presented by: cbnetworks technical support [email protected] may 2008 ethernet access...

• Presented by:

• CBNetworks

• Technical Support

• [email protected]

• http://www.cbnetworks.fr

• May 2008

Ethernet Access over Fiber

Ethernet Access over Fiber for TS2008 Slide 2http://www.cbnetworks.fr - [email protected]

F.ETHEFM

BondingGbE

LA-110F.ETH

BranchIPDSLAM

ATM

LA-210IPDSLAM

Branch

GbE

Ethernet over DSL

ASMi-54 ASMi-54

SHDSL.bis

RICi-4/8E1

RICi-16

SDH

GbE

STM-1/OC-3

10BT

100BT

EoPDH

GFP-VCAT

Branch

Branch

GFP

Egate

Branch

RICi-E110BT

Ethernet over PDH

ADM

MLPPP

RICi-622GE RICi-622GE

Branch

GbE STM-4/OC-12

RICi-155GE RICi-155GE

Branch

GbE STM-1/OC-3 GbE

GbE

Ethernet over SDH/SONET

Headquarters

ETX-202F.ETH GbE

GbEMetro

Ethernet

ETX-202A

Branch

GbEGbE

Ethernet over Fiber

Variety of Ethernet Access Solutions – Implementation Scenario

• Extending the reach of the provider’s network over a variety of access technologies

• Consistent Ethernet service across different access technologies

Service ProviderPacket Switched

Network


Agenda

• Introduction

• Product Line Overview

• Services and Applications

• Service Delivery Tools

• Ethernet OAM and SLA

• Summary


ETX Application and Product Definition

• Clear demarcation between provider’s and Customer’s networks – quickly determine who is responsible for problems affecting service

• Operations Administration & Maintenance (OAM)Allow for end-to-end fault management and performance monitoring

• Traffic management starting at customer premises

• Service Level Agreement MonitoringCustomers demand proof of SLA contract

Operator AOperator B

EVC A

Customer Premises

ETX CPE

EVC B

Customer Premises

ETX CPE

End-to-end OAM between demarcation points

Customer Premises

ETX-ACPE


ETX – Product Overview

Product Physical Description Highlights

ETX-102 V3.6

Fast Ethernet

NTU

• Compact 1U, half 19” plastic enclosure

• 1xFE Net, 1xFE Net/User, up to 4 FE User

• Switching & Bridging

• Ethernet OAM 802.3ah

• Ethernet OAM 802.1ag

• SLA Monitoring

• Uplink redundancy

• L1 and L2 Loopback

• Per VLAN Statistics

• Serial Craft port

• Configurable OOB mgt. port

• Wide range of SFP

• Temp. Hardened option

• Standard wide range AC/DC

48-220 PSU

• Optional wide range DC 24-48

PSU option

• Dying Gasp Support

ETX-201 V3.6

Gigabit & Fast

Ethernet NTU

• Compact 1U, half 19” plastic enclosure

• 1xGE Net, 1xGE Net/User, up to 4xFE user ports

• Auto-detect GE/FE SFP Slots

ETX-202 V3.6

Gigabit Ethernet

NTU

• Compact 1U, half 19”, metal enclosure

• 2xGE Net, up to 4xGE user ports


ETX – Product Overview

Product Physical Description Highlights

ETX-550GE Carrier Ethernet

MTU/Aggregation

Compact 1U or 1.5U, 19”

• Up to 4x GE SFP Optical Uplinks

• Up to 24x UTP 10/100 or 100 FE

Optical User ports

• Switching & Bridging

• Redundant PSU AC or DC


ETX-A NTU – Product Overview

• Physical Description• Half 19” 1U

• AC/DC Power Supply

• 2-4 user interfaces

• 2 network interfaces

• Electrical

• 10/100BaseT

• 10/100/1000BaseT

• All fiber interfaces – SFP based

• MEF 9 & 14 Certified for EVPL/EVPLAN

• Temperature Hardened with dual power supply option

FastEthernet

CPE

4

Ethernet1 or 2

GigabitEthernet

GigabitEthernet

CPE

4

Ethernet1 or 2

GigabitEthernet

New!

Available

for Beta!

