Allied Telesis Praktyczne rozwiązania w sieciach operatorskich

Transcription

1 Allied Telesis Praktyczne rozwiązania w sieciach operatorskich Maciej Stelmach, Dyrektor Oddziału Maciej.Stelmach@alliedtelesis.com Rafał Wójcik, Inż. rozwiązań sieciowych Rafal.Wojcik@alliedtelesis.com Poznań, 13 kwietnia 2012

2 Agenda Allied Telesis informacje o firmie System Operacyjny AlliedWare PLUS /AW+/ EPSR Omówienie technologii EPSR demonstracja EPSR a sprzęt Referencje

3 Our mission as a company To build a worldwide organization that is customer focused, that delivers high quality, cost-effective, advanced end-to-end IP-based networking solutions and services that meet current requirements, offer investment protection, but also scale to meet the business application demands of tomorrow. Takayoshi Oshima Chairman and CEO Allied Telesis Corporation

4 Allied Telesis KK Group Company Background Year Established 1987 Allied Telesis HD KK Allied Telesis Inc. Allied Telesis Intl. Employees Worldwide Locations Global Revenues (2010) EMEA Revenues (2010) Annual Investment in R&D Company Ownership Global HQ in Tokyo, Japan Americas HQ in Silicon Valley, USA EMEA HQ in Netherlands 2,200+ worldwide Over 60 countries $500M+ $120M+ 17% of revenues Listed in Tokyo Stock Exchange

5 Where are we in the World Allied Telesis HD K.K. Allied Telesis Inc. Regional Headquarters Allied Telesis International S.A. R&D Facilities Manufacturing Sites

6 AT-9000/28 winning awards for low power Allied Telesis was awarded 'Highly Commended' for its AT-9000/28 Layer 2 Gigabit switch at the BEE Awards 2009

7 Allied Telesis Converging Technologies Enterprise Easy Setup Easy Maintenance High Flexibility Low cost High Resiliency High Security Network Management Carrier

8 Main Vertical Markets: Few Success Stories Military U.S. Air Force Italian Air Force Nato - Europe Spanish Army French Army Min. Defence (Tu) Healthcare Miltary Hospital (Tk) Izumino Hospital (J) Yuzawa Hospital (J) CH Versailles (F) CH Roannes (F) Hospital Larabta (Tu) Enterprise Tokyo BIG biggest Convention Center (J) Caisse d Epargne (F) Banque Populaire (F) Lichtgitter (D) Asahi Broadcasting (J) ONATEL (BF) AREVA (Tu) Transport Government Education Thales Inmint Massy (F) G.R.A. Rome (I) Flughafen Weeze (D) Air Baltic (Lt) Kobe Electric Railway (J) North Gateway Toll (NZ) Casablanca Container Terminal (Mo) Compudist (Mali) Government Gendarmerie Nationale (F) Min. of Agricolture (F) Municipality Kozani (Gr) Daegu City (Korea) Ministry of Finance (J) Ministry of Transport (Tu) Ministry of Justice (Tu) Education Université de Paris (F) Université de Grenoble (F) Nat. College Art Design (UK) St. Pauls Girls (UK) Sunian School (E) Politecnico Milano (I) Université de Marrakech (Mo)

9 Allied Telesis customers Deutsche Telekom It. Navy

10 Wybrani klienci - Polska

11 Agenda Allied Telesis informacje o firmie System Operacyjny AlliedWare PLUS /AW+/ EPSR Omówienie technologii EPSR demonstracja EPSR a sprzęt Referencje

12 What is AlliedWare Plus? AlliedWare Plus is constructed around a real-time operating system, with modular applications. AlliedWare Plus Architecture:» Linux operating system kernel» IP Infusion Layer 2/3 switching & routing feature set» Open-source software modules» Features ported from AlliedWare» Features written specifically for AlliedWare Plus

