Enterprise Networking-Solutions and Cases HUAWEI

CONTENTS

Overview 01 Overview

Industry Solutions 48

Government 49. e-Government Private Network Solution 53. Government Campus Network Solution

Enterprise Solutions 16

58. e-Education Campus Network Solution 64. e-Hospital Network Solution 68. Video Surveillance Bearer Network Solution

Campus 17. 10GE Campus Solution

71

72. Rail Transmission Network Solution

21. Campus Voice Services Solution

76. Rail Data Network Solution

23. Wireless Campus Solution

25

81. Roadway Network Solution

WAN Interconnection

85. Intelligent City Traffic Network Solution

27. IP/MPLS Backbone Network Solution 29. Transport Bearer Network Solution

31

Enterprise Branch

89. Airport Network Solution

93

Electric Power

33. Integrated Access Solution

94. Power Transmission and Transformation Communications Network

35. VPN Interconnection Solution

105. Power Distribution Communications Solution

37. Converged Voice Solution

109. Integrated Campus Solution

39. Value-added Service Solution

41

Transportation

Data Center

111 Energy 111. WAN Interconnection Network Solution

43. "Cloud Network" Internal Interconnection Solution

116. Oil and Gas Pipeline Network Solution

45. "IP+Optical" Disaster Recovery Backup Solution

120. Oilfield and Gasfield Network Solution 124. Refinery and Mining Network Solution 125. Gas Station Network Solution

127 Finance 128. Data Center Redundancy Network Solution 133. Converged Campus Network Solution 136. One-stop Branch Access Solution

141 Large Enterprise 142. IDC Network Solution 148. xPON Solution for High-end Residential Areas 157. Commercial Building Network Solution

Success Stories

Government

80. Transmission Data Access Network for Kunming Rail Transit 87. Intelligent City Traffic Network for Shenyang Traffic Department 88. Maldives Intelligent Traffic Project 91. Chengdu Shuangliu International Airport Project 92. Kuala Lumpur International Airport (KLIA) Video Surveillance Project

74. Transmission Network for Shanghai Metro Line 10 75. Transmission Network for Beijing Metro Line 1 and Line 2 79. IP Data Network for Beijing Railway Bureau 83. Integrated Communications and Monitoring Network for Beijing-Qinhuangdao Expressway 84. Communications System for Changde-Jishou Expressway, Hunan Province, China

109. IDN for North China Power Grid 110. Intelligent Campus Network for Yellow River Substations in Henan, China

106. PON Access Project for Qingdao Electric Power Company 107. Centralized Metering and xPON Project for Beijing Electric Power Corporation 108. xPON Communications Network for Zhejiang Electric Power Corporation's Hangzhou Branch

96. Power Transmission Communications Network for Powerlink Queensland in Austrialia 97. Intelligent ASON Network for KEPCO 98. Hybrid OTN and MSTP Network for EVN 99. Backbone Communications Network for Sudan National Electricity Corporation 100. Integrated Data Network for COPEL in Brazil 101. Power Transmission and Transformation Communications Network for Sonelgaz in Algeria 102. UHV Transmission Network from Qinghai to Tibet 103. Dispatch data network (DDN) for SGCC 104. 2M Optical Port Trial Project for China Southern Power Grid's Guangzhou Branch

122. MAN Project for Jilin Songyuan Oilfield 122. Enterprise Network Project for Northwest Sichuan Gas Field, Southwest Oil and Gas Field Branch, CNPC 124. NGN Softswitch-based IP Bearer Network Project for Sinopec Anqing Company 124. Information Network Optimization Project for Shenhua Ningxia Coal Industry Group

126. Gas Station Network Project for Sinopec's Guangdong Branch

113. National Backbone OTN Transmission Network for CNPC 114. WAN Interconnection Data Network for CNPC 115. National Backbone MPLS WAN Network for CNOOC 117. China-Kazakhstan Gas Pipeline Project 118. Pipeline Communications Network for Sinopec 119. CNPC Lanzhou-Zhengzhou-Changsha Oil Product Pipeline Project 123. Submarine Cable Access Project for Total Gabon

133. Converged Campus Network for BOC 134. Converged Campus Network for ABC 134. CCTV Monitoring Network for SEHK 135. OA Network for NBK

138. One-stop Branch Access Network for Caixa in Brazil 138. One-stop Branch Access Network for Santander in Spain 139. One-stop Branch Access Network for HDB in Egypt 139. One-stop Branch Access Network for ICBC 140. One-stop Branch Access Solution for PICC

131. Dual-plane Data Center Redundancy Network for PBC 132. Data Center Redundancy Network for Sberbank of Russia 132. OSN Data Center Backup Network for Shanghai Stock Exchange

162. Long Wish Hotel Network Project 163. Office Network Project for Beijing Zhongye Building

154. FTTH Project for Burj Khalifa 155. GPON Project for Hangzhou Legend City 156. Iusacell FTTH Project 163. Arqiva Arqnet Enterprise Access Project 164. Transnational Communication Project for China CTDI Engineering Corporation

145. IDC Network for Yandex in Russia 146. IDC Network for Baidu 147. IDC Network for Shanghai Giant Network Technology Co., Ltd.

Large Enterprise

Transportation

Data center

Electric Power

WAN Interconnection

Energy

Enterprise Branch

Finance

Campus 56. Government Campus Network Project for Overijssel in the Netherlands 57. Campus Network Project for ZUS in Poland 61. Campus Network Project for Stellenbosch University in South Africa 66. BovenIJ Hospital Project in the Netherlands

67. NSW Emergency Service Company Project in Australia

51. e-Government Extranet Project for China 52. e-Government Intranet Project for China 62. GARR Education Network Project in Italy 63. Backbone Network Project for CERNET2 in China 70. Surveillance Bearer Network Project for Guangdong, China

1

Overview

01

Enterprise Networking Solutions and Cases

Enterprise Networking, the Cornerstone for Huawei's Enterprise Business The Enterprise Networking Product Line (Enterprise Networking) is one of the business units (BUs) under the Enterprise Business Group (Enterprise BG). In 2011, Enterprise Networking contributed 46% of the Enterprise BG's total sales revenue. Enterprise Networking provides verticals (such as government, transportation, electric power, energy, finance, and large enterprises) and partners with end-to-end network solutions that cover an impressive range of switches, routers, optical transport devices, and access network devices. Based on the network architectures, these solutions are classified into a campus network solution, a wide area network (WAN) interconnection solution, an enterprise branch access solution, and a data center network solution. Leveraging Huawei's more than 20 years of technical expertise and deep understanding of customer requirements and services, Enterprise Networking is committed to creating commercial win-win situations together with enterprise customers and partners through openness and cooperation.

Unit: US$1 billion

3.8 2.0

0.98 49%

1.76 46%

2010

2011

2.75 43.7%

Enterprise BG

Enterprise Networking

6.3

2012 (Target)

Enterprise Networking Solutions and Cases

02

Enterprise Networking has the most extensive products and solutions in the world. NE router

AR G3

ATN

DC switch

Core switch

Aggregation switch

Access switch

Switch

WDM

MSTP

Microwave

PON

Wi-Fi

MSAN&ODN

Transmission and microwave

Wireline and wireless access

03

Enterprise Networking Solutions and Cases

eSight/U2000: unified NMS

Router

Partners

Partners

• Customer requirements • Sales plan • Product & solution FOA environment and testing requirements • Employee enablement

+

• Global participation and knowledge sharing • Participation of solution and R&D experts • Equipment • Capital investment

Distributors

Win-Win with Channel Partners

Platinum Gold Silver Authorized resellers

Value-added partners (VAPs) Joint R&D and solution platform R&D

Platform

Global partners (GPs)

Lab

Technology Hardware

Software

Enterprise customers

Go to market

Service

Sales

Carrier partners

• 224 service partners and 5000+ certified engineers • 200+ senior certification architects • Collaboration with higher education institutions from 30+ countries • 27 Huawei authorized learning partners (HALPs)

Enterprise Networking Solutions and Cases

04

Rising Star in the Global Enterprise Networking Market No. 2 in the global enterprise router market

Fast-rising position in the global enterprise switch market

2.1%

9.2% 5nd

2nd Data source: Gartner's consulting report Enterprise Traditional Routers, Vendor Revenue, Worldwide, 2010-2011

Data source: According to IDC's report, Huawei ranked No.5 in the global enterprise Ethernet switch market in 2012 Q1. • Shipped 40 million switch ports in 2011. • Delivered 800,000 switches worldwide in 2011. • Witnessed a year-on-year sales revenue increase rate of 527% in 2011. After only one year, Huawei has risen as a TOP 5 switch vendor from "zero" market share.

No. 2 in the global carrier router market

No. 2 in the global carrier switch market

18% 2nd In 2011 Q4, Huawei ranked No. 2 in terms of IP router sales revenue. Data source: OVUM's 2011 Q4 report

05

Enterprise Networking Solutions and Cases

19% 2nd Data source: Infonetics, 2011 Q3 report

No.1 in WDM for three consecutive years

No.1 in the global GPON market

23%

47%

1st

1st

Data source: OVUM's consulting report, 2011 Q2-2012 Q1

According to Infonetics' report on the worldwide 2.5 GPON market share, Huawei ranked No.1 in GPON shipments in 2011.

No.1 in the growth of WDM market share

No.1 in the global EPON market

-0.4% -0.2%

0.0%

0.2%

0.4%

0.6%

Huawei Huawei

35% 1st

Cisco Cisco Infinera Infinera Fujitsu Fujitsu Ciena Ciena ZTE ZTE AlcatelAlcatelLucent Lucent

According to Infonetics' report on the worldwide 1.25G/2.5EPON market share, Huawei ranked No.1 in EPON shipments in 2011. Data source: Infonetics' consulting report PON, FTTH, and DSL Aggregation Equipment and Subscribers Market Share, Size, and Forecasts: 4Q11 Report released on January 20, 2012

Data source: OVUM's consulting report, 2011 Q1-2011 Q4

Enterprise Networking Solutions and Cases

06

Huawei: The Only Challenger in the LSW and WLAN Fields • After only one year of efforts in the enterprise market, Huawei has been listed by Gartner to the 4th quadrant in its Magic Quadrant, becoming the only challenger for Cisco.

Gartner's comments about Huawei • With a strong carrier heritage, Huawei has a rich portfolio of products and the resources to deliver to new markets. • Huawei can deploy a single architecture with its Enterprise Network Solution, which includes network management, security, firewall and guest access for wired and wireless connectivity, as well as a single-policy enforcement application for enterprises looking for one vendor.

After only one year of efforts in the enterprise market, Huawei has been listed by Gartner to the 4th quadrant in its Magic Quadrant, becoming the only challenger in the LSW and WLAN fields. Data source: Gartner's report Magic Quadrant for the Wired and Wireless LAN Access Infrastructure released in June 2012

07

Enterprise Networking Solutions and Cases

Huawei's Leading Enterprise Networking Concept — "One Net" Standard Members of 15 major international standards-defining organizations and forums

Collaboration

Package Solid track record in turnkey projects

Horizontal collaboration

Data center network

WAN interconnection Global interoperability lab IP routing/Optical transport Campus network An impressive range of standards-compliant enterprise networking products

10GE/Voice/Wireless Branch access

Vertical collaboration

Server/Switch/Storage

Global service and business partners

Security surveillance network Office automation (OA) network Communications network

Industry solutions that can be easily integrated

Production network

Data/Voice/Security/Wi-Fi/3G/ WAN optimization

One Net: Focuses on creating benefits for enterprises and aims to constantly increase their efficiencies, reduce costs, and improve service experience under different applications, devices, standards, environments, and experience situations. The One Net solution has three major features: standard, collaboration, and package. • Standard: Ensures openness and encourages interoperability to reduce network buildout costs and drive network convergence. • Collaboration: Simplifies network architecture and brings a "one network" user experience. Through vertical collaboration, unleashes "cloud-pipe-device" boundaries to achieve intelligent linkage of network components. Through horizontal collaboration, consolidates the customer's multiple networks. • Package: Works with partners in an open, cooperative, and win-win manner to provide enterprises with a package of solutions.

Enterprise Networking Solutions and Cases

08

One Net Concept: Standard IETF (Authors/Documents) 1600

1456

Until October 2011

1400 1200

Authors

1000

Documents 800 600

Drafts 436

462

400

349 249

283 121

200

75

192

100 83

29 9667

022

HP

H3C

66 80 78

0

Cisco

Huawei Juniper Alcatel

ZTE

349 authors for IETF, ranking No. 2 behind Cisco

• 25,000+ standard proposals (ended on June 30, 2011) • Members of 148 international standards-defining organizations • Board of Directors (BOD) members at IEEE, CCSA, ATIS, BBF, ETSI, OMA, and WiMAX Forum • 150+ important positions at IETF, ITU, 3GPP, OMA, ETSI, ATIS, etc. • 3200+ patents in the transmission field

09

Enterprise Networking Solutions and Cases

One Net Concept: Collaboration Wireline and wireless collaboration

IP and optical collaboration

Flexible, secure wireline and iAccess mobile office wireless access (including 3G, Wi-Fi, and VPN) through AR G3

GMPLS-UNI

Smart phone 3G office

IP/MPLS OTN/DWDM/GMPLS Terminal and network collaboration

VM migration collaboration

Terminal security and service optimization • Security recognition • Automated assets management •

Service optimization and policy distribution Network

Energy-conservation from terminals to the entire network • • •

Terminal energy-conservation management Network-wide hibernation Energy saving by up to 50%

Network policy migration

nCenter network management platform

VM VM

VM VM

Hypervisor

Hypervisor

VM service management platform

Enterprise Networking Solutions and Cases

10

Huawei Enterprise Products Won High Acclaim from the Authoritative Organization Miercom • Miercom granted Performance Verified certification to Huawei products after testing. Testing result for the Huawei S7706 switch

Perfect performance in fault detection and switchover.

Failover convergence times with various protocols. Network resiliency is improved with lower times.

Huawei's chassis-shaped switches that have passed Miercom's testing: S7706/S9306

Testing result for the Huawei S5700 switch

Advanced Hibernation Management (AHM), Energy Efficient Ethernet (EEE) and flexible time-based strategy for energy savings reduce power consumption by 50%.

11

Enterprise Networking Solutions and Cases

Power consumption of the S5700-52P-LI switch. The numbers represent actual readings with 24 or 48 ports populated. Power usage is low due to implementation of Energy Efficient Ethernet.

Testing result for Huawei AR G3 series routers

The performance and reliability of Huawei AR Series of routers was verified by Miercom. In hands-on testing, Huawei demonstrated exceptional performance.

Comparison of 1500-byte forwarding performance for the AR207V-P, AR1220VW, and AR3260. Product testing proved all routers exceed the rated specifications.

Huawei's AR G3 routers that have passed Miercom's testing: AR207V-P/AR1220VW/AR3260

Testing result for CE12812 data center switch

CE12800 is a high performance, scalable core switch supporting up to 1152*10GbE or 288*40GbE port connections, up to 47.52 Tbps of line rate traffic and 28,800 Mpps forwarding rate.

The industry average latency for switches in this class for 9216 byte traffic is approximately 10μs, but the CE12800 switch achieved much better store and forward latency under 3μs.

Huawei's data center switches that have passed Miercom's testing: CE12812/CE6850 Huawei's box-shaped switches that have passed Miercom's testing: S1700-28GFR-4P/S2700-EI/S5700-EI/S5700-LI/ S6700-EI

Enterprise Networking Solutions and Cases

12

Huawei's Enterprise Networking Products Won Wide Certification Huawei NG WDM products have passed IBM GDPS and STP interoperability testing (IOT) certification

2455 South Road Poughkeepsie, New York 12601 August 21, 2008

IBM® GDPS® and Server Time Protocol (STP) Application Qualification support for the Huawei OptiX OSN 6800 / OSN 3800 V100R004 Dense Wavelength Division Multiplexing (DWDM) Platform International Business Machines Corporation and Huawei Technologies Co. Ltd. have successfully completed application qualification testing of the Huawei OptiX OSN 6800 / OSN 3800 V100R004 Dense Wavelength Division Multiplexing (DWDM) Platform for the following IBM Parallel Sysplex and Geographically Dispersed Parallel Sysplex (GDPS) IBM System z10, z9 and IBM eServer zSeries 990 and 890 environments:

13

Enterprise Networking Solutions and Cases

• GDPS / Peer-to-Peer Remote Copy (PPRC) (Metro Mirror) using ESCON or Fibre Channel Protocol (FCP), IBM Sysplex Timer and InterSystem Channel-3 (ISC-3) for synchronous remote data copy applications. • GDPS / Peer-to-Peer Remote Copy (PPRC) (Metro Mirror) using ESCON® or Fibre Channel (FCP) for remote data copy and ISC-3 Peer Mode links with STP message passing for server time synchronization. • GDPS / Extended Remote Copy (XRC) (z/OS Global Mirror) using FICON for asynchronous remote copy.

Distances for the protocols supported for these GDPS applications are defined in the Qualification Results Summary below. Although STP applications have been successfully tested to a distance of 200 km, IBM requires an RPQ (8P2263) to assure applications between 100 km and 200 km adhere to the bounds of our qualification. This is due to the critical requirement of assuring that no more than 900m of differential delay was introduced into the network. It may also be possible to support some protocols at greater distances, such as FICON, FCP, ESCON and InterSwitch Links (ISLs) if approved by IBM RPQ 8P2263.

Huawei's enterprise networking products won wide certification

European Union (EU)

NRTL in North America

US FCC

CB

Gold-level Japan VCCI certification for IPv6 Ready Phase-2 Enhanced

Germany GS

Nigeria SONCAP

Kuwait KUCAS

EU RoHS

Canada IC

Saudi Arabia SASO

EU REACH

Australia C-TICK

CC certification

Enterprise Networking Solutions and Cases

14

2

Enterprise Solutions

15

Enterprise Networking Solutions and Cases

• Campus • WAN Interconnection • Enterprise Branch • Data Center

The world where we live is now undergoing many increasingly apparent changes. For example, enterprise services are expanding to multimedia services from previously simple voice services; the infrastructure network is evolved from wireline to hybrid wireline and wireless; and network access is shifting from desktop access to ubiquitous access from multiple types of terminals. At the same time, with the advent of the cloud computing era, cloud campus networks are inevitable because of their prominent

features such as anytime, anywhere, and ubiquitous access, high speed, and unified and intelligent design. Within the campus network, there are diversified application requirements, for example, high-speed access of dense population and terminals, WLAN mobile office, multimedia service support (including IP telephony, v i d e oconf e re nci ng, and vi de o surveillance), and secure access of external users.

To respond to campus network development trends and meet diversified application requirements, Huawei has released a series of enterprise campus network solutions, including a 10GE campus solution, a campus voice services solution, and a wireless campus solution. These solutions help enterprises build out a high-speed, intelligent, convergent, energy-conserving, and safe campus network.

