支持ge10ge端口200ms大缓存提供权威第三方测试报告

1、#216118April 2016Commissioned byHuaweiTechnologiesCo.,LtdTEST REPORT HuaweiS7700SeriesSmartRoutingSwitchesProgrammable Capability, Performance and Feature ValidationExecutive SummaryThe Huawei S7700 series Smart Routing Switch is a fully programmable core switch based on Huaweis high-end core router

2、 platform technology. With the Ethernet Network Processor(ENP),theS7700provideshighcapacity,largebuffer, programmability at the forwarding layer, integrated T-bit Access Controller (AC) capability, Unified User Management, and multipleuser-definedfunctions.TheS7700canalsoimplement wiredandwirelessco

3、nvergenceandverticalvirtualization.Tolly engineers verified Huaweis S7700 series Smart Routing Switches in multiple areas including the native wireless AC capability, Super Virtual Fabric (SVF), iPCA real-time network quality monitoring, unified user management, QoS, high availability, easy-operatio

4、n, Zero Touch Provisioning (ZTP), programmable capability, SDN with full OpenFlow 1.3 compliance,performance,capacity,as wellas datacenterfeatures includingVirtualSystem(VS),TRILLandVXLAN.This document #216118 is an updated version of #215151 with a few additional tests in March 2016. 2016 Tolly Ent

5、erprises, LLCTPage 1 of 11Huawei Super Virtual Fabric (SVF) ArchitectureSource:Tolly,March2016Figure 1The Bottom LineHuawei S7700 Series Smart Routing Switches:1 Support wireless Access Controller functions natively with T- bitwirelessforwardingcapability, up to 2K wireless AccessPointsand u

6、p to 32Kwirelessusersmanagementcapacity, aswellas real-timeAC backupforhighavailability2 Support Huaweisproprietary Super Virtual Fabric (SVF) to virtualizedevicesondifferentlayers,includingwirelessAPs,into1networkelementformanagement.SVFsupportstwo layers of clients with up to 2K wireless access po

7、ints and 1,280 physicalaccessswitches. One SVFinstancecancross third-partyvendors Layer 2 network3 Support the Packet Conservation Algorithm for Internet (iPCA) technology. iPCAusesactualserviceflows to detectthe network quality at any node, any time, without additional cost4 Supportunifieduser mana

8、gementwith MAC, 802.1x, and Portal authenticationmodes5 Support numerous data center features including TRILL, VXLAN andVSTest ResultsNative T-bit Wireless Access Controller (AC)T-bit CapabilityTraditionally, wireless Access Controller (AC) functionsareimplementedbyindependent physical devices or ca

9、rds. Huawei native T-bit ACs, which are based on Ethernet Network Processor (ENP) technology, integrate AC processing and Ethernet switching on the ENP line card (X1E series line card) of the S7700 switch. Tollyengineersverifiedthatthe entire system on one S7712 switch could provide 960Gbps CAPWAP t

10、unnel encapsulation/decapsulation and data forwarding capability. Compared with traditionalindependentACs,thenativeT-bit ACcansupportmorewirelessAccessPoints (APs)andusers.(ENP)linecardswhichalsosupportEthernetswitching.Wheneveronedevice (a physical S7700 switch or a virtual device with two S7700 sw

11、itches using the CSS technology) has one ENP line card, the devicesupports wireless Access Controller (AC) functions natively.Huawei Technologies, Co., LtdS7700 Series Smart Routing SwitchesTollyengineerverifiedthatwhenthe S7700device(physical or virtual) has two ENPline cards,thefailureofoneENPline

12、carddidnot cause Ping packet loss between the wired client and wireless client. Also, the wireless userswerestillonlineafterfailure.Performance Evaluation and FeatureTested March 2016 Validationtechnology. So 1280 physical access switches were supported in one SVF instance.Super Virtual FabricEnterp

13、rise campus networks are builtstep- by-step and have numerous access nodes, multiple layers, and complex topologies. The wide deployment of wireless networks makes enterprise campus networks more difficulttomanage.Tolly engineers also verified that the SVFinstance can cross third-party vendor device

14、s with Layer 2 connectivity. One Cisco Catalyst 3750 switch was used between the parent Huawei device and the client Huawei deviceintheSVFtest.Wired and Wireless ConvergenceTolly engineers verified that one S7700 switch could manage up to 2K (2,048) APs and 32K (32,768) concurrent online wireless us