ETX-201A

ETX-202A


Supported Service Topologies: NTU view

Customer Premises

ETX- series

EthernetAggregator

GE

POP

PSN ETH/IP/MPLS

VoIP

Premium data

Best Effort data

4 Mbps

16 Mbps

E-NTU

Edge Device

Different user ports

ETX-550/or 3rd Party

Port based service:

Flow based service : ‘Service multiplexing‘

Customer Premises

ETX-A seriesGE

POP

PSN ETH/IP/MPLS

VoIP

Premium data

Best Effort data

16 Mbps

E-NTU

Edge Device

Same user portDifferent flows (e.g VLAN)

4 Mbps

ETX-550/or 3rd Party

EthernetAggregator


MEF Services Terminology: E-LINE

Ethernet Private Line (EPL)

• Replaces a TDM Private line

• Dedicated UNIs for Point-to-Point connections

• Single Ethernet Virtual Connection (EVC) per UNI

Ethernet Virtual Private Line (EVPL)

• Replaces Frame Relay or ATM services

• Supports multiple EVCs per UNI

• Allows single physical connection (UNI) to customer premise equipment for multiple virtual connections

Point-to-Point EVC

Carrier Ethernet Network

CE UNI

CE

UNI

CE

UNI

ISPPOP

UNI

Internet

Service Multiplexed Ethernet UNI

Multipoint-to-Multipoint EVC

Carrier EthernetNetwork

CE UNI

CE

UNI

CEUNI


MEF Services Terminology: E-LAN

Ethernet Private Line (EPLAN)

• Providing LAN over the WAN

• Multipoint-to-Multipoint service

• Single Ethernet Virtual Connection (EVC) per UNI

Ethernet Virtual Private Line (EVPLAN)

• Providing LAN over the WAN

• Multipoint-to-Multipoint service

• Supports multiple EVCs per UNI

• Allows single physical connection (UNI) to customer premise equipment for multiple virtual connections

Service Multiplexed Ethernet UNI

CE UNI

CE

UNI

CEUNI

CE UNI

CE

UNI

CE

UNI

ISPPOP

UNI

Internet


Supported Service Topologies:Summary

• EPL and EPLAN are supported by current ETX products

• EVPL and EVPLAN are supported with new ETX A series


Flow Based Forwarding Model

Step 6-P. Bit priority marking:Adding the P.bit to the SP-Vlan, according to user configured profiles.

Marking SP-Vlan P.bit per CoS:

CoS 3= Profile 1= P.bit X

Cos 5= Profile 2= P.bit Y

Step 2-Flow Mapping: Defines VLAN members per flow

Step 3-Assigning Fixed CoS per Flow(other method is CoS per P.bit/DSCP/IP TOS according to user configured profiles)

Step 4-Policer Per Cos:Define the CIR/EIR/CBS/EBS Bw criteria per CoS

Step 5-Configuring Strict or WFQ priority, according to user configured profiles.Note Priority Queues are fixed to CoS.

Step 1-Flow Classification

Fixed Mapping(

CoS per Flow Flow 1 = CoS 3

Policer per COS CoS 3 = BW profile 1

Flow 1 (EVC 1) CE-VLAN ID

Queues

0 (low)

1

2

3

4

cos

0

1

2

3

4

Strict / wfq

St / wfq

St / wfq

St / wfq

St / wfq

5 St / wfq

66 St / wfq

7 (max)7 St / wfq

5

Flow 2



Flow 2 (EVC 2) CE-802.1p

Classification according to flow key: 1. CE-VLAN ID 2. CE-802.1p 3. DSCP/ TOS 4. Port


Mapping User Traffic to flow

• On user ingress traffic is mapped to a flow by one of the following criteria:

• VLAN ID

• P.Bit

• DSCP/TOS

• Subscriber port

Up to 30 Flows

Flow 3

Flow 2

Classification according to flow key:

1.CE-VLAN ID

2.CE-802.1p

3.DSCP/TOSFlow 1 (EVC 1)

CE-VLAN: 1, 3,100-120

User Network

Up to 30 Flows

Flow 4

Flow 3

Classification according to flow key:

1.CE-VLAN ID

2.CE-802.1p

3.DSCP/TOSFlow 2 (EVC 2)

CE-802.1P= 1, 4, 7

User Network

Mapping Service according to P.Bit

Mapping Service according to VLAN ID








Step 3-Assigning Fixed CoS per Flow(other method is CoS per P.bit/DSCP/IP TOS according to user configured profiles




Fixed Mapping(




Queues

0 (low)

1

2

3

4

cos

0

1

2

3

4

Strict / wfq

St / wfq

St / wfq

St / wfq

St / wfq

5 St / wfq

66 St / wfq

7 (max)7 St / wfq

5

Flow 2

CoS per Pbit Pbit1=Cos 1Pbit7=Cos 7





Class of Service Mapping

• COS can be determined according to:

