九仓电信第一期项目presentation slides for wharftt network for cas v1 0

1、AgendaExecutive Summary Requirements and Challenges Solutions HighlightsSolutions SummariseAppendix: Ruijie Virtualization Switching Unit (VSU) Appendix: Ruijie NFPPAppendix: Ruijie Network Management Tool - SNCExecutive SummaryRuijie Networks has become the network equipment market leader and been

2、awarded “No.1 Enterprise in China”*To provides an integrated network solution with high reliability, stability and performance to tackle the challenges of the Previous DCN network of Wharf T&T and for the plan of new Central Alarm System (CAS)*Source: China Computer World (CCW) and China Center for

3、Information Industry Development (CCID)AgendaExecutive Summary Requirements and Challenges Solutions HighlightsSolutions SummariseAppendix: Ruijie Virtualization Switching Unit (VSU) Appendix: Ruijie NFPPAppendix: Ruijie Network Management Tool - SNCPrevious ChallengesReliability and ManageabilityPr

4、evious network take long convergence time Lack of proactive management toolsDistributed Firewall deployment decrease operation efficiencySecurity Protections & Traffic ControlRisk of Broadcast stormPriority traffic cannot be guaranteeService platform traffic are not properly segmented and lack ofgra

5、nular access controlCapability and Scalability Hard to expand to capable for the new Central Alarm System (CAS) Previous network will reach 90% FULL in less than 3 years.Support & Operating Cost Previous network equipments are End-of-Support High OPEX for Previous equipmentsPrevious Wharf T&T - WCT

6、KWT Solution Diagram Server Farm (12/F)Server Farm (11/F)CASQuidway 3526ECore SwitchQuidway 3526ECore SwitchQuidway S2403HEdge SwitchQuidway S2403HEdge SwitchHuawei 3600RouterHuawei 3600RouterP1MIP50M PxCDRCisco ASA 5542Server Farm (3/F)CASQuidway S2403HEdge SwitchQuidway S2403HEdge SwitchP1PxLegend

7、CDRUTP CopperSMF FiberServer Farm (9, 18/F)CASP1PxCDRCASP1PxCDRKWT Centre (Kung Tong)WCT Centre(Tsuen Wan)AgendaExecutive Summary Requirements and Challenges Solutions Highlights Solutions SummariseAppendix: Ruijie Virtualization Switching Unit (VSU) Appendix: Ruijie NFPPAppendix: Ruijie Network Man

8、agement Tool - SNCSolution HighlightsLossless Infrastructure DesignNo Single Point of Failure with redundant Power, Switch, Uplink andHot Swappable Chassis Switch architectureBandwidth capacity is reasonably sufficient for sudden burst traffic Traffic classification & prioritization with QoSSeamless

9、 Failover with Switch Virtualization technologySolution Highlights - Traffic ControlSecurity Protections & Traffic ControlPrivate IP addressing & NAT mechanism is adopted to minimizenetwork exposureVLAN separation for each service platform and enable granular control with L3 ACLRuijie patented NFPP

10、deployed for dynamic network storm attack detection & isolationTraffic classification & prioritization with QoSSolution HighlightsCapability and ScalabilityNew Infra design is capable for future 15 yearsNew Infra backbone is upgradable for 10G providing 10 times more capacityManageabilityCentral NMS

11、 with Topology Management and Proactive Alert Centralized management for Firewall operationUnified Switch operation with Switch Virtualization technologySupport & Operating CostHigh ROI proposed equipment life & solution with at least 10-15 working years.Direct Vendor supportRevenue GenerationMass o

12、f Public/True IP are released after the upgrade which can be used in other commercial network service deployment.New Wharf T&T - WCT KWT Solution DiagramServer Farm (11/F)S5750E-PEdge Switch 18F (L3, Dual PS)CASPrevious DCNPrevious DCNS5750E-PEdge Switch 11F (L3, Dual PS)P1Ruijie SNCRuijie SNCS8606B

13、S8606BCore Switch 11F (Modular, Chassis)Core Switch 09F (Modular, Chassis)PxCDRS5750E-PEdge Switch 12F (L3, Dual PS)MIPGEServer Farm (3/F)Cisco ASA5542Cisco ASA5542CASS5750E-PEdge Switch 3F (L3, Dual PS)P1 Server Farm (9/F)Office NetOffice NetS5750E-PEdge Switch 9F (Dual PS)CASWatchGuard X535atchGua

