfaces and WAN interfaces HDLC over TCP 3G/LTE uplink, allowing access to 3G/LTE networks using the DCC function (the AR provides the 3G/LTE data card and 3G/LTE SIC card) Address resolution for Ethernet IPv4 and Ipv6 address management, TCP/UDP socket, ICMP, ping and tracert, and UDP helper IP FRR IPv6 over IPv4 tunnels and IPv4 over IPv6 tunnels IP unicast PBR (IPv4/IPv6), including local PBR, interface PBR, and smart policy routing (SPR)
Difference None
None None
IP applicatio n
None None
None None
None
DNS
DNS client(IPv4/IPv6), DNS None proxy(IPv4/IPv6), and dynamic DNS (DDNS) client (IPv4) DHCP client(v4/v6), DHCP relay(v4/v6), and DHCP server(v4/v6), and DHCP security NAT, port address translation (PAT), port application mapping (PAM), Easy NAT, and NAT server, providing application layer gateways (ALG) for each application Basic routing functions None
DHCP
NAT
None
IP routing
None
Issue 01 (2013-06-30)
14
3 Product Characteristics
Feature
Subfeature RIP and RIPng OSPFv2 and OSPFv3 ISIS and ISISv6 BGP and BGP4+ Routing policy
Description Routing protocol Routing protocol Routing protocol Routing protocol Basic routing policy functions IGMP basic function, IGMP snooping, and IGMP proxy Basic MLD functions and MLD snooping
Difference None None None None None Only the AR2200 series and AR3200 series support IGMP snooping. Only the AR2200 series and AR3200 series support MLD snooping.
Multicast
IGMP
MLD
Multicast routing
Multicast route management, None multicast route load balancing, and sourcespecific multicast (SSM) mapping PIM-DM (IPv4/IPv6), PIMSM (IPv4/IPv6), and PIM SSM (IPv4/IPv6) Inter-domain (PIM-SM domain) multicast routing Modular traffic classification Mapping between local priorities, 802.1p priorities, DSCP priorities, and EXP priorities Single-rate-two-bucket and two-rate-two bucket policy based on traffic classifiers, permanent virtual circuits (PVCs)/VLANs/data link connection identifiers (DLCIs), and interfaces None
Traffic policing
None
Issue 01 (2013-06-30)
15
3 Product Characteristics
Feature
Description Traffic shaping based on traffic classifiers, PVCs/ VLANs/DLCIs, and ports, traffic shaping adaptation, and three-level traffic shaping Congestion management based on traffic classifiers, PVCs/VLANs/DLCIs, and ports; queue mechanisms including PQ, WRR, DRR, WFQ, PQ+WRR/PQ+DRR/ PQ+WFQ, and CBQ Priority-based weighted random early detection (WRED) and tail drop Hierarchical Quality of Service (HQoS) implements hierarchical scheduling based on queues and differentiates services and users. The device provides SACbased traffic classifiers to detect and identify Layer 7 information in packets and packets of dynamic protocols such as HTTP, FTP, and RTP, and implements fine-grained QoS according to the classification result. AAA for administrators and access users, including local, RADIUS, and TACACS AAA DMZ firewall, packet filtering firewall, stateful firewall, blacklist and whitelist, and attack detection Traffic suppression based on ports
Difference None
Congestion management
None
None
None
None
Security
AAA
None
Firewall
None
Traffic suppression
None
Issue 01 (2013-06-30)
16
3 Product Characteristics
Feature
Description 802.1x authentication, MAC address authentication, MAC address bypass authentication, and direct MAC address authentication based on users and ports; web authentication and guest VLAN for access users Device protection measures, including CPU attack defense and attack source tracing. Suppression of ARP packets from the user side and network side, ARP antispoofing, ARP gateway attack inspection, and dynamic ARP inspection (DAI) ICMP anti-attack, URPF, IP source guard and DHCP snooping Certificate request, update, and verification HTTPS server function, ensuring transmission security between users and devices using SSL features such as data encryption and identity verification Traffic classification based on physical ports, Layer 2 information, IP protocols, and TCP/UDP ports. Backup between WAN interfaces, ensuring service reliability Association between interface backup and NQA/ BFD/routing
Difference None
None
IP security
Only the AR2200 series and AR3200 series support IP source guard and DHCP snooping. None None
PKI HTTPS
ACL
None
Reliabilit y
Interface backup
None
VRRP
None
Issue 01 (2013-06-30)
17
3 Product Characteristics
Feature
Subfeature BFD
Description Single-hop and multi-hop BFD, BFD for VRRP, and BFD for routing protocols P2P Ethernet fault management defined in IEEE 802.3ah. Managing boards, power supply units, fans, and elabels In-service upgrade, rollback, and patch installation Port- and flow-based mirroring LAN-side remote power supply
Difference None
ETHOAM
None
Information center monitoring Version management Mirroring Remote PoE power supply
None
None None Only the AR151W-P, AR201VW-P, AR207V-P, AR1220V, AR1220W and AR1220VW support the PoE features. None
Internal web management system, providing GUI to manage and maintain devices Automatic deployment using a universal serial bus (USB) flash drive; Auto-Config function for the entire network SNMP agent, fault management (FM), and trap switch control (TSC) Network connectivity detection NTPv4/v6 and time synchronization for traditional IP networks Monitoring and traffic statistics for traffic on a network segment CWMP for remotely managing AR devices
None
SNMP
None
None None
RMON
None
CWMP
None
Issue 01 (2013-06-30)
18
3 Product Characteristics
Feature
Subfeature NetStream
Description Fixed packet sampling and packet statistics collection, with flow output in V5, V8, V9, or V10 format Detecting the performance of protocols running on the network Information statistics: l Collecting statistics on all IPv4 data flows passing the device l Collecting statistics on the IPv4 data flows with specified attributes l Collecting statistics on all IPv4 data flows passing the device based on IP precedence
Difference None
None
None
MPLS
Static label switched path (LSP) and penultimate hop popping (PHP); MPLS LSP QoS MPLS LDP MPLS TE LDP FRR, TE FRR, and VPN FRR MPLS LDP over GRE, L2VPN over GRE, and L3VPN over GRE IPV6 over MPLS Interconnecting headquarters and branches using IKE V1/ V2 IPSec tunnels; hardwarebased MD5 and SHA algorithms; AES, DES, and 3DES algorithms Virtual gateway, front-door VPN function, and management of SSL VPN users and SSL VPN services
The AR150, AR160, and AR200 series routers do not support MPLS.
MPLS LDP MPLS TE MPLS FRR MPLS over GRE 6VPE VPN IPSec VPN
None
SSL VPN
None
Issue 01 (2013-06-30)
19
3 Product Characteristics
Feature
Subfeature DSVPN
Description Dynamic setup of a data forwarding channel between hubs Functioning as the LAC or LNS and allowing concurrent user access on multiple channels BGP L3VPN GRE tunnel for interconnecting the headquarters and branches Used together with IPSec. IPSec cannot protect multicast data, but GRE VPN can protect multicast data
Difference None
L2TP
None
None None
Voice
Line configuratio n
Foreign exchange station (FXS), foreign exchange office (FXO), VE1, ISDN, BRI and PRI line access and configuration The upper-layer device such as soft switch performs call control and management. The AR communicates with the soft switch by using the SIP protocol. The AR provides the Branch Exchange for Survivable Telephony (BEST) function. The AR provides SIP over TLS.
SIP AG
Only the AR157VW, AR158EVW, AR201VW-P, AR207V, AR207VW, AR207V-P, AR1220V, AR1220VW, AR2204, AR2220, AR2240, and AR3200 support voice features.
H.248AG
The upper-layer device such as soft switch performs call control and management. The AR communicates with the soft switch by using the H. 248 protocol.
