Security Level:

Hardware and Software Overview

www.huawei.com

www.huawei.com

HUAWEI TECHNOLOGIES CO., LTD. Huawei Technologies

HUAWEI Confidential

10-May-2008

Contents
1. NE40E frame overview 2. DMPU Subcard overviewC02 added 3. NE80E frame overviewC02 added

4. Software structure overview

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 2

GGSN9811 Cabinet
1. Power Distribution Box 2. 1 U filler panel 3. 2 U filler panel 4. Cabling frame of the LAN Switch 5. 1 U fiber supports of large capacity 6. Subrack of the GGSN9811

1. Plastic panel of the fan Module 2. Fan module 3. Board cage 4. Air intake frame 5. Plastic panel of the power supply module 6. Power supply module 7. Handle 8. Angle 9. Cabling trough

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 3

GGSN9811 Board Configuration

1 2 3 4 9 11
S F U
vGGSN vGGSN vGGSN

10

8
SFU

L P U

L P U

L P U

L P U

S R U S F U

S P U

S P U

S P U

S P U
vGGSN vGGSN vGGSN LPU SPU SPU SPU

12

R U

1 2 3 4

10 5 6 7 8

Board Name SRU SPU LPU SFU

Full Spelling Switching Route Unit Service Processing Unit Line Processing Unit Switching Fabric Unit

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 4

Physical Interface
All physical interface are provided by LPU board

Type
10/100M auto-sensing Ethernet electrical interfaces 1000M Ethernet GBIC optical interfaces (1000BASE-GBIC) 1000M Ethernet GBIC electrical interfaces (1000BASE-GBIC)

Quantity (Maximum)

Function
Physical interfaces to an external network or devices in the external network, such as the SGSN, PDN, AAA server, and CG

24

24

Physical interfaces to an external network or devices in the external network, such as the SGSN, PDN, AAA server, and CG
Physical interfaces to an external network or devices in the external network, such as the SGSN, PDN, AAA server, and CG Physical interfaces to an external network or devices in the external network, such as the SGSN and PDN

24

ATM optical interfaces

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 5

GGSN9811 Hardware Logic Structure

Monitor Bus SRU Board
(Redundancy)

Control Bus

FAN (Redundancy)

FAN (Redundancy)

SPU

SFU SFU

SPU

LPU

Switching Fabric

LPU

(3+1 ) 3+1 redundant

160Gbps switching capacity per SFU; 640 Gbps per GGSN

User-plane (Ethernet)
HUAWEI TECHNOLOGIES CO., LTD.

Management-plane
HUAWEI Confidential
Page 6

Monitoring-plane

SRU-Function
Function:

Route management Data configuration Device management and maintenance Inter-board outband communication channel System clock Storage function

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 7

SRU-Interface

To M2000

Console

PDB

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 8

SFU

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 9

SPU
GTP_C and GTP_U processing Strong Routing Functions Dual-CPU Availability

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 10

LPU
LPU: Line interface Processing Unit

LPU provides physical interfaces to the external network (SGSN, PDN, RADIUS, CG), including FE, GE, POS, ATM etc. LPU only response transmitting packet between PDN and WCDMA/GPRS network. LPU receive the route table from SRU.

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 11

Contents
1. NE40E frame overview 2. DMPU Subcard overviewC02 added 3. NE80E frame overviewC02 added

4. Software structure overview

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 12

DMPU Subcard
The DMPU subcard implements enhanced

service features on the SPU. It functions as a universal service processing card to perform new service processing functions.

The DMPU subcard provides the hardware

accelerated DPI function.

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 13

DMPU Subcard
The DMPU subcard can be inserted

into the reserved subcard slot of the SPU.

One SPU can be equipped with one or

two DMPU subcards.

The subboard command is used to

enable the DMPU subcard to the SPU in the specified slot. The undo subboard command is used to disable the DMPU subcard to the SPU in the specified slot.
You must reset the SPU after changing

the configurations on the SPU.

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 14

Position of the DMPU Subcard on the SPU

One SPU can be equipped with one or

two DMPU subcards.