• Flow (EVC)

• CVLAN Pbit

• Customer DSCP/TOS

• Subscriber port

EVC1

EVC2

EVC3

UNI EVC2

CoS 1

CoS 4

CoS 7

Up to 30 Flows

Flow 4

Flow 3

Flow 2 (EVC 2)

CE-802.1P= 1, 4, 7

User Network

p.bit CoS/Service

7 7

6 6

5 5

4 4

3 3

2 2

1 1

0 0












Fixed Mapping(




Queues

0 (low)

1

2

3

4

cos

0

1

2

3

4

Strict / wfq

St / wfq

St / wfq

St / wfq

St / wfq

5 St / wfq

66 St / wfq

7 (max)7 St / wfq

5

Flow 2

CoS per Pbit Flow 2 = CoS 5





Policer Per Service/Flow Bandwidth Control

• Traffic policing per ingress Service

• Dual Token Bucket mechanism (CIR+CBS, EIR+EBS) per policer

• TrTCM - 2 rate (CIR/EIR), 3 color (Green/Yellow/Red) marking:

• Green: 0 to CIR – always ‘respected’

• Red: above EIR – always discarded

• Yellow: between CIR to EIR – Will be respected until the queue reaches a predefine threshold, then it will discarded


• Bandwidth Profile attributes

• CIR – Committed Information Rate, 64 kbps granularity

• CBS – Committed Burst Size, 2048-32000 bytes, 1 x byte granularity

• EIR – Excess Information Rate, 64 kbps granularity

• EBS – Excess Burst Size, 2048-32000 bytes, 1 x byte granularity

• Typical Services

• VoIP: CIR/CBS according to rate sold, EIR/EBS=0

• High Priority Data, CIR/CBS with typically high EIR/EBS (2 x CIR)

• Best Effort: CIR/CBS=0, EIR/EBS according to rate sold

Bandwidth Profiles

Flow 2 (EVC 2)

CE-802.1P= 1, 4, 7

User Network

p.bit CoS/Service B.W. Profile

7 7 CIR/CBS

6 6

5 5

4 4 (CIR/CBS):2

3 3

2 2

1 1 EIR/EBS

0 0

EVC2

CoS 1

CoS 4

CoS 7












Fixed Mapping(




Queues

0 (low)

1

2

3

4

cos

0

1

2

3

4

Strict / wfq

St / wfq

St / wfq

St / wfq

St / wfq

5 St / wfq

66 St / wfq

7 (max)7 St / wfq

5

Flow 2






Quality of Service

• Class of service management:• Traffic can mapped to eight queues for eight classes of

service

• Strict priority for low delay low jitter applications such as VoIP

• WFQ scheduling for Improving fairness for non critical traffic

• Combination of WFQ and Strict Priority

• Shaping• Smoothes egress traffic from network port

• Based on leaky bucket algorithm with CIR parameter

• Queuing• Flexible Combination of WFQ and Strict Priority

• Per queue WFQ configurable weight from 1 to 32

• Per queue configurable length 64-32,000 bytes, 1xbyte granularity

• Congestion treatment• WRED – Congestion avoidance

Queues

0 (low)

1

2

3

4

cos

0

1

2

3

4

Strict / wfq

WFQ

WFQ

5

66

7 (max)7 Strict

Fixed Mapping(

5












Fixed Mapping(




Queues

0 (low)

1

2

3

4

cos

0

1

2

3

4

Strict / wfq

St / wfq

St / wfq

St / wfq

St / wfq

5 St / wfq

66 St / wfq

7 (max)7 St / wfq

5

Flow 2






Editing and Marking

• SP VLAN Editing: Traffic can be tagged, double tagged or untouched per flow

• Marking of Pbit on SP VLAN

Flow 2 (EVC 2)