14、rd X535PxP1ServicePlatformServicePlatformCDR UTP Copper SMF FiberAggregationPxCDRWServer Farm (12/F)CAS P1Px CDRServer Farm (18/F)CAS P1Px CDRKWT Centre (Kung Tong)WCT Centre (Tsuen Wan)New Wharf T&T - WCT KWT Solution DiagramServer Farm (11/F)S5750E-PEdge Switch 18F (L3, Dual PS)CASPrevious DCNPrev

15、ious DCNS5750E-PEdge Switch 11F (L3, Dual PS)P1Ruijie SNCRuijie SNCS8606BS8606BCore Switch 11F (Modular, Chassis)Core Switch 09F (Modular, Chassis)PxCDRS5750E-PEdge Switch 12F (L3, Dual PS)OMSPIPF(ArGeEa 0)Server Farm (3/F)Cisco ASA5542Cisco ASA5542CASS5750E-PEdge Switch 3F (L3, Dual PS)P1 Server Fa

16、rm (9/F)Office NetchGuard X535Office NetS5750E-PEdge Switch 9F (Dual PS)WatchGuardCASX535PxP1ServicePlatformServicePlatformCDR UTP Copper SMF FiberAggregationPxCDRVSULayer 2 DomainVSULayer 2 DomainWatServer Farm (12/F)CAS P1Px CDRServer Farm (18/F)CAS P1Px CDRKWT Centre (Kung Tong)WCT Centre (Tsuen

17、Wan)NO Single Point Failure Design IllustrationPoSweervrerRFearsmil(i1e8n/Fc) yDual Power SupplyServer Farm (11/F)S5750E-PModCuAlSe (AC)Edge Switch 18F (L3, Dual PS)CASP1Previous DCNPrevious DCNS5750E-PEdge Switch 11F (L3, Dual PS)P1PxCDRRuijie SNCRuijie SNCS8606BS8606BCore Switch 11F (Modular, Chas

18、sis)Switch VirtualizationCore Switch 09F (Modular, Chassis)Px(VSSeUrv)er Farm (12/F)All VSU members areCDRS5750E-PEdge Switch 12F (L3, Dual PS)interCliAnSk in ringtopology.OSPFMIPrGeEa 0)OnlyP16ms failover(Atime if master/slaveswitch fail.Server Farm (3/F)PxCASFWCDRFWS5750E-PEdge Switch 3F (L3, Dual

19、 PS)Dual-Homing forP1Server isrecSoemrvmer eFanrmde(9d/Fi)nOffice NetOffice NetS5750E-PEdge Switch 9F (Dual PS)ordeCrAtSo furtherFWminimize risk of singlepointPf1ailurePxServicePlatformServicePlatformCDR UTP Copper SMF FiberAggregationPxCDRFWKWT Centre (Kung Tong)WCT Centre (Tsuen Wan)NO Single Poin

20、t Failure Design IllustrationServer Farm (18/F)Server Farm (11/F)All switch with dual-S5750E-PCASEdge Switch 18F (L3, Dual PS)uplink design.CASP1Previous DCNPrevious DCNS5750E-PEdge Switch 11F (L3, Dual PS)P1PxCDRRuijie SNCRuijie SNCS8606BS8606BCore Switch 11F (Modular, Chassis)Empowered by RuijieCo

21、re Switch 09F (Modular, Chassis)PxServer FaSrmw(i1t2c/hF) Virtualization(VSU), all physicalS5750E-PCDRuplinks are linkEdge Switch 12FCASas a(L3, Dual PS)aggregatedOSPFMIPrGeEa 0)P1single logical channel.(AOnly 5ms failoverServer Farm (3/F)Pxtime for any physicaluplink failure.CASFWCDRFWS5750E-PEdge

22、Switch 3F (L3, Dual PS)P1 Server Farm (9/F)Office NetOffice NetS5750E-PEdge Switch 9F (Dual PS)CASFWPxP1ServicePlatformServicePlatformCDR UTP Copper SMF FiberAggregationPxCDRFWKWT Centre (Kung Tong)WCT Centre (Tsuen Wan)NO Single Point Failure Design IllustrationServer Farm (18/F)Server Farm (11/F)S