Issue 01 (2013-06-30)
20
3 Product Characteristics
3.2.1 Voice
In addition to broadband services, such as video on demand (VOD) and live data and video, the AR provides high-quality voice service for terminal users.
NOTE
l Among the AR150 series routers, only the AR157VWs and AR158EVWs support the voice features. Among the AR200 series routers, only the AR201VW-Ps, AR207Vs, AR207VWs and AR207V-Ps support the voice features. Among the AR1200 series routers, only the AR1220Vs and AR1220VWs support the voice features. Among the AR2200 series routers, only the AR2204s, AR2220s, AR2240s support the voice features. To use the voice feature on the AR2200 and AR3200 series routers, you are advised to install the DSP module. l To provide voice services for POTS users on AR1200, AR2200 ,and AR3200 series routers, 4FXS1FXO, 16FXS or 32FXS board is required. Thereinto, the AR1200 series routers does not support 32FXS board. l To provide voice services for ISDN users on AR1200, AR2200 ,and AR3200 series routers, 2BST board is required.
SIP AG
Access gateway (AG) devices provide various access modes and convert various services into a uniform format that can be transmitted. The AG communicates with the soft switch by using the SIP protocol. SIP-based AGs are called SIP AGs. When an AR functions as the SIP AG, the upper-layer devices such as soft switch control and manage calls. The AR supports the following services. Table 3-2 Services supported by a SIP AG Service Type Basic voice service Description The basic voice service is the basic call connection function, including intra-office calls, local calls, national toll calls, international toll calls, and transit calls. The third-party service allows a calling party or called party in a conversation to call a third party without ending the current conversation. Then the calling party or original called party can implement a three-party conversation or talk to the other two parties. When user A is talking with user B over the phone and at this moment user C is calling user A, user A hears a call waiting tone, indicating that there is a call waiting for user A. The message waiting indicator (MWI) service allows a user to read unread messages or leave messages. When the called user is busy, the MWI is on, indicating that there are leave messages. The user that registers the MCID service with the carrier can query the phone number of the attacker that initiates malicious calls after performing relevant operations.
Three-party service
Call waiting
MWI service
Issue 01 (2013-06-30)
21
3 Product Characteristics
Description The call transfer service allows the called party to transfer an incoming call to a third party by pressing the hookflash so that the calling party establishes a connection with a new called party. The call conference service allows more than three parties to talk to each other. The CLIP service displays the calling number in onhook state or offhook state (for call waiting). The displayed information includes the phone number, name, date, and time. The CLIR service does not display the phone number of a calling party on the terminal of a called party. The distinctive ringing service plays different ring tones for incoming calls from different calling parties. The differentiated ringback tone service enables the SIP AG to play different ring tones for ringback tones. The AoC service displays the charge rate, fee notification during a call, and total fee of the call. If the SIP AG finds an urgent call, the SIP AG inserts the urgent call flag into the SIP message. When the called number is busy, the CCBS service enables the SIP AG to monitor the called party status. When the called party is idle, the SIP AG notifies the calling party and determines whether to make a call according to the status of the calling and called parties. Multiple MSN numbers can be configured on a POTS interface. l Instant hotline service: After a user picks up a phone, the SIP AG dials the hotline number for the user. l No dialing within a long time after picking up the phone: If a user does not dial any number within the specified period of time after picking up the phone, the SIP AG dials the hotline number for the user.
Call conference service Calling line identification presentation (CLIP) service Calling line identification restriction (CLIR) service Distinctive ringing service Differentiated ringback tone service Advice of charge (AoC) service Urgent call process Completion of Calls to Busy Subscriber (CCBS) service
The anonymous call service enables the called party not to view information about incoming calls. The auto-switching service enables SIP AGs in enterprise branches to manage local calls when communication with the headquarters voice server fails.
Issue 01 (2013-06-30)
22
3 Product Characteristics
H.248AG
H.248 is a media gateway control protocol through which the media gateway controller (MGC) controls the media gateway (MG) so that interoperability is implemented between different media.
3.2.2 WAN
WAN uses the interfaces such as Ethernet, E1, T1, ADSL, VDSL, G.SHDSL, CPOS, POS, 3G, and synchronous/asynchronous serial interfaces. The physical links on these interfaces can run the FR, PPP, and HDLC protocols.
Frame Relay
Working at the data link layer of the Open System Interconnection (OSI) model, Frame Relay (FR) uses simple methods to transmit and exchange data. On a frame relay (FR) network, virtual circuits connect two FR devices. A physical line on the FR network provides multiple VCs. A VC defines an FR channel by using the data link connection identifier (DLCI), and detects and maintains the VC status by using the local management interface (LMI). Multilink frame relay (MFR) is a cost-effective solution provided for FR users. MFR (FRF.16) implements the multilink frame relay function on the user-to-network interfaces (UNIs). The FR compression technologies compress FR packets to save network bandwidth, reduce network load, and improve data forwarding on the FR network. The AR supports FRF.9 (FRF. 9 stac) and FRF.20 (FRF.20 IPHC).
PPP
The point-to-point protocol (PPP) is used at the data link layer of the OSI model as well as at the link layer of TCP/IP. PPP transmits data from one point to another through synchronous links and asynchronous links that support full duplex. PPP provides a complete authentication mechanism. To set up a PPP connection, users must pass authentication, ensuring a secured connection. Multilink PPP (MP) is a technique that bundles multiple PPP links together to increase bandwidth. It can be applied to the interfaces that support PPP, such as serial interfaces and lowspeed Packet over SDH (POS) interfaces.
PPPoE
A Point-to-Point Protocol over Ethernet (PPPoE) network consists of an Ethernet containing many hosts. It accesses the Internet through a remote access device. An AR can create a PPP session with the remote end by using PPPoE, and implement access control and accounting. An AR can function as the PPPoE server to connect to different types of PPPoE clients on the Ethernet or function as a dial-up PPPoE client.
ATM
ATM is connection-oriented. Each VC is identified by a Virtual Path Identifier (VPI) and a Virtual Channel Identifier (VCI). One pair of VPI/VCI values is useful only on a link segment between ATM nodes. If a connection is broken, the relevant VPI/VCI values are released.
Issue 01 (2013-06-30) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd. 23
3 Product Characteristics
The Asymmetric Digital Subscriber Line (ADSL) , VDSL and G.Single-pair High Speed Digital Subscriber Line (G.SHDSL) interfaces of the ARs support the Asynchronous Transfer Mode (ATM).
HDLC
The High-level Data Link Control (HDLC) is a typical bit-oriented synchronization data control protocol. It adopts the full-duplex mode and CRC check. Its transmission control function is independent of the processing function, and it features control capabilities and can be flexibly used. In HDLC, Keepalive packets are used to detect the link status. On the AR, you can set the interval for sending Keepalive packets by setting the polling interval.
ISDN
The ISDN protocol references the Open Systems Interconnection (OSI) model and implements functions of the physical layer, data link layer, and network layer on UNI interfaces. ISDN physical interfaces are classified into ISDN BRI and ISDN PRI interfaces.When the AR accesses an ISDN network by using an ISDN PRI interface, the AR is directly connected to an ISDN network-side device. When the AR accesses an ISDN network by using an ISDN BRI interface, the AR connects to an NT1 device, and the NT1 device connects to an ISDN networkside device. For details about WAN features, see Feature Description - WAN.