CE-802.1P= 1, 4, 7

User Network

p.bit CoS/Service B.W. Profile QueuingEditing and

Marking

7 7 CIR/CBS Strict SP100:Pbit7

6 6

5 5

4 4 (CIR/CBS):2 WFQ SP100:Pbit5

3 3

2 2

1 1 EIR/EBS WFQ SP100:Pbit3

0 0


Product Net Port User Port Service Topology Bandwidth Profiles Class of Service

ETX-102 2 x FE 4 x FE EPL, EPLANCIR/CBSPer port

Strict Priority

ETX-201 2 x GE 4 x FE EPL, EPLANCIR/CBSPer port

Strict Priority

ETX-202 2 x GE 4 x GE EPL, EPLANCIR/CBSPer port

Strict Priority

ETX-201A 2 x GE 4 x FE EVPL, EVPLANCIR/CBS, EIR/EBSPER EVC.COS

Strict Priority + WFQ8 CoS

ETX-202A 2 x GE 4 x GE EVPL, EVPLANCIR/CBS, EIR/EBSPER EVC.COS

Strict Priority + WFQ8 CoS

ETX Product Line – Summary

Ethernet Private Line Support

CIR/CBS bandwidth profile per port

Ethernet Virtual Private Line Support

CIR/CBS, EIR/EBS bandwidth profile per EVC.COS


Standards OAM:Operations Admin. & Maintenance

A summary of available Ethernet OAM Mechanisms

Customer PremisesCustomer Premises

E-NTUCPE E-NTU CPE


802.1ag/ Y.1731 (UNI-N to UNI-N ME)

802.3ah(Access Link ME)

End-End/Last Segment

Performance Monitoring

TypeFault Propagation

ETXImplementation

IEEE 802.3ah(Clause 57)

Single Segment No Link No Standard

IEEE 802.1ag End-to-End No Connectivity No Standard

ITU-T Y.1731 End-to-End Yes Service Yes Standard


ETX SLA Support

The ETX can provision up to 30 EVC with up to 240 bandwidth profiles and 48 SLA instances

SLA Parameter ETX Support

Bandwidth Profile CIR, CBS, EIR, EBS

Service Connectivity Type EPL or EVPL

Service CoS Real Time, Priority, Best Effort

Performance: Frame Delay Based on Y.1731, Per EVC.cos

Performance: Frame Delay Variance Based on Y.1731, Per EVC.cos

Performance: Frame Loss Based on Y.1731, Per EVC.cos

Performance: Availability Based on Y.1731, Per EVC.cos

Protection Link protection:802.3ad or 1:1


Summary

• Match the optimal Ethernet NTU for the service requirements: ETX for EPL or ETX-A for EVPL

• Offer profitable EVC based service and not just port based service

• Support for available bandwidth with CIR/CBS EIR/EBS traffic profiles

• Supports a complete OAM package with standard 802.3ah, 802.1ag and Y.1731

• Support for SLA reports to your end-customers

Thank youfor your attention

• Technical Support

• [email protected]

• http://www.cbnetworks.fr


ETX-202A Available Configurations

Ordering Option Description

ETX-202A/NULL/NULL/1NULL 1 x Net, 1 x Net/User ports GE/FE SFP ready, 1 User port GE/FE SFP ready

ETX-202A/NULL/NULL/4NULL 1 x Net, 1 x Net/User ports GE/FE SFP ready, 4 User ports GE/FE SFP ready

ETX-202A/NULL/NULL/1UTP 1 x Net, 1 x Net/User ports GE/FE SFP ready, 1 User ports 10/100/1000BaseT

ETX-202A/NULL/NULL/4UTP 1 x Net, 1 x Net/User ports GE/FE SFP ready, 4 User ports 10/100/1000BaseT

ETX-202A/UTP/UTP/1UTP 1 x Net, 1 x Net/User ports 10/100/1000BaseT, 1 User ports 10/100/1000BaseT

ETX-202A/UTP/UTP/4UTP 1 x Net, 1 x Net/User ports 10/100/1000BaseT, 4 User ports 10/100/1000BaseT

ETX-202A/NULL/NULL/1NULLUTP1 x Net, 1 x Net/User ports GE/FE SFP ready, 1 x User SFP GE/FE port,

1 x User 10/100/1000BaseT

ETX-202A/WRDC Wide range DC PSU (+24 to -48) available with above options

ETX-202A/H/DCR/NULL/NULL/4UTP or /4NULL Dual wide range DC PSU (+24 to -48), temperature hardened in full 19” enclosure

SFP-5, SFP-6, SFP-7, SFP-8, SFP-9G

SFP-5D, SFP-6D, SFP-7D, SFP-8DOther SFPs may be used but may not be recognized by the ETX SW

SFP-5H, SFP-6H, SFP-8H, SFP-8DH, SFP-5DH Temperature Hardened SFP required for /H options. These SFP are currently Beta

By default unit ships with a wide range 110-240 AC power supply, WRDC is optional