13 AlliedWare Plus Architecture Conceptual view of the operating system architecture

14 AlliedWare Plus Architecture Linux Kernel» Central component of AlliedWare Plus and implements: True multitasking Virtual memory Shared libraries Memory management Multi-stack networking environment including IPv4 and IPv6» Provides two key components in the AlliedWare Plus system: The operating system Schedules other processes Interfaces to peripheral devices The routing stack Linux TCP/IP stack for IPv4 and IPv6 Interfaces with hardware and IP Infusion software

15 AlliedWare Plus Architecture IP Infusion» Commercial software providing Layer 2 & 3 switching and routing solutions for communication equipment vendors» Provides IP protocols and features for AlliedWare Plus» Offers switching and routing protocols in line with the latest industry standards and RFCs

16 AlliedWare Plus Architecture Open Source Software» Available to the public, enabling modification / redistribution without fees Evolves through community cooperation - from individuals to large companies» AlliedWare Plus uses a number of open source software modules Providing bolt-on functionality Allowing Allied Telesis to be part of the development community» Some of the open source features include: openssh openssl DHCP server & relay agent and others

17 AlliedWare Plus Architecture Allied Telesis developed software» Significant and innovative features which add value and provide key functionality» For example:» For example: Virtual Chassis Stacking Quality of Service (QoS) Ethernet Protection Switched Rings (EPSR) Scripts & Triggers and many more

18 AlliedWare Plus Structure AlliedWare Plus incorporates an industry standard Command Line Interface (CLI) Network professionals will find using the new CLI to be instinctive and comfortable

19 AlliedWare Plus Configuration example awplus>enable awplus#configure terminal awplus(config)#vlan database awplus(config-vlan)#vlan 2 name vlan2 awplus(config-vlan)#exit awplus(config)#interface port1.1.1-port1.1.4 awplus(config-if)#switchport access vlan 2 awplus(config)#interface vlan2 awplus(config-if)#ip address /24 awplus(config-if)#exit

20 AlliedWare Plus Feature Highlights Industry-standard command line (CLI)» Easy to learn and use» Incorporates best of AlliedWare features (e.g. Triggers) Virtual Chassis Stacking» High bandwidth, high availability» Single IP address for simpler management» XEM hot-swap for easier & faster maintenance High-Availability Software» Separate processes running in protected memory spaces» Independent process monitoring» Process health-checks

21 AlliedWare Plus Feature Highlights Industry-standard command line (CLI)» Easy to learn and use» Incorporates best of AlliedWare features (e.g. Triggers) Virtual Chassis Stacking» High bandwidth, high availability» Single IP address for simpler management» XEM hot-swap for easier & faster maintenance High-Availability Software» Separate processes running in protected memory spaces» Independent process monitoring» Process health-checks

22 AlliedWare Plus Operating System Version What's new? Virtual Routing and Forwarding (VRF) Lite VRF-Lite provides Layer 3 network virtualization by dividing a single router into multiple independent virtual routing domains. With independent routing domains, IP addresses can overlap without causing conflict, allowing multiple customers to have their own secure virtual network within the same physical infrastructure. Open Shortest Path First (OSPFv3) OSPF is a scalable and adaptive routing protocol for IP networks. The addition of OSPFv3 adds support for IPv6 and further strengthens the Allied Telesis focus on next generation networking. Terminal Access Controller Access-Control System Plus (TACACS+) Authentication TACACS+ provides access control for network users from a centralised server. Authentication is carried out via communication between the local switch and a TACACS+ server to check the credentials of users seeking network access.