3.2.3 VPN
The ARs support IP Security Virtual Private Network (IPSec VPN) and provide an IP security (IPSec) mechanism to ensure high quality, interoperable, and cryptology-based security for communication processes. The two parties in communication can encrypt data and authenticate the data source at the IP layer to ensure the confidentiality and integrity of the data and prevent replay on the network. IPSec implements these functions by using two security protocols: Authentication Header (AH) protocol and Encapsulating Security Payload (ESP). Internet Key Exchange (IKE) provides the automatic key negotiation, SA establishment, and SA maintenance functions to simplify IPSec use and management. In addition, the ARs use Generic Routing Encapsulation (GRE) and Layer 2 Tunneling Protocol (L2TP) to support VPN services except IPSec VPN. The VPN services supported by the ARs are listed as follows: l l l l l l l l GRE VPN IPSec VPN BGP/MPLS IP VPN SSL VPN L2TP VPN DSVPN GRE over IPSec VPN L2TP over IPSec VPN
3 Product Characteristics
3.2.4 Security
ACL
An access control list (ACL) defines a series of filtering rules based on certain policy, the ACL permits or forbids the passage of data packets. The ARs can use ACL rules to filter packets.
Firewall
l ACL-based packet filtering ACL-based packet filtering is used to analyze the information of the packets to be forwarded, including source/destination IP addresses, source/destination port numbers, and IP protocol numbers. The ARs compare the packet information with the ACL rules and determine whether to forward or discard the packets. In addition, the ARs can filter the fragmented IP packets to prevent the non-initial fragment attack. l ASPF Application Specific Packet Filter (ASPF) filters packets of the application layer based on packet status. ASPF, used for security policies, detects the session information of the application layer protocol packets, which attempt to pass the AR and prevent the unsatisfied packets. l Attack defense With the attack defense feature, the ARs can detect various network attacks and protect the internal network against attacks. Network attacks are classified into three types: DoS attacks, scanning and snooping attacks, and malformed packet attacks. DoS attack The DoS attack is an attack to a system by using a large number of data packets. This prevents the system from receiving requests from authorized users or suspends the host. DoS attacks include SYN Flood attacks and Fraggle attacks. DoS attacks are different from other attacks because DoS attackers do not search for the ingress of a network, but prevent authorized users from accessing resources or routers. Scanning and snooping attack The scanning and snooping attack is to identify the existing systems on a network by using ping scanning (including ICMP and TCP scanning), and then find out potential targets. By using TCP scanning, attackers can identify the operating system and the potential services. By scanning and snooping, an attacker can know the service type and security vulnerability of the system and prepare for further intrusion to the system. Malformed packet attack The malformed packet attack is to send malformed packets to the system. If such an attack occurs, the system breaks down when processing the malformed IP packets. Malformed packet attacks include Ping of Death and Teardrop.
ARP Security
There are various ARP attacks on networks, including attacks targeting hosts and gateways, address spoofing attacks and violent attacks, virus attacks, and malicious software attacks.
Issue 01 (2013-06-30) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd. 25
3 Product Characteristics
The ARs ensure ARP security by discarding untrusted ARP packets, suppressing ARP packets by using timestamps, discarding invalid ARP packets, and performing dynamic CAR on the packets sent to the CPU. In addition to preventing ARP protocol attacks, the ARs also prevent ARP-based network scanning attacks.
IP Source Guard
Some attacks on networks aim at source IP addresses by accessing and using network resources through spoofing IP addresses, stealing users' information or blocking authorized users from accessing networks. The ARs support IP Source Guard (IPSG) and Unicast Reverse Path Forwarding (URPF). l The AR2200 and AR3200 series routers support IP source guard. IPSG prevents source address spoof attacks, so attackers cannot access network resources and authorized users' rights are protected. URPF blocks packets sent from bogus source addresses.
PKI
The public key infrastructure (PKI) is a system that generates public keys and digital certificates, and verifies identities of certificate subjects to ensure information security. PKI issues digital certificates that bind public keys to respective user identities by means of a certificate authority (CA).
AAA
The ARs support Authentication, Authorization, and Accounting (AAA). l l l
Issue 01 (2013-06-30)
Authentication Verifies users' identities. Authorization Grants different rights for different users to restrict the services that can be used by users. Accounting
Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd. 26
3 Product Characteristics
Records information about network service usage of users, including service type, start time, and traffic volume. For details about security features, see Feature Description - Security.
3.2.5 QoS
Traffic Policing
Traffic policing discards excess traffic to limit the traffic within a specified range and to protect network resources as well as the carriers' interests. The ARs use committed access rate (CAR) to perform traffic policing. They support dual-ratethree-color markers and precise bandwidth management.
Traffic Shaping
When the rate of an interface on a downstream device is slower than that of an interface on an upstream device or burst traffic occurs, traffic congestion may occur on the downstream device interface. Traffic shaping can be configured on the interface of an upstream device so that outgoing traffic is sent at even rates and congestion is avoided. The ARs supporttraffic shaping adaptation and level-3 traffic shaping. Three-level shapers include the flow queue shaper, subscriber queue shaper, and port queue shaper.
Congestion Management
If a network transmitting both delay-sensitive and delay-insensitive services is congested intermittently, congestion management is required. However, if a network is always congested, bandwidth needs to be increased. Congestion management sends packet flows by using queuing and scheduling. An interface on AR has four or eight default queues for outgoing packets. A fixed FE interface on AR1200 has four default queues and each of other interfaces has eight. LAN-side interfaces support the scheduling modes of priority queuing (PQ), deficit round robin (DRR), weighted round robin (WRR), PQ+DRR, and PQ+WRR. The AR150&200&1200 series routers do not support the DRR mode. WAN-side interfaces support the scheduling modes of PQ, WFQ, PQ +WFQ, and class-based WFQ (CBQ). Each scheduling algorithm schedules specific types of traffic, and affects bandwidth allocation, delay, and jitter.
Congestion Avoidance
Congestion avoidance is a flow control mechanism. A system configured with congestion avoidance monitors network resource usage such as queues and memory buffers. When congestion occurs or aggravates, the system discards packets. The ARs support tail drop and WRED. l Tail drop When the queue length reaches the upper limit, the excess packets (buffered at the queue tail) are discarded. l WRED WRED sets the upper and lower drop thresholds and the maximum drop probability for each queue. When the queue length is smaller than the lower threshold, no packets are
Issue 01 (2013-06-30) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd. 27
3 Product Characteristics
discarded. When the length of the queue exceeds the upper threshold, all packets are discarded. When the queue length is between the lower threshold and the upper threshold, incoming packets are discarded randomly. The drop probability cannot be greater than the maximum drop probability. The ARs use the WRED based on queue profiles or traffic policies. For details about QoS features, see Feature Description - QoS.
3.2.6 WLAN
A wireless local area network (WLAN) connects two or more computers or devices and enables the devices to communicate by using the wireless telecommunication technology. WLAN uses the wireless technology to implement fast Ethernet access. The primary advantage of WLAN is that terminals, such as computers, can access a network through a wireless medium rather than a physical cable. This facilitates network construction and allows users to move around without interrupting communication. WLAN is more flexible than traditional wired access. WLAN is widely used in public areas such as on campuses, business centers, and airports. The WLAN uses cables at the backbone layer, and users access the WLAN through one or more access points (APs) using radio waves. The transmission distance of an AP is tens of meters. IEEE 802.11 is widely used by WLANs. AR can function as an access controller (AC) or a fat access point (FAT AP).
NOTE
Only AR151W-P, AR157W, AR157VW, AR158EVW, AR201VW-P, AR207VW, AR1220W and AR1220VW support WLAN AP.
AR supports the following WLAN features: l WLAN user management Dot1X access authentication MAC address authentication Pre-share-key (PSK) authentication EAPOL-Key negotiation User access control AAA for WLAN users l Radio frequency (RF) management Country code RF type Setting radio transmission rate Setting radio transmission power Setting radio working channels Monitoring and eliminating radio interference Configurable wireless MAC layer parameters Configuring and querying radio attributes Collecting and querying performance statistics of radio frequency interfaces l WLAN security WEP Open-System link authentication and encryption
Issue 01 (2013-06-30) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd. 28
3 Product Characteristics
WEP Share-Key link authentication and encryption WPA PSK authentication and encryption WPA Dot1X authentication and encryption WPA2 PSK authentication and encryption WPA2 Dot1X authentication and encryption WAPI authentication and encryption TKIP/CCMP encryption HMAC-MD5 algorithm User blacklist and whitelist l WLAN QoS WMM (802.11e) Mapping wireless-side priority to the wired-side priority Bandwidth limit based on users Bandwidth limit based on SSIDs For details about WLAN features, see Feature Description - WLAN.