Architecture of the Huawei Enterprise Campus Solution User experience

High speed and flexibility

Intelligent office

Accessible services anytime, anywhere

Terminal/IT Solutions

10GE campus

Campus Voice Service

Wireless Campus

Switches

AR routers

WLAN products

10GE network

Converged gateway

Ubiquitous access

Products Concepts

Overview of the Huawei Enterprise Campus Solution Description

10GE Campus Solution

Based on the core idea of "GE access and 10GE convergence", this solution helps the customer construct a quality campus network that features higher bandwidth, stronger performance, and better user experience.

Campus Voice Services Solution

This solution provides end-to-end delivery capabilities that cover voice switching (IP PBX), voice gateways, telephony terminal, value-added services, and network management system (NMS). It is a good choice for campuses of all sizes and verticals of all types that require an integrated voice, data, and security network.

Wireless Campus Solution

This solution provides ubiquitous, secure, and high-speed wireless services for diversified school campuses, governments, and enterprise campuses. Service scenarios supported by this solution include but are not limited to the following: retailing, stations, e-class for primary and secondary schools, wireless campus network for colleges, e-Government, warless cities, hotels, enterprise OA, and ISP reselling.

Enterprise Networking Solutions and Cases

16

Campus

Huawei Enterprise Campus Solution

Large-sized 10GE Campus Solution Branch

Branch

Visitor

PSTN

NE40E egress router

Voice gateway AR3200/2200

E1000E firewall

40GE core layer S9700/CE12800

Networking topology: three-layer architecture (access, convergence, and core layers) Selected products:

CSS

• Core layer: S9700

Data center

10GE convergence layer S7700

DMZ CSS

GE access layer S5700

This solution applies to large-sized campus network projects for verticals, such as government (education), energy, transportation, finance, and electric power, where the number of end users involved is greater than 1000.

• Convergence layer: S7700 • Access layer: S5700LI for L2 to desktop; S5700 EI/S5700 HI (high requirements, such as hardware probes and video support) for L3 to desktop • Egress: NE40E series and AR3200/2200 (voice gateway) • WLAN: AC6605 (box-shaped) and S9700/ S7700 (with AC plug-in cards) AP: AP6010 series, AP6510DN, AP6610DN, and AP6310SN

17

Enterprise Networking Solutions and Cases

Branch

Branch

This solution is best suited for the campus OA networks of small- and medium-sized enterprises (SMEs), where the number of end users involved is smaller than 1000. Networking topology: two-layer architecture (access and core layers)

Visitor

Selected products:

Egress router, voice gateway, and firewall AR G3

• Core layer: S7700

CSS 10GE core layer S7700

GE access layer S5700

Data center

DMZ

• Access layer: S5700LI for L2 to desktop; S5700 EI/S5700 HI (high requirements, such as hardware probes and video support) for L3 to desktop • Egress: AR3200/AR2200 series (routing and voice gateway) • WLAN: AC6605 (box-shaped) and S7700 (with AC plug-in card) AP: AP6010 series, AP6510DN, AP6610DN, and AP6310SN

Highlights of the Huawei 10GE Campus Solution The Huawei 10GE Campus Solution uses "GE access and 10GE convergence" design: GE at the access layer, 10GE at the convergence layer, and 40GE at the core layer. This solution brings many advantages, including: Continued evolution and increased return on investment (ROI) • The S9700/S7700 provides a 40GE switching capacity, which can scale to 100GE in the future to meet the increase of bandwidth requirements.

Multiple choices of access switches for flexible access • A rich set of access switches are available to meet the customer's requirement for flexible access in different usage scenarios. Energy conservation and cost reduction • Multiple energy-conservation technologies, for example, Huawei's patented entire-system hibernation technology, are used to build an energy-efficient campus network.

World's highest-density 10GE • Industry-leading 10GE cards that feature high density and large capacity are provided, which help build a 10GE campus network that makes for ultra-highspeed service experience in the cloud era.

Enterprise Networking Solutions and Cases

18

Campus

Small- and Medium-sized 10GE Campus Solution

Highlights of Huawei's Switches for 10GE Campus Networks

Chassis-shaped switches: large capacity, high reliability, multi-service support, and investment protection

Smooth evolution and 10-year life cycle for investment protection Future-proof 100GE card Multi-model high-density 40GE card Multi-model high-density 10GE card

Higher stability and reliability without service interruption 1+1/M+N redundancy backup • Switching and routing engine • Centralized monitoring unit (CMU)

• Double-layer fan • 1+1 redundancy backup

• Power supply module

Multi-service support WLAN AC

Environment monitoring

WAN interconnection

All-in-one value-added services: firewall, NetStream, IPSec VPN, and load balancing

……

19

Enterprise Networking Solutions and Cases

Campus Box-shaped switches: multiple models, higher security and reliability, and flexible access

Abundant models to meet different usage scenarios S5700/10-LI (compact)

S5700-SI (standard)

S5700/10-EI (enhanced) S5700/10-HI (advanced)

POE switch

Multi-level protection and higher security and reliability 6 kV surge protection

Hardware-based ETH OAM/BFD

3.3 ms

SEP

Environment monitoring

50 ms

Only 1/8 of the industry's average lightning strike damage probability

Anti-theft

Fireproof

Waterproof

Larger capacity:

Abundant models:

• Huawei's next-generation core switches CE12800 and S9700 accommodate the customer's service demands for the next several years, thereby protecting investment. The CE12800 supports a maximum switching capacity of 48 Tbps and up to 96*100GE, 288*40GE, or 1152*10GE line-rate interfaces.

• Multiple choices of box-shaped switches meet the customer's diversified requirements from FE to 10GE. In addition, POE switches supporting 15.4 W and 30 W are available to support a wide range of POE devices, including APs, cameras, and IP phones.

Higher reliability:

• Box-shaped switches use 6 kV surge protection technology to protect against lightning strikes. These switches also adopt hardware-based BFD and flexible SEP ring network protection technologies, which can quickly locate faults and implement service switchover. The environment monitoring interfaces of these switches ensure easy O&M.

• The S9700 supports hardware-based BFD and hardware-based OAM (Huawei unique). In addition, the S9700 supports ISSU technology to ensure hitless upgrade. Key components of the S9700 use redundancy design to prevent service interruption. Multi-service support:

Higher security and reliability:

• The S9700/S7700 is designed with an integrated valued-added service module that provides multiple services, such as IPSec and firewall.

Enterprise Networking Solutions and Cases

20

Huawei Enterprise Campus Voice Services Solution Voice services are required for every campus network. Estimates show that the 2012 global voice market will be worth US$7.4 billion. The campus voice services market that Huawei can participate in includes:

New campus projects of governments, verticals, and hightech parks:

Campus voice network reconstruction market:

Unified communications (UC) infrastructure market:

• TDM PBXs will be phased out and more value-added services will emerge. Against this backdrop, a converged voice, data, and security network is urgently needed. Huawei AR devices can meet this demand with their all-in-one service capabilities.

• Provides voice infrastructure for UC integrators. Huawei AR devices can integrate with Huawei UC, Microsoft OCS, and IBM Sametime systems.

• Enterprises may rent carriers' VoIP networks or build their own voice networks.

Campus Voice Services Solution IP TDM Voice gateway

Phone

Core switch

Billing server

Remote office Voice Telephony UC mailbox conferencing server

Microsoft OCS

Fax

Application server

TDM PBX H.323 terminal Legacy network support

Call Manager IP PBX

H.323 PBX

eSight NMS

Access switch

LAN

Access switch

LAN

Marketing department

SIP AG (BEST)

Analog phone

21

Enterprise Networking Solutions and Cases

Fax

IP phone

Data center

R&D department

SIP AG (BEST)

PC soft terminal

Wi-Fi phone

Analog phone

Fax

IP phone

PC soft Wi-Fi phone terminal

Campus

Solution Highlights Powerful service capabilities:

Intelligent and unified O&M:

• Huawei AR devices use multi-core processors and provide large-capacity switching capabilities, including PBX and trunk capabilities. These devices have extensive models and apply to the user base of various sizes from 4 to 10,000 users.

• The eSight NMS uniformly manages campus switches, AR devices, and WLAN devices. This visualized NMS also uniformly manages wireline and wireless network topologies. The wizard-based configuration and network monitoring functions of the eSight improve network deployment and maintenance efficiencies.

Highly efficient convergence gateway: • This solution can integrate with Huawei UC, Microsoft OCS, and IBM Sametime systems. The X86 card is integrated with a rich set of value-added services, including billing, voice mailbox, and telephony conferencing. In addition, embedded SBC proxy and H.323 gateway/gatekeeper modules are provided. They support internal TDM and H.323 voice networks, interoperate with external networks of carriers, and support smooth evolution of campus networks, thereby reducing investment. Additionally, this solution supports the OSP platform and therefore can easily integrate with third-party applications and meet the customer' increasing personalized demands.

Higher service security and reliability: • Trunk dual-homing, BEST local survivability, and power-off survival functions ensure the flexibility and reliability of voice access. Abundant terminal types: • ISDN terminals, IP phones, Wi-Fi phones, PC/mobile phone soft terminals, and high-density FXS analog phones are available to meet different usage scenarios.

Selected Equipment Voice gateway

AR150/200/1200

User Base SME < 200

IP PBX

Medium 200-1000

Conferencing System

AR2240/3260-VG

X86 card License for 200 users

X86 card License for 200 users

AR2220

AR2240-CM

IPT1405

Lite (0-200)

e Sight

IPT1450

Standard (0-3000) X86 card License for 1000 users

X86 card License for 1000 users

AR3260-CM AR3260 Yaxun Hongda AR3260 Very Large AR3260 >10K AR3260 AR3260

AR3260

IP Phones

e Sight

AR2240 Large 1000-10K

NMS

AR150&AR200 AR1220

AR2220/2240

Voice Mailbox

Yaxun Hongda

e Sight Professional (3000-20K)

IPT2100 IPT2110 IPT2120

Enterprise Networking Solutions and Cases

22

Huawei Enterprise Wireless Campus Solution

AAA server

10GE campus network

AC POE switch

eSight NMS

POE switch AR functioning as a local AC

Access switch

Wireline and wireless network

Outdoor wireless network

Branch wireless network:

Ubiquitous access of massive Wi-Fi terminals

Wireline and wireless network: • Provides high-speed, secure, and reliable wireless access for users in the campus. • Supports distributed AP deployments and centralized configuration and management to effectively improve network operation efficiencies. • Uses a unified NMS for wireline and wireless networks and adopts unified authentication technology to ensure consistent user experience. Selected products: • AP: AP6010SN and AP6010DN • AC: AC6605 and S9700/S7700 (SPU plug-in card) Outdoor wireless network: • Provides outdoor wireless coverage and data transmission services for users. • Supports point-to-point (P2P) and point-to-multi-point (P2MP) data transmission. • Uses wireless WDS networking and intelligent forwarding technologies. Selected products: • AP: AP6510DN and AP6610DN • AC: AC6605 and S9700/S7700 (plug-in card) • Antenna: determined based on the network planning result. Branch wireless network: • Uses AC-capable AR routers and supports local AR management to apply to diversified networks. • Supports remote VPN access to ensure network data security. Selected products: • AP: AP6010SN and AP6010DN • AC: AC6605, S9700/S7700 (SPU plug-in card), and AR G3 full-series. 23

Enterprise Networking Solutions and Cases

Campus

Solution Highlights Wide coverage: • Uses Huawei's unique patented wireless transmission algorithms, achieving superb radio frequency (RF) performance and wide signal coverage. • Adopts 5 GHz preference technology (users preferentially access 5 GHz links) to improve user experience in high-density scenarios. Easy O&M: • Supports geographical topology, visualized RF management, and wizard-based AP configuration to improve deployment efficiency. • Provides abundant WLAN O&M reports. • Uses industrial-level components and provides an embedded surge protection module in outdoor APs, which effectively reduce deployment costs. Easy installation: • Uses dovetail design and quick hoop iron technology, reducing the installation time by up to 70%. • Provides user-friendly handlers specifically designed for installation components to facilitate installation.

Enterprise Networking Solutions and Cases

24

Huawei WAN Interconnection Solution WAN Interconnection Trends and Challenges Nowadays, IT and digital technologies have been quickly applied to enterprises. Broadband and multi-service support will be the development trends for enterprise networks. Construction of fixed infrastructure networks has boomed over recent years. According to OVUM, the 2012 global WAN market will amount to US$8.2 billion, among which US$3.5 billion is possible for Huawei to participate in.

Long distance and large capacity

High reliability

Easy O&M

• Impossible for long-distance • 200 ms service switchover does not meet • No unified NMS causes many transmission due to great the requirements for high reliability. O&M difficulties. interference • Hierarchical protection wastes many • Massive alarms result in slow • High costs in continuous resources. system recovery from faults. network capacity expansion • Protection effectiveness cannot be ensured. • Inefficient fault locating • Fast growing energy results in many incorrect consumption dispatches.

25

Enterprise Networking Solutions and Cases

WAN Interconnection

Huawei WAN Interconnection Solution Disaster recovery center

Branch

OSN WDM

NE router NE router

Primary data center

OSN WDM

NE router

OSN WDM OSN WDM

NE router

NE router

HQ

WAN Interconnection Solutions and Huawei Opportunities Solution

Description

Huawei Opportunities

IP/MPLS Backbone Network Solution

IP technologies are growing in popularity around the world. Driven by IP popularity, a large number of IP/MPLS networks are being built worldwide. To respond to market demands, Huawei has released an IP/MPLS Backbone Network Solution. Core routers used in this solution can groom network-wide services in a non-blocking manner.

• National IT transformation projects (national broadband projects) • Integrated data network (IDN) projects of the electric power, transportation, and energy industries • Backbone network projects for safe cities, distance education, and distance healthcare • Backbone networks self-built by ISPs

Transport Bearer Network Solution

Broadband applications are increasingly required worldwide. This drives the increase of bandwidth demands. Huawei's Transport Bearer Network Solution helps build a 7/24 aeroamphibious network using optical fiber and microwave resources.

• National IT transformation projects (national broadband projects) • Basic bearer network projects of the electric power, transportation, and energy industries • Backbone networks self-built by ISPs • Disaster recovery interconnection projects for the finance industry

Enterprise Networking Solutions and Cases

26

IP/MPLS Backbone Network Solution Architecture of the IP/MPLS Backbone Network Solution

IP/MPLS (L3VPN/L2VPN/PWE3/Native IP) Mobile

Surveillance center

Unified NMS

Surveillance

App center

Internet

Mobile office

Control center

OA

P Branch

Video conference

AR

P

P

PE

NOC

P

PE

DC Call center

ATN

VoIP

HQ

Substation (electric power) Production device

TDM service access used for scenarios such as power substations and metro stations

ATN series

Branch office service access

AR series

Access

27

Enterprise Networking Solutions and Cases

New! To be released in 2013 Q1

NE20E-X4

NE20E-X8

Convergence

Video conference

NE40E-X16 NE40E-X8 NE40E-X3

Core

WAN Interconnection

Solution Highlights • Supports IP and optical synergy and provides the industry's first end-to-end 100G solution (which can smoothly scale to 400G in the future).

• Supports SDH-like pipelines that are compatible with legacy TDM services and makes for smooth migration of industry-specific networks to All IP networks.

• Uses multi-layer reliability technologies to ensure service-always-online and end-to-end service switchover completed within 50 ms.

• Uses a unified VRP platform for all products (global shipments of more than 4 million sets) to ensure strong stability and consistent user experience.

• Allows for large-scale deployment of IPv6 networks (helping build the world's largest IPv6 network for China Education and Research Network (CERNET2)).

• Adopts advanced clock synchronization technologies and supports 1588v2 for hardware, which can be widely applied to electric power and railway industries.

Industry Scenarios Industry

Government/Education/ Large enterprise

Trends • Emerging countries will incorporate national IT transformation projects (national broadband projects) into their national strategies. • Safe cities, distance education, and distance healthcare will be quickly deployed.

Huawei Opportunities

• Builds new IP WANs and expands the capacity of existing IP WANs

• Network coverage will grow as globalization and informatization are moving forward worldwide.

Electric power/ Transportation/Energy

ISP

• IP technologies are increasingly used worldwide. As a result, more IP backbone networks that support legacy TDM services (features: light load, service-centric, and high requirements for latency, protection, and OAM) will be constructed around the world. • Market competition becomes fiercer than before. To stay ahead of competition, the customer will quickly distribute multimedia content to the borders of metropolitan area networks (MANs). • Customers will begin to build their own backbone networks rather than continue leasing such networks due to considerations of bandwidth requirements and leasing fees.

• TDM network reconstruction • Builds new IP data networks and expands the capacity of existing IP data networks.

• Self-built backbone networks (The Agisson has set up a media asset account department to deal with the ISP market.)

Enterprise Networking Solutions and Cases

28

Transport Bearer Network Solution Architecture of the Transport Bearer Network Solution Edge/Access

Metro/Convergence

Backbone/Core

GE

Government PON

Smart Grid Transportation

WDM

WDM Router

MSTP

Finance Energy

FE

WDM

MSTP

Microwave

GE

RTN 910

RTN950

Microwave

29

Enterprise Networking Solutions and Cases

RTN980

Metro100

OSN550/500

OSN1500/3500/7500

MSTP/SDH

OSN 1800 OSN 8800T16 OSN 8800T32

WDM/OTN

WAN Interconnection

Solution Highlights Industry-leading WDM solution

RTN980

80G 120G 200G OTN ring capacity 40 or 80 km

End-to-end hybrid solution

Continued microwave improvement

Tributary

• Maximum 14 directions • Good catalyst for networklized microwave • IP-based • Ease-of-maintenance • Easy expansion

Nodal microwave with the highest integration level in the industry

8/12/20×10G λ

Access Convergence Core Microwave

BB TDM/PKT

MSTP

TDM/PKT

WDM/ OTN

TDM/PKT /OTN

Full-outdoor (FO) microwave

• Greatly facilitates the construction of metro WDM networks, without the need of professional planning but through only simple connections. • Uses photonic integrated device (PID) technology for better energy conservation, simpler network structure, and higher efficiency.

• Uses the RTN 980 (up to 14 directions and 5 U high) to gain advantages in networklized microwaves.

• Combines Hybrid MSTP with Hybrid Microwave to support end-to-end TDM and packet services (1+1 > 2).

• Supports FO microwave to meet diversified outdoor deployments.

• Supports Hybrid Transport that future-proofs the OTN (1+1+1 > 3).

Industry Scenarios Industry

Trends

Huawei Opportunities

Government/Education

• Emerging countries will incorporate national IT transformation projects (national broadband projects) into their national strategies.

• Builds new backbone networks and expands the capacity of existing backbone networks.