23 AlliedWare Plus Operating System Version Virtual Routing and Forwarding (VRF) Lite

24 AlliedWare Plus VCStack Long Distance Stacking for x610 Series» Long distance stacking allows up to eight units to be stacked over SFP+ fibre connections in conjunction with the AT-x6EM/XS2 module. This is in contrast to the shorter AT-StackXG cables used in conjunction with the AT-StackXG module CX4 interfaces. Long distance stacking allows a geographically separated stack of x610 units to all be managed as one switch. Any organization with a large or geographically separated site will benefit, including universities and high-rise offices. PIM-SM PIM-SSM Protocol Independent Multicast» Source Specific Multicast (PIM-SSM) is derived from Protocol Independent Multicast Sparse Mode (PIM-SM) and is a simplified version of PIM-SM. While PIM-SM supports both a many-tomany and a one-to-many model, PIM-SSM only supports the one-to-many model, also known as a broadcast application. PIM-SSM builds shortest path trees (SPT) that are directly rooted at the source. EPSR Interconnected Rings with Superloop Protection» Where EPSR loops share a common segment and common data VLANs, a break in the common segment can result in a path loop existing across the rings. Superloop protection prevents the existence of these loops by applying priorities to the master node ring ports. These priorities modify the blocking behavior of these ports in the event of break in the shared segment.

25 Agenda Allied Telesis informacje o firmie i nowości System Operacyjny AlliedWare PLUS /AW+/ EPSR Omówienie technologii EPSR demonstracja EPSR a sprzęt Referencje

26 EPSR omówienie technologii RFC 3619 Demonstracja działania protokołu

27 EPSR warunki normalne HealthCheck (Periodic) Primary Secondary Domain #1 Blocks Data VLANs Data VLANs 1..N Control VLAN Transit Transit Master Domain #1 Transit Domain consists of:» One Control VLAN» Data VLANs 1..N» Master Node» Transit Nodes Master Node:» Sends Periodic HealthCheck messages over Control VLAN» Primary Port Sends and Receives ALL VLANs» Secondary Port Receives Control VLAN Blocks Data VLANs» Detects Failure Conditions: Transit reports failure No receipt of HealthCheck Transit Node:» Reports Failures» Flushes FDB

28 EPSR wystąpnie awarii RingDown 4 HealthCheck (Periodic) 2 Primary Link Down (Do Flush?) Master Node #1 Domain #1 5 Flush MAC table Start Relearning unblocks Data VLANs 3 Flushes FDB Secondary 4 RingDown 2 Link Down 5 Detect Link Failure Send Link Down to Master Master Receives Link Down» Unblock Secondary Port» Flush FDB Notify Transit Nodes by sending RingDown Transit Nodes Receive RingDown» Flush FDB» Relearn new location of MAC addresses 50ms path restored Transit Node #4 Transit Node #2 5 Link Down Flush Transit Node #3

29 Konfiguracja VLAN ów vlan database! vlan 100 name data-vlan vlan 500 name control-vlan vlan 100,500 state enable interface port ! switchport switchport mode access switchport access vlan 100 interface port switchport switchport mode trunk switchport trunk allowed vlan add 100,500 switchport trunk native vlan none

30 Konfiguracja EPSR! epsr configuration! epsr ring1 mode master controlvlan 500 primaryport port epsr ring1 datavlan 10 epsr ring1 state enabled

31 EPSR + Enhanced Recovery Rozszerzenie funkcjonalnosci protokołu EPSR Zarządzanie ringiem w przypadku awarii w dwóch miejscach

32 EPSR + Enhanced Recovery Zarządzanie ringiem w przypadku awarii w dwóch miejscach Wystapienie awarii

33 EPSR + Enhanced Recovery Zarządzanie ringiem w przypadku awarii w dwóch miejscach Split-Ring Dwie domeny broadcastowe

34 EPSR + Enhanced Recovery Zarządzanie ringiem w przypadku awarii w dwóch miejscach EPSR Enhanced Recovery - DISABLED

35 EPSR + Enhanced Recovery Zarządzanie ringiem w przypadku awarii w dwóch miejscach EPSR Enhanced Recovery ENABLED Zmiana portów w węzłach A i B w stan forwarding