3.2.7 IPv6
The AR provides the IPv6 host function, which maximizes customers' return on investment (ROI) and prevents repeated investment during network upgrade. The AR supports the following IPv6 functions: l l l l l l l l l l IPv6 ND IPv6 PMTU TCP6, UDP6, RawIP6, Ping IPv6, and Tracert IPv6 ICMP6 and Socket6 IPv6 unicast routing protocols: RIPng, OSPFv3, IS-IS, BGP, and IPv6 static route IPv6 multicast protocols: MLD, PIM-DM, PIM-SM, and PIM-SSM TFTP IPv6 client, TFTP IPv6 server, FTP IPv6 client, FTP IPv6 server, Telnet IPv6 client, and Telnet IPv6 server IPv6 over IPv4 manual tunnel, IPv6 over IPv4 GRE tunnel, IPv6 over IPv4 automatic tunnel, 6to4 tunnel, ISATAP tunnel, and IPv4 over IPv6 tunnel DHCPv6 client, DHCPv6 server, DHCPv6 relay, DHCPv6 snooping, and DHCPv6 PD MLD snooping
For details about IPv6 functions, see Feature Description - IP Service and Feature Description - IP Routing.
Issue 01 (2013-06-30)
29
4 Appearance
4
About This Chapter
4.1 AR150 Series 4.2 AR160 series 4.3 AR200 Series 4.4 AR1200 Series 4.5 AR2200 Series 4.6 AR3200 Series
Appearance
Issue 01 (2013-06-30)
30
4 Appearance
Front View
3. 3G Whip Antenna
Rear View
Table 4-2 shows the rear views of the AR150 series routers.
Issue 01 (2013-06-30) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd. 31
4 Appearance
Table 4-2 Rear views of the AR150 series routers Device Model AR151 Rear View
8 7
5 6
AR151W-P
9 4
5 6
AR151G-HSPA+7
4 10
5 6
Issue 01 (2013-06-30)
32
4 Appearance
Rear View
2
2
4 10
8 7
5 6
AR156
3 2
4 8 7
5 6
AR157
5 6
AR157W
5 6
Issue 01 (2013-06-30)
33
4 Appearance
Rear View
11
12
5 6
AR157G-HSPA+7
2
2
4 10
8 7
5 6
AR158E
56
AR158EVW
11
12
5 6
Issue 01 (2013-06-30)
34
4 Appearance
1. CON/AUX Interface
NOTE The AR150 series routers have only console (CON) interfaces and do not support AUX interfaces.
2. WAN port
3. LAN ports
4. RESET button
l AR151, AR151W- AR150 series: four FE CAUTION Electrical Interfaces P, AR151GThis button is used to reset the device. HSPA+7, AR151G-C: FE l To restore the factory settings, Electrical hold the button for Interface l AR156: ADSL-B/ J Interface l AR157, AR157W, AR157VW, AR157G-HSPA +7: ADSL-A/M interface l AR158E, AR158EVW: G.SHDSL Interface
5 seconds. l To reset the system, press the button. Resetting the device interrupts services. Confirm the action before you press the RESET button.
5. Power jack
NOTE A 24/36/60 W Power Adapter is connected to the power jack to provide 12 V power supply to the device.
7. Ground point
NOTE The device must be reliably grounded using a ground cable to protect the device from lightning and interference.
9. PoE port
NOTE Connect the AR150 to 100 W AC PoE Power Module to provide power for PDs connected to FE interfaces. PDs include IP phones, WLAN APs, and cameras.
Issue 01 (2013-06-30)
35
4 Appearance
Table 4-3 Front views of the AR160 series routers Device Model AR168F Image
USB interface
AR169F
USB interface
Rear View
Table 4-4 shows the rear views of the AR160 series routers. Table 4-4 Rear views of the AR160 series routers Device Model AR168F Image
1
AR169F
9
2
4
8 7
5 6
5 6
Issue 01 (2013-06-30)
36
4 Appearance
1. CON/AUX Interface
NOTE The AR160 series routers have only console (CON) interfaces and do not support AUX interfaces.
4. RESET button
CAUTION Press this button to reset the router. l To restore the factory settings, hold the button for at least 5 seconds. l To reset the system, press the button. Resetting the device interrupts services. Confirm your action before you press the RESET button.
5. Power jack
NOTE A 24/36/60 W Power Adapter is connected to this power jack to supply 12 V DC power to the device.
7. Ground point
NOTE The device must be reliably grounded using a ground cable to protect the device from lightning and interference.
9. GE Combo Interface
Front View
Issue 01 (2013-06-30)
37
4 Appearance
Front View
1
AR207G-HSPA +7
3. 3G Whip Antenna
Rear View
Table 4-6 shows the rear views of the AR200 series routers. Table 4-6 Rear views of the AR200 series routers Device Model AR201 Rear View
8 7
56
Issue 01 (2013-06-30)
38
4 Appearance
Rear View
2
2
11
12
9 4
8 7
5 6
AR206
5 6
AR207
5 6
AR207V
11
12
56
AR207VW
11
12
5 6
Issue 01 (2013-06-30)
39
4 Appearance
Rear View
1
AR207G-HSPA+7
11
12
9 4
5 6
4 10
5 6
AR208E
5 6
Issue 01 (2013-06-30)
40
4 Appearance
1. CON/AUX Interface
NOTE The AR200 series routers have only console (CON) interfaces and do not support AUX interfaces.
2. WAN port
3. LAN ports
4. RESET button
CAUTION This button is used to reset the device. l To restore the factory settings, hold the button for 5 seconds. l To reset the system, press the button. Resetting the device interrupts services. Confirm the action before you press the RESET button.
AR200 series: eight l AR201, AR201VW-P: FE FE Electrical Interfaces Electrical Interface l AR206: ADSL-B/ J Interface l AR207, AR207V, AR207VW, AR207V-P, and AR207G-HSPA +7: ADSL-A/M interface l AR208E: G.SHDSL Interface
NOTE FE0 can function as a WAN port so that the device provides double WAN ports.
5. Power jack
NOTE
7. Ground point
NOTE The device must be reliably grounded using a ground cable to protect the device from lightning and interference.
A 24/36/60 W Power NOTE Adapter is connected to Insert a power cable the power jack to locking strap into this provide 12 V power jack and secure the supply to the device. power cable with the locking strap to prevent it from loosening or falling.
9. PoE port
NOTE Connect the AR200 to 100 W AC PoE Power Module to provide power for PDs connected to FE interfaces. PDs include IP phones, WLAN APs, and cameras.
Issue 01 (2013-06-30)
41
4 Appearance
Table 4-7 Front views of AR1200 series Model AR1220 AC model AR1220 DC model AR1220V AR1220L AR1220W AR1220VW
4
1 2
Appearance
Issue 01 (2013-06-30)
42
4 Appearance
Appearance
7 8 9
14 13 12
11
10
AR1220 DC model
5 6
17
14 13 12
11
10
AR1220V
5 6
14 13 12
11
15 10
AR1220W
16 5 6 7
16 8 9
14 13 12
AR1220VW
16
11
15 10
16
5 6
14 13 12
11
15 10
Issue 01 (2013-06-30)
43
4 Appearance
Model AR1220L
5 6
Appearance
7 8 9
14 13 12
10
5. Security lock
6. ESD jack
NOTE When maintaining the AR1200, wear an ESD wrist strap. Connect the ESD wrist strap to the ESD jack.
8. AC Power jack
NOTE Connect the AR1200 to an external power supply using AC Power Cable.