23、5750E-PCASEdge Switch 18F (L3, Dual PS)CASP1Proposed Core SwitchPrevious DCNPrevious DCNS5750E-PEdge Switch 11F (L3, Dual PS)(S8600) is a ChassisP1Modular design switch.PxAll components are hot-swappable.CDRSupport Dual Supervisor,Ruijie SNCRuijie SNCS8606BS8606BCore Switch 11F (Modular, Chassis)Pow

24、er & Fan module.Core Switch 09F (Modular, Chassis)PxServer Farm (12/F)CDRS5750E-PEdge Switch 12FCASSwitch Virtual(iLz3a, tDiouanl PS)OSPFMIP(ArGeEa 0)(VSU)P1All VSU members areinterlink in ring topology.Server Farm (3/F)Only 6ms failover time ifPxmaster/slave switch fail.CASFWCDRFWS5750E-PEdge Switc

25、h 3F (L3, Dual PS)P1 Server Farm (9/F)Office NetOffice NetS5750E-PEdge Switch 9F (Dual PS)CASFWPxP1ServicePlatformServicePlatformCDR UTP Copper SMF FiberAggregationPxCDRFWKWT Centre (Kung Tong)WCT Centre (Tsuen Wan)NO Single Point Failure Design IllustrationServer Farm (18/F)Server Farm (11/F)S5750E

26、-PCASEdge Switch 18F (L3, Dual PS)CASP1Previous DCNPrevious DCNS5750E-PEdge Switch 11F (L3, Dual PS)P1PxResilience WAN DesignCDR Dual-WAN link designRuijie SNCRuijie SNCS8606BS8606BCore Switch 11F (Modular, Chassis)between sites.Core Switch 09F (Modular, Chassis)PxServer FEamrmp(1o2w/F)ered by OSPF

27、&CDRBFD protocol, conveS5r7g5e0En-cPeEdge Switch 12FCAStime can be fine tu(nL3e, dDuaaslPS)OSPFMIP(ArGeEa 0)fast as in 1-2 secondsP1Server Farm (3/F)PxCASFWCDRFWS5750E-PEdge Switch 3F (L3, Dual PS)P1 Server Farm (9/F)Office NetOffice NetS5750E-PEdge Switch 9F (Dual PS)CASFWPxP1ServicePlatformService

28、PlatformCDR UTP Copper SMF FiberAggregationPxCDRFWKWT Centre (Kung Tong)WCT Centre (Tsuen Wan)NO Single Point Failure Design IllustrationServer Farm (11/F)S5750E-PEdge Switch 18F (L3, Dual PS)CASPrevious DCNPrevious DCNS5750E-PEdge Switch 11F (L3, Dual PS)P1Ruijie SNCRuijie SNCS8606BS8606BCore Switc

29、h 11F (Modular, Chassis)Core Switch 09F (Modular, Chassis)PxServer Farm (12/F)CDRS5750E-PEdge Switch 12F (L3, Dual PS)CASOMSPIPF(ArGeEa 0)P1HA Design for Firewall ServiceAll proposed firewall supportServer Farm (3/F)Px High Availability.CASFWCDRFWAll FW will run in Active/StandbyS5750E-PEdge Switch

30、3F (L3, Dual PS)mode, are sessions table are in-P1sync , support seamless failoverServerinFasrmub(9-/Fs)econd.Office NetOffice NetS5750E-PEdge Switch 9F (Dual PS)CASFWPxP1ServicePlatformServicePlatformCDRUTP Copper SMF FiberAggregationPxCDRFWServer Farm (18/F)CAS P1Px CDRKWT Centre (Kung Tong)WCT Ce

31、ntre (Tsuen Wan)NO Single Point Failure Design IllustrationServer Farm (18/F)Server Farm (11/F)S5750E-PCASHA Design for NMSEdSgeeSrvwiictceh 18FNMS (LR3, GDu-aSl PNSC)P12 independent)CASPrevious DCNPrevious DCNS5750E-PEdge Switch 11F (L3, Dual PS)is proposed and deployed in twodata centers.P1PxEach

32、NMS can workCDiRndependently, either one canRuijie SNCRuijie SNCS8606BS8606BCore Switch 11F (Modular, Chassis)monitor the whole DCNCore Switch 09F (Modular, Chassis)PxInfrastructure proactively.Server Farm (12/F)CDRAll alert will be loggedS5a7n50dE-PEdge Switch 12FCASspecified major alert(Lc3a, Dnub

33、alePSs)entOSPFMIP(ArGeEa 0)P1via Email /SMS.Server Farm (3/F)PxCASFWCDRFWS5750E-PEdge Switch 3F (L3, Dual PS)P1 Server Farm (9/F)Office NetOffice NetS5750E-PEdge Switch 9F (Dual PS)CASFWPxP1ServicePlatformServicePlatformCDR UTP Copper SMF FiberAggregationPxCDRFWKWT Centre (Kung Tong)WCT Centre (Tsue

34、n Wan)Proposed Wharf T&T - WCT KWT Solution DiagramServer Farm (11/F)Quidway S2403HEdge SwitchQuidway S2403HEdge SwitchQuidway 3526ECore SwitchQuidway 26ESwitchHuawei 3600RouterHua 36RouP1MIP50MPxCisco ASA5542L2TrunkL2TrunkCisco ASA5542Office NetOffice NetWatchGuard X535WatchGuard X535ServicePlatfor

35、mServicePlatformMIPGES8606BS8606BCore Switch 11F (Modular, Chassis)Core Switch 09F (Modular, Chassis)S5750E-PServer Farm (9/F)Dist Switch(L3, Dual PS)S5750E-PUTP CopperSMF FiberDist Switch(L3, Dual PS)Ruijie SNCRuijie SNCNEW CORE INFRAOLD CORE INFRAServer Farm (3/F)Server Farm (11/F)Server Farm (12/

36、F)Server Farm (18/F)Server Farm (9, 18/F)Server Farm (3/F)wei 00ter35CoreServer Farm(12/F)P1PxKWT Centre (Kung Tong)WCT Centre (Tsuen Wan)AgendaExecutive Summary Requirements and Challenges Solutions Highlights Solutions SummariseAppendix: Ruijie Virtualization Switching Unit (VSU) Appendix: Ruijie

37、NFPPAppendix: Ruijie Network Management Tool - SNCSolutions UAT SummariseInfrastructure UATItemamountresultSwitch Common States7passSwitch VSU failover28passSwitch Connectivity6passSwitch Link Resilience28passSwitch Power Resilience28passSwitch Throughput Test7passCore Switch Card Replace8passFirewa

38、ll Test12passSolutions UAT SummariseNM-ServerUATItemamountresultSNC Admin test22passSNC Operation test11passSNC Monitoring test36passSNC Alarm test7passSNC Syslog and Report6passAgendaExecutive Summary Requirements and Challenges Solutions HighlightsSolutions SummariseAppendix: Ruijie Virtualization

39、 Switching Unit (VSU)Appendix: Ruijie NFPPAppendix: Ruijie Network Management Tool - SNCRuijie Virtualization Switching Unit (VSU ) Technology FREEGE Copper StackingtechnologyFailover Time1.16ms8Upto 8 Virtualized Switch MembersBenefits of VSU VirtualizationAGG_SW1VRRP3 Master

40、Instance 3 (VLAN 30) RootVRRP5 Master Instance 5 (VLAN 50) RootL3MSTP+VRRPL3L2L2ACC_SW 2ACC_SW 1VLAN 50VLAN 30VLAN 50VLAN 50VLAN 30VLAN 50 第 25頁 / 共 4頁u Unified Operation Management (8 devices1 devices)u 100% Link Utilization achieved by link aggregation (Aggregation)u Seamless

41、 failover time (as fast as 1.16ms)Ruijie Networks Virtual Switch Unit (VSU) TechnologyStacking Convergence Performance Evaluation Versus H3C TechnologiesBottom Line Summary:Delivered 122X faster stack failover time than H3C S5500-28C-HI (1.14ms vs139.4ms).Industrys most flexible and highest TCO virt

42、ualization technology Tolly hasvalidated thus far, with using bre or copper Ethernet cables on GbE or 10GbE service Ethernet ports to stack.Validated support for seamless business operation at any failure scenariossuch as add/remove stack member, Master Switch failure, VSU link failure, Uplink failu

43、re, etc.Validated support for Ruijie VSU stacking bandwidth (VSU Link) upto 320G Ruijie Networks Virtual Switch Unit (VSU) TechnologyStacking Convergence Performance Evaluation Versus H3C Technologies2 Members Stack Convergence Tests: Ruijie Networks Virtual Switch Unit (VSU) TechnologyStacking Convergence Performance Evaluation Versus H3C Technologies8 Members Stack Convergence Tests: AgendaExecutive Summary Requi