36 EPSR Przykłady

37 EPSR Jeden Ring, dwie domeny EPSR

38 EPSR EPSR + STP

39 EPSR EPSR łaczenie domen

40 EPSR ++ Superloop Protection Drugie rozszerzenie funkcjonalnosci protokołu EPSR Łączenie ringów ze współdzielonym łączem i VLAN em

41 EPSR ++ Superloop Protection Współdzielone łącze bez współdzielenia domeny broadcast

42 EPSR ++ Superloop Protection Współdzielone łącze z współdzieleniem domeny broadcast

43 EPSR ++ Superloop Protection Współdzielone łącze z współdzieleniem domeny broadcast Bez funkcjonalności Superloop Prevention

44 EPSR ++ Superloop Protection Funkcjonalnosć Superloop Protection wprowadza priorytety : 0 = SL wyłaczone = SL włączona 1- najniższy priorytet najwyższy

45 EPSR ++ Superloop Protection MASTER: Priorytet włączony Superloop Protection - zgubienie Hello Message nie powoduje odblokowania Secondary Port. Jednakże komunikat Fush FDB jest wysyłany - Odblokowanie Secondary Port następuje tylko w przypadku otrymania komunikatu Links Down TRANSIT: Priorytet Nie ma wpływu na przełącznik który nie jest wpięty do segmentu współdzielonego - Transit wpięty w segment współdzielony wysyła Link Down tylko w ring o wyższym priorytecie

46 SwitchBlade x908 - EPSR Resilience demo 1 X900-24XT Projector Laptop streaming Video EPSR Ring Blocked by EPSR 4 1 Laptop receiving Video and syslog x X900-24XT master

47 SwitchBlade x908 - EPSR Resilience demo 1 X900-24XT Projector Laptop streaming Video Blocked by EPSR 4 1 Laptop receiving Video and syslog x X900-24XT master

48 SwitchBlade x908 - EPSR Resilience demo 1 X900-24XT Projector 4 3 Laptop streaming Video Link down Laptop receiving Video and syslog 3 Blocked by EPSR x Link down X900-24XT master

49 SwitchBlade x908 - EPSR Resilience demo 1 X900-24XT Projector Laptop streaming Video Blocked by EPSR Laptop receiving Video and syslog x Blocked by 3 EPSR X900-24XT master

50 SwitchBlade x908 - EPSR Resilience demo 1 X900-24XT Projector Laptop streaming Video Health check 4 1 Laptop receiving Video and syslog x X900-24XT master

51 SwitchBlade x908 - EPSR Resilience demo 1 X900-24XT Projector Laptop streaming Video Laptop receiving Video and syslog x Ring-Up-Flush-FDB X900-24XT master

52 SwitchBlade x908 - EPSR Resilience demo 1 X900-24XT Projector Generator ruchu Router Wysyła co 20ms pakiet UDP na adres EPSR Ring Blocked by EPSR Laptop z Ethereal x X900-24XT master

53 Agenda Allied Telesis informacje o firmie i nowości System Operacyjny AlliedWare PLUS /AW+/ EPSR Omówienie technologii EPSR demonstracja EPSR a sprzęt Referencje

54 New AT Product x610 series Launch

55 x610 Series Positioning Advanced Layer 3 Stacking Network Switches: High performance Edge switch, and Small / Medium Business Core Switch Nine new models

56 x610 Series Positioning 24 & 48 Gigabit port models

57 x610 Series Positioning without with without With & without Dual 10Gbps SFP+ links with

58 x610 Series Positioning With & without PoE+

59 x610 Series Positioning And a 24 port SFP

60 10Gbps Ports Old XFP New SFP+ Benefits of SFP+ SFP+ takes up less space on front panel (fit on more interfaces) An SFP may be fitted in SFP+ slots allowing for flexible interim solutions Consumes less power (XFP <1.37 Watt vs SFP+ <1 Watt) XFP & SFP+ currently the same price, (but XFP?, SFP+? ) SFP+ s can communicate with XFP s (850nm > 850nm / 1310nm >1310nm) both LC SFP+ allows low cost copper 10G connection