9. Ground point
NOTE To protect the chassis from lightning and electromagnetic interference, use Ground Cable to ground the chassis.
10. Switch
Issue 01 (2013-06-30)
44
4 Appearance
Slot Distribution
Figure 4-1 shows slot distribution on the AR1200.
NOTE
l Two SIC slots can be combined into one WSIC slot by removing the guide rail. l Slots can be combined into one, but one slot cannot be divided into multiple slots. l After two slots are combined into one, the slot ID is the larger one between the original two slots.
Slot Distribution NA
1(SIC)
Slot Combination NA Two SIC slots are combined into one WSIC slot
AR1200
0(SRU)
2(WSIC)
0(SRU)
As shown in Figure 4-1, the slots of the AR1200 can be combined. Slot 1 and slot 2 are combined into new slot 2.
16
5 7 8
Issue 01 (2013-06-30)
45
4 Appearance
Model AR2204
1 2 10
Appearance
7 8 9
AR2220 AC model
1 2
3
AR2220 DC model
1 11
7 89
7 8 9
AR2240
12
14
13
15
1. Power switch
2. AC power jack
NOTE Connect the AR2200 to an external power supply using AC Power Cable.
Issue 01 (2013-06-30)
46
4 Appearance
9. RST
NOTE This button is used to reset the AR2200. Resetting the AR2200 interrupts services. Confirm the action before you press this button.
Connect the AR2200 to an external power The AR2200 supports supply using DC Power the following power Cables.
modules:
Appearance
3 2 1
Issue 01 (2013-06-30)
47
4 Appearance
Model AR2202-48FE
5
Appearance
3 2 1
AR2204
39
10
AR2240
11 10 12
8 10 12
1. AC power jack
NOTE Connect the AR2200 to an external power source using AC Power Cable.
2. Switch
3. Ground point
NOTE To protect the chassis from lightning and electromagnetic interference, use Ground Cable to ground the chassis.
5. Extended slot
7. E1 interface
Issue 01 (2013-06-30)
48
4 Appearance
9. ESD jack
NOTE When installing the AR2200, wear an ESD wrist strap. Connect the ESD wrist strap to the ESD jack.
Slot Distribution
Figure 4-2 and Figure 4-3 show slot distribution of AR2200 series.
NOTE
l Two SIC slots can be combined into one WSIC slot by removing the guide rail. l The two SIC slots and the WSIC slot below them can be combined into one XSIC slot by removing the guide rail. l Two XSIC slots can be combined into one EXSIC slot by removing the guide rail. l Slots can be combined into one, but one slot cannot be divided into multiple slots. l After two slots are combined into one, the slot ID is the larger one between the original two slots. l In V200R002C00, a WSIC card can be inserted into an XSIC slot with a special component. The WSIC card is in the lower side of the slot and uses the XSIC slot ID as its own slot ID. l The AR2201-48FE and AR2202-48FE have no SIC slot.
Slot Distribution NA
Slot Combination NA Two SIC slots are combined into one WSIC slot
4(WSIC) 2(WSIC)
NA
NA
NA
NA
Issue 01 (2013-06-30)
49
4 Appearance
Slot Distribution NA
Slot Combination NA Two SIC slots are combined into one WSIC slot
Rear view
4(WSIC) 6(WSIC)
2(WSIC) 5(WSIC)
10(Power)
9(Power)
11(SRU)
F A N
NA
Rear view
8(EXSIC)
As shown in Figure 4-2 and Figure 4-3, slots of AR2200 series can be combined. l AR2204: Slot 1 and slot 2 are combined into new slot 2. Slot 3 and slot 4 are combined into new slot 4. l AR2220: Slot 1 and slot 2 are combined into new slot 2. Slot 3 and slot 4 are combined into new slot 4. New slot 2 and slot 5 are combined into new slot 5.
Issue 01 (2013-06-30) Huawei Proprietary and Confidential Copyright Huawei Technologies Co., Ltd. 50
4 Appearance
New slot 4 and slot 6 are combined into new slot 6. l AR2240: Slot 1 and slot 2 are combined into new slot 2. Slot 3 and slot 4 are combined into new slot 4. New slot 2 and slot 5 are combined into new slot 5. New slot 4 and slot 6 are combined into new slot 6. Slot 7 and slot 8 are combined into new slot 8.
Appearance
2 5
l 1. Power module slot 1 l 3. Versatile slot 1 5. AR3260 Fan l 2. Power module slot 2 l 4. Versatile slot 2 Module slot The AR3200 supports the NOTE following power modules: l The versatile l 350 W AC Power Module l 350 W DC Power Module
NOTE AC and DC power modules cannot be installed on the AR3200 simultaneously. slots can have power modules installed. l The two versatile slots can be combined into one for an SRU by removing the guide rails between them.
6. SRU slot
Issue 01 (2013-06-30)
51
4 Appearance
Appearance
1 3 4
1. SIC slot
NOTE The AR3260 provides four SIC slots.
3. WSIC slot
4. XSIC slot
NOTE NOTE The AR3260 provides The AR3260 provides two WSIC slots. four XSIC slots.
Slot Distribution
Figure 4-4 shows slot distribution of AR3200 series.
NOTE
l Two SIC slots can be combined into one WSIC slot by removing the guide rail. l Two SIC slots and one WSIC slot can be combined into one XSIC slot by removing the guide rail. l Two XSIC slots can be combined into one EXSIC slot by removing the guide rail. l Slots can be combined into one, but one slot cannot be divided into multiple slots. l After two slots are combined into one, the slot ID is the larger one between the original two slots. l Since V200R002C00, a WSIC card can be inserted into an XSIC slot with a special component. The WSIC card is in the lower side of the slot and uses the XSIC slot ID as its own slot ID. l MFS: multiple function slot for power module or SRU. An SRU occupies two MFSs. Before installing an SRU, remove the guide rail between the two MFS.
Issue 01 (2013-06-30)
52
4 Appearance
Device Model
Slot Distribution
12(Power) 11(Power) 13(MFS)
Slot Combination F A N
14(MFS)
15(SRU)
Rear view
8(XSIC) 10(XSIC)
7(XSIC) 9(XSIC)
As shown in Figure 4-4, the slots of the AR3200 can be combined. l l l l l l l Slot 1 and slot 2 are combined into new slot 2. Slot 3 and slot 4 are combined into new slot 4. New slot 2 and slot 5 are combined into new slot 5. New slot 4 and slot 6 are combined into new slot 6. Slot 7 and slot 8 are combined into new slot 8. Slot 9 and slot 10 are combined into new slot 10. Slot 13 and slot 14 are combined into new slot 14, which is used for the backup SRU.
Issue 01 (2013-06-30)
53
5
About This Chapter
5.2 Fault Location
Issue 01 (2013-06-30)
54
Issue 01 (2013-06-30)
56
6 Technical Specifications
6
About This Chapter
6.1 AR150 series 6.2 AR160 series 6.3 AR200 series 6.4 AR1200 series 6.5 AR2200 series 6.6 AR3200 series
Technical Specifications
Issue 01 (2013-06-30)
57
6 Technical Specifications
Issue 01 (2013-06-30)
58
6 Technical Specifications
Specification l AR151: 36 W l AR151W-P: 24 W l AR151G-HSPA+7: 24 W l AR151G-C: 24 W l AR156: 36 W l AR157: 36 W l AR157W: 24 W l AR157VW: 60 W l AR157G-HSPA+7: 24 W l AR158E: 36 W l AR158EVW: 60 W PoE power supply l AR151: not supported l AR151W-P: supported l AR151G-HSPA+7: not supported l AR151G-C: not supported l AR156: not supported l AR157: not supported l AR157W: not supported l AR157VW: not supported l AR157G-HSPA+7: not supported l AR158E: not supported l AR158EVW: not supported
Environment parameters
l Environment temperature: 0C to 45C l Storage temperature: -40C to 70C 5% to 95%, noncondensing < 5000 m l UL 60950-1 l EN 60950-1 l IEC 60950-1 l BS EN 60950-1 l CSA C22.2 No 60950-1 l AS/NZS 60950.1 l IS 13252 For details, see the Huawei AR150&160&200 Series Enterprise Routers Safety and Regulatory Compliance Information.
Issue 01 (2013-06-30)
59
6 Technical Specifications
Specification l FCC 47CFR Part15 Class A l ICES 003 Class A l EN55022 Class A l CISPR22 Class A l CISPR24 l AS/NZS CISPR22 Class A l VCCI Class A l ETSI EN 300 386 Class A l EN55024 For details, see the Huawei AR150&160&200 Series Enterprise Routers Safety and Regulatory Compliance Information.
l RoHS l ETSI EN 300 019-2-1 l ETSI EN 300 019-2-2 l ETSI EN 300 019-2-3 For details, see the Huawei AR150&160&200 Series Enterprise Routers Safety and Regulatory Compliance Information.
Issue 01 (2013-06-30)
60
6 Technical Specifications
Power parameters
Rated voltage range: 100 V AC to 240 V AC, 50/60 Hz Maximum voltage range: 90 V AC to 264 V AC, 47 Hz to 63 Hz
Power adapter maximum output power Environment parameters Operating temperature Operating relative humidity Operating altitude Safety standards compliance
l AR168F: 24 W l AR169F: 24 W l Environment temperature: 0C to 45C l Storage temperature: -40C to 70C 5% to 95%, noncondensing < 5000 m l UL 60950-1 l EN 60950-1 l IEC 60950-1 l BS EN 60950-1 l CSA C22.2 No 60950-1 l AS/NZS 60950.1 l IS 13252 For details, see the Huawei AR150&160&200 Series Enterprise Routers Safety and Regulatory Compliance Information.
l FCC 47CFR Part15 Class A l ICES 003 Class A l EN55022 Class A l CISPR22 Class A l CISPR24 l AS/NZS CISPR22 Class A l VCCI Class A l ETSI EN 300 386 Class A l EN55024 For details, see the Huawei AR150&160&200 Series Enterprise Routers Safety and Regulatory Compliance Information.
Issue 01 (2013-06-30)
61
6 Technical Specifications
Specification l RoHS l ETSI EN 300 019-2-1 l ETSI EN 300 019-2-2 l ETSI EN 300 019-2-3 For details, see the Huawei AR150&160&200 Series Enterprise Routers Safety and Regulatory Compliance Information.
Issue 01 (2013-06-30)
62
6 Technical Specifications
Specification Rated voltage range: 100 V AC to 240 V AC, 50/60 Hz Maximum voltage range: 90 V AC to 264 V AC, 47 Hz to 63 Hz Maximum output power l AR201: 36 W l AR201VW-P: 36 W l AR206: 36 W l AR207: 36 W l AR207V: 36 W l AR207VW: 60 W l AR207V-P: 36 W l AR207G-HSPA+7: 36 W l AR208E: 36 W PoE power supply l AR201: not supported l AR201VW-P: supported l AR206: not supported l AR207: not supported l AR207V: not supported l AR207VW: not supported l AR207V-P: supported l AR207G-HSPA+7: not supported l AR208E: not supported
Environment parameters
l Environment temperature: 0C to 45C l Storage temperature: -40C to 70C 5% to 95%, noncondensing < 5000 m l UL 60950-1 l EN 60950-1 l IEC 60950-1 l BS EN 60950-1 l CSA C22.2 No 60950-1 l AS/NZS 60950.1 l IS 13252 For details, see the Huawei AR150&160&200 Series Enterprise Routers Safety and Regulatory Compliance Information.
Issue 01 (2013-06-30)
63
6 Technical Specifications
Specification l FCC 47CFR Part15 Class A l ICES 003 Class A l EN55022 Class A l CISPR22 Class A l CISPR24 l AS/NZS CISPR22 Class A l VCCI Class A l ETSI EN 300 386 Class A l EN55024 For details, see the Huawei AR150&160&200 Series Enterprise Routers Safety and Regulatory Compliance Information.
l RoHS l ETSI EN 300 019-2-1 l ETSI EN 300 019-2-2 l ETSI EN 300 019-2-3 For details, see the Huawei AR150&160&200 Series Enterprise Routers Safety and Regulatory Compliance Information.
Issue 01 (2013-06-30)
64
6 Technical Specifications
Item Weight (empty chassis) Power consumption (empty chassis) Typical power consumption
Specification 2.9 kg l AR1220 AC model: 27 W l AR1220 DC model: 27 W l AR1220V: 29 W l AR1220W: 36 W l AR1220VW: 37 W l AR1220L: 25 W Maximum power consumption l AR1220 AC model: 32 W l AR1220 DC model: 32 W l AR1220V: 34 W l AR1220W: 42 W l AR1220VW: 42 W l AR1220L: 30 W
Power parameters
AC power input
Rated voltage: 100 V AC to 240 V AC, 50/60 Hz Maximum voltage range: 90 V AC to 264 V AC, 47 Hz to 63 Hz
DC power input
l AR1220 AC model: does not support PoE l AR1220 DC model: does not support PoE l AR1220V: supports PoE l AR1220W: supports PoE l AR1220VW: supports PoE l AR1220L: does not support PoE
Environment parameters
l Environment temperature: 0C to 45C l Storage temperature: -40C to 70C 5% to 95%, noncondensing < 4000 m
Issue 01 (2013-06-30)
65
6 Technical Specifications
Specification l UL 60950-1 l EN 60950-1 l IEC 60950-1 l BS EN 60950-1 l CSA C22.2 No 60950-1 l AS/NZS 60950.1 l IS 13252 For details, see the Huawei AR1200&2200&3200 Series Enterprise Routers Safety and Regulatory Compliance Information.
l FCC 47CFR Part15 Class A l ICES 003 Class A l EN55022 Class A l CISPR22 Class A l CISPR24 l AS/NZS CISPR22 Class A l VCCI Class A l ETSI EN 300 386 Class A l EN55024 For details, see the Huawei AR1200&2200&3200 Series Enterprise Routers Safety and Regulatory Compliance Information.
l RoHS l ETSI EN 300 019-2-1 l ETSI EN 300 019-2-2 l ETSI EN 300 019-2-3 For details, see the Huawei AR1200&2200&3200 Series Enterprise Routers Safety and Regulatory Compliance Information.