15、ersandprovideconnectivitybetweenthe wiredandwirelessnetworks to achievewired andwirelessnetworkconvergence.To address these problems, Huaweideveloped the Super Virtual Fabric (SVF) technology. SVF virtualizes different network layers devicesincludingwired and wireless ones into a single network elem

16、ent. The entire network is a large virtual switch to simplify network deployment and management. Administrators can configure or upgrade the member switches from the parentswitch.SVF could be managed by the HuaweieSight Unified Management Platform.iPCAThe S7700 adopts Huaweis proprietary Packet Cons

17、ervation Algorithm for Internet (iPCA). Unlike traditional detection technologies, such as Network Quality Analyzer (NQA) and Y.1731 that use simulated or inserted streams, iPCA implementstheevolutionfromestimatedto accurate Operations and Maintenance (O&M).NQAtechnologyusessimulatedstreams to detec

18、t network quality, and the Y.1731 technology uses inserted streams. Both methods actually detect link quality by simulating service flows. Therefore, these detection methods cannot reflect the actual link quality or accuratelylocate fault sources. From Huaweis field experience, latency, jitter, and

19、packet loss accuracy of traditionalSwitch Redundancyfor Wireless AccessWhen two S7700 switcheswere virtualized into one virtual device using the Huawei ClusterSwitchSystem(CSS)technology,the twoswitchessupportedreal-time AC backup. When one switch failed, the wired and wirelessuserswerestillonline.T

20、rafficof the wired and wireless network was properly forwarded.A chassis switchcontainsthe Main ProcessingUnits (MPUs) and line cards, providing a visualized management view for administrators. Huawei SVF virtualizes core/ aggregation layer devices into the virtual switchs MPU, access switches into

21、the line cards,andwirelessAPsintotheports.Tolly engineers verified that when one S7700switchworkedastheSVFparentswitch,the SVF supported 2,048 wireless APs and 256 Access Switch clients while each Access Switch(AS)clientsupportsastackof up to5 physical access switches using the iStackENPLineCardRedu

22、ndancyfor Wireless AccessThenativeAC functionsaresupportedwith the Huawei Ethernet Network Processor 2016 Tolly Enterprises, LLCTPage 2 of 11Huawei S7700 Series Smart Routing Switches#216118methods is only about 30 percent. Sincetraditional methods locate faults by reducing faultimpactranges

23、, thefaultlocation is less precise and the fault isolation process can takeweeksorlonger.therefore, only limited Access Control Lists(ACLs) can be used to manage user bandwidthandcontroluserrights. The S7700 adopts a user-oriented management design, assigning each user an individual table to control

24、 rights, bandwidth, and Quality of Service (QoS), allowingauthorizationbased ongroups,domains,ortime.supports stacking with either the portsonthe CSS card(andedicatedsubcard on the Main Processing Unit) or theserviceportson thelinecards.Tolly engineers verified that the averagelatencyacrosstwoS7700s

25、witchesoverthe stackingcableswas 4.3 sfor 64-byte frames withtheCSScardstackingway.iPCA is an in-line detection technology thatuses programmable service flows to detect network quality, dye the packets with no overhead, count real service flows, and detecting service flow link quality anytime and an

26、ywhere. According to Huawei, the latency, jitter, and packet loss detection accuracyof iPCAcanreach99percent.Each Ethernet Network Processor(ENP) has two built-in detection points that cover all forwarding paths on links, cards, and processors. Faults are reported based on fine granularity. If a net

27、work problem that affects userexperienceoccurs, iPCAcan locatethe link, card, or processor where the problem occurswithinseconds.TollyengineersverifiedthattheS7700coulddynamicallyassignthenewVLANandACLto auserwhentheusergotauthenticated.Easy-operationThree features of easy-operation was verified:Als

28、o, with the help of the Huawei UCL usergroup, administrators could create an ACL rule“rule1denyIPsourceUCL-groupname Test destination File Servers IP address” to dynamically block all users in the “Test” group to access the file server. UCL Group information is deployed to the switches as the HW_UCL

29、_Group attribute from theZero Touch Provisioning (ZTP) of NewSwitches - Administrators can specify a configuration file for each type of switch. When an out-of-box switch is connected to the network, it receives the commander switchs IP address using option 148 from the DHCP server. Then it gets the

30、 easy deployment configuration for the type of switch it belongs to and receives the FTP servers IP address and credential as well as the configuration files position. Lastly, it downloadstheconfigurationfilefromthe FTP server and runsit.RADIUS serverauthenticated.whenausergetsTolly engineers verifi

31、ed that the S7700 switchsupportediPCA to detectthedevicelevel, linkWhena user was already authenticated, Tollyengineerswereableto changethedynamic VLANoftheuserbyassigninganewdynamic VLAN on the RADIUSserverusingthe Change of Authentication (CoA) feature supported by theS7700.level

32、worklevelpacketlossUnified User ManagementDue to high user managementcapabilities, Broadband Remote Access Server (BRAS) devicesarewidelyused in carriernetworks. But high prices have hindered BRAS deployment in campus networks. The S7700 switch with the ENP line cards features powerful programming c

33、apabilities and provides Unified User Management, which authenticatesbothwiredandwirelessusers.Centralizedsoftwareupgradingand patchdeployment - Administrators can remotely upgradethesoftwareor deployapatchto a member switch from the command switch.The S7700 also supported DestinationAddress Account

34、ing (DAA) to dynamically adjust the bandwidth and accounting according to the destination address (different services) of different users.Faulty device replacement withoutconfiguration - The commander switch backs up the configuration of all member switches periodically. When a member switch fails,

35、administrators can take it down and put an out-of-box switch of the same model to the network. The commander switch automatically loads the latest backup configuration file of the faulty switch to the new switch so no configuration is neededonthereplacementswitch.QoSTolly engineers verified that the

36、 S7700 switch supported granularity as 1 kbps for traffic policingwiththeENPlinecards.TheENPline cards on the S7700 also supported up to 5 levels Hierarchical QoS (HQoS) to provide differentiatedservices.Tolly engineers verified that the S7700shielded capability and access differences between device

37、s and supported multiple authentication modes, including 802.1X, MACaddressand Portalforbothwired and wirelessclients.CSSThe S7700 switch supportsTolly engineersverifiedthethreefeatureswhentheS7700switchwasacommander switch. The centralized software upgradingTraditional operation and maintenancemeth

38、ods focus on device management;the HuaweiCluster Switch System (CSS) technology. It 2016 Tolly Enterprises, LLCTPage 3 of 11Huawei S7700 Series Smart Routing Switches#216118Huawei S7700 Series Agile SwitchTolly Verified Features and Capacity - part 1 of 2Note: Tested with the ES1D2S08SX1E li

39、ne card.Table 1Source:Tolly,March2016 2016 Tolly Enterprises, LLCTPage 4 of 11Native T-bit Wireless Access Controller (AC)Easy-operation (as the commander)T-bit Capability960Gbps CAPWAP tunnel encapsulation and decapsulation capabilityZero Touch Provisioning (ZTP) of new switchesCommander sw

40、itch automatically loads the specified configuration to out of box member switchesWiredand Wireless ConvergenceManage2,048 wireless access points (APs), 32,768 concurrent online wireless users and provide connectivity between wired and wireless networksCentralized software upgrading and patch deploy

41、mentUpdate the software or load a patch to a member switch from the commander switch (S7700 could work as the member service as well)Switch Chassis Redundancy for Wireless Accesswith two S7700 switches stacked using the Huawei CSS technology, Real-timewirelessAccessController(AC)backupFaulty device

42、replacement without configurationCommander switch automatically load the backed up configuration of the faulty member device to the replacement switchENP Line Card Redundancy for Wireless AccessZero Touch Provisioning (ZTP) using the eSight Unified Management PlatformSuper Virtual FabricData Center

43、FeaturesSVF ParentSwitch with2,048wirelessAPsand256AccessSwitch(AS)clients(eachASclientsupportsastackof5 physical access switches using the HuaweiiStacktechnology). So 1,280 physical access switches weresupportedin one SVFinstanceVirtual System - one physical S7700 switch can be virtualized into 8 v

44、irtual systemsSVF across third-party vendors devices(Layer 2 connectivity)Transparent Interconnection of Lots of Links (TRILL)iPCAHardware gateway for overlay networks - VXLANDeviceLevel,LinkLevelandNetworkLevelPacketLossMonitoringwithactualservicepacketsPerformance and CapacityUnified User Manageme

45、ntForwarding Capability: 2,880Mpps with one S7712 switch2,880Mpps with one S7706switch1,440Mpps with one S7703switch802.1X,MACAddress,Portal,andIPoEAuthenticationforbothwiredandwirelessclients192 10GbE Ports Full-mesh Line-rate Forwarding on One S7712 Switch 192 10GbE Ports Full-mesh Line-rate Forwa

46、rding on One S7706 Switch 9610GbEPortsFull-meshLine-rateForwardingonOneS7703SwitchDynamic VLAN and ACL for each user when the user gets authenticatedup to 320Gbps fabric connection per slotDynamic User Access Control with the UCL Groupe.g. an ACL rule “rule 1 deny IP source UCL-group name Test desti

47、nation File Servers IP address” can dynamically block all users in the “Test” group to access the file server. UCL Group information is deployed to theswitches as the HW_UCL_Groupattributefromthe RADIUSserverwhena usergets authenticatedMAC table capacity: 1M*Change of Authorization (CoA)e.g. change

48、the dynamic VLAN of an authenticated user from the RADIUS serverMAC Address Learning Rate: 8,000 MAC addresses per secondDestination Address Accounting (DAA)ARP table capacity: 256K*QoSARP Learning Rate: 1,000 ARP entries per second1kbpsgranularityfortrafficpolicingwiththeEthernetNetworkProcessor(EN

49、P)linecardsFIBv4 table capacity: 1M (S7706/S7712 with SRUH), 150K (S7703)*5 levels Hierarchical QoS (HQoS) with the ENP line cardsBGP Route Learning Rate: 10K/sHuawei Cluster Switch System (CSS)Multicast Routing Table Capacity: 128K (S,G) entries*Stacking with the CSS Cards (subcard on the Main Proc

50、essing Unit)MPLS Label Capacity: 32,000 MPLS labels/LSPs*4.3scrossswitchlatencyforaCSSvirtualsystemwithtwoS7700switchesusingtheCSScardsACL Capacity: 64K rulesStacking with service ports on the X1E line cards64 LACP group, one Link Aggregation Group supports 32 linksEncapsulate 64K QinQ combinations

51、Decapsulate 64K QinQ combinationsHuawei S7700 Series Smart Routing Switches#216118Huawei S7700 Series Agile SwitchTolly Verified Features and Capacity - part 2 of 2Source: Tolly, March 2016Table 2TRILLTransparent Interconnection of Lots of Links (TRILL) uses Layer 3 routing techniques to build a lar

52、ge Layer 2 network. Tolly engineers verified that the S7700 switch supported TRILL.and patch deployment feature was alsoverified when the S7700 switch was a member switch.To allow the virtual environment usingVXLAN to communicate with other non- VXLANendpointsaswellasprovideLayer3 connectivity for V

53、Ms in different network segments of the overlay network, a gateway is needed. Tolly engineers verified thatthe Huawei S7700 switchcouldactas the gateway for the VXLAN overlay network.Tolly engineers also verified that the HuaweieSight Unified Management Platform supported the Zero Touch Provisioning

54、 (ZTP) feature. Administrators can plan the network topology using eSights graphic Web interface and specify the configuration for each remote device. The S7700 switch which is managed by eSightcan thenwork as the root device to automatically deployVXLANVirtualExtensibleLAN(VXLAN)isonemajor datacent

55、eroverlaynetworktechnology.PerformanceSwitch Fabric Module N+1 RedundancyTolly engineers verified that one S7706 or one S7712 switchcouldprovide 100% line- ratefull-meshthroughputusing19210GbE ports across 6 interface modules with 64-, 128-, 256-, 512-, 1024-, 1280-, 1518- and9216-byteframesizes. On

56、e S7703 switch could provide 100% line-rate full- mesh throughput using 96 10GbEThe overlay network technologies canprovide Layer 2 connectivity for tunnel endpoints (e.g virtual switches) over a physicalLayer 3 network. It canexpandthe Layer 2 network for the virtual machines, overcome the limitati

57、on of VLAN numbers by adding a new Layer 2 networksegment header (VNI for VXLAN), and reduce the demands of theMACtables on thephysical switches.planned configurations to thedevices when the out-of-box devicesconnectstothenetwork.remoteremoteData Center FeaturesVirtual SystemOne S7700 switch could be virtualized into eight virtual systems based on ports. Each virtual syst