The red frame in the figure shows the

position of the DMPU subcard(s) on the SPU. If two heat dissipation panels are removed, two DMPU subcards can be inserted.

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 15

DMPU Subcard
If a DMPU subcard is installed but not enabled by using the

command, the DMPU subcard cannot provide corresponding functions.

If a DMPU subcard is not installed but is enabled by using the

command, the DMPU subcard cannot provide corresponding functions and an alarm is generated.
The two DMPU subcards can work in load-sharing mode. If one

DMPU subcard fails, the other DMPU can take over all services and a fault alarm is generated.
If the DMPU subcard is required but no DMPU subcard is available,

or if the DMPU subcard is overloaded, an alarm is generated.

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 16

Contents
1. NE40E frame overview 2. DMPU Subcard overviewC02 added 3. NE80E frame overviewC02 added

4. Software structure overview

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 17

NE80E Cabinet

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 18

Board Configuration in the NE80E Cabinet

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 19

MPU

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 20

SFU

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 21

SPU

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 22

LPU

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 23

Subcards on the LPU

1-port 10GBase LAN/WAN-XFP optical interface FPIC panel

12-port 100BaseFX/1000Base-X-SFP FPIC panel

HUAWEI Confidential

12-port 10Base-T/100BaseTX/1000Base-T electrical interface FPIC panel

Page 24

HUAWEI TECHNOLOGIES CO., LTD.

Logical Interface Overview

AAA
SRU Gom X1 LPU Phy If 1

Gi
SPU 1 SPU n

APN1 Gn APN2 SGSN APN3 GGSN

Corporate 1

Gn/Gp
Corporate 1

Gi Ga

Gn/Gp

Gi Ga

... ...
X2/X3

Phy If 2

Corporate 1

X2/X3

Gy

Gy

vGGSN 1/1 Gmb vGGSN 1/2

vGGSN n/1 ......

vGGSN n/2 X2/X3 Gy Ga Gn/Gp Gi Phy If m

LI LIG Gom M2000

Ga
X2/X3

Gy Ga

... ...

Gy OCS

CG

Gn/Gp

Gi

Logic Interface (Distributed) Phy If m Logic Interface (Centralized) Physical Interface

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 25

GGSN Main Processing Procedure

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 26

Flow Looking on Boards

Uplink Data flow
GTP tunnel

LPU

SPU

LPU

Downlink Data flow:

LPU

SPU

LPU

GTP tunnel

Uplink Data flow with Gi IPSec/GRE tunnel:

GTP tunnel

LPU

SPU

LPU

IPSec/GRE tunnel

Downlink Data flow with Gi IPSec/GRE tunnel:

IPSec/GRE tunnel

LPU

SPU

LPU

GTP tunnel

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 27

Contents
1. NE40E frame overview 2. DMPU Subcard overviewC02 added 3. NE80E frame overviewC02 added

4. Software structure overview

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 28

GGSN9811 Software Layout

Performance /Alarm/ Configuration /Device /Fault Management

O&M Agent

GTP-U/ L2TP/ GRE/ IPSEC

IP Routing /QoS

GTP-C/ Subscriber PPP-C/ DB L2TP-C

DHCP/ AAA

Offline Offline Radius Charging/ Charging/ Accounting CDRF OCS /AAA

Policy DB

Traffic Classify

Protocol Analysis

O&M System

Packet Process Module

Access Process Module

Charging Support Module

Service Process Module

Device Manage

System Support DOPRA/VOS VxWorks BSP Driver

Interface Manage

VRP

Hardware platform

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 29

System Structure of Access Process Module

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 30

System Structure of Session Process Module

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 31

System Structure of Service Process Module

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 32

System Structure of Platform Service Process Module

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 33

Redundancy

Hardware

SFU 3+1 redundancy SPU 1+1 redundancy

Software

Primary/Secondary Radius Server Multiple OCS Primary/Secondary CG Multiple DHCP Primary/Secondary FTP server Primary/Secondary L2TP tunnel

HUAWEI TECHNOLOGIES CO., LTD.

HUAWEI Confidential

Page 34

Thank You
www.huawei.com