61 Dual SFP+ Module AT-x6EM-XS2 May be used to provide 2 additional 10G for standalone switches giving up to 4 x 10G (Also use for remote stacking)

62 x610-2 or 4 x 10Gbps standalone L3 core switch x610-24sps/x AT-6XEM-2XS provides 2 extra 10Gbps 2 x 10Gbps 10Gbps servers 10 Gb servers Legacy servers n x 1Gbps Edge switches

63 Virtual Chasis Stacking

64 Improved Virtual Chassis Stacking New - x610 stacks to 8 switches Max (384 x 1G ports G ports) x610 uses AT-STACKXG stacking modules (same as x600) 10G transmission with IP stripped = 12Gbps = 48Gbps stacking

65 Benefits of Virtual Chassis Stacking» Stack of switches becomes one switch One console or GUI to manage the entire stack One configuration for whole stack One software update for whole stack Less switches to manage» Across the stack Link Aggregation (LACP) between switches» Across the stack Link Aggregation (LACP) out to servers Ability to build networks with redundant core switches i.e. No single point of failure Resilience at Layer 2 - simple to configure very effective

66 Dual SFP+ Network Interface Card for Servers. Most servers today only offer two 1Gbps ports - Upgrade servers to resilient 20Gbps Part Number AT-VNC10S Description Dual 10G SFP+ Server NIC 2 x 10Gbps Two low cost AT-SP10TW Cables

67 Dual Resilient Core No single point of failure Single 10Gbps to server Dual 10Gbps = 20Gbps to server Virtualized Servers 48Gbps stacking Link aggregation 10 Gbps 1 Gbps

68 Multiple Resilient Core No single point of failure 20Gbps 10Gbps 48Gbps stacking Link aggregation 10 Gbps 1 Gbps

69 Dual SFP+ Module for Long distance Stacking Benefits Can be used to provide 2 additional 10G for standalone switches Can be used with SFP+ optics to provide long distances stacking Manage local and remote switches from one GUI or console Protect against: Core Failure, Power failure, Theft, Fire & Flood with a Remote Stacked Core

70 SFP+ Twinax Cable - useful with mixed Local & Remote Stacking AT-SP10LR with Single Mode Fibre Up to 10Km stacking cable AT-SPSR with Multi Mode OM3 Fibre Up to 300m stacking cable AT-x6EM-XS2 Rear mounted Remote stacking modules

71 How to join a stack of x610s with stacked x908s LACP 20Gb resilient trunk Remote Stacking 48Gbps X908s Locally Stacked 160Gbps Different stacking protocols - Two GUIs to manage the whole network

72 x610 - Power over Ethernet +

73 Why PoE+ PoE illuminators Raytec less than 25W covers up to 60 metres Combined Fan & Heater single Cat 6 cable to enclosure Axis P1344E - Class 3 (15.4 Watt x 24 = 370 Watt) Larger Pan Zoom & Tilt camera housings Axis Q6032-E Pan Tilt Zoom - High Power PoE+ (Up to 30 Watt ea)

74 x900 Family Advanced L3+ Switches

75 x900-24x The most flexible 1RU switches on the market! x900-24xt & -24XT-N: 24 x 10/100/1000T 2 x 60Gbps XEM bays x900-24xs: 24 x 100/1000 SFP 2 x 60Gbps XEM bays Flexibility: XEMs Bandwidth: Up to 2 x 10GbE Future-proof: XEMs, 10GbE & IPv6 HW Powerful: Best-in-class QoS, rich feature set Reliability: Dual PSUs, EPSR, stackable, etc. Ease of use: Industry-standard CLI NEBS compliant version (x900-24xt-n)