Issue 01 (2013-06-30)
66
6 Technical Specifications
Table 6-5 AR2200 technical specifications Item Processor Specification l AR2201-48FE: 2-core 533 MHz l AR2202-48FE: 2-core 533 MHz l AR2204: 2-core 800 MHz l AR2220: 4-core 600 MHz l AR2240 SRU40: 8-core 600 MHz SRU60: 8-core 600 MHz SRU80: 12-core 750 MHz Switching capacity l AR2201-48FE: N/A l AR2202-48FE: N/A l AR2204: 10 Gbit/s l AR2220: 32 Gbit/s l AR2240: 80 Gbit/s Forwarding capacity l AR2201-48FE: 350 kpps l AR2202-48FE: 350 kpps l AR2204: 450 kpps l AR2220: 1 Mpps l AR2240 SRU40: 2 Mpps SRU60: 2.5 Mpps SRU80: 4.0 Mpps Memory l AR2201-48FE: 512 MB l AR2202-48FE: 512 MB l AR2204: 1 GB l AR2220: 2 GB l AR2240: 2 GB Flash memory l AR2201-48FE: 512 MB l AR2202-48FE: 512 MB l AR2204: 512 MB l AR2220: 16 MB l AR2240: 16 MB Micro SD card (default) l AR2201-48FE: N/A l AR2202-48FE: N/A l AR2204: N/A l AR2220: 2 GB l AR2240: 2 GB
Issue 01 (2013-06-30)
67
6 Technical Specifications
Item Dimensions (W x D x H)
Specification l With no mounting bracket installed AR2201-48FE: 442.0 mm x 314.9 mm x 43.6 mm (17.4 in. x 12.4 in. x 1.71 in.) AR2202-48FE: 442.0 mm x 314.9 mm x 43.6 mm (17.4 in. x 12.4 in. x 1.71 in.) AR2204: 442.0 mm x 420.0 mm x 44.5 mm (17.4 in. x 16.5 in. x 1.73 in.) AR2220: 442.0 mm x 420.0 mm x 44.5 mm (17.4 in. x 16.5 in. x 1.73 in.) AR2240: 442.0 mm x 470.0 mm x 88.1 mm (17.4 in. x 16.5 in. x 3.47 in.) l With mounting brackets installed AR2201-48FE: 482.6 mm x 314.9 mm x 43.6 mm (19.00 in. x 12.4 in. x 1.71 in.) AR2202-48FE: 482.6 mm x 314.9 mm x 43.6 mm (19.00 in. x 12.4 in. x 1.71 in.) AR2204: 482.6 mm x 420.0 mm x 44.5 mm (19 in. x 16.5 in. x 1.73 in.) AR2220: 482.6 mm x 420.0 mm x 44.5 mm (19 in. x 16.5 in. x 1.73 in.) AR2240: 482.6 mm x 470.0 mm x 88.1 mm (19 in. x 18.5 in. x 3.47 in.)
Issue 01 (2013-06-30)
68
6 Technical Specifications
Specification l AR2201-48FE: 40 W l AR2202-48FE: 40 W l AR2204: 55 W l AR2220: 65 W l AR2240 SRU40: 97 W SRU60: 97 W SRU80: 129 W
Power specifications
AC power input
Rated voltage range: 100 V AC or 240 V AC, 50 or 60 Hz Maximum voltage range: 90 V AC to 264 V AC, 47 to 63 Hz
DC power input
Rated voltage range: -48 V DC or -60 V DC Maximum voltage range: -38.4 V DC to -72 V DC
Maximum power
l AR2201-48FE: 60 W l AR2202-48FE: 60 W l AR2204: 150 W l AR2220: 150 W l AR2240 One power module configured: 350 W Two power modules configured: 1+1 backup: 350 W Non 1+1 backup: 700 W
l AR2201-48FE: supported l AR2202-48FE: supported l AR2204: supported l AR2220: not supported l AR2240: not supported
Environment parameters
l Environment temperature: 0C to 45C l Storage temperature: -40C to 70C 5% to 95%, noncondensing < 4000 m
Issue 01 (2013-06-30)
69
6 Technical Specifications
Specification l UL 60950-1 l EN 60950-1 l IEC 60950-1 l BS EN 60950-1 l CSA C22.2 No 60950-1 l AS/NZS 60950.1 l IS 13252 For details, see the Huawei AR1200&2200&3200 Series Enterprise Routers Safety and Regulatory Compliance Information.
l FCC 47CFR Part15 Class A l ICES 003 Class A l EN55022 Class A l CISPR22 Class A l CISPR24 l AS/NZS CISPR22 Class A l VCCI Class A l ETSI EN 300 386 Class A l EN55024 For details, see the Huawei AR1200&2200&3200 Series Enterprise Routers Safety and Regulatory Compliance Information.
l RoHS l ETSI EN 300 019-2-1 l ETSI EN 300 019-2-2 l ETSI EN 300 019-2-3 For details, see the Huawei AR1200&2200&3200 Series Enterprise Routers Safety and Regulatory Compliance Information.
Issue 01 (2013-06-30)
70
6 Technical Specifications
Table 6-6 AR3200 series technical specifications Item System parameters AR3260 l Processor SRU40: 8-core 600 MHz SRU60: 8-core 600 MHz SRU80: 12-core 750 MHz l Switching capacity: 160 Gbit/s l forwarding capacity SRU40: 2 Mpps SRU60: 2.5 Mpps SRU80: 4.0 Mpps l memory: 2 GB l Flash memory: 16 MB l Micro SD card (default): 2 GB Power consumption (empty chassis) Typical power consumption l SRU40: 67 W l SRU60: 67 W l SRU80: 104 W Maximum power consumption Physical specifications l SRU40: 97 W l SRU60: 97 W l SRU80: 179 W l Dimensions (W x D x H) With no mounting bracket installed: 442.0 mm x 470.0 mm x 130.5 mm (17.4 in. x 18.5 in. x 5.14 in.) With mounting brackets installed: 482.6 mm x 470.0 mm x 130.5 mm (19 in. x 18.5 in. x 5.14 in.) l Weight (empty chassis): 11 kg (29.47 lb) Power specifications AC power input Rated voltage range: 100 V AC or 240 V AC, 50 or 60 Hz Maximum voltage range: 90 V AC to 264 V AC, 47 to 63 Hz DC power input Maximum power Rated voltage range: -48 V DC or -60 V DC Maximum voltage range: -38.4 V DC to -72 V DC l One power module configured: 350 W l Two power modules configured: 1+1 backup: 350 W Non 1+1 backup: 700 W
Issue 01 (2013-06-30)
71
6 Technical Specifications
Item Environment parameters Operating temperature Operating relative humidity Operating altitude Safety standards compliance
AR3260 l Environment temperature: 0C to 45C l Storage temperature: -40C to 70C 5% to 95%, noncondensing
< 4000 m l UL 60950-1 l EN 60950-1 l IEC 60950-1 l BS EN 60950-1 l CSA C22.2 No 60950-1 l AS/NZS 60950.1 l IS 13252 For details, see the Huawei AR1200&2200&3200 Series Enterprise Routers Safety and Regulatory Compliance Information.
l FCC 47CFR Part15 Class A l ICES 003 Class A l EN55022 Class A l CISPR22 Class A l CISPR24 l AS/NZS CISPR22 Class A l VCCI Class A l ETSI EN 300 386 Class A l EN55024 For details, see the Huawei AR1200&2200&3200 Series Enterprise Routers Safety and Regulatory Compliance Information.
l RoHS l ETSI EN 300 019-2-1 l ETSI EN 300 019-2-2 l ETSI EN 300 019-2-3 For details, see the Huawei AR1200&2200&3200 Series Enterprise Routers Safety and Regulatory Compliance Information.
Issue 01 (2013-06-30)
72
7
About This Chapter
7.1 Router Purchase List 7.2 Board Purchase List
Issue 01 (2013-06-30)
73
3G extended antenna
Omni antenna
Optional
NOTE Only the AR151G-HSPA +7 and AR157GHSPA+7 can be configured with the Omni antenna.
Issue 01 (2013-06-30)
74
Table 7-2 Purchase list of AR160 series Component AR168F Typical Configuration AR168F,4 copper pair G.SHDSL WAN,1GE COMB WAN,4GE LAN,1 USB AR169F,VDSL over POTS with bonding WAN,1GE COMB WAN,4GE LAN,1 USB Remarks Mandatory
AR169F
Mandatory
Table 7-3 Purchase list of AR200 series Component AR201 AR201VW-P AR206 AR207 AR207V AR207VW AR207V-P AR207GHSPA+7 AR208E PoE power supply unit Typical Configuration AR201,1FE WAN,8FE LAN,1USB AR201VW-P,1FE WAN,8FE LAN(PoE),802.11a/b/g/ n AP,4FXS+1FXO,1 USB AR206,ADSL2+ ANNEX B WAN,8FE LAN,1USB AR207,ADSL2+ ANNEX A/M WAN,8FE LAN,1USB AR207V,ADSL2+ ANNEX A/M WAN,8FE LAN, 4FXS+1FXO,1USB AR207VW,ADSL2+ ANNEX A/M WAN,8FE LAN, 802.11a/b/g/n AP,4FXS+1FXO,1 USB AR207V-P,ADSL2+ ANNEX A/M WAN,8FE LAN (PoE),4FXS+1FXO,1USB AR207G-HSPA+7,WCDMA HSPA+7,ADSL2+ ANNEX A/M WAN,8FE LAN,1USB AR208E,4 copper pair G.SHDSL WAN,8FE LAN, 1USB 100 W PoE power supply adapter module Remarks Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Mandatory Optional
NOTE Only applied to AR201VW-P and AR207V-P.
3G extended antenna
Omni antenna
Optional
NOTE Only the AR207G-HSPA +7 can be configured with the Omni antenna.
Issue 01 (2013-06-30)
75
Table 7-4 Purchase list of AR1200 series Component AR1220 Typical Configuration l AR1220,2GE WAN,8FE LAN,2 USB,2 SIC l AR1220,2GE WAN,8FE LAN,2 USB,2 SIC,DC -48V AR1220V AR1220W AR1220VW AR1220L PoE power supply unit AR1220V,2GE WAN,8FE LAN,2 USB,2 SIC,build-in 32-channel DSP AR1220W,2GE WAN,8FE LAN,802.11b/g/n AP,2 USB,2 SIC AR1220VW,2GE WAN,8FE LAN,802.11b/g/n AP,2 USB,2 SIC,build-in 32-channel DSP AR1220L,2GE WAN,2 USB,2 SIC 100 W PoE power supply adapter module Mandatory Mandatory Mandatory Mandatory Optional
NOTE Only applied to AR1220V, AR1220VW, and AR1220W.
Remarks Mandatory
Table 7-5 Purchase list of AR2201 Component AR2201-48F E Typical Configuration AR2201-48FE,2GE WAN(1GE Combo),1 USB,48FE LAN,60W AC Power Remarks Mandatory
Table 7-6 Purchase list of AR2202 Component AR2202-48F E Typical Configuration AR2202-48FE,2GE WAN(1GE Combo),1 E1,1 SA,1 USB,48FE LAN,60W AC Power Remarks Mandatory
Table 7-7 Purchase list of AR2204 Component AR2204 DSP module Typical Configuration AR2204,3GE WAN(1GE Combo),2 USB,4 SIC,2 DSP DIMM,150W AC Power 16/32/64/128-channel voice DSP module Remarks Mandatory Optional
Issue 01 (2013-06-30)
76
Table 7-8 Purchase list of AR2220 Component AR2220 Typical Configuration AR2220,3GE WAN(1GE Combo),2 USB,4 SIC,2 WSIC,1 DSP Slot,150W AC Power AR2220,3GE WAN(1GE Combo),2 USB,4 SIC,2 WSIC,1 DSP Slot,150W DC Power DSP module 16/32/64/128-channel voice DSP module Optional Remarks Mandatory
Table 7-9 Purchase list of AR2240 Component AR2240 Typical Configuration l AR2240,Service and Router Unit 40,4 SIC,2 WSIC, 2 XSIC,350W AC Power l AR2240,Service and Router Unit 40,4 SIC,2 WSIC, 2 XSIC,350W DC Power l AR2240,Service and Router Unit 60,4 SIC,2 WSIC, 2 XSIC,350W AC Power l AR2240,Service and Router Unit 60,4 SIC,2 WSIC, 2 XSIC,350W DC Power l AR2240,Service and Router Unit 80,4 SIC,2 WSIC, 2 XSIC,350W AC Power l AR2240,Service and Router Unit 80,4 SIC,2 WSIC, 2 XSIC,350W DC Power Fan AC power supply unit AR2240 Fan module 350 W AC power supply unit Mandatory Optional. By default, a router has one AC power supply unit. To perform load balancing, two AC power supply units can be installed. Optional. By default, a DC router has one DC power supply unit. To perform load balancing, two DC power supply units can be installed. Optional Remarks Mandatory
DSP module
Issue 01 (2013-06-30)
77
Table 7-10 Purchase list of AR3260 Component AR3260 Typical Configuration l AR3260,Service and Router Unit 40,4 SIC,2 WSIC, 4 XSIC,350W AC Power l AR3260,Service and Router Unit 40,4 SIC,2 WSIC, 4 XSIC,350W DC Power l AR3260,Service and Router Unit 60,4 SIC,2 WSIC, 4 XSIC,350W AC Power l AR3260,Service and Router Unit 60,4 SIC,2 WSIC, 4 XSIC,350W DC Power l AR3260,Service and Router Unit 80,4 SIC,2 WSIC, 4 XSIC,350W AC Power l AR3260,Service and Router Unit 80,4 SIC,2 WSIC, 4 XSIC,350W DC Power Fan AC power supply unit AR3260 fan module 350 W AC power supply unit Mandatory Optional. By default, an AC router has one AC power supply unit. To perform load balancing, two AC power supply units can be installed. Optional. By default, a DC router has one DC power supply unit. To perform load balancing, two DC power supply units can be installed. Optional Remarks Mandatory
DSP module
The AR150 and AR200 have no slot; therefore, you do not need to purchase the following boards for the AR150 and AR200. The AR2201-48FE and AR2202-48FE do not support plugged-in cards; therefore, you do not need to purchase the following boards for the AR2201-48FE and AR2202-48FE.
Issue 01 (2013-06-30)
78
Table 7-11 Board purchase list Silkscreen 8FE1GE 24GE Description 8-port 100M-RJ45+1-Port 1000M-RJ45-L2/L3 ethernet electrical interface card 24-port 1000M-RJ45-L2/L3 ethernet electrical interface card
NOTE The AR1200 series and AR2204 do not support 24GE board.
4GE-2S 1GEC 2FE 4GEW-T 4GEW-S 1E1T1-M 2E1T1-M 1E1T1-F 2E1T1-F 4E1T1-M 8E1T1-M 4E1T1-F 8E1T1-F 4E1-IMA 1SA 2SA 8AS 1BST 2BST 4FXS1FXO 16FXS
4-port 1000BASE-SFP-L2 ethernet interface card 1-port GE combo WAN interface card 2-port FE WAN interface card 4-port 1000BASE-RJ45-L3 Ethernet WAN interface card 4-port 1000BASE-SFP-L3 Ethernet WAN interface card 1-port channelized E1/T1/PRI/VE1 multiflex trunk interface card 2-port channelized E1/T1/PRI/VE1 multiflex trunk interface card, including SIC and WSIC 1-port fractional channelized E1/T1 WAN interface card 2-port fractional channelized E1/T1 WAN interface card 4-port channelized E1 multiflex trunk interface card 8-port channelized E1 multiflex trunk interface card 4-port fractional channelized E1 WAN interface card 8-port fractional channelized E1 WAN interface card 4-port E1 ATM IMA interface card 1-port synchronous/asynchronous WAN Interface Card 2-port synchronous/asynchronous WAN Interface Card 8-port asynchronous WAN interface card, including WSIC and XSIC 1-port ISDN S/T WAN interface card 2-port ISDN S/T voice interface card, including SIC and WSIC 4-port FXS + 1-port FXO voice interface card 16-channel FXS voice interface card
Issue 01 (2013-06-30)
79
Silkscreen 32FXS
4-port FXO voice interface card 1-port ADSL2+ annex A/M WAN interface card 1-port ADSL2+ annex B WAN interface card 1port VDSL2 over POTS WAN interface card 1-port-4-channel G.SHDSL WAN interface card 1-port channelized POS interface card
NOTE The AR1200 series routers do not support 1CPOS-155M.
1STM1
1STM4
1-port GPON/EPON dual-mode interface card 3G WAN interface card Service Application Engine Board
NOTE The AR1200 series routers do not support SAE550.
Issue 01 (2013-06-30)
80