Temp. Hardened unit (-30 to 65 Celsius) is available in full 19” with dual DC power supplies


ETX A Series Roadmap

Version Date Main Features

Version 1.2

Beta

ETX-202A

Today

• Auto-detect GE/FE SFP• Support for EVPL service and CIR/PIR, CBS/EBS• Multiple services per user port EVC.COS• Enhanced QoS with Strict Priority, Weighted Fair Queue and WRED• MEF 9 & 14 EPL/EVPL certified• RADview-EMS v1.8 available May-08

Version 1.6

Beta

ETX-201A

ETX-202A

Q208

• ETX-201A HW with 2xGE Net and 4xFE User• Jumbo frame, 9K support• Per EVC Shaping• Hierarchical scheduling• Standard IEEE 802.1ag CFM OAM: LBT, LT and CC• Standard ITU-T y.1731 PM OAM: (Two way delay)• L3 loopback, (IP loopback)


Access Link OAM:Standard IEEE 802.3ah

• ETX Support Passive mode designed for network termination

• Auto Discovery - Discovers if next hop supports 802.3ah

• Loopback - Remote layer 1 loopback of all traffic Excludes 802.3ah OAM messages from loopback

• MIB retrieval - No IP needed to get MIB parameters

• Remote failure indication

• Link Fault upon discovery of disconnect, log alarm, send trap

• Dying Gasp: Upon a power failure 802.3ah dying gasp message. Additionally, SNMP trap is sent.


ETXCPE ETX CPE


802.3ah(Access Link ME)


802.1ag/Y.1731 Service OAM

• 8 OAM levels

• MEP/MIP/MEG concept

• Main messages:• CC

• LB

• LT

• AIS

• RDI

• Lock

• (performance measurements)

MEP = Maintenance-End-PointMIP = Maintenance-Intermediate-Point

Service OAM Header

Service OAM MEPs and MIPs


Continuity Check (CC) OAM

• CC OAM Defined per EVC, allows for one-way connectivity monitoring

• Loss of Continuity (LOC) is declared (only at the sink side) upon 3.5 seconds without receiving CC OAM frame

• Loss of Continuity (LOC) is cleared upon sink receiving 2 CC OAM frames within a window of 3.5 seconds

• Upon CC failure• Send trap

• Update active alarm log

• Update statistics

• Optional uplink switch-over


E-NTUCPE E-NTU CPE


CC OAM Frames

CC Sink CC Source


Loopback (LB) OAM

• Defined per EVC, allows for non-intrusive loopback (round trip) connectivity monitoring

• Sent from MEP, looped by either MEP or MIP

• LB Failure is declared upon 2 seconds without receiving the specific LB OAM frame

• Upon LB failure• Send trap

• Update active alarm log

• Update statistics

• Optional uplink switch-over

LB OAM Request

LB OAM Reply


E-NTUCPE E-NTU CPE

Operator AOperator BMEP MEP


ETX CFM+PM OAM Future Support

Type Message Type V1.2 Support V1.6 Support Comments

Fault Management

CC Pre-standard Standard 100msec support

LB Pre-standard Standard IP ping equivalent

LT N/A Standard IP Trace rout equivalent

AIS/RDI N/A Standard RDI No CC -> Send RDI

LOCK N/A N/A

TEST N/A N/A

PerformanceManagement

Delay Roundtrip Roundtrip +/- Microsecond

Delay Variance Roundtrip Roundtrip +/- Microsecond

Packet Loss One-way One-way

Availability Yes Yes


ETX Ethernet OAM Tools – Summary

OAM Function Tools Comments

Connectivity

Verification

802.3ah heartbeat Heartbeat rate is 1 second

802.1ag CC pre-stand. 1 sec today - 100 msec in v3.8

802.1ag LB pre-stand. Can be used continuously as CC

Fault Detection

& Isolation

802.1ag LT Trace route like functionality

802.1ag LB Ping like functionality

Virtual Cable Test (VCT) Discover copper faults and locate them

L3 Ping and Trace route Limited as troubleshoots IP connectivity

Fault PropagationSubscriber port shutdown Effective currently since no CE with OAM

802.3ah Dying Gasp Trap Send trap upon power failure

Diagnostic Loopbacks

L1 loopback Does not traverse L2 Bridge

L2 loopback Line rate per VLAN or port

802.3ah loopback Entire port. L2 no MAC Swap

Performance

Monitoring

Y.1731 based, proprietary RT measurements, +/- microsec

Per VLAN/EVC Statistics On actual data (no sampling)

Etherstats* per RMON RFC 2819


OAM:Performance Monitoring

Counter/Statistics Details

Minimum round trip delay Minimum round trip delay measured in the interval up to now

Average round trip delay Average Round measured in the interval up to now

Maximum round trip delay Maximum round trip delay measured in the interval up to now

Minimum delay variation Minimum delay measured in the interval up to now

Average delay variation Average delay variation measured in the interval up to now

Maximum delay variation Maximum delay variation measured in the interval up to now

Num of Frames Above Delay objective Number of frame exceeded frame delay Performance objective

Num of Frames below or equal to Delay objective Number of frame below or equal to frame delay Performance objective

Num of frames above Frame delay variation objectiveNumber of frame exceeded frame delay variation Performance objective

Num of frames below or equal to Frame delay variation objective

Number of frame below or equal frame delay variation Performance objective

Frame loss ratio (FLR) Total interval frame loss ratio

Frame transmitted counter Total number of frame transmitted counter in interval

Frame loss counter Total number of frame loss in interval

Elapsed time Seconds from the beginning of the interval 0-900

Unavailable seconds Number of seconds where the service is unavailable


Fault Propagation

• ‘Link down’ status on the Network port causes ‘link down’ status

on the user port.

• In case of multiple user ports cause ‘link down’ status on all user

ports or part of them according to parameter

• ‘Wait to restore’ parameter - defines the time between network

port becoming ‘up’ and restoring user port link up

Packet SwitchedNetwork

Eth/IP/MPLS

CPE E-NTU

Network port failure

Failure propagated to user port

CPE Switches to alternative path


Diagnostic Loopbacks

• Layer 1 Loopback – ETX loopbacks traffic from Rx to Tx

• Out of service – disrupts service

• Cannot traverse Ethernet bridge

• Supported on any ETX port

• Performed on all traffic of the ETX port

• Loopback activation is via management not OAM protocol

• Layer 2 Loopback – ETX loopbacks traffic and swaps MAC Addresses

• ETX replaces Source Address with Destination Address

• Can traverse Ethernet bridges

• Performed per VLAN (or EVC)With Layer L2 Loopback

Tester

ETX

TesterNo Layer L2 Loopback


Management

• Remote management

• In-band management, SNMP based

• Dedicated VLAN

• Management traffic can be blocked from user port

• Management applications

• RADview EMS

• RADView Lite

• Telnet, Web browser

• Local management via craft port (RS-232)and/ or Ethernet out of band port.

• Optional use of DHCP to automatically obtain IP address and default gateway

• Remote software and configuration download

• All local configurations can also be done remotely

• Full SNMPv3 agent


RADView EMS*- 1/2

• Discover and present of all ETX in the customer network

• GUI cut-through application - visual EMS• Provides a visual view of the device with its panel and ports

• Provides visual indication of alarm conditions (color coded)

• User friendly interface to complex configuration (e.g. OAM)

• Statistics presentation• Provides current and historical view of collected statistics from device

* RADview-EMS v1.8 available May-08


RADView EMS* – 2/2

• Alarm Management• De-duplication – create a single alarm from multiple alarms

• Alarm threshold – create new alarms from alarm conditions

• Automatic clearing of alarms – Show only active alarms

• Forwarding of alarms to pre-configured 3rd party OSS/NMS

• Security management• Create profiles with allowed actions and associated users

• Associate permitted actions to each profile

• Statistics Collection – TFTP• Efficient collection of device statistics into CSV file format

• Easily integrates into customer existing NMS• Northbound CORBA interface

* RADview-EMS v1.8 available May-08


Security

• Encryption• SSHv2/SSL Secure Telnet and web sessions for management

• Secure SNMPv3 communications

• Prevent intrusion into management• Access to management station via user ports is blocked (configurable)

• Management information from network port only (configurable)

• Management VLAN from user ports is blocked

• Controlled Access and Authorization• Only specific IP addresses will be allowed to manage the device;

• Authorization levels per access method (SNMP, Telnet, Terminal) Read/Write Communities mechanism

• RADIUS Centralized Authentication and Authorization of management access

• Denial of Service (DoS) Prevention• Rate limitation on traffic direct to CPU

• Broadcast/Multicast rate limitation

• Ping of Death prevention – no ping larger than 1484 bytes to CPU

presented by: cbnetworks technical support [email protected] may 2008 ethernet access...

Documents