76 x900 Series Build Your Own Configuration To position the XEMs and rear components go to the View menu on the main menu bar, go down to Grid and Guides and turn off snap objects to grid. Drag the XEMs on to the products and use the arrow keys on your keyboard to position them correctly. x900-24xt x900-24xs XEM-2XP XEM-1XP XEM-12T XEM-STK XEM-12S Rear view of x900 with moveable PSU and FAN modules

77 SwitchBlade x908 Overview 3RU Chassis 8 x XEM bays Stacking Hot swappable PSUs PSU redundancy 10 GbE aggregator High density GbE Uses the same XEM modules as x900 Fully non-blocking backplane

78 SwitchBlade x908 Overview Dual hot-swappable power supplies Chassis Fans (hot-swappable) Stacking connectors (for high-speed 160Gbps stacking of 2 units)

79 SwitchBlade x908 Overview Stackable» SwitchBlade x908 is the only product in its class to support stacking» Built in 2 x 80Gbps connectors on rear of product Stacking of up to 2 devices Total of 160Gbps Ideal for redundant core solution» XEM-STK support Stacking of up to 4 devices* Total of 60Gbps 336 GbE ports in one stack 28 x 10GbE ports in one stack

80 integrated Multiservice Access Platform (imap) Product Overview

81 imap 9000 Series Multiservice Access Platforms Common Architecture Large Shelf - with Control/Fabric Protection 9700 Large Capacity for Fiber and/or DSL based Access Lines G High Capacity Access/Aggregation Rings Medium Shelf System - without Control/Fabric Protection 9400 Large Capacity for Fiber and/or DSL based Access Lines G High Capacity Access/Aggregation Rings AT-TN9700 Small - mini 9100 Complete Family is NEBS3 certified and Environmentally hardened AT-TN9400 Built on Ethernet technology AT-TN9100

82 Ethernet Services Functional Diagram POTS Ethernet Ethernet Ethernet VDSL G.SHDSL integrated Multi-service Access Platform imap Ethernet 24/56Gbps Voice Data Customer Ports Muliple Transmission media AGGREGATION Any Service, Any Slot E1/T1 Ethernet ADSL/ADSL2+ E1/T1 Leased Lines FTTx Ethernet Ethernet GEPON Video Protected Transport n x 1/10GbE Ethernet Ethernet Ethernet

83 Access Layer Edge 3+ Switch Chassis SBx3112 Access Edge Chassis

84 SBx3112 Chassis PoE Power Supply System Power Supply Slots 0 & 1 Slots 2 & 3 Slots 4 & 5 Slots 6 & 7 Slots 8 & 9 Slots 10 & 11 Fan Tray 24 Port GE PoE line card Fabric switch controller 24 Port GE SFP line card 4 Port 10GE XFP line card

85 SB-x3112 Capacity 2 x 200 GBE switch fabric 400 GBE total 40 GBE wire speed per card slot 400 GBE total Passive Backplane True Non-blocking Architecture

86 SBx3112 Line Cards AT-SBx31CFC» Fabric switch controller AT-SBx31XZ4» 4-port 10GE XFP Ethernet line card AT-SBx31GP24» 24 port 10/100/1000Base-T PoE Ethernet line card AT-SBx31GS24» 24 port Gigabit Ethernet SFP line card

87 MDU Application

88 FTTx Support 10 GE Uplink with EPSR» Sub-50 ms failover switching» Redundant fiber protection» 802.3ah support 100 M P2P Active Ethernet» Bi-directional single mode fiber» ah» SFP based card 1 GE P2P Active Ethernet» Bi-directional single mode fiber» ah» SFP based card 24 port 100/1000 fiber line cards» SFP provisioned 40 G per slot» Non-blocking Supports outdoor and indoor img family of fiber gateways 100 M 1 GE Single mode 10 GE Single mode Multimode 100 M Single mode img 7x6 MOD (outdoor) img 616x (intdoor)

89 Dziękujmy za uwagę Zapraszamy do odwiedzin on-line: