Introduction

Huawei Quidway NetEngine40E Universal Switching Router (abbreviated as NE40E) is a kind of edge router with the 10G
interface developed by Huawei Technologies Co., Ltd. Adopting a series of advanced technologies such as three-stage
switching fabric, network processors (NP) and ASIC Chipsets for forwarding engine, and the mature, stable VRP... routing
software of Huawei, the NE40E can provide unprecedented performance, preeminent scalability and high reliability, IPV4/
V6 dual protocol stacks, superior QoS features and abundant security functionality. The NE40E can provide rich edge
features like Provide Edge (PE), tunnels and queues, and kinds of high-density Line Processing Units (LPU). It features
large capacity, high performance and high reliability. With the excellent hardware and software architectures, the NE40E
can meet the availability requirements and the multi-service demands of carrier-class networks.
H
U
A
W
E
I
T
E
C
H
N
O
L
O
G
I
E
S
1
Qu i d w a y

N e t E n g i n e 40E
USR
Figure 1-1 NE40E
Uncompromising Performance for 10G Interface
The NE40E applies an advanced hardware forwarding technique. A single chassis supports the non-blocking, full-line-rate
switching of up to 8 10G-interfaces. The switching capacity can reach 320G, the forwarding capacity of the system can be
200 Mpps(packet per second), and the backplane capacity can achieve 1.28 T.
IPv4/v6 Dual Protocol Stacks
The NE40E supports both IPv4 and IPV6 protocol stacks and can work in the IPv4/IPv6 dual-stack mode.

Provide all IPv6 features and solutions for smooth transition from IPv4 networks to IPv6 networks.

Support IPv6 over IPv4 tunnel techniques: manually configured tunnel, automatic tunnel, GRE tunnels and 6to4 tunnel.
Compatibility and Expansion Capacity
The NE40E provides powerful compatibility and expansion capacity and supports smooth expansion as follows:

The NE40E is compatible with all LPUs (Line processing Unit) of the 10G NE5000E and NE80E core routers. It is
compatible with the high-density low-speed LPUs of the NE80 and NE40 routers through Fabric Adapter (FAD) boards.

The capacity of the backplane of the NE40E is 1.28T and can expand to 32 10G-interfaces, which reserves enough
bandwidth for future smooth expansion.

The NE40E forwards services through the Network Processor (NP), which is flexible in programming. You can add some
services by installing relevant software.

Designed with separated Traffic Management (TM) from the Packet Forwarding Engine (PFE), the NE40E supports two
PFEs, namely ASIC and NP, in order to satisfy various applications.
Carrier-Class Reliability
NE40E can meet the high reliability requirements for the carrier-class and high-end applications with the following features.

Adopting hot swappable boards, power modules and fans.

Providing the key modules redundant, such as: Router Processing Unit (SRU, 1+1), Switch fabric unit (SFU, 3+1), power
supply, fan modules, bus, and clocks.

Adopting the distributed hardware forwarding.

Separating the control channel from the service channel to provide a non-blocking control channel.

Possessing perfect system/board fault detection, LEDs, and NMS alarm function.

Applies the generic integrated NMS platform which is independently developed by HUAWEI.

Supports protection mechanisms such as IP/MPLS fast rerouting, interface automatic protection switching(APS/MSP),
Virtual Routing Redundancy Protocol (VRRP), RPR automatic protection switching.
2
Product Features
Superior QoS processing
Separating the traffic management (TM) from the packet forwarding engine (PFE), the NE40E can effectively control
Bandwidth, delay, jitter, and packet loss by its QoS features; the buffering mechanism on both upstream and downstream
results in a low packet drop rate. In addition, the NE40E also features that:

MPLS QoS is independent of IP QoS by individual queuing management mechanisms.

PQ and WRR/WFQ not only guarantee the fair dispatching but also ensure that high-precedence services are served
first.

Three-stage switching fabric is based on the Combined Input and Output Queuing (CIOQ), which guarantees the non-
blocking switching.

Flow-based dispatching facilitates the MPLS TE and supports the Diff-Serv and Inter-Serv.

Eight precedence queues per physical port prevent the high-precedence traffic from being interfered.

Independent Traffic Management processing module based on ASIC and NP provides the stable QoS performance.
Security Guarantee
The NE40E takes a serial of security measures for the data of Internet Service Provider (ISP) networks and end users. The
measures can prevent Denial of Service (DoS) attacks, illegal accesses, and control plane overload. The distributed
architecture separates the data plane from the control plane, which makes the NE40E provide the leading security feature:

Supporting two kinds of user authentication modes for logging in: local authentication and RADIUS/TACACS authentication.

Secure Shell (SSH) for the authentication and end-to-end encryption.

Integration with SSH based on Authentication, Authorization and Accounting (AAA).

EACL (Enhanced ACL) -based packet filtering.

Hardware-based packet filtering and sampling to implement the high performance and scalability.

Multiple authentication methods (plain text authentication, MD5) for important routing protocols (IS-IS, RIP, BGP-4,
OSPF).

ACL on the forwarding plane and control plane.

Rate-limit for each interface/ACL entry.

Port mirroring of IP and MPLS traffic.
H
U
A
W
E
I
T
E
C
H
N
O
L
O
G
I
E
S
3
Software Specifications
Item Description
Performance

Forwarding capability of IPv4 packets: wire speed forwarding for various interfaces

Forwarding capability of IPv6 packets: wire speed forwarding for various interfaces

Packet forwarding rate reaches 200Mpps/single chassis system
Layer 2 Protocol

LAN protocol: Ethernet II, Ethernet SNAP, Ethernet SAP, LACP (IEEE 802.3ad), 802.3z,
802.3ae

WAN protocol: PPP, MP, HDLC,POS, ATM

Layer 2 VLAN forwarding, VLAN aggregation, VLAN Trunk, L2QoS, STP/RSTP/MSTP,
VLAN Translation, Port Binding and VPLS (Virtual Private LAN Service)
IPV4 Routing

Static routing
Protocol

Support for RIP, OSPF, IS-IS, and BGP-4 routing protocols

All ports can provide wire speed forwarding under complex routing environments such as
routing flapping
IPV6 Routing Protocol

Support for the Internet Protocol version 4 (IPv4) and Internet Protocol version 6 (IPv6)
dual protocol stacks

Support for basic transition technologies from IPv4 to IPv6: manually configuration tunnels,
automatic configuration tunnels, 6to4 tunnels, GRE tunnels, hardware-support NAT-PT, etc

IPV6 static routing

Dynamic routing protocols: BGP4/BGP4+, RIPng, OSPFv3 and ISISv6
QoS

Support for simple traffic classification

Support for complex traffic classification: based-on port, based on layer-2, layer-3 or layer-
4 packets

Support for Traffic policing and traffic shaping based on srTCM or trTCM

Support for Diff-Serv EF, AF services, GTS

Support for PQ/CQ/WFQ/CBQ, LLS/LLQ/NLS

Support for RED, WRED

Support for Policy Routing

Support for MPLS QoS

Support for Layer 2 QoS
Specifications
4
Security &

Support for AAA, and RADIUS/TACACS
Authentication

Support for ACL, and packet filtering firewall

Support for the hierarchical protection of command line to ensure that unauthorized users
cannot invade the router

Provide the record of user access log

Support for Port Mirroring

Support for NetStream

Support for attack defense

Support for unicast Reverse Path Forwarding (uRPF)
MPLS VPN

Support for wire speed MPLS forwarding

Support for L2/L3 MPLS VPN and VPLS , can be deployed as provider (P) or provider edge
(PE) router

Support for MPLS TE and FRR

Support for LDP FRR

Support for Layer two tunneling protocol (L2TP)

Support for Generic Routing Encapsulation (GRE)

Support for HoVPN (Hierarchy of VPN)

Support for Multi-role Host

Support for Multicast VPN

All above feature conform to the corresponding IETF standards, and can inter-operation
with other vendors
Multicast

Support for Multicast Source Discovery Protocol (MSDP)

Support for Internet Group Management Protocol (IGMP)

Support for Protocol Independent Multicast-Dense Mode (PIM-DM)

Support for Protocol Independent Multicast-Sparse Mode (PIM-SM)

Support for Multi-protocol Border Gateway Protocol (MBGP)
NAT

Dedicated NAT service board supports bi-directional Gigabit wire speed network address
translation capability

Each board supports 1,000,000 simultaneous concurrent connections, 200,000 new
connections per second, 500,000 refreshed NAT entries

Support for IPv6/IPv4 NAT-PT

Network Management

Provide two modes for configuration: command line and NMS
H
U
A
W
E
I
T
E
C
H
N
O
L
O
G
I
E
S
5

Support for the inter-operation with HUAWEI carrier-class MPLS VPN Management System

Support for HGMP (Huawei Group Management Protocol)

Support for SNMP V1,V2 and V3 and RMON

Support for SSH
Maintenance

Support for automatic fault diagnosis function

Support for implement remote configuration maintenance via AUX

Support for online debug and upgrade
Reliability

Router processing unit (SRU) redundancy 1:1

Switching fabric redundancy 3+1

Power module redundancy 1+1

Fan redundancy 1+1

Support for all modules online insertion and removal

Support for MPLS Fast Reroute (FRR)

Support for Nonstop Forwarding(NSF)

Support for RPR self-healing ring for a MAN or long-haul National network
6
Hardware Specifications
Item Description
System Architecture Hardware is composed of an integrated chassis (with a backplane), power module,
ventilation/heat-dissipation system, and boards;
NP-based and ASIC-based distributed forwarding;
CIOQ (Combined Input and Output Queuing) - based three-stage switching fabric to
guarantee the non-blocking switching.
Number of SRU slots 2
SDRAM 1 GMB (It can be extended to 2 GMB)
Number of SFU slots 2
Number of LPU slots 8
Switching capacity 320Gbps
Forwarding capability 200Mpps
Dimensions (W X D X H) 442 mm x 669 mm x 889 mm(22U)
Weight < 200 kg(fully configured); 75 kg (empty)
4.8 kg (LPU),3.4 kg (SRU),1.8 kg (SFU)
Maximum power 3000 W
DC input voltage -38 V to -72 V
AC input voltage 176 V to 275 V
Environmental Long-term C to 45 C
temperature Short-term 0 C to 55 C
Environmental Long-term 5% to 85% RH, non-condensing
relative humidity Short-term 5% to 95% RH, non-condensing
Altitude No performance degradation within 5000 meters
H
U
A
W
E
I
T
E
C
H
N
O
L
O
G
I
E
S
7
8
Modules
The NE40E supports the following multifunctional interface modules.
1. Routed Ethernet LPU

16-port 10/100M adaptive Ethernet Electrical Interface LPU

4-port Gigabit Ethernet Optical Interface LPU

10-port Gigabit Ethernet Optical Interface LPU (SFP optical module)

1-port 10G Ethernet Optical Interface LPU (Fixed optical module)
2. Switched Ethernet LPU

24-port 10M/100M/1000M Ethernet Electrical Interface LPU

48-port 10M/100M/1000M Ethernet Electrical Interface LPU

20-port Gigabit Ethernet Optical Interface LPU (SFP optical module)

2-port 10G Ethernet Optical Interface LPU (XFP optical module)
3. POS Optical Interface LPU

8-port STM-1/OC-3c POS Optical Interface LPU (SFP optical module)

1-port STM-16/OC-48c POS Optical Interface LPU (Fixed optical module)

4-port STM-16/OC-48c POS Optical Interface LPU (SFP optical module)

1-port STM-64/OC-192c POS Optical Interface LPU (Fixed optical module)

1-port STM-64/OC-192c POS Optical Interface LPU (XFP optical module)
4. ATM optical LPU

8-port STM-1/OC-3c ATM Optical Interface LPU (Fixed optical module)
5. RPR optical LPU

1-port STM-64/OC-192c RPR Optical Interface LPU (XFP optical module)
6. Others

The NE40E is compatible with all LPUs (Line Processing Unit) of the 10G NE5000E and NE80E core routers. It is
compatible with the high-density low-speed LPUs of the NE80 and NE40 routers through Fabric Adapter (FAD)
boards.
H
U
A
W
E
I
T
E
C
H
N
O
L
O
G
I
E
S
9
Applications
Application on Provincial Backbone Network
As shown in Figure 1-2, the core layer of the provincial backbone network is composed of NE5000E/NE80E devices. The
NE40E devices act as the city nodes to converge the traffic from the MAN, leased line convergence, narrowband access,
and Internet Data Center (IDC).
Figure 1-2 Application on provincial backbone network
This solution can be used to establish, expand or reconstruct provincial backbone networks of large Interim inter-switch
Signaling Protocol (ISP). These ISPs own access services and cost advantages, as well as transmission resources. In the
case of transmission resources shortage, the link bandwidth can be reduced accordingly without changing the network
topology. The devices on the convergence layer or above have the wire-speed forwarding capability. The entire network
supports MPLS VPN.
10
Application on IPv6 Backbone Network
Figure 1-3 Application on IPv6 backbone network
The IPv6 application on the backbone network does not impact the original IPv4 services such as IPv4 forwarding and
MPLS VPN. So there are two problems to be solved:

Interconnection between IPv6 islands

Interworking between an IPv6 network and an IPv4 network

To solve these problems, the NE40E provides the following solutions based on IPv6 techniques:

All the routers on the backbone network support IPv4/IPv6 dual stacks. In this case, IPv4 services are forwarded with the
IPv4 technology and IPv6 services are forwarded with the IPv6 technology. Both of the problems can be solved.

The interconnection between IPv6 islands can be implemented through layer-3 tunnels, that is, manually configured
tunnels or 6to4 tunnels. In this solution, the core router needs to support only IPv4 forwarding. The interworking between
an IPv6 network and an IPv4 network can be implemented by configuring the NAT-PT on gateways.

The interconnection between IPv6 islands can be implemented through MPLS layer-2 tunnels by using MPLS L2 VPN
techniques such as VPLS and CCC. In this solution, the core router needs to support only MPLS forwarding. The
interworking between an IPv6 network and an IPv4 network can be implemented by configuring the NAT-PT on gateways.
H
U
A
W
E
I
T
E
C
H
N
O
L
O
G
I
E
S
11
Application on MPLS L2VPN Network
Figure 1-4 Application on MPLS L2VPN network
In this application, the NE5000E/NE80E functions as the MPLS core device to provide the MPLS forwarding function, and
acts as the ASBR for inter-domain communications. The NE40E acts as the PE device to provide VPN users with point-to-
point VLL services and point-to-multipoint VPLS services.
Application on MPLS L3VPN Network
Figure 1-5 Application on MPLS L3VPN network
In this application the NE5000E/NE80E routers serve as P routers in the network core. For the inter-domain VPN application,
the NE40E can act as an ASBR as well as a CE device. As a PE device, the NE40E can also provide the NAT function for
Internet access services.
12
Application of RPR in MAN
Figure 1-6 Application of RPR ring network in MAN
The RPR technology has the fast self-healing feature and can utilize the bandwidth efficiently. The RPR networking is
flexible and simple, and is applicable to the setup of the MAN. In networking, the NE40E or NE80E serves as the core
router to set up the core ring network. The NE40E serves as the router of the convergence layer to set up the access ring
networks that keep tangent with or intersect the core ring network. The core ring network implements large-granularity
traffic scheduling and takes one or two routers as the upstream node.
The NE40E provides high-density downstream GE interface, FE interfaces, as well as other types of interfaces such as
E1/Ce1 interface and E3/T3 interfaces. These interfaces can be directly connected with the Ethernet switch or leased
lines.
Huawei End-to-End Solutions
VoIP Products and Solution
Quidway A8010 Expert VoIP Gateway
Quidway A8010 Mini-Expert VoIP Gateway
Quidway A8010 VoIP GateKeeper
BRAS
Quidway MA5200G Broadband Intelligent Access Server
Quidway MA5200F Compact Broadband Intelligent
Access Server
Access Servers
Quidway A8010 Expert Remote Access Server
Quidway A8010 Mini-Expert Remote Access Server
WLAN Products and Solution
Huawei C9012 WLAN Authentication Server
Quidway W1006E WLAN Access Point
Quidway W1003 WLAN Access Point
Quidway W1003A WLAN Access Point
Quidway WL100M WLAN Cardbus Adapter
Huawei WG202 GPRS+WLAN Combo Card
Network Management Solution
iManager N2000 Datacomm Management System
iManager NSM VPN Manager
iManager NSM QoS Manager
iTellin AAA System
Router Series
Quidway NetEngine 5000E Terabit Switching Router
Quidway NetEngine 80/80E Core Switching Router
Quidway NetEngine 40/40E Series Universal Switching
Routers
Quidway NetEngine 20/20E Series High-Performance Edge
Routers
Quidway NetEngine 16E/08E/05 Series Multi-Service Edge
Routers
Quidway AR 46 Series Enterprise Core Routers
Quidway AR 28 Series Modular Branch Routers
Quidway AR 18 Series Access Routers
LAN Switch Series
Quidway S8500 Series 10G Core Routing Switches
Quidway S8016 Multi-Service Backbone Routing Switch
Quidway S6500 Series Gigabit Routing Switches
Quidway S5516 Gigabit Routing Switch
Quidway S5000 Series Gigabit Intelligent Layer 2 Ethernet
Switches
Quidway S3900 Series Intelligent Routing Switches
Quidway S3500 Series Intelligent Routing Switches
Quidway S3000 Series Intelligent Layer 2 Ethernet Switches
Quidway S2000 Series Enterprise Desktop Switches
Security & VPN Products
Quidway Eudemon 1000/500/200/100 Series Firewalls
Quidway Eudemon 2000 Series Session Border Conctrollers
Quidway SecPath Series Security Gateways