Electric power/ Transportation/Energy

ISP

• Traditional TDM services (features: light load, service-centric, and high requirements for latency, protection, and OAM) will exist for a long time. • At the same time, video services will grow quickly. Therefore, more bandwidth resources will be required. • Bandwidth requirements grow quickly. ISPs tend to build their own backbone networks.

• Builds new production networks, expands the capacity of existing production networks, and reconstructs production networks. • Builds new OA networks and expands the capacity of existing OA networks. • Backbone networks self-built by ISPs

Enterprise Networking Solutions and Cases

30

Huawei Enterprise Branch Access Solution Driven by continuous business growth, enterprises have set up many dispersed branch offices and established business ties with more partners and customer groups. According to statistics collected by authoritative organizations, more than 70% of resources of an enterprise are in the enterprise's branch offices and more than 1/3 employees are working at remote sites. More and more enterprises worldwide are now turning to WAN or Internet resources to help them carry out management and business activities, such as internal and external communication and business expansion. To respond to customer demands, Huawei has launched comprehensive enterprise branch solutions.

31

Flexible branch access

Reliable remote interconnection

Converged data and voice services

Rich valued-added applications

Integrated Access Solution

VPN Interconnection Solution

Converged Voice Services Solution

Value-added Service Solution

Enterprise Networking Solutions and Cases

Enterprise Branch

Overall Network Topology SOHO/Mini branch (< 8 employees)

Employees on a business trip Partners Customers eSight NMS

AR200

Enterprise HQ

Analog phone

Wi-Fi terminal

PSTN PC

Server

Fax machine IP phone

Small branch (8 to 50 employees)

Internet/WAN

AR1220

Analog phone

Wi-Fi terminal

Large branch (350 to 1000 employees)

Fax machine

AR3260

Midsize branch (50 to 350 employees)

eSight NMS

S7700 S5700

AR2200

S5700

AP6010

S5700

PC IP phone

AP6010

Server

Wireline (ETH/xDSL/xPON...) Voice (E1/FXO) IP phone PC

Wi-Fi Fax Analog terminal machine phone

IP phone

PC

Wi-Fi Fax Analog terminal machine phone

VPN (IPSec/SSL VPN...) Wireless (3G/LTE)

n

N tio VP nec on erc

Enterprise Branch AR G3

d ge er e nv ic Co vo

• Provides comprehensive data and voice functions to meet the requirements of enterprise HQ and branches for converged, efficient, and intelligent OA.

int

• Supports any-media uplink interfaces and any-size branch access to meet enterprises' requirements for branch interconnection and LAN egress.

In te ac gra ce te ss d

Solution Description

ed dd s a e- e lu rvic Va se

• Uses a complete set of VPN technologies to ensure that employees at branches and employees on business trips can securely and reliably access the enterprise's network resources. • Sets up an open service platform to provide enterprise branches with a variety of value-added services and applications, such as WAN optimization.

Enterprise Networking Solutions and Cases

32

Enterprise Branch Integrated Access Solution Solution Highlights Any-network interconnection:

Secure access:

• Provides abundant interfaces, including GE/FE, xPON, POS, xDSL, E1/T1, PRI/BRI, SA/AS, and 3G/ LTE to connect to any networks.

• Provides a variety of security protection functions, such as firewall, IPS/IDS, URL filter, antivirus, and DPI, to ensure access security.

Any-standard 3G:

High-speed access:

• Supports 3G USB Dongle, 3G cards (supporting antenna distance extension), WCDMA, TD-SCDMA, and CMDA2000 and allows for smooth evolution to LTE.

• Adopts a third-generation multi-core and switching network architecture for higher forwarding performance (twice higher than the industry average) and supports WAN optimization to achieve high-speed access.

Reliable access: • Allows for free combinations of uplinks into backup groups, uses VRRP for router backup, and supports BFD, NQA, and routing convergence technologies to quickly locate faults and implement service switchover, thereby ensuring the stable network operation.

Overall Network Topology

eSight NMS

SOHO/Mini branch (< 8 employees) Enterprise HQ AR200

FE/xDSL/xPON

Wi-Fi terminal PC

Server

3G/LTE

Internet/WAN ON /PO S

Wireline terminal

FE/x

GE

Large branch (350 to 1000 employees)

AR3260

eSight NMS S7700

AP6010

S5700

Midsize branch (50 to 350 employees)

FE/ GE/ POS N/ xPO

/xP

DSL

/xPO

N

AR1220 AR2200 AP6010

S5700

Server

Camera

33

Enterprise Networking Solutions and Cases

Wireline terminal

PC

Wi-Fi terminal

Camera

Wireline terminal

PC

Small branch (8 to 50 employees)

Wi-Fi terminal

Wi-Fi terminal PC Wireline terminal

Enterprise Branch

Selected Equipment

Branch Size Large branch (350 to 1000 employees)

Midsize branch (50 to 350 employees)

Egress Gateway

Aggregation/ Access switch

Wi-Fi Access

S5700 S7700 (aggregation switch) (access switch)

AP6010 (AR G3 with AC functionality)

eSight AR3260

AR2240 S5700 AR2220

Small branch (8 to 50 employees)

SOHO/ Mini branch (< 8 employees)

NMS

AR1220

AR200

S5700

AR G3 with embedded FE ports

AP6010 (AR G3 with AC functionality)

eSight (Standard Edition)

eSight eSight (Compact Edition)

AR G3 with fat AP functionality

AR G3 with embedded web NMS

AR G3 with fat AP functionality

AR G3 with embedded web NMS

AR150

Enterprise Networking Solutions and Cases

34

Enterprise Branch VPN Interconnection Solution Solution Highlights High-performance interconnection:

On-demand interconnection:

• Passes Miercom certification and provides industry-leading forwarding performance and IPSec VPN encryption functions.

• Achieves flexible network interconnection (HubSpoke and Spoke-Spoke) through DSVPN and allows for anytime, anywhere access by way of SSL VPN and L2TP VPN.

Highly-reliability interconnection: • Provides end-to-end MPLS VPN, VPN FRR, and QOS to ensure network reliability. High-security interconnection: • Offers authenticated and encrypted IPSec VPN tunnels to ensure data security. • Provides GRE Over IPSec and L2TP Over IPSec functions with the help of GRE and L2TP technologies to improve network flexibility.

Investment reduction: • Adopts a multi-core architecture and provides an embedded IPSec encryption module to reduce CAPEX. • Uses a visualized eSight NMS and VPN tunnel management technologies to simplify O&M and lower OPEX. (EVPN can simplify IPSec VPN configurations).

Overall Network Topology AR G3

Branch A (fixed IP)

AR G3

AR G3

Branch B (fixed IP)

I GREPSec V ove PN/ r IP Sec

Automated set-up of dynamic tunnels

Internet

DSVPN

VPN Server

PN

N

L2TP VP

SSL V

AR G3

AR G3

Employees on the go

Enterprise Networking Solutions and Cases

Enterprise data center Enterprise HQ

Branch D (dynamic IP)

35

eSight NMS

AR G3

DSVPN Branch C (dynamic IP)

MPLS Network

Partners

Enterprise Branch

Selected Equipment

Branch Size Large branch (350 to 1000 employees)

Midsize branch (50 to 350 employees)

Egress Gateway

SOHO/ Mini branch (< 8 employees)

License

eSight (Standard Edition)

AR3260

AR2240

1000 Mbps (AR2240+SRU40)/ 500 Mbps (AR2220)

• Users must purchase the valued-added service package for security services before using DSVPN, SSL VPN, EVPN, and PKI functions.

200 Mbps

• Licenses for DSVPN and SSL VPN must be also purchased on demand.

AR1220

AR200 AR150

100 Mbps (AR200)/ 60 Mbps (AR150)

NMS

eSight

2000 Mbps (SRU80)

AR2220 Small branch (8 to 50 employees)

IPSec Forwarding Performance

eSight eSight (Compact Edition) AR G3 with embedded web NMS

AR G3 with embedded web NMS

Enterprise Networking Solutions and Cases

36

Enterprise Branch Converged Voice Services Solution Solution Highlights Cost-effective converged gateway:

Wide industry recognition:

• Provides abundant WAN/LAN cards and voice modules and delivers rich valued-added services (such as voice/fax mailboxes) through the x86 platform. One device can meet the desired voice functions, thereby reducing investment.

• Passes Miercom certification and supports registration of up to 6000 users and 2000 concurrent calls.

Series of products:

Wide application:

• Offers multiple choices of products to meet different network requirements (SOHO, small/ midsize/large branch, and HQ). Any-scenario voice:

• Wins Microsoft Lync certification and successfully interconnects with Huawei UC and IBM Sametime to provide comprehensive UC applications. • In the Bangladesh e-Government IT transformation project, Huawei AR G3 devices are used as converged data and voice gateways at 10,626 branch nodes.

• Provides complete voice functions such as PBX, SIP AG, BEST local survivability, and power-off survival. • Ensures reliable coupling between voice functions and the network. • Supports IPv6.

Overall Network Topology SOHO/Mini branch (< 8 employees) eSight NMS

AR200 SIP AG

Enterprise HQ

PSTN

Wi-Fi phone

FXO

UC system

Fax machine PC

Call Manager

Internet/WAN

n*E1

S5700

AR3260 PBX

AP6010

37

Enterprise Networking Solutions and Cases

PC

Wi-Fi Fax phone machine

Fax machine

PC S5700 IP phone

UMS server

IP phone

Analog phone

AR2200 PBX

S5700

AP6010

AR1220 SIP AG Wi-Fi phone

n*E1 Midsize branch (50 to 350 employees)

IP phone

Small branch (8 to 50 employees)

E1/FXO Large branch (350 to 1000 employees) eSight NMS S7700

Analog phone

Analog phone

IP phone

PC

Wi-Fi Fax phone machine

Analog phone

Enterprise Branch

Selected Equipment Branch Size Large branch (350 to 1000 employees)

Midsize branch (50 to 350 employees)

Egress Gateway

AR3260

SOHO/ Mini branch (< 8 employees)

S5700 (access switch) S7700 (aggregation switch)

AR2240 AR2220

Small branch (8 to 50 employees)

Aggregation/ Access switch

AR1220

AR200

S5700

S5700

AR G3 with embedded FE ports

Wi-Fi Access

AP6010 (AR G3 functioning as an AC)

AP6010 (AR G3 functioning as an AC) AR G3 with fat AP functionality

AR G3 with fat AP functionality

POTS Access

UMS

NMS

eSight 16/32FXS (AR WSIC)

X86 card (AR WSIC)

eSight (Standard Edition)

eSight 16/32FXS (AR WSIC)

16/32FXS (AR WSIC) AR G3 with embedded POTS ports

X86 card (AR WSIC)

X86 card (AR WSIC)

Provided by enterprise HQ

eSight (Compact Edition) AR G3 with embedded web NMS

AR G3 with embedded web NMS

AR150

Enterprise Networking Solutions and Cases

38

Enterprise Branch Value-added Service Solution Solution Highlights Improved branch service experience: • Introduces WAN optimization and IPS/IDS applications to help address enterprise challenges (such as network bandwidth constraints, network security threats, and HQ service unavailability) and improve service experience. Reduced network costs: • Provides an integrated solution through "AR G3 devices + OSP cards", reducing CAPEX and OPEX. According to statistics, this solution reduces maintenance expenses by up to 26% compared with those when independent servers are deployed.

Enterprise HQ

Enterprise Branch

Internet /WAN AR G3

PSTN

AR G3

X86 card

39

WAN Video optimization optimization

DHCP/DNS/AD/File/ Print service

Acceleration service

Branch-alive service

Enterprise Networking Solutions and Cases

IPS IDS

URL filter

AV

Security service

NAM

Management service

POS service

Medical service

Industry service

Enterprise Branch Trojan

Network equipment

el nn

rel High iab ilit y IM m isuse

Telephony Branch

Fax

Mobile Email phone

Web

d an se ple u iS m sy to ea e misus

Str e me amin dia g

l tu tua Vir

AR G3

ys at te ion m

WAN AR G3

Wo rm D tec etec hn tio olo n Ap gy p s lic

Valueadded service

ack Pro eff tecti ec on t

ork tw idth Ne dw n ba

HQ

horse DDoS att

Abnormal ized traffic hor aut ss Un acce

AR G3

Online gaming

• Data optimization • Transmission optimization • Application optimization

P2P

WAN optimization controller (WOC)

Value-added voice services

IPS/IDS

• Uses WAN optimization for WAN interconnection, reducing CAPEX and OPEX. • Huawei partners with Riverbed to provide comprehensive WAN optimization solutions for enterprise branches.

The AR G3 OSP module can be loaded with valued-added components, such as voice/fax mailbox, conversation recording, voice conferencing, and billing components, to meet enterprises' requirements for integrated value-added network and voice applications.

Huawei works with industry-leading security vendors to provide IPS, IDS, and other deep network/data security protection components. These components ensure communication and information security for enterprises.

Selected Equipment Branch Size Large branch (350 to 1000 employees)

Midsize branch (50 to 350 employees)

Egress Gateway

Value-added Services

NMS

eSight AR3260

AR2240 AR2220

Small/Mini branch (< 50 employees)

OSP

AR1220

X86 card (AR WSIC)

X86 card (AR WSIC)

X86 card (AR WSIC)

Bundle with the OSP cards and sell value-added service components on demand, including WAN optimization, value-added voice service, and IPS/IDS components.

eSight (Standard Edition)

eSight eSight (Compact Edition) AR G3 with embedded web NMS

Enterprise Networking Solutions and Cases

40

Huawei Next-Generation Data Center Network Solution New Networks, New Blue Oceans, and New Opportunities • Countries around the world are building a large number of data centers due to the dramatic increase of traffic and the growing popularity of cloud computing. Network devices function as a bridge in data centers and play a key role in data center projects. Estimates reveal that the network device part for data center projects in the Chinese market will hit CNY4.84 billion in 2012, while the global amount will reach US$10.1 billion. Such huge market potential inevitably generates numerous project opportunities. • Against this backdrop, Huawei has proposed a concept of "next-generation data center network (NGDCN)", helping the customer confidently embrace the information era.

Data centralization

Resource statistical multiplexing

On-demand service allocation

Demand-driven change

Large capacity and high reliability

41

Enterprise Networking Solutions and Cases

Virtualized and converged network

One-stop planning and delivery

Data center

NGDCN Architecture and Highlights Primary data center network NE40E

Backup data center network High-performance network

OSN8800

NE40E

SDH/DWDM

Egress CE12800/S9700

E8000E

Load balancer

Core layer

Application acceleration product

eSight Convergence layer

Access layer

Meets future performance growth

E1000E

GEGE 1010GE GE 10GFCoE FCoE 10G 40GE GE 40 FC FC

High-reliability network Ensures service continuity

S9700/S7700 CE6800/CE5800

S5700

FC switch

One-stop deployment Provides E2E integrated delivery and service capabilities

Server and storage device

Solution Details Solution

"Cloud Network" Internal Interconnection

"IP+Optical" Disaster Recovery Backup

Sales Description • Solution function: Builds a "highway" for data centers by connecting all IT equipment (such as servers and storage devices) through switches. • Sales scenario: This solution can be sold when the customer builds new data centers or expands the capacity of existing data centers. • Solution function: Fastens a "safety belt" for data centers by securely connecting disaster recovery centers through IP and optical devices. • Sales scenarios: This solution can be sold when the customer builds local and geographical disaster recovery centers.

Marketable Products

Switches, NMS, firewalls, etc.

Transmission devices, routers, switches, etc.

Enterprise Networking Solutions and Cases

42

NGDCN —"Cloud Network" Internal Interconnection Solution Selected Equipment Switch, security system, value-added service system, and NMS system

Core/ Aggregation switches

CE12800

Access switches Security products, valueadded service components, and NMS

43

Enterprise Networking Solutions and Cases

S9700

CE6800/CE5800

Eudemon 8000E

S7700

S6700/S5700

Load balancer

Application acceleration product

eSight

Data center

Solution Highlights

• •

Ric Ult

hf

1

un

ctio

ra lar na ge erb cap lity aci qu ty alit y

Sup

Huawei "Cloud Network"

2

3

nd ss a on e n ce i en at ian Op oper compl ss co ards nne

Demand-driven change • Virtualization

pe nd ty o Sta bili a p a C

•

• Intelligence

•

48T switching capacity (three times higher than the industry average) and support for exchange of massive service data

Innovative large L2 network to improve link utilization (doubled the industry average)

Partnership with dozens of mainstream vendors to create a seamlessly connected data center ecosystem

8*100GE/24*40GE/96*10GE line-rate cards to build a future-proof network platform for the next decade

Virtualization of one physical switch into eight virtual switches, reducing network investment by up to 80%

Integration of network and server management platforms, truly building an application-oriented network

13,000 10GE or 50,000 GE servers within a single network, which represents a best choice for the customer who wants an ultra-large data center

Automated VM migration and zero-wait service provisioning

Compliance with the industry's mainstream IP and IT standards, thereby maximally protecting investment

Specific Scenarios Sx7 Series Switches

CEx8 Series Switches (Planned TR5 in 2012 Q4)

Network Size

Small and midsize networks (< 5k servers)

Networks of all sizes

Applicable Scenario

Conventional data centers

Cloud data centers/Conventional data centers

Typical Customer

Governments, SMEs, and other verticals

ISPs, carriers, financial customers, governments, and large enterprises

Sales Mode

High-touch and channel partner sales

High-touch

Similar Products from Competitors

Cisco's C6500/4900, HP9500E/7500E, etc.

Cisco's N7K/5K, HP12500/10500/5800, etc.

Enterprise Networking Solutions and Cases

44

NGDCN —"IP+Optical" Disaster Recovery Backup Solution Selected Equipment Router and optical transmission device

DWDM

MSTP

IP

45

Enterprise Networking Solutions and Cases

OSN 8800

OSN 1800

OSN 3500

OSN 550

NE40E-X

CE12800

Data center

Solution Highlights High bandwidth and long distance High robustness and reliability and strong protection

Optical

Supports a maximum capacity of 80 wavelengths x 100G and a transmission distance of up to 3000 km with the help of electrical regenerators, making it possible to build intercontinental and transoceanic data center redundancy.

IP

Provides a 400G routing platform that extends services to any places covered by the IP network and achieves cost-effective global data center redundancy.

Optical

Supports multiple types of protection mechanisms (such as ring network and ASON) to achieve automated and intelligent protection switching of service paths and ensure service continuity.

IP

Allows for end-to-end link switching and backup within 200 ms through the use of comprehensive hardware-level fault detection, backup path selection, and service switchover technologies.

Optical Good compatibility and multiple certification IP

Provides abundant SAN network interfaces and passes certification of global seven leading storage vendors, thereby seamlessly interconnecting with storage devices on the live network and effectively protecting investment. Obtains the second largest market share and comprehensively participates in formulation of international standards, which frees the customer from worries about network compatibility and risks.

Specific Scenarios Item

IP

Optical

Applicability

Data centers that are cost-sensitive and have less higher requirements for redundancy backup

Data centers that have higher requirements for redundancy backup

Complexity

Does not need to add dedicated links; instead, the existing data links can be reused.

Need to build or lease dedicated links.

Equipment Type

NE40E and CE12800

OSN1800/8800 and OSN550/3500

Major Competitor

HP and Cisco

Alcatel-Lucent, Cisco, Ciena, etc.

Enterprise Networking Solutions and Cases

46

3 Industry Solutions

• Government • Transportation • Electric Power • Energy • Finance • Large Enterprises

47

Enterprise Networking Solutions and Cases

Government

Huawei Solutions for the Government Sector Nowadays ICT has become a key business that governments are investing in to promote ICT-based office automation or improve work efficiency. Huawei provides five major solutions based on the business type of different governmental units: Huawei e-Government Private Network Solution, Huawei Government Campus Network Solution, Huawei e-Education Campus Network Solution, Huawei e-Hospital Network Solution, and Huawei Video Surveillance Bearer Network Solution.

Huawei e-Government Private Network Solution

Huawei Government Campus Network Solution

Huawei e-Hospital Network Solution

Huawei e-Education Campus Network Solution

Huawei Video Surveillance Bearer Network Solution

Enterprise Networking Solutions and Cases

48

Huawei e-Government Private Network Solution Scenario Introduction

An e-government private network is required to provide high reliability, flexible network architecture, key service assurance, multi-service support, and high security.

49

High reliability

Flexible architecture

Ensures uninterrupted services around the clock and quick fault recovery.

Provides crossregion services and pointto-multipoint management by using MPLS VPN and supports smooth evolution.

Enterprise Networking Solutions and Cases

Key service assurance

Provides reliable guarantee to QoS-demanding and sensitive services such as video conferencing by using H-QoS technology.

Multi-service support

High security

Supports multiple services such as office applications and voice or video services from any device, anytime, and anywhere.

Provides encrypted devices and protection systems to build an e-government network meeting national security requirements.

Government

Solution Overview • The wide area network (WAN) is divided into three layers based on the size of governmental units: Layer-1 network (national backbone network), Layer-2 network (provincial backbone network), and Layer-3 network (city-level backbone network). The three networks are built using backbone routers. The networks consist of the backbone network, metropolitan area network (MAN), and access network for governmental units at the national, provincial, and city levels respectively. • A ll thebackbone network nodes are configured in HA mode. The services will be quickly switched over to the standby node or link in the case of a node or link failure, ensuring uninterrupted services. • The services of different governmental units are isolated using MPLS VPN, which also gives highest priority to real-time VPNs and ensures low latency and no packet loss.

Typical Network Structure and Selected Equipment

NE40E-X16 National backbone network

E8000E-X S9700 NE40E-X16

NE40E-X16

Data center Network management center

NE40E-X16

Internal network

NE40E-X8/X16 Policy server Network management server

Provincial backbone network

Data center

Core switch NE40E-X8/X16

NE40E-X8/X16 S9700 E1000E-X

NE40E-X3/X8 City backbone network

Ministry of Justice

Computer

NE40E-X3/X8 NE40E-X3/X8 E200E-X

IP phone

• National backbone network: OSN8800T64, OSN7500, OptiX RTN980, and NE40E-X16 • Provincial backbone network: OSN8800T16, OSN3500, OptiX RTN950, and NE40E-X8 • City backbone network: OSN1800, OSN3500/1500, OptiX RTN910, and NE40E-X8/X3 • Data center: NE40E-X16/X8/X3, S9700, and S7700/5700 • NMS: U2000 and eSight

Enterprise Networking Solutions and Cases

50

Huawei e-Government Private Network Solution Success Stories e-Government Extranet Project for China

NE40 NE80E

NE80E NE40

NE80E

NE80E NE80E Firewall NE40

NE40 NE40

Project Background

Customer Benefits

• The state e-government extranet in China was a fundamental facility that was required to serve CPC committee, National People's Congress Committee, courts, procuratorates, and other governmental units at all levels.

• Used a single physical network to support various governmental systems by using MPLS VPN technology and implemented security isolation and access control on these systems.

• The Extranet Project needed to interconnect all the provincial e-government extranets, including central MAN, WAN bearer network, Internet egress, State Network Management Center, access network at provincial and city level, and access network for central ministries. Huawei Solution • Built the Extranet that consisted of central MAN, WAN bearer network, Internet egress, State Network Management Center, access network at provincial and city level, and access network for central ministries. • Used the high-end routers NE80E/NE40 and MPLS VPN technology to interconnect ministries and other provincial governmental units.

51

Enterprise Networking Solutions and Cases

• Provided network access, application support, and security guarantee for governmental units and supported various key businesses such as fund review, social security, and medical insurance for rural areas on the interconnected provincial or city-level e-government extranets.

Government

Success Stories e-Government Intranet Project for China

Guangxi Qinghai

Hainan Tianjin Hebei

Henan Shaanxi

Heilongjiang Jilin

NE40E

Xinjiang Ministries

Provincial access NE80E Liaoning

NE40E

Inner Mongolia

Backbone core

Shandong

Zhejiang

Shanxi Shenzhen Dalian

Hunan

Hubei Jiangsu Qingdao Xiamen Shanghai

Project Background

Customer Benefits

• The Intranet Project needed to interconnect all the e-government systems of the CPC committees at all levels and be isolated from the e-government extranet and Internet.

• Had a complete network management solution that implemented interconnection and information sharing by using MPLS VPN.

• The Project planned to build a unified network that integrated the networks for central, provincial, and city-level governmental units. This network must ensure reliable running of various business systems and application systems and minimize the threats and adverse impacts on information systems. This network was expected to support ICT transformation in various governmental units.

• Ensured interconnection of security-sensitive services such as equipment access authentication and packet encryption over bearer networks by connecting to security management devices like encryptors. • Provided strong processing capabilities, service capabilities, and smooth evolution capabilities.

Huawei Solution • Deployed high-end routers NE40E/80E across 32 provinces, municipalities, and autonomous regions, 15 key cities, and 8 ministries. • Used MPLS and customized encryption technology to resolve cross-network management rights issues and provide a reliable and secure bearer network. • Used H-QoS and unequal-cost load sharing to ensure high quality for key businesses.

Enterprise Networking Solutions and Cases

52

Huawei Government Campus Network Solution Scenario Introduction The campus network for governments mainly covers office buildings, government-invested industrial parks, economic development areas, and small- and mid-sized innovation parks. The campus network needs to support voice, video, and data services from any device, anytime, and anywhere. It must provide high network security, QoS, and reliability and simple operation and management.

53

Enterprise Networking Solutions and Cases

Government

Development Trends of Government Campus Network

Convergence • Multi-service convergence • Integrated access • Network border expansion • IPv4-to-IPv6 evolution

Refined management

Ease-of-use

• Service-oriented QoS provided by a single bearer network

• Unified NMS for multivendor equipment management

• Virtualized campus

• Service-oriented fault location

• User-based security management

Solution Overview • Egress layer: Deploys two NE40E-X3s/X8s at the egress of a large campus and AR3200 as the voice gateway, or deploys two AR3200s at the egress of small- and medium-sized campuses to bear video, voice, and data services. • Core layer: Uses S9700 clustering technology to support smooth upgrade and higher reliability and provides embedded firewall and NetStream subboards to ensure high security. • Convergence layer: Uses S9700 or S7700 clustering technology to avoid Layer-2 network loop and adopted embedded AC subboards to implement integrated wired and wireless control. • Access layer: Uses S5700/3700/2700 stacking to provide large-capacity ports and deploys NAC to ensure high security. The equipment also supports PoE and is easy to deploy and maintain.

Enterprise Networking Solutions and Cases

54

Huawei Government Campus Network Solution Typical Network Structure and Selected Equipment Application server/storage device

S5700

Office building A

eSight S5700

S5700

Office building B

CE12800

Cloud data center

S5700

S9700 S7700 10GE

S5700

10GE S7700

Eudemon

IP PBX

S5700

Commercial center

AR/NE Routers VPN

• Egress layer: NE40E-X3/X8 at the egress of a large campus and AR3200 as the voice gateway, or AR3200 at the egress of a small- and mid-sized campus • Core layer: S9700 and NE40E-X8/X3 • Convergence layer: S7700/5700 and NE40E-X8/X3 • Access layer: S5700/S3700/S2700, AR G3 router, UA5000, and WLAN • NMS: eSight

55

Enterprise Networking Solutions and Cases

Government

Success Stories Government Campus Network Project for Province of Overijssel,Netherlands Project Background • The government of Province of Overijssel is a key governmental unit in Netherlands. It mainly provides information for the public, governmental officials, and other government agencies. With ever-increasing information exchange, it was urgent for the government to provide a high-speed, stable, and scalable network. Huawei Solution • Partnered with TENICT to provide a complete solution that covered different layers. • Access layer: Deployed the S5700 switch that supports stacking and PoE in compliance with IEEE802.3af and 802.3at (PoE+). • Core layer: Deployed the 10G S6700 switch in long-haul stacking mode between two data centers, which greatly reduced system expansion and maintenance costs. • Main products: S6700 and S5700 series Customer Benefits • Reduced system expansion and maintenance costs.

Enterprise Networking Solutions and Cases

56

Huawei Government Campus Network Solution Success Stories Campus Network Project for the Social Security Office (ZUS) in Poland Project Background • The networks of ZUS were out-of-dated and failed to interconnect with each other. • ZUS needed a highly efficient, convergent network to improve their social security service processing capabilities. Huawei Solution • Built an efficient campus network for all the social security institutes across Poland. • Deployed more than 600 S9700 switches and AR G3 routers. • Provided reliable services for ZUS's three-layer distributed data center.

Large national social insurance institution campus network

More than 10 middle campus networks for state branch

Distributed large data center

More than 100 small city branches

Distributed middle data center

Customer Benefits • Implemented all-IP transformation for the social security network in Poland. • Improved the work efficiency of social security staff and simplified management. • Shortened the period of time in processing social security-related applications.

57

Enterprise Networking Solutions and Cases

Distributed small data center

Government

Huawei e-Education Campus Network Solution Solution Overview The education industry is a key sector that attracts great attention from the public and the governments. Each country would cast sufficient investment to education projects. The education industry brings a lot of market opportunities to Huawei. Generally, the decision-making rights on education projects are centralized to the ministry of education or schools. These projects have clear customer requirements and little customized work. Huawei solutions are easy to integrate and can be promoted for mass sales.

Future-proof Education Network Infrastructure Evolution IPv6 deployment Evolution from pure IPv4 networks to ubiquitous IoT networks supporting both IPv4 and IPv6

WAN campus network Evolution from a single-campus network to a cross-area campus network (main campus and satellite campus)

Network convergence Evolution from a pure wireline network to a hybrid wireline and wireless network; evolution from only PCs to PCs and handheld equipment (such as PAD)

Cloud data center Evolution from independent data centers into a virtualized and XaaS-based cloud data center

Integrated network operation Evolution from teaching and scientific research networks to an integrated network that support teaching, scientific research, and social life

Wireline/wireless coverage

eSight

Ease-ofmanagement

Central management Wireline and wireless coverage

eSight

High reliability

High security

IPv6

Authentication & billing

Service isolation

Remote access

High-speed LAN

Link or node backup

Multi-terminal support

Traffic billing management

High security and reliability

School inter connection

Characteristics of an e-education campus network

Enterprise Networking Solutions and Cases

58

Huawei e-Education Campus Network Solution Scenario Introduction An e-education campus network is required to support various application systems, including e-classroom, intelligent recording system, courseware center, e-learning, e-schoolbag, office automation, portal, email system, e-library, safe campus, school-family communication system, and campus broadcast system. • An e-education campus network often uses a layered star structure that is simple, reliable, and easy to deploy, maintain, and expand. • A large number of switches and wireless access points (APs) are used to provide wide coverage, high bandwidth, and large capacity. • The network must support access of any device. • The network uses VPN technology to converge multiple types of services.

Customer Benefits At home

Satellite campus

For students • Become more interested in study and learn proactively.

Education backbone network Online learning

Remote classroom

• Synchronize learning resources with others. • Learn at any time, anywhere.

Recording classroom

Course recording

Course recording

Courseware center

Course live broadcasting system

Teaching building 1

Digital classroom

59

For teachers • Make their classes more attractive by using multimedia.

Data center

Enterprise Networking Solutions and Cases

Teaching building 2

Digital classroom

Dormitory and public places

Mobile learning

• Reuse e-courseware and reduce repeated work. • Share resources to improve teaching quality. For schools or education administrative institutes • Balance education chances in different regions. • Improve education quality, reduce education costs, and educate more students.

Government

e-Education Campus Network Construction Roadmap

Network virtualization Application system deployment Infrastructure construction Build a ubiquitous campus network.

Allow access to learning resources at any time, anywhere.

Provide diversified and customized applications. The education application system provides a personalized learning or teaching environment for each student or teacher.

Build a school without "fences".

Students, even graduated, can communicate with their schools through the remote education system at any time.

Development Steps

Infrastructure: campus network

Platform: applications

Objective: interaction

Selected Equipment • Egress layer: NE40E-X3/X8 at the egress of a large campus network or AR3200 at the egress of a small- and mid-sized campus network • Core layer: S9700 and S7700 • Convergence layer: S7700 and S5700 • Access layer: S5700/S3700/S2700/ and AP6010/AP6610 • NMS: eSight • Application system: e-classroom, intelligent recording system, courseware center, e-learning, e-schoolbag, office automation, portal, email system, and e-library

Enterprise Networking Solutions and Cases

60

Huawei e-Education Campus Network Solution Success Stories Campus Network Project for Stellenbosch University in South Africa Project Background

Stellenbosch University

• Stellenbosch University in South Africa needed to support e-learning for more than 1000 students and teachers. Huawei Solution • Used the core switch Quidway S9312 to replace legacy equipment on the live network. • Configured 640 x 10 GE interface cards to improve forwarding capabilities.

CSS

eSight

Core layer

Convergence layer

Customer Benefits

S9312 40*10G SFP+(FC) CSS S9312

• Improved network quality and simplified O&M • Reduced equipment footprint and 30% electricity costs by using high-compact equipment IP phone Computer ATM

61

Enterprise Networking Solutions and Cases

IP phone Computer ATM

IP phone Computer ATM

Government

Success Stories GARR Education Network Project in Italy Project Background • GARR provided network connection and access services for all the universities in Italy. • As the legacy education network was out-of-dated, GARR needed to build a private network that was able to support multiple types of services for all the universities and educational and academic institutes in Italy. Huawei Solution • Deployed a nation-wide transmission network for GARR. • Deployed 32 ROADM PoP nodes and 49 SLA nodes. • Improved the bandwidth of the whole network to 80 x 100G. • Provided 1+1 network protection and network-wide ASON protection. Customer Benefits • Transformed the transmission network.

Fiber optical typology of GARR network

• Provided better network access services for education institutes, colleges, and universities across Italy.

Enterprise Networking Solutions and Cases

62

Huawei e-Education Campus Network Solution Success Stories Backbone Network Project for CERNET2 in China ProjectBackground • CERNET2 was the largest non-profit Internet backbone in China. • CERNET2 was the largest IPv6-only network in the world and one of the network backbones of China Next Generation Internet project (CNGI). Huawei Solution • Provided the core router NE40E-X8 to support the nodes in 17 regions. • Built the MPLS TE network, connected the 10 Gbps POS board to the DWDM system, and provided the high-speed IP link of up to 10 Gbps. Customer Benefits • Provided the largest IPv6-only backbone in the world and took the lead in technology. • Promoted the development of CNGI equipment and contributed to improving China’ position in Next Generation Internet technologies around the world.

63

Enterprise Networking Solutions and Cases

Government

Huawei e-Hospital Network Solution Solution Overview

With information and healthcare development, ICT-based healthcare is in demand. ICT construction for the healthcare industry is a complex engineering project that must ensure information sharing among different departments in a hospital, and among hospitals, medical insurance institutes, and health administrative institutes. After years of study, Huawei has unveiled the e-Hospital Network Solution based on the characteristics of the healthcare industry to help customers maximize their returns over investments.

Huawei e-Hospital Network Solution

Scenario Introduction An e-hospital is a comprehensive information-based hospital that consists of the medical equipment, network platform, and software-based application systems. The e-hospital helps consolidate resources, streamline processes, reduce operational costs, and improve service quality and work efficiency. An e-hospital network has the following features: High reliability

High performance

e-Hospital network

Network equipment for hospitals must ensure high reliability and stability and 24/7 availability as a minor network fault may result in cost of lives. The content of clinical information systems contains image, video, and voice data. Therefore, high performance and service quality are required to support voice, video, and data services.

High security

Information in hospitals contains diagnosis information, prescription information, and other patient information. The information is quite sensitive and cannot be exposed to others, including irrelevant hospital staff.

Ease of management

As the number of information access nodes increases with the expansion of hospitals, efficient network traffic and network fault monitoring is required to facilitate fault location on live networks.

Enterprise Networking Solutions and Cases

64

Huawei e-Hospital Network Solution Solution Overview The Huawei e-Hospital Network Solution is applicable to the hospitals of different sizes. • Core layer: Deploys the NE40X for large- or mid-sized hospitals or AR for small- or mid-sized hospitals at the egress of hospital networks and S9700 for core switching. • Convergence layer: Deploys the S7700/S6700/S5700 in the data center and buildings of a hospital to connect the buildings to the central equipment room or data center. • Access layer: Uses the S5700 to meet basic network requirements of medical equipment and personal terminals such as PC.

Typical Network Structure and Selected Equipment Medical expert

WAN interconnection Community healthcare N E/AR

Specialist hospital HIS Data center CIS

E udemon

PACS LIS RIS

10GE core e Sight

S 9700

GMIS

S 6700 S 5700

Outpatient building

S 5700

Inpatient building

Digital image center

• Core layer: NE40E and S9700 • Convergence layer: S7700/S6700/S5700 • Access layer: S5700, S3700, S2700, AR router, and WLAN • NMS: eSight

65

Enterprise Networking Solutions and Cases

Operation center

Administrative building

Government

Success Stories BovenIJ Hospital Project in Netherlands Project Background • The live network of the BovenIJ Hospital in Amsterdam used 3COM's datacom equipment to connect to the healthcare WAN. In 2010, the WAN bandwidth increased from GE to 10 GE. All the hospitals had to upgrade their networks accordingly. Meanwhile, the 3COM's 7700 series products often had link faults. In this context, the BovenIJ Hospital planned to replace the legacy equipment with more reliable products.

Gebruker access

Huawei Solution • Partnered with TenITC in 2011 to design the replacement solution. • Deployed the S5700TP that supported PoE and stacking functions as the access switch. The S5700TP complied with IEEE 802.3at and IEEE802.af and supported POE of up to 30 W.

Server access

• Deployed the S6700 of 10 GE interfaces as the core switch. The S6700s were deployed in different equipment rooms in long-haul stacking and redundancy mode. The required height of racks reduced from 20U to 2U. Customer Benefits • Achieved the future-oriented PoE and standard compliance. • Supported HA by using the long-haul stacking function. • Reduced operational costs by using the unified eSight NMS to manage all equipment.

Enterprise Networking Solutions and Cases

66

Huawei e-Hospital Network Solution SuccessStories NSW Emergency Service Company Project in Australia Project Background • NSW Emergency Service Company was an Australian company that provided emergency services for all the hospitals and patients in the New South Wales State (NSW). • The customer required a highly efficient network to accelerate its response to emergency services.

Ambulance DR Ambulance Headquarter

Huawei Solution

Other Health Networks

• Deployed more than 100 AR G3 routers for the permanent office sites of the NSW Emergency Service Company to build a highly efficient emergency dispatching network. • Provided highly reliable QoS services to respond to emergency services of different levels.

Carrier's Infrastructure Ethernet Network

3G Network

DSL Network

Customer Benefits • Provided an NSW-wide emergency network to better serve patients and hospitals. • Ensured high network reliability and QoS by using a dualhoming architecture. Large Stations

67

Enterprise Networking Solutions and Cases

Automobiles and Vehicles

Small- and Midsized Stations

Scenario Introduction Nowadays video surveillance has been widely used in various scenarios such as safe city, oil pipeline, industrial campus, and exhibition halls. The Huawei Video Surveillance Bearer Network Solution provides a highly efficient, open, cost-effective, easy-tooperate, and easy-to-manage IP bearer network for video surveillance.

Safe city

Industrial campus

IP bearer network

Oil pipeline

Exhibition halls

Key features of a video surveillance bearer network:

High bandwidth

Video surveillance bearer network

Ease-ofdeployment

Multiscenario support

• High bandwidth: The network must provide high bandwidth as the required bandwidth increases exponentially with the popularity of HD videos. • Multi-scenario support: The network must be designed with an optimal architecture because the network has to address various scenarios. • Ease-of-deployment: The network must be easy to deploy and manage with low maintenance costs.

Enterprise Networking Solutions and Cases

68

Government

Huawei Video Surveillance Bearer Network Solution

Huawei Video Surveillance Bearer Network Solution Solution Overview The Huawei e-Hospital Network Solution is as follows: • Core layer: Deploys the NE40E-X3/X8 at headquarters to support video, voice, and data services and uses WDM to connect to the service backbone network and MPLS VPN to isolate services. • Convergence layer: Deploys the S9700 at the convergence layer and uses Layer-2 VPN technologies such as VPLS/VLL to establish connections, which avoids Layer-2 network loop; uses the S9700 as the NPE to connect to the core equipment at headquarters, and deploys video servers and disk arrays to support video on demand or broadcast services. • Access layer: Supports various access modes such as EPON/GPON, wireless AP, AP bridge, and Eth to upload video data to the OLT or AR.

Typical Network Structure andSelected Equipment Commercial center

Video collection AP (bridging)

Video convergence AP (bridging)

Residential community

Control center NPE(S9700)

PE (NE40E)

S9700 (integrated with AC functionality) VPLS/VLL

AP

IP/MPLS Transportation hub

ONU Government offices

School

69

Enterprise Networking Solutions and Cases

Optical splitter

AR G3

OLT 5600T

NPE(S9700)

PE(NE40E)

Government

Success Stories Surveillance Bearer Network Project for Guangdong, China Project Background • Wide network coverage needed • High bandwidth required to support multiple types of applications and monitor population activities

ITS

Safe City

SME Surveillance

Public Surveillance

• In need of high security and strong NMS capability Shaoguan

Huawei Solution • Built a surveillance network across 19 cities in Guangdong Province and a surveillance platform whose capacity reached 100,000. • Used OTN for the bearer network to provide highbandwidth GE transmission and support diversified services, functions, and applications. • Provided a convenient, unified, and real-time NMS. Customer Benefits • Reduced the rate of crimes and quickly identified risks.

GIS/GPS

Qingyuan

Heyuan Guangzhou Chaozhou Yunfu Foshan Jieyang Dongguan Shantou Jiangmen Zhaoqing Shanwei Zhongshan Shenzhen Zhuhai Yangjiang Maomin Zhanjiang

Port Surveillance

Factory Surveillance

Baby

Rental House Surveillance

• Improved the work efficiency of public security bureaus by implementing unified management on distributed monitoring centers.

Enterprise Networking Solutions and Cases

70

Huawei Network Solutions for the Transportation Industry Service growth in the transportation industry poses higher IT requirements and also raises new challenges for the bandwidth, stability, and security of the communications network. Based on its years of experience in the transportation industry, Huawei has unveiled a complete set of communications transmission and network solutions that cover rail transport, metro and light rails, roadways, and airports. In addition, with many years of ICT expertise,

Huawei helps transportation customers build a futureproof integrated communications network. The "IP+optical" synergy system provided by Huawei simplifies the network structure and improves management efficiencies, bringing a "One Net" converged communications service experience to transportation customers.

Huawei provides five major solutions for the transportation industry, as shown in the following figures.

Rail Transmission Network Solution

Rail Data Network Solution

Intelligent City Traffic Network Solution

71

Enterprise Networking Solutions and Cases

Roadway Network Solution

Airport Network Solution

Transportation

Rail Transmission Network Solution Scenario Introduction

CTC

Centralized monitoring

Disaster prevention

Clock

SCADA

Passenger ticketing

Rail transmission bearer network GSM-R

Phone call

OA

FAS

Emergency response communications

Passenger service information

Video surveillance

Video conferencing

Enterprise Networking Solutions and Cases

72

Huawei Rail Transmission Network Solution Solution Highlights ＊ Adopts a three-layer structure (access, convergence, and access layers) to carry multiple services, including electricity dispatching, autotransformer, GSM-R station, maintenance center, and repeater station services. ＊ Sets up a service transmission network that has the following features: • Network-wide 50 ms protection: Uses a high-reliability ring link topology and industry-leading ring network protection technologies to quickly complete service switching protection within 50 ms from any fault and ensure the continuity of production and dispatching services. • Multi-service support: Uses WDM and time division technologies to properly multiplex link resources and carry multiple services while effectively isolating them from each other. At the same time, provides abundant interfaces (64 kbit/s to 10 Gbit/s) to connect to all terminals of various interfaces. • Ultra-long-distance transmission: Supports more than 1500 km long distance transmission for sites located far away from each other (for example, convergence sites) to effectively reduce fault points and ensure that service information is efficiently transmitted with the shortest network transmission latency.

Typical Network Structure and Selected Equipment Communications command center

Core service layer

Communications aggregation site

Core layer STM-4/16

STM-4/16 Multiplex Section 1+1 APS

STM-4/16

STM-4/16

STM-4/16 Multiplex Section 1+1 APS

STM-4/16

Convergence layer

Train station STM-1/16

Station-level service Access point

• • • •

73

Path Protection Ring

Access layer

Core layer: OSN8800/6800 and OSN7500/3500 Convergence layer: OSN8800/6800/1800 and OSN3500/1500 Access layer: OSN1500/550, RTN910/950/980, MA5683, MA5621, and S5700/S3700 NMS: U2000

Enterprise Networking Solutions and Cases

Transportation

Success Stories Transmission Network for Shanghai Metro Line 10 Project Background • By the end of 2010, Shanghai had 11 metro lines with a total length of 410 km, the longest in the world. Line 10, dubbed the platinum line, is 36 km long. • The traffic flow was huge and the density of trains was great. Therefore, a higher-reliability network was required. • Services must be strictly isolated to prevent correlative errors. Huawei Solution • Used a 10G MSTP system. Wuzhong Rd. Shanghai Zoo

Ziteng Rd.

Longxi Rd.

Tiantong Rd.

Siping Rd.

Helen Rd.

10 Gbit/s

Guoquan Rd.

10 Gbit/s

Hanghuaxinchun

Hongqiao Airport

Jiangwan Stadium

North Sichuan Rd.

Xin jiang wan cheng

Tongji University

North Zhongshan Youdian Xinchun Rd.

Longbai xincun

Yingao Rd.

Wujiao chang

Sanmen Rd.

Shuicheng Rd.

South Shangxi Rd.

Jiaotong University

East Nanjing Rd.

Laoximen

OptiX OSN7500

• Offered a device-level protection mechanism by way of 1+1 hot backup for SCC, XCS, power supply, and time synchronization boards. Customer Benefits

T2000 Songyuan Rd.

• Provided a network-level protection mechanism through a protection ring (TDM) and an embedded RPR ring (Ethernet).

Yuyuan

Qianshui Rd.

Hongqiao Rd.

Shanghai Library

Guobei Rd.

OptiX OSN3500

• A large-capacity 10G system that can be configured as a public and confidential communications system • Independent VC-n ETH services that are based on TDM-N • Switching protection within 50 ms

Enterprise Networking Solutions and Cases

74

Rail Transmission Network Solution Success Stories Transmission Network for Beijing Metro Line 1 and Line 2 Project Background • Beijing Metro Line 1 and Line 2 total 53.54 km and carry 2 million passengers every day. • The customer required an efficient transmission network to ensure that the dispatching information about Line 1 and Line 2 was correctly transmitted. • The customer wished to eliminate security risks and provide industryleading services.

Station

• The customer also hoped to continuously reduce its operating and management costs.

Commercial Transmission System Reconstruction for Beijing Metro Line 1

Huawei Solution • Deployed Huawei's high-end intelligent optical product OptiX OSN 3500.

OSN3500

• Used RPR technology to build a reliable ring network.

NMS 2.5G bidirectional MSP ring

2.5G bidirectional MSP ring

• Provided a unified service platform to effectively reduce labor and management costs. Customer Benefits

Dongdan

• Efficient transmission of system operation data (these systems include the automated train control system, integrated monitoring system, and other signal and voice systems) • Improved maintenance efficiency and reduced maintenance costs

75

Enterprise Networking Solutions and Cases

Transportation

Rail Data Network Solution Scenario Introduction

Security automation system (SAS)

Passenger information system (PIS) Station display terminal Train-mounted display terminal Central management platform Central information release platform • Wireline and wireless transmission system

• • • • •

Integrated communications system

• • • •

Integrated supervisory control system (ISCS)

Security system integration (SSI) system Integrated video surveillance system Access control system Emergency alarm system Perimeter alarm system

3

2

1

Services transmitted by the data network

4

5

• • • • • •

Dedicated telephone system Orderwire phone system Wireless communications system Public broadcasting system Clock system Rail signal system

Ticketing and OA service system • Automated fare collection (AFC) system • Ticketing terminal system • Central management system • OA service system

• Automated fire alarm system • Environment and equipment monitoring system • SCADA system • Platform screen door (PSD) system • Communications NMS

Dispatch center network

Enterprise Networking Solutions and Cases

76

Rail Data Network Solution Network Requirements Reliability

High bandwidth and long distance

• Services must run uninterruptedly around the clock and the system must recover from faults immediately.

• Video services are growing quickly, resulting in huge communications data. This data must be transmitted over long distances.

Multi-service support

Network redundancy capability

• Multiple services such as dispatching, monitoring, OA, telephone, and video surveillance services, as well as multiple types of access equipment must be supported.

• Services must be converged through multiple nodes. This is to prevent shutdown of all services due to a single point of failure (SPoF).

Low latency •

SCADA and protective relay services require lower network transmission latency.

Se rvi ce co nv erg en ce Dispatch center

Services transmitted by the data network

77

Enterprise Networking Solutions and Cases

Transportation

Solution Highlights • The data network for rail transport is functionally segmented into four smaller networks: data network, dispatching network, ticket network, and safety network. The four networks operate independently for the sake of service security and reliability. Compared with the other three, the data network carries the most complex services, supports more network clients, and requires more VPN and QoS operations. • Investment on the data network generally covers three layers: • Central station command center: Each dispatch center along railway lines connects to the central station command center using two channels, and these dispatch centers also connect each other in a partial mesh structure to ensure network reliability. • Railway data network: This network is built using egress routers at train stations and core routers at dispatch centers. Based on optical fiber resources, train stations and dispatch centers can connect each other either using local direct connection and dual-homing mode or local chain homing mode. • Station LAN: This network is generally built in conjunction with basic station facilities, aiming at building a security access network that supports multiple terminals and services. Access routers are deployed at egresses of train stations to converge all train station traffic.

Typical Network Structure and Selected Equipment Central station command center

eSight

Dispatch center 1

Dispatch center 2

Core layer

STM-4/16 Train station

Train station Train station

Train station

Train station Train station

Train station

Access layer (train station)

Video OA Passenger VoIP Monitoring service conferencing

• • • •

Signal monitoring

Video OA Passenger VoIP Monitoring service conferencing

Signal monitoring

Central station command center: S9700 and NE40E-X16/X8 Dispatch center (core layer): S7700/S9700 and NE40E-X8/X3 Station LAN (access layer): AR G3, S7700, and S5700 NMS: eSight

Enterprise Networking Solutions and Cases

78

Rail Data Network Solution Success Stories IP Data Network for Beijing Railway Bureau Project Background • Beijing Railway Bureau intended to further consolidate network resources to implement its IT transformation initiatives, as the bandwidth and coverage of its original WAN network were insufficient. Huawei Solution

IP Data Network for Beijing Railway Bureau NE80 in Shijiazhuang

• Used MPLS VPN technology throughout the network to achieve security isolation and information sharing among different virtual networks. NE80 at Beijing Railway Bureau

NE40 in Tianjin

Core layer

• Used Huawei's high-end router NE80 as the core router to provide multiple services and applications, including TMIS, TDCS, PMIS, OMIS, and 5T. Customer Benefits

NE40 at Beijing Railway Bureau

• Improved network reliability and availability • Enhanced network security

NE20

Access router

79

Enterprise Networking Solutions and Cases

Convergence layer

Access layer

• Better network monitoring and management

Transportation

Success Stories Transmission Data Access Network for Kunming Rail Transit Project Background • The information network system constructed during the Kunming Rail Transit Line 6 project (phase I) was an OA and enterprise resource management system. • The mai n f uncti on of this information network system was to consolidate enterprise-wide information resources, promote information sharing, and make service processes more intelligent and operation and management more IT-based. Huawei Solution • Used Huawei's S7712 switch as the core switch and connected the control center and switches at train stations through optical fibers.

Network information system

Firewall

Core switch

Temporary control center

Core layer

MSTP link

• Deployed Huawei's S5700 GE L3 switches at the control center and train stations and connected these switches to the core switch through GE Ethernet. Customer Benefits

Access layer Terminal Terminal

Train switch

Terminal Terminal

Terminal Terminal

Terminal Terminal

Train switch

Floor switch

Floor switch

• Higher network security and better virus prevention through the DAI function enabled on the S5700 and S7700 switches • Higher network reliability and stability

Enterprise Networking Solutions and Cases

80

Roadway Network Solution Scenario Introduction Monitoring network

Toll network

Toll monitoring center 15-30 km

Toll station 1

…

Optical transmission network between toll stations

2 km

Orderwire phone

Toll service

Monitoring data

Video image

Other services

Supported services

Toll station N

1 km

Emergency call E2E monitoring

Data Changing detection message sign (CMS)

Network Requirements The roadway communications system carries integrated roadway services, including toll, voice, monitoring, emergency call, and OA services. • This system must ensure the security and reliability of service data. • In addition, this system must have good scalability and compatibility. • This system must also be easy to manage, and its services must be clearly defined for easy operations.

High security

High reliability

 Security of toll data transmission

 Dual-homing or alternative route to improve network reliability  Two-node cluster hot backup, load balancing, and redundancy backup  Off-hook conversation for emergency calls

 QoS bandwidth allocation  Equipment running security

Large bandwidth  Large bandwidth required for transmitting videos and photos  Bandwidth necessary for service

81

Enterprise Networking Solutions and Cases

High security

High reliability

Large Low bandwidth latency

Low latency  Real-time upload of toll data  Smooth and clear calls

Transportation

Solution Overview • Roadway IT transformation covers the roadway toll system, monitoring system, and communications system. Among them, the communications system consists of the transmission system, access network system, voice switching system, emergency call system, videoconferencing system, OA system, communications power supply system, auxiliary equipment system, and optical and electrical cable system. • The roadway communications network is segmented into two layers: • Transmission layer: Uses MSTP technology to isolate various services (such as toll, monitoring, and telephony services) from each other and designs different channels to carry these services, thereby ensuring data security and reliability. • Access layer: Uses PON technology to support surveillance and voice services as well as information collection and display. Deploys switches to support OA, telephone, and toll services of toll stations and exchange data with the monitoring center through the transmission network.

Typical Network Structure and Selected Equipment Monitoring center

IP SAN

Video wall

OA

Video conference

IP PBX IP PBX

Video conference

Networked billing system

Networked billing center OA

S5700 switch

Video decoder

NMS

Billing Streaming Antivirus/Loophole server media server IPS/IDS scanning

Firewall

Firewall

S5700 switch

Toll house C

Toll house A Toll house B

OA

Road monitoring

Toll house

IP phone S2700 Video conference switch

Toll lane

1:4 splitter Toll controller Video encoder

Billing Streaming server media server

Video encoder IC card reader

• • • •

1:4 splitter

Lane camera

Lane LCD

Road- Intercom block machine

Toll plaza Toll house monitoring monitoring

Box camera

HD dome camera

Emergency call

Emergency call

Changing message sign (CMS)

Detector

Monitoring center: AR G3 and S9700/S7700 Backbone transmission layer: OptiX OSN 7500/3500/550 Toll station access layer: S5700, S3700, MA5683, and MA5621 NMS: U2000

Enterprise Networking Solutions and Cases

82

Roadway Network Solution Success Stories Integrated Communications and Monitoring Network for Beijing-Qinhuangdao Expressway Project Background • Total 199 km and 12 toll stations • The customer intended to build a highly reliable and stable communications system that supports multiplexing protection. • This expressway was an important traffic line between the Olympic host city Beijing and Olympic cohost cities of Tianjin, Qinhuangdao, and Shenyang. Huawei Solution • Used Huawei MSTP equipment (including OSN3500 and OSN1500) for the transmission system and the access network. In addition, built an STM-4 two-fiber selfhealing ring and deployed GPON equipment to support high-speed service access and transmission.

Firewall Switch Networked billing system

Backbone network OSN 3500 S TM-4

OSN 1500

OSN 1500

• Provided an H.264 digital solution. • Enhanced network reliability and free from impact of node bottlenecks and multiple failures • Stronger scalability and more flexible network expansion and upgrade, which laid a solid foundation for multi-service access • Higher network resource utilization

83

Enterprise Networking Solutions and Cases

OSN 1500

OSN 1500 OLT

Customer Benefits

1:4 splitter 1:4 splitter MA5683T ONU

ONU

ONU

ONU

ONU

ONU

Video encoder

Box camera HD dome camera

Emergency call

Changing message sign (CMS)

Detector

Transportation

Success Stories Communications System for Changde-Jishou Expressway, Hunan Province, China Project Background • Total 223.7 km, four lanes (two in each directions), 34 tunnels, designed speed of 80 km/h, and total investment of about CNY10.65 billion.

Zhangjiajie

Changde

Taoyuan Jishou Yuanling

Changsha Luxi Changde-Jishou Expressway

• The communications system to be built must be highly reliable and support multiplexing protection due to the complicated hilly conditions. • The communications system to be built must also support transmission of multiple services, including video surveillance and voice services.

Changde-Jishou Expressway Management Center

Huawei Solution • Used Huawei MSTP equipment (including OSN3500 and OSN1500) for the backbone transmission system and the access network. In addition, built an STM-16 MSP ring for the backbone and constructed an STM-4 two-fiber self-healing ring to support high-speed service access and transmission. • Used MSTP technology, supported multi-service access, and allowed for hierarchical service protection and quick access of emergent services. Customer Benefits • A reliable and stable transmission platform for the expressway monitoring system and toll system

OSN 3500

U-2000

STM-16 Taoyuan Chayan Madiyi

OSN 1500

OSN 1500

Luxi

OSN 1500

OSN 1500

OSN 150C

STM-4

Yuanling

Chenxi

OSN 1500

STM-1 Server

OSN 1500

Jianzhuang

OSN 1500 Yanmen

OSN 1500

Zhengjiayi

STM-1

Jishou

A'na

OSN 1500

OSN 1500

OSN 1500

Server

OSN 1500

• Secure, stable, and economical communications assurance for services • A solid foundation for the construction of more intelligent networks in the future

Enterprise Networking Solutions and Cases

84

Intelligent City Traffic Network Solution Scenario Introduction

Signal light control

Traffic violation capturing

Video surveillance

Information collection

Automated detection

O&M

Data center

S5700

Information processing center

S3700/2700

Monitoring center

S9300/7700

One Net

Traffic congestion

Difficult evidence collection

Traffic violation accident

Insufficient police force

Network Requirements

Multi-level access and aggregation must be supported. At the same time, the system must be able to exchange data with other systems, such as the e-Government system, the Internet, the broadcasting system, and the telecom system.

I

II

Multi-level and multi-interconnection

Multi-service support and high bandwidth

More bandwidth resources are required to support a variety of video, voice, data, HD, 3D, and Internet of Things (IoT) services.

ITS private network The entire network must be highly secure to ensure the security of equipment and links.

85

Enterprise Networking Solutions and Cases

III

IV

Strong security and high reliability

Easy deployment and easy O&M

A unified management platform is required to uniformly manage diversified services and equipment from different vendors. In addition, services must be easily and quickly provisioned.

Transportation

Solution Overview • This solution uses a three-layer (province-city-county) structure and provides services to the public and employees through the Internet. Internal networks include the OA network, service network, and city-level/county-level data center and NMS center. The access network supports multiple types of terminals and access modes such as wireline and wireless access modes. • The city-level network consists of a command center, an information release center, a data center, and an NMS center. This network is horizontally segmented into the access, convergence, and core layers, and vertically divided into an OA network, a security network, and a service network. The egress of this network connects to the external e-Government private network and the Internet. Inside this network, WLAN access is supported. This city-level network can directly manage and monitor county-level networks. • Road information can be quickly converged to the city-level command center through a private network. This information then passes through the data center and is intelligently processed by the information processing platform. As a result, the command center can quickly know about the information and release it to the public at the earliest time. In addition, the public can proactively query road information through the network platform.

Typical Network Structure and Selected Equipment

e-Government private network

Internet

Central command center

City traffic police headquarters

NMS center NE40E

S3700/2700

Data center

NMS center AR3200/2200

eSight

Eudemon 1000 S3700/2700

MA5600T GPON ODN Signal Camera light

• • • •

S5700/3700

S9700/S7700

Sub-control center

County-level traffic police bureau

Access layer

eSight

Eudemon 1000

Radar

S5700/3700

S5700

OLT

Camera Sensor

ONU

Industrial switch

Data center

Industrial AR

Camera

City/District monitoring center (core layer): S9700/S7700/NE40E Monitoring center (convergence layer): S5700/OLT/AR G3 Road intersections (access layer): industrial switch/GPON MA5626 and MA5621 NMS: eSight

Enterprise Networking Solutions and Cases

86

Intelligent City Traffic Network Solution Success Stories Intelligent City Traffic Network for Shenyang Traffic Department Project Background • The Shenyang traffic department intended to construct a secure, stable, and future-proof communications transmission network that consolidates resources and supports unified standards and remote management. • This network could drive the development of intelligent traffic in Shenyang. Huawei Solution • Adopted multiple protection policies, for example, stacking and clustered network protection and redundancy design for key equipment units. • Deployed Huawei's S9306 as the core switch.

Shenyang monitoring center

Traffic police bureau n

Traffic police bureau 1

• Used Huawei’s next-generation, energy-conserving, high-performance GE switch at the convergence layer. • Provided high-bandwidth and industrial design.

Traffic police bureau n

Crossing 1

Crossing 2

Crossing N

Customer Benefits • Higher network reliability by way of CSS cluster technology • Easier O&M through unified management

87

Enterprise Networking Solutions and Cases

Electronic police, video surveillance, vehicle traffic detection, and signal light

Electronic police, video surveillance, vehicle traffic detection, and signal light

Electronic police, video surveillance, vehicle traffic detection, and signal light

Transportation

Success Stories Maldives Intelligent Traffic Project Project Background • The number of traffic vehicles increased, including motorcycles. Traffic violations sharply grew, resulting in many traffic accidents. • The public complained a lot about speeding, and so did visitors. • The monitoring equipment was aged and could not ensure efficient traffic control. • Information silos resulted in ineffective information sharing. Huawei Solution • Provided a high-definition (HD) electronic police system, an intelligent signal control system, a speeding capturing system, and an intelligent traffic management platform. Customer Benefits • Better resource utilization and improved user experience

Disk array

Video wall

Data center

Control Dispatch center center

SAN optical switch

SAN Backup server

Office

Database server

Command center Signal light control

Traffic information collection and guidance

Firewall

Firewall

• Less energy consumption and alleviated environment pollution • Enhanced combat against traffic violations and reduced workload for traffic policemen

Virtual tape library

Intrusion Router Router detection Core switch

Core switch

DHCP server Training server

Load balancer

Roadway vehicle auto-detection system

Antivirus Loophole DNS server scanning server server

Application server

Desktop GIS

Management laptop

Enterprise Networking Solutions and Cases

88

Airport Network Solution Scenario Introduction Information network Flight information display/ Flight parking lot/Broadcasting/ Management

POS network Goods sales at airports (an important source of profitability)

Departure network Self-service check-in, DCS interface, and luggage confirmation systems

Equipment management network

Airport data network

Control of buildings, escalators, and passenger boarding bridges

Security network Video surveillance, access control, security protection, and alarming systems

Security inspection network Security inspection system, X-ray machine, and security inspection management system Data center network

Integrated service network

Other service networks

OA, VoIP, operating services, and Internet access

Air control system

Network Requirements Multi-service text Airport network characteristics

Network security

The airport network must carry different service systems. Due to varying security requirements and service features of these systems, a comprehensive QoS and service assurance system must be set up.

The network must be secure to ensure the stable operation of daily airport services.

Airport service systems must be independent from each other. Services between different systems must be efficiently isolated.

Service isolation Exit security

Access security

Service systems need to communicate with each other. To ensure communications security , access control and other security protection measures must be taken on the backbone network.

The airport network reserves some external interfaces. The security of these interfaces must be ensured.

89

Enterprise Networking Solutions and Cases

Transportation

Solution Overview • The airport network can be classified into an information system integration network, a departure information management and release network, a security inspection service management network, a security inspection information management network, a security service bearer network, a POS network, an integrated service network, and a dedicated equipment network. • Network characteristics: Service areas are independent from each other to ensure security. The CSS+iStack virtualization networking mode is adopted for network stability. Hardwarelevel OAM+BFD detection technologies are also used for high network reliability. • Vertical virtualization: multi-equipment and multi-link protection and easier management and maintenance. • CSS cluster: Ensures equipment stability and reliability and provides ultra-large cross-equipment switching capacity. • Hardware-level OAM+BFD: Precisely binds a large number of sessions to each equipment port, user, and service, thereby achieving quick alarming and service switchover.

Typical Network Structure and Selected Equipment Civil aviation information backbone network

Wireless Traffic controller analysis

Security analysis Airport campus network

Internet

DMZ

Bank settlement

DCS terminal building Other service systems GOIS

BHS WLAN OA

…

…… …… Security monitoring network

Departure management network

POS network

Equipment Security inspection Integrated service management network network network

Flight information management network

• • • •

Terminal building core/Subnet core layer: S9700 Subnet convergence layer: S9700/S7700 Subnet access layer: S5700/S3700 Wireless access: AP6010/6310SN, AP6510/6610/7110DN, WS6605 AC, and S9700 (WLAN AC card) • NMS: eSight

Enterprise Networking Solutions and Cases

90

Airport Network Solution Success Stories Chengdu Shuangliu International Airport Project Project Background • The Chengdu Shuangliu International Airport intended to build an information network to provide hardware basis for airport IT transformation and to ensure that all service application systems run stably and efficiently. Huawei Solution • Used Huawei's data center-class high-performance 10GE switch S9312 as the core switch. • Deployed the S9303 10GE switch as an information network aggregation switch to forward data to the core switch.

Chengdu Shuangliu International Airport Information Network Backbone network, Huawei S9312

Backbone network, Huawei S9312

AFTN ITC primary equipment room

Airline company

IDS Firewall

ATC

CSS cluster

IDS PCR primary equipment room Access switch Firewall

CSS cluster

External air control system

Command center

SITA

Aggregation switch

Central AODB Application information system management system

Primary server

91

Enterprise Networking Solutions and Cases

Backup server

• Dual-homed each aggregation switch to two core switches and connected each access switch to its nearest aggregation switch through two uplinks. Customer Benefits • Larger capacity, higher reliability, and better redundancy by way of CSS cluster technology • BFD/GR for OSPF/BGP and other high-availability technologies to ensure that the link switching time is less than 50 ms • Lowered power consumption through environmentally-friendly and energy-efficient unique design

Transportation

Success Stories Kuala Lumpur International Airport (KLIA) Video Surveillance Project

KLIA

External

Branch

WAN/Metro/ Internet

Employee outside

Police

Backup storage

Database

E1000E Core switches

Primary storage

Indoor surveillance

Router

Video proxy server

Storage server

Aggregation switches Access switches

MDU

Management PC

S9300

S5300

S5300

S2300

S2300

PUs

PUs Dome cameras

PTZ dome cameras

• KLIA transports 350,000 passengers and 1.2 million tons of goods every year, according to statistics. It is ranked the 13th busiest passenger airport in the world, and is the 7th busiest international airport in Asia. • KLIA had built a new terminal building that could receive 300,000 passengers every year. Intelligent video surveillance was an integral part of this terminal building, and KLIA intended to build a high-quality video surveillance system to ensure security and improve airport operations. Huawei Solution • Used 116 high-speed dome cameras, 473 fixed HD dome cameras, and 175 box cameras with zoom lens. • Deployed OceanStorTM S3900 and IP SAN array as storage devices.

Monitoring center

PTZ box cameras

Outdoor surveillance

Controlling center

Platform management Alarm distribution server server

Internet

Project Background

• Focused on three scenarios: dense population area, standard operation area, and runway security area. Customer Benefits • Prevention from intrusions of human, birds, and vehicles into runways through alien object detection technology • Timely smoke and fire detection, snapshot-taking and identification of luggage left unattended, theft and sabotage behavior detection, and crowd counting in a specific area

Enterprise Networking Solutions and Cases

92

Huawei Network Solutions for the Energy Industry The electricity supply and demand issue is increasingly thorny. How to effectively and securely utilize electric power resources is a hot topic around the world. In addition, more ICT technologies are used in the electric power industry, and they have become an important technical foundation for smart grids that are being vigorously promoted worldwide. The entire electric power industry tends to combine more advanced communications,

information, sensor and metering, and automated control technologies with power grid technologies in order to build a real-time intelligent, high-speed communications information system that supports flexible access and interaction of multiple services. This trend is also one of the future ICT development directions for the electric power industry.

Huawei provides three major network solutions for the electric power industry, as shown in the following figures.

Power Transmission and Transformation Communications Solution

Power Distribution Communications Solution

Integrated Campus Solution

Among these three solutions, the Power Transmission and Transformation Communications Solution and Power Distribution Communications Solution contribute more than 90% sales revenue.

93

Enterprise Networking Solutions and Cases

Electric Power

Power Transmission and Transformation Communications Solution Scenario Introduction This solution carries two types of services: • Production control services, such as SCADA, EMS, and RTU. • Management information services, such as OA, ERP, MIS, and video surveillance. The development of IT-enabled and smart grids poses new requirements for the power transmission and transformation communications network.

Reliability

• Services must run uninterruptedly around the clock and the system must recover from faults within an extremely short time.

High bandwidth and long distance

• Video services are growing quickly, resulting in huge communications data. This data must be transmitted over long distances.

Low latency

• SCADA and protective relay services require lower network transmission latency.

Multi-service support

IP-based

• Multiple services such as dispatching, monitoring, OA, telephone, and video surveillance services, as well as multiple types of access equipment must be supported.

• TDM services are migrating to packet services. Therefore, existing equipment must evolve to be IPbased.

Enterprise Networking Solutions and Cases

94

Power Transmission and Transformation Communications Solution Solution Overview This solution uses a three-layer structure. • Backbone layer: On the transmission side, uses OTN technology to support large-granularity services (such as video surveillance and HD conferencing) and enables ASON functions to ensure security and reliability. In addition, supports ultra-long-distance transmission, which reduces the number of electrical generators and lowers operating costs. On the data side, uses core routers to build an IP/MPLS network and supports BFD and quick route convergence technologies to ensure system security, reliability, and redundancy backup. • Convergence layer: On the transmission side, uses ASON-capable MSTP/Hybrid MSTP equipment to seamlessly interconnect with conventional networks and improve network reliability and efficiency. In addition, uses microwave for emergency backup, which further enhances network reliability. On the data side, deploys convergence routers to form an MPLS/ IP network and converge data from the access layer. In addition, uses VPN technologies for security isolation and service assurance. • Access layer: On the transmission side, uses ASON-capable MSTP/Hybrid MSTP equipment and embedded cards or external PCM equipment to provide abundant interfaces (including E1, V.21, RS232, and FE/GE) to support simultaneous IP and TDM access. In addition, deploys microwave as a supplementary network to cover areas that are not covered by optical fibers. On the data side, uses access routers to support different IP services and deploys DiffServ and HQoS technologies to implement secure service isolation. • Routing of optical cables: OPGW and ADSS optical cables specifically designed for the electric power industry are used.

Typical Network Structure and Selected Equipment S

OPGW/ADS

OPGW/A

DSS

OSN8800

Backbone network

OTN

OSN6800

OTN-ASON NE40E

SDH-ASON

Convergence RTN980/950 layer Microwave

OSN7500

Core router

Unified NMS

OSN3500 NE40E

Convergence router

MSTP/Hybrid MSTP RTN910

Access layer

MSTP/Hybrid-MSTP PCM

Access router

Microwave ring ATN

• Backbone layer: OSN8800/6800, OSN7500/3500, and NE40E-X16/X8 • Convergence layer: OSN8800/6800/1800, OSN3500/1500, NE40E-X8/X3, and RTN950/980 • Access layer: OSN1500/550, NE40E-X3, ATN950/910, RTN910, and UA5000 • NMS: iManager U2000 95

Enterprise Networking Solutions and Cases

Electric Power

Success Stories Power Transmission Communications Network for Powerlink Queensland in Australia

Customer Requirements

Customer Benefits

• Stable long-distance transmission

• Unified management and centralized scheduling of DWDM and MSTP devices

• Low latency and high reliability • Sufficient bandwidth Huawei Solution • Conducted unified planning and deployed 186 DWDM devices to build a backbone ring network that provides large capacity and supports ultra-long-distance transmission.

• Improved network reliability, reduced equipment running risks, and increased ROI • Increased network bandwidth to support service expansion and new service provisioning

• Used more than 100 MSTP devices to build a transmission ring network at the convergence layer or access layer to support multiple types of electric power services (e.g. 64 kbit/s low-speed service).

Enterprise Networking Solutions and Cases

96

Power Transmission and Transformation Communications Solution Success Stories Intelligent ASON Network for KEPCO Customer Requirements • KEPCO is the only electric power company in South Korea and provides power services to 17 million users. By the end of 2010. KEPCO had a total power transmission distance of 29,526 km and a power capacity of up to 231,624.7 MVA. • As its network expanded, KEPCO required higher system reliability and lower protection switching time. • The previous STM-1 communications network did not meet capacity requirements. Therefore, KEPCO wanted to optimize this network.

7

3

5

2

6

1

Huawei Solution • Used 400 OSN3500 devices to build a convergence-layer network. • Built an ASON-based mesh network to prevent impact caused by multiple fiber cuts. • Used the MDS6600 tool to carry out scientific planning, simulate the live network, and enhance network reliability. Customer Benefits • Smooth upgrade from STM-1 to STM-4/16 • Improved network reliability through redundancy protection for key components and ASON transmission • Protection switching within 50 ms to ensure that electric power services are stable

97

Enterprise Networking Solutions and Cases

Electric Power

Success Stories Hybrid OTN and MSTP Network for EVN Customer Requirements • Electricity Vietnam (EVN) has a power generation capacity of 8860 MW and a total power distribution length of 19,396 km. It has seven major subsidiaries. • The customer intended to provide ultra-longdistance communications transmission for its 24 ultra high voltage (UHV) substations. • The customer also required some measures to prevent GPS failures from devastating the power grid. Huawei Solution • Used OSN6800 and OSN7500 devices to build a backbone 10G ring network. • Deployed BITS equipment to support highprecision clock synchronization and provided an MSTP-based optical time transport solution for GPS backup.

GPS MSTP/SDH

WDM/SDH

• Provided equipment-level and network-level protection to enhance network reliability. Customer Benefits • A high-reliability, large-capacity backbone power transmission and transformation communications network, which can scale to 40G in the future

SDH NMS

• Flexible service access (GE, FE, STM-16, and STM-64) • Reduced O&M costs through the use of the U2000

Enterprise Networking Solutions and Cases

98

Power Transmission and Transformation Communications Solution Success Stories Backbone Communications Network for Sudan National Electricity Corporation Customer Requirements • Integration with the live SDH transmission network provided by Siemens • A higher-performance and higher-reliable backbone transmission network that can be smoothly upgraded • Ultra-long-distance transmission (up to 180 km per span) Huawei Solution • Used 62 OSN2500 devices and 54 OSN3500 devices to build the backbone communications network. • Adopted an IP DCC solution to interoperate with Siemens' equipment, which facilitated network management. • Deployed dual equipment at chain nodes to form an SNCP ring network for protection. Customer Benefits • Ring network protection to ensure the security and reliability of the backbone communications network • Reduced O&M costs through the use of IP DCC and U2000 • Reduced number of regenerators and simplified network structure due to ultra-long-distance transmission • Flexible multi-service access and improved network effectiveness and competitiveness

99

Enterprise Networking Solutions and Cases

OSN3500

STM -16

STM -16 Card

Adjacent Substation (Siments)

E1 Card

OSN3500 STM -16

STM -16 Card

PBX

E1 Card

E1 E1

E1 E1 Quidway Switch FE FE

E1 E1 E1 E1 Quidway Quidway Switch Switch 28-11 28-11 FE FE FE FE

Ethernet FE RTU

NxE1 NxE1

Spare Ports

Tele Tele -Protection Tele Protection Protection

Ethernet FE Fault Recorder

Office LAN

Adjacent Substation (Siments)

Electric Power

Success Stories Integrated Data Network for COPEL in Brazil Customer Requirements • COPEL has almost 100% power generation, transmission, transformation, and distribution systems at the local marketplace, and it also focuses on telecom business. • With the development of its power grid and increasing demands for video surveillance and videoconferencing services, COPEL was in urgent need of a large-bandwidth flexible IP MPLS network to carry comprehensive data services. Huawei Solution • Defined the network into three layers and deployed NE40E-X8 devices at the core and backbone nodes and NE40E-X3 devices at the access nodes.

NE40-X3 NE40-X8

• Adopted partial-mesh network structure for core nodes and connected backbone nodes to adjacent core nodes through two links to ensure node reliability. • Used MPLS technology to build the entire data network.

NE40-X8

MPLS Network NE40-X8

• Service interconnection for electric power companies with a complex structure

NE40-X8 NE40-X3

Customer Benefits NE40-X3

• Abundant reliability and QoS features, which help provision more video and voice services • Greatly improved network security and reliability through a mesh/partial-mesh network topology

Enterprise Networking Solutions and Cases

100

Power Transmission and Transformation Communications Solution Success Stories Power Transmission and Transformation Communications Network for Sonelgaz in Algeria Customer Requirements • Sonelgaz is a state-owned electric power and gas company in Algeria and it monopolizes the electricity generation, transmission, distribution, and export and import. In 2003, its annual power generation amount reached 2.9 billion kWh. • Sonelgaz intended to build a highly reliable transmission network to carry its electric power services. Huawei Solution • Used OSN1500, OSN2500, and OSN3500 devices to build a transmission network. • Used the MDS6600 tool to carry out scientific planning, simulate the live network, and enhance network reliability. • Adopted ring network protection to ensure that electric power services are reliably transmitted. Customer Benefits

E1/FE OSN3500 STM-4

• More flexible service scheduling and easier network maintenance • Reduced costs in purchasing spare parts because equipment cards can be universally used

101

Enterprise Networking Solutions and Cases

OSN3500 STM-16/64 ring

E1/FE

E1/GE

STM-4

• A stable and reliable transport platform for key electric power data • Better bandwidth utilization and system scalability and stronger system survivability

OSN3500

OSN3500

-16 STM E1/FE

E1/FE

E1/FE

Substation Substation

iManager U2000

Electric Power

Success Stories UHV Transmission Network from Qinghai to Tibet Customer Requirements • High altitude and harsh environment • Ultra-long-distance power transmission (200 km to 300 km) • Tremendous difficulties in construction and maintenance and strict requirements for equipment reliability Huawei Solution • Deployed the OSN3500 and OSN7500 across the entire network. • Provided 250 km per span without Raman (FEC+BA+BA). • Provided 300 km per span with Raman (FEC+BA+BA+RA). Customer Benefits

Germu

239 km

Balong

Wulan

165 km

Gangcha

206 km

Xining

210 km

Yongdeng

185 km

Baiyin

157 km

• A reliable and stable ultra-long-distance transmission network • Unified NMS for built-in and external optical amplifiers, resulting in easy maintenance • Easy system scalability to a 10G system to meet future service needs

111 km Nachitai Wudaoliang Tuotuohe

185 km

164 km

Anduo

295 km

107 km

Naqu

Lasa

276 km

Tibet dispatch center 71 km

Enterprise Networking Solutions and Cases

102

Power Transmission and Transformation Communications Solution Success Stories Dispatch data network (DDN) for SGCC Customer Requirements • A highly real-time, reliable nationwide DDN network was required to support services within SGCC's production control areas. • The existing network structure and capacity must be also improved to support fast growing services. • The entire network must be improved, including the national central nodes, five major regional nodes (North China, Northeast China, East China, Middle China, and Northwest China) and 25 provincial nodes. Inner Beijing Tianjin Hebei Mongolia

Huawei Solution • Used a dual-plane network structure, with each plane designed with redundant route backup. • Deployed MPLS, BFD, and FRR technologies across the entire network. • Used NE40E routers to build a two-node network and deployed three-level RR to greatly improve network reliability.

Shaanxi Gansu Heilongjiang

Ningxia Qinghai

North China

Xinjiang Tibet

Northwest China

Customer Benefits • Stable operation since 2003 • Improved network reliability, reduced equipment running risks, and increased ROI • Reliable operation of electric power services

Enterprise Networking Solutions and Cases

Jilin

Northeast China

National dispatch center Middle China

Liaoning

East China

Hubei Hunan Inner Mongolia Sichuan Henan Chongqing

103

Shanxi Shandong

Fujian Anhui Zhejiang Jiangsu Shanghai

Electric Power

Success Stories 2M Optical Port Trial Project for China Southern Power Grid's Guangzhou Branch Customer Requirements • Eliminated security risks of protocol converters and direct connection between the protective relay devices and transport devices. • Seamless interoperation with mainstream protective relay devices • Stable and reliable interfaces

• Completed IOT testing with multiple protective relay equipment vendors such as Naritech, Sifang Group, XJ Group, and ABB, achieving a good testing result. • Smoothly upgraded the existing equipment, without additional hardware. Customer Benefits • Reduced service conversion links, decreased fault points, and improved service reliability

Huawei Solution • Used OSN series products to build a 2.5G ring network and installed 2M optical interface boards to directly connect to protective relay devices.

01 02 03 04 06

07

05

• Reduced construction costs • Improved service monitoring

41

a1 33

34 25 24 23 22 21 20 19

10

11 14

12 13

30

27

28

29

58

57

a6

36

35

78 16

61 a5

60

42

40 37

39 38

a2

62

55 64

79

Service sites

a3 43

44

45

46

47 Dispatch center 1 54

53

52

51

49 48 Dispatch center 2 50

72

63 65

66 71 73 67

15

Optical amplifier (OA) sites

a4

56 59

17

09

31

77 26

18

08

32

68

74

75

76

69 70

Dispatch centers 1 and 2 are both central sites.

Enterprise Networking Solutions and Cases

104

Power Distribution Communications Solution

• The communications network serves as the nerve of the DA system. Its functions include transmitting the detection and control information and reporting the fault status.

Host station system

ag Terminal

Ea

sy

m

an Terminal

Mountainous area

y

Plant area

Efficient power distribution network

ilit

Power distribution room

iab

DTU Transformer

rel

DTU

gh

Pole mounted switch Rural area Terminal

• Industrial design: The system must be protected against lightning strikes, high temperatures and humidity, strong electromagnetic fields, and other harsh environmental conditions.

Hi

Substation

• Easy management: Communications links must be easy to configure, and the network must be monitored in real time.

em

Electric power company

DTU

• High reliability: Communications equipment must run stably around the clock and provide backup links to prevent service interruption.

t

• The distribution automation (DA) system consists of a host station, substations, terminals, and a communications network.

Key to Building an Efficient Communications Network

en

Scenario Introduction

Industrial design

Solution Overview

105

Network Mode

Advantages

Disadvantages

xPON network

This network consists of three parts: OLT, ODN, and ONU. This network is well suited for the tree, ring, and chain topologies of power distribution networks. Services on the backbone links are not interrupted. The hand-in-hand and two-uplink design prevents impact caused by multiple failures. In addition, this network provides high bandwidth and is easy to scale. Its industrial performance can withstand high or low temperatures. This network is also designed with an IP65 protection class and a high EMC level.

Much workload in routing optical cables

Industrial switch network

High bandwidth, support for RSTP and MSTP ring protection, and industrial design

Active network and unable to guard against multiple failures

AR router network

Support for RS232 low-speed interfaces and multiple services such as routing and voice

Low industrial level

Enterprise Networking Solutions and Cases

Electric Power

Typical Network Structure and Selected Equipment • xPON network: MA5680T/5683T and MA5621/5621A • Industrial switch network: (planned go-to-market in August 2012)

Host station of the AD system Power transmission and transformation communications network Substation Substation

Substation OLT xPON

AR router

Industrial switch ONU

• AR router network: AR1200

Switching station

Pole mounted switch

Ring main Power Box-type Voice, video, and unit distribution transformer data services transformer

Success Stories PON Access Project for Qingdao Electric Power Company Customer Requirements • Compliant with the wide coverage characteristic of the power distribution communications network • Good interoperability with associated systems and smooth system evolution • High security and strong NMS capability

Host station control layer

Host station of the power distribution system

SCADA server Electricity IP network

NMS

Substation communications layer

MLS server

Transformer substation

Transformer substation MSTP/IP

Huawei Solution • Used xPON series products that support both GPON and EPON. • Connected ONUs to upstream devices using two PON ports and adopted a hand-inhand network to ensure system protection and prevent single point of failure.

• Provided a convenient and unified NMS. Customer Benefits

ONU FE RIU Switching station

ONU FE/RS-485/ serial port

Transformer substation OLT

ONU

ONU

FE

FE

FTU TTU Power Ring main distribution unit/Pole room mounted switch

User

ONU

User 1

FE/RS-485/ serial port

...

• Leverages ONU's offline deployment and automated batch upgrade functions to accelerate the project progress.

Transformer substation OLT

Hub

User N

• Solid foundation for future service expansion • Unified management, good interoperability, and easy O&M

Enterprise Networking Solutions and Cases

106

Power Distribution Communications Solution Success Stories Centralized Metering and xPON Project for Beijing Electric Power Corporation Customer Requirements • Beijing Electric Power Corporation is a leading electric power company in China. It operates power grid business for the entire Beijing area (16,800 square kilometers) and provides premium, reliable, and affordable electric power services to 4.8 million users. • It intended to provide centralized metering and fiber to the home (FTTH) services to residents in the Zhonghong community. Huawei Solution • Provided centralized metering and FTTH services to 4703 households in the Zhonghong community. • Used one OLT (MA5683T) to connect to all ONUs (MA5621) in 10 buildings (16 or 17 ONUs per building), with each ONU providing an RS-485 interface that connects 30 electricity meters. • Used MA5680T and HG8247/850e devices to provide FTTH services. Customer Benefits • Electric power service and broadband service simultaneously for households • Large bandwidth at both upstream and downstream directions and support for multi-network and multiservice convergence • Remote management of ONUs and HGW devices through a unified NMS

107

Enterprise Networking Solutions and Cases

MSTP/IP Substation

Optical splitter

Substation

Optical splitter

ONU

ONU

Concentrator

ONT

Broadband Meter

Electric Power

Success Stories xPON Communications Network for Zhejiang Electric Power Corporation'S Hangzhou Branch Customer Requirements • Remote control and real-time monitoring of electric power operations • Shift from passive response to proactive maintenance • Building of a high-reliability and environment-hardening power distribution network throughout the city Huawei Solution • Deployed an xPON access solution where the OLT was installed at 110 kV or 35 kV substations and ONUs were deployed at outdoor electric power equipment cabinets. • Set up a hand-in-hand two-fiber self-healing ring network to ensure high bandwidth and strong reliability. • Used ODN equipment to improve user experience. • Provided a visualized and unified NMS.

OLT

MSTP/IP

OLT

Optical splitter with unequal split ratio

Customer Benefits • Enhanced network coverage, saved fiber resources, and reduced network costs • Strong adaptation to environments (high and low temperatures, electromagnetic interference, and lightning strikes) through the use of industrial ONUs

Ring main unit

Switching station

Pole mounted switch

Power distribution room

• Real-time and high-reliability network, improving user experience

Enterprise Networking Solutions and Cases

108

Huawei Integrated Campus Solution Scenario Introduction • The campus network for the electric power industry consists of the production control area and the integrated OA area. Huawei participated in the latter. • The campus network deals with multiple services, such as IP telephone, OA, videoconferencing, video surveillance, production data management, external user access, and network security assurance. The campus network has high requirements for network manageability, scalability, reliability, and security. • The Integrated Campus Solution for the electric power industry is similar to other enterprise campus solutions. See enterprise campus solutions for details.

Capital-extensive

High security

Characteristics of electric power companies

Multiple IT applications

Group-based

Success Stories IDN for North China Power Grid Customer Requirements • The customer intended to build an integrated campus network and achieve WAN interconnection for its regional dispatch center and provincial dispatch centers and 500 kV substations. Huawei Solution • Deployed two AR2200 routers for voice and data access at each node and installed two NE40E routers as core routers at the regional dispatch center. • Deployed 600 S5700 devices for data access and aggregation. • Provided the U2000 for unified equipment management. Customer Benefits • A high-quality, high-security, and high-reliability campus network, with premium campus interconnection services

IP voice

Collaborative OA

Core switch

Firewall

Telepresence conference

OA

Enterprise Networking Solutions and Cases

Backbone router

Transformer station monitoring

• Solid foundation for the customer's SG-ERP system

109

Network management Policy server Media server server Access switch

Video wall

SSL VPN gateway

Access router

DWDM

Electric Power Intelligent Campus Network for Yellow River Substations in Jiaozuo, Henan Province, China Customer Requirements • More bandwidth and better quality of power grids • Unified network interfaces • Automated detection of substation environments and equipment running status Huawei Solution

• Provided self-healing design to ensure switchover protection within 20 ms • Integrated a power and environment monitoring system to intuitively monitor the equipment room. • Set up a substation video surveillance system to remotely monitor substations and give early warnings when detecting a danger.

Protection equipment

Multiplex fittings

Protection (supporting remote transmission of Boolean values) Serial port Tele-control FE equipment

Interface conversion equipment Digital-to -analog channel

SCADA system

Router

• Deployed Huawei switches to work stably at low/high temperatures and against severe electromagnetic interference.

Encoder server

Protocol conversion Protective substation & fault recording system

Customer Benefits • Unified network platform that is easy to maintain • Improved network quality, without service interruptions

Telephone Telephone Production MS and OA systems

Automatic electric energy metering system

Image and video monitoring system

• Minimum costs in engineering management and running management • Reduced labor costs due to unattended substations

Enterprise Networking Solutions and Cases

110

Huawei Network Solutions for the Energy Industry Oil and gas are considered among the world's most important resources. How to securely and efficiently exploit, transport, process, and sell them is a key topic around the world. Based on the characteristics of the oil and gas industry, Huawei has

launched a series of network solutions specifically designed for the upstream, midstream, and downstream, helping energy customers improve ICT efficiencies and enhance profitability.

Huawei provides four major network solutions for the energy industry, as shown in the following figures.

WAN Interconnection Network Solution

Oil and Gas Pipeline Network Solution

Oilfield and Gasfield Network Solution

Gas Station Network Solution

Notes: Focus on land oilfield and gasfield network construction. Mineral campuses have similar network structures as oilfield and gasfield campuses. Therefore, networks for mineral campuses are not described here.

WAN Interconnection Network Solution Scenario Introduction The WAN interconnection network for oil companies is used between HQ and branch organizations such as oilfield companies, pipeline offices, refinery factories, exploration and exploitation bureaus, and design institutes. This network carries oil companies' IT-based services,

including production, scheduling, and OA services. An optical transmission network is generally built using optical resources routed along oil and gas pipelines.

With the fast development of multiple large-capacity services, WAN interconnection raises higher requirements for equipment, as shown in the following figure.

WAN interconnection

Service reliability

111



Stable and reliable ultra-long-distance transmission



E2E service reliability

Enterprise Networking Solutions and Cases

Scalability

Multi-service support



Large capacity and smooth upgrade





High port density and coexistence with legacy networks



Service isolation and security Hierarchical QoS to ensure superb experience with key services

Energy

WAN Interconnection Network Solution Solution Introduction The following describes the architecture of Huawei's WAN interconnection solution: • Transmission network: Uses standards-compliant OTN technology to support large-granularity services (such as core dispatch, video surveillance, and HD conferencing) and enables ASON functions to ensure security and reliability. In addition, supports ultra-long-distance transmission, which reduces the number of electrical regenerators and lowers operating costs. • Data network: Uses core routers to build an IP/MPLS network and supports BFD and quick route convergence to ensure security, reliability, and redundancy backup. • Network management: Uses a network element (NE)-level NMS system for each regional control center and adopts a network-level NMS system for the corporate dispatch control center to uniformly manage regional NMS systems. In addition, deploys two-node cluster hot backup to improve system reliability.

Typical Network Structure and Selected Equipment U2100 NMS (primary) Primary dispatch control center

U2100 NMS (backup)

OTN6800/8800 OTN-ASON network

OTN ring network

U2000 NMS

Backup dispatch control center

NE40E-X16/X8

Regional control center 1 Regional control center 2

Regional control center n

• Transmission network: OSN8800/6800 • Data network: NE40E-X16/X8 • Unified NMS: iManager U2100/U2000

Enterprise Networking Solutions and Cases

112

WAN Interconnection Network Solution Success Stories National Backbone OTN Transmission Network for CNPC Project Background • China National Petroleum Corporation (CNPC) is the largest crude oil and gas producer and supplier in China. • Its previous optical communications network provided small bandwidth and therefore did not support bandwidth-hungry services. Huawei Solution • Deployed about one hundred OSN 8800 and OSN 6800 devices to cover a total network length of approximately 8000 km.

Beijing Gu'an Langfang Shijiazhuang An'ping Jingbian

Gulang

• Provided a 40 x 10G platform to support large-capacity bandwidth requirements.

Zhongwei Lanzhou WDM backbone layer

Zhengzhou Huaiyang

Xi'an

• Used Huawei's OSN 8800 product (with 1.28 T cross-connection capability) to flexibly groom and efficiently protect multiple services.

Shanghai

Chengdu Chongqing

Qingshan

Zhongxian

Wuhan

Customer Benefits SDH convergence and access layers

Legend:

WDM equipment

SDH equipment

• Sufficient bandwidth resources that meet network development requirements for the next five years. • Strong pi pe l i ne prote ctio n through unique WDM protection technologies. • Solid foundation for future IT transformation.

113

Enterprise Networking Solutions and Cases

Energy

Success Stories WAN Interconnection Data Network for CNPC Project Background • CNPC's WAN was in a three-level (HQ, regional center, and local center) structure that connects together its 205 branches in 12 regions. Beijing HQ was the core of the WAN. • CNPC intended to build an integrated bearer backbone network that features high reliability, no single point of failure, and 7/24 service availability. In addition, key services such as video services were ensured, and links were load-balanced to prevent waste of resources. Huawei Solution Group corporation

Joint stock company

8 bureaus

3 bureaus

Joint stock company NE40A

4 bureaus

6 bureaus

South China Region

Daqing Region

Group corporation NE40C

Joint stock company NE40B Exploration and exploitation institute

Xinjiang Region

Dalian Region

Exploration and Group corporation exploitation institute Exploration and NE40A NE40B exploitation institute NE40A

• Deployed about one hundred NE40E, NE80, NE40, and NE20 devices, used RPR networking for the core, and adopted redundancy backup design for all nodes and links to ensure network reliability and prevent single point of failure. • Gradually used NE40E devices for regional nodes to build RPR ring networks. • Deployed hierarchical QoS (HQoS) to differentially schedule services and ensure the QoS of key services.

Lanzhou Region

10 bureaus

Liaohe Region

Beijing Region Group Corporation Region

11 bureaus

40 bureaus

14 bureaus

Southwest China Region

Jilin Region

Xi'an Region

East China Region

8 bureaus

6 bureaus

13 bureaus

7 bureaus

Customer Benefits • A highly secure, efficient, and manageable IT-enabled system that supports multiple services, enhances OA efficiencies, and improves the company's competitiveness

Enterprise Networking Solutions and Cases

114

WAN Interconnection Network Solution Success Stories National Backbone MPLS WAN Network for CNOOC Project Background • China National Offshore Oil Corporation (CNOOC) is one of the largest oil companies in China. Its backbone WAN network functions as an important bridge between the HQ data center network and branch networks. CNOOC wanted to turn this backbone WAN network into an MPLS network that features "physical sharing but logical independence". Huawei Solution • Used Huawei NE40E-X8 devices to build the MPLS backbone WAN, covering eight core nodes (Beijing HQ, Yanjiao (disaster recovery center), Tanggu, Shanghai, Shenzhen/Huizhou, Zhanjiang, Hainan, and Shandong).

Yanjiao Tanggu

Beijing

Shandong

• Deployed MPLS VPN technologies to securely isolate different organizations and IP services. • Used end-to-end QoS technologies to meet requirements of different services.

Hainan

Zhanjiang

Shanghai Shenzhen/Huizhou

Customer Benefits • Dramatically improved reliability and performance of the HQ data center • Greatly improved WAN link bandwidth and reliability of core nodes • Better multi-service support and QoS assurance through VPN, HQoS, and other reliability technologies

115

Enterprise Networking Solutions and Cases

Energy

Oil and Gas Pipeline Network Solution Solution Introduction The following describes the architecture of Huawei's Oil and Gas Pipeline Network Solution: • Tributary pipeline network: Uses MSTP/Hybrid-MSTP equipment to form a 155M/622M ring network and adopts SNCP ring network protection protocols to ensure network reliability. • Backbone pipeline network: Uses MSTP/Hybrid-MSTP devices at backbone nodes to form a 1+1 MSP chain network. Provides a network bandwidth of 2.5G/10G. At other unattended sites, sets up 155M/622M ring networks. Uses a dedicated board to isolate and protect SCADA service data. Deploys microwave to back up key services such as SCADA and to provide access for non-optical sites. • Data network: Uses datacom devices (including switches and routers) at attended and unattended sites to forward production services (SCADA, industrial TV monitoring, dispatch telephony, etc.) and OA services (video surveillance, administrative telephone, etc.) to the transmission network.

Typical Network Structure and Selected Equipment OSN 550/500

Measuring station (ingress)

Block Block valve Pigging Block valve station station valve station station STM-1/4 ring network Compressor/ Pumping station

Backbone pipeline network

Control center

OSN 550/500

Sub-control center

Block valve station OSN 3500/ OSN1500

Block valve station

Block valve Block valve station station

STM-1/4 ring network

Compressor/ Pumping station NE40E - X3/ AR3200

RTN910/950

STM-16/64 1+1 MSP links RTN910/950 CCTV

RTU

BITS

Block valve station

Compressor/ Pumping station OSN 3500/1500

OSN 3500/1500

Pigging station

STM-1/4 SNCP ring network

Compressor/ Pumping station

OSN 550/500

Dispatching calls

SZ700

OSN 550/500

Measuring station (egress)

BITS

unattended sites

Block valve station STM-1/4 SNCP

ring network

Block valve station

Tributary pipeline network

Offtake station OSN 3500/1500

Measuring station

• Tributary pipeline network: OSN500/550 and RTN910/950 • Backbone pipeline network: OSN7500/3500/1500 and RTN910/950 • Data network: S2700/5700/9700, industrial switch, NE40E-X3, and AR2200/3200

Enterprise Networking Solutions and Cases

116

Oil and Gas Pipeline Network Solution Success Stories China-Kazakhstan Gas Pipeline Project Project Background • Asian Gas Pipeline (AGP) is a joint venture of Chinese oil giant CNPC and Kazakhstan’s state-owned gas transportation company KazTransGas. • AGP is responsible for organizing and implementing engineering, operation, and management work for the Kazakh section of the Central Asia–China gas pipeline project. Huawei Solution

0.75km 67.25km

B01.1

B07.1

B05.1

36.75km

2km

53.75km

0.75km

B08.1

0.75km 0.75km

B11.1

B10.1

94km 1+1MSP

B04.1

80.5km

1.5km 95.5km

B14.1

B19.1

96.25km 1+1MSP

82.75km 1+1MSP CS-1(KZ)

KUMS

0.75km

CS-2(KZ)/ERC

B15.1

0.75km B20.1

105km 1+1MSP

BITS

87.25km B23.1

24.25km

90km

28.25km

0.75km

54.25km

86.25km

0.75km 0.75km

77.25km

57.25km

0.75km

0.75km 0.75km

B42.1

B41.1

B38.1

B37.1

B36.1

141km 1+1MSP

0.75km

B34.1

B31.1

B30.1

141.5km 1+1MSP

B27.1

B25.1

16.25km

136km 1+1MSP 0.75km

CS-5(KZ)

118km 1+1MSP 89.25km 30km

B45.1

0.75km B48.1

B51.1

120km 1+1MSP

0.75km

B52.1

CS-3(KZ)

CS-4(KZ)/ERC

87.25km

37.1km

54.8km

2.1km

B55.1

B58.1

125.1km 1+1MSP

15km B60.1

66.9km 1+1MSP

• Provided IP networking, SCADA, VSAT, VoIP, and DC products.

B24.1

CS-6(KZ) B43.1

• Used OSN 3500 and OSN 1500 devices for the 1833 km optical communications network and deployed AR routers at the control center and block valve stations.

• Delivered optical transmission communications products and services worth US$60 million, 50% of the total project amount US$120 million.

59km B47.1

CS-7(KZ)

50km 1+1MSP BITS

Almaty control center

B57.1

Legend:

STM-4 STM-16 MUX

STM-1 STM-1 MUX

Customer Benefits • Gas transport amount increased to 30 billion cubic meters every year, which strongly supports China's future energy strategy • Improved friendship between China and Kazakhstan

117

Enterprise Networking Solutions and Cases

Energy

Success Stories Pipeline Communications Network for Sinopec Project Background • Sinopec is China's largest petroleum refiner and oil products producer. • It intended to build a large-capacity and high-reliability optical transmission system to meet its future growth. • This project covered the Sichuan– Shanghai gas pipeline, East China dispatch center, and Jiangsu oil product pipeline. Huawei Solution • Used OSN 7500, OSN 3500, and OSN 2500 products to achieve unified dispatch and uniform spare parts. • Used SYNLOCK V3 to set up a time synchronization network for highprecision signal synchronization. • Deployed a centralized NMS consisting of two T2100s (network-level NMS) and about 10 T2000s (subnetlevel NMS) to achieve centralized management and differentiated rightsand domain-based management. Customer Benefits • A stable and reliable transport platform for Sinopec's SCADA, industrial TV monitoring, and VoIP services • End-to-end quick service provisioning • Larger capacity and higher bandwidth to lay a cornerstone for future digital transformation

Enterprise Networking Solutions and Cases

118

Oil and Gas Pipeline Network Solution Success Stories CNPC Lanzhou-Zhengzhou-Changsha Oil Product Pipeline Project

Project Background • Involved a 2134.36 km backbone line with 14 tributary lines. • Required unified network management with the national dispatch and control center. Huawei Solution • Deployed Huawei MSTP equipment network-wide (networking: OSN 7500 + Metro 3000 + Metro 1000). • Adopted the STM-16 (2.5 Gbit/s) transmission system for the backbone line and STM-1 (155 Mbit/s) for each tributary line. Metro3000

Customer Benefits • Support for future bandwidth-hungry services, such as HD video services

Metro1000

• Reliable service transmission with DDN backup for important services such as SCADA

T2000 Metro5000

• Integrated NMS for unified management and dispatch

Metro1000 Access layer

Convergence layer

Backbone layer (MSTP) OSN7500

Clock BITS Access layer

Metro1000

119

Enterprise Networking Solutions and Cases

Energy

Oilfield and Gasfield Network Solution Scenario Introduction An oilfield or gasfield network involves four parts: HQ, central control room of the oil production plant, functional station (such as the processing station and metering station), and operation area. The communications network for an oilfield or gasfield carries two types of services: • Production and control services, including services for control systems such as SCADA and DCS, as well as those for production dispatch and monitoring, such as dispatch telephony, industrial TV and MES. • Office informatization services, including office automation (OA), voice conferencing, and administrative telephone. The informatization of digital oilfields and the emergence of Internet of Things (IoT) are posing higher requirements on the communications network.

Multi-service support

Oilfield network

The oilfield network carries multiple service systems. These service systems frequently and efficiently exchange data with each other.

Network reliability

The bearer network must ensure uninterrupted operation of oilfield services.

The oilfield area is wide, and production data often use wireless backhaul technologies.

Wide wireless coverage

Industry environments

Real-time communications

Low latency, quick convergence, and no packet loss

Dustproof, explosion proof, moisture proof, and lighting protection.

Enterprise Networking Solutions and Cases

120

Oilfield and Gasfield Network Solution Solution Overview The Huawei oilfield andgasfield network solution comprises three parts: • Backbone transmission network: Consists of Huawei MSTP equipment, and connects oilfield HQ and branch organizations such as oil production plants, exploration and exploitation companies, and research institutes. • Production network: Uses Wi-Fi or microwave for production data backhaul from remote oil and gas wells; builds an optical network with GPON equipment and industrial switches for fiber to the well and at attended sites such as the central control room and processing stations; physically isolates production services (industrial TV, SCADA, dispatch telephony, etc.) using access switches; deploys firewalls at the egress for security access to the office network, ensuring information security and service isolation. • OA network: Covering attended sites such as the central control room and processing station, uses a hybrid network (AR G3 routers, indoor WLAN devices, S series switches, etc.) for integrated office experience.

Typical Network Structure and Selected Equipment HQ data center of oilfield companies

Oil extraction factories

NE40E-X3

Data center of exploration and exploitation bureaus

OSN1500/3500

Backbone transmission network of oilfield companies

NE40E-X3

S5700/S7700 S7700/ S9700

Fiber to oil well

Oil extraction factory network

MA5680T/ MA5683T

Border firewall Eudemon 200E -X3

AP6610DN

Fiber to oil well Microwave

Wi- Fi

S2700/3700

Remote oil well

RTN910

MA5621/ MA5621A

VOICE

AR1200 AP6010DN RTU

OA network

Industrial television

Industrial television

RTU

Production network

• Backbone transmission network: OSN1500/3500 • Production network: AP6510DN/6610DN, RTN910/950, industrial switch, MA5680T/5683T, MA5621/5621A • Office network: AR2200/3200, NE40E-X3/X8, S2700/5700/9700, AP6010SN/6010DN/6310SN

121

Enterprise Networking Solutions and Cases

Energy

Success Stories MAN Project for Jilin Songyuan Oilfield Project Background • Songyuan Oilfield Telecommunications Corporate in China's Jilin province intended to build a metropolitan network (MAN) covering four counties and 20 factories. The network was planned to carry integrated data services throughout the entire oilfield, including voice, video, and data document flow services. Huawei Solution • (Physical network) Deployed a three-layer (city-countydistrict) private line network: NE40E routers at the core node for mutual backup, and ME60s and MA5603Ts at the county backbone nodes.

Rendering of communications companies' MAN China Unicom

China Telecom

Qianguo (NE40E)

Bingjiang (ME60)

Qiaoguo (NE40) Bearer network

Fuyu (ME60)

Qianguo (ME60)

OLT

OLT Qianguo (9312)

Fuyu (9312)

XX university campus

Bearer network XX university campus

Baibei (9303)

Qianguo (6808)

Lianchan (9303)

Jiangbei (6808)

Erchang Sanchang Keyuan Chunjiang Heping Huaqiao (9303) (9303) (9303) (9303) (9303) (9303)

• (Logical network) Built an MPLS VPN network, providing different VPN channels for different parts to ensure network security, stability, and reliability and support HD video conferences. Customer Benefits • Centralized network platform for high-speed transmission of application service data and unified communication of video, voice, and data services • Networkwide QoS, allowing for reliable transmission of emerging services based on reliably-designed devices and links

Enterprise Network Project for Northwest Sichuan Gas Field, Southwest Oil and Gas Field Branch, CNPC Project Background • Live network devices of the Northwest Sichuan Gas Field failed to accommodate the service growth. • The Northwest Sichuan Gas Field, to raise its information degree, intended to build a new telecommunications room for core devices of the enterprise network and transmission network. Huawei Solution • Used two S9300s (core Ethernet switches) and two NE40Es (core routers for connecting the enterprise LAN to WAN) to serve as the core of a 10GE office network.

Information center NE40E

• Deployed multiple S3700s for 100 Mbit/s desktop access. Customer Benefits • Superb routing, multi-service support, and multicast scalability capabilities provided by NE40Es, accommodating future bandwidth demands and protecting customer investment

Core switch 1

Enterprise network

Core switch 2

1000M fiber S3700 Ethernet switch

Communications company

S9300 1000M fiber

1000M fiber

S3700 Ethernet switch

Jiangyou Region

S3700 Ethernet switch

1st-floor weak-current room …… S3700 Ethernet switch

19th-floor weak-current room

• High-density (480 per S9300) 10GE ports, helping enterprise campuses to achieve non-blocking and all-10GE switching

Enterprise Networking Solutions and Cases

122

Oilfield and Gasfield Network Solution Success Stories Submarine Cable Access Project for Total Gabon Project Background • South Atlantic 3/West Africa Submarine Cable (SAT-3/ WASC) was deployed, but there was no access point in Gabon for the submarine cable. • Total Gabon had insufficient international network bandwidth, failing to meet service requirements. • Carriers in Gabon provided limited access resources for international interfaces and it was impossible for Total Gabon to lease such resources from carriers. Huawei Solution • Provided multiple sets of OSN3500s and U2000s, and built a network for the customer to access SAT-3/WASC. • Deployed a 36.5 km transmission cable with four sets of ODF/DDF-involved devices in turnkey mode. Customer Benefits • Independent access to SAT-3/WASC bandwidth, meeting bandwidth requirements for different services • Hybrid MSTP to support various services and ensure network reliability (50 ms protection for MSTP devices)

123

Enterprise Networking Solutions and Cases

Energy

Refinery and Mining Network Solution Success Stories NGN Softswitch-based IP Bearer Network Project for Sinopec Anqing Company Project Background • The Information Center of Sinopec Anqing Company provided fixed phone services and broadband access services for its production area and living area.

中国石化 SINOPEC

• The Information Center intended to expand its service scope to 12,000 fixed phone users and 7,200 broadband access users, but the original network failed to meet such requirements. Huawei Solution • Employed carrier-class NGN to optimize voice services in the production area and living area, and used PON for both broadband and narrowband service access in the living area.

Fixed-line network/ Mobile network Telecommunications carriers Softswitch network Bearer network switch

2*GE to telecom

Core switch

Core switch

• Built IP bearer networks with S9300 and X7 series switches for higher reliability and larger capacity. Customer Benefits • More secure and reliable running of switches thanks to their carrier-class structure

Production area

Living area

• Integrated communication platform for multimedia information (voice, video, and data) by fully leveraging internal network resources, thereby reducing costs • Abundant new service functions for better user experience and increased profitability

Information Network Optimization Project for Shenhua Ningxia Coal Industry Group

Building 2#

Project Background • Shenhua Ningxia Coal Industry Group divided its information network into information intranet and information extranet. The information intranet and information extranet were physically isolated. The former provided support for major services (OA, finance, MIS, etc.) in the group, while the latter provided portal system to carry production and office services. To meet increasing service requirements, the information network needed optimization. Huawei Solution • Used three-layer network structure for both the information intranet and information extranet.

Building 5#

Building 4#

Customer Benefits • Better network scalability for future service demands through the use of function-rich and cluster-structured S9300s.

Building 1#

• Deployed S5300s (GE switches) at the access layer for GE-to-desktop.

Building 3#

Huawei S9306 core switch

• Deployed S9300 switches at the core layer and convergence layer, forming a 10GE core network.

• Better network reliability and security owing to the secure protection measures of S9300s • More environmentally friendly thanks to the energy conservation and emission reduction feature of Huawei all-series switches. Enterprise Networking Solutions and Cases

124

Gas Station Network Solution Scenario Introduction Service Network Design • OA network: OA, administrative IP/analog telephone, printing, and faxing

To city branches PSTN fixed-line network

3G/LTE

Private line ec IP S

Gas station egress

Internet

VPN

To HQ and provincial branches

l nne

• Sales service network: gas card payment terminal, POS machine, and financial retail system

tu

AR multi-service access router

• Video surveillance network: digital camera and video storage equipment

Gas station Analog phone

VLAN10

VLAN30

OA

Fax

IP phone

Office network

VLAN20

• Oil product management network: frontend controller, oil product management service, and back-end management server

VLAN40

• Four VLANs for separating office, oil product management, sales service, and video surveillance networks • AR (multi-service access router) at the egress

FCC Gas station controller management system

Oil product management network

Recharge Fuel Fixed/Mobile UnionPay retailing card POS machine

Sales service network

IP camera

Video storage

Video monitoring network

Solution advantages • Full-service support (with full-featured service access routers that integrate functions of firewalls, egress routers, WLAN APs, voice gateways, and switches) • Cost-effective VoIP • Dead-zone-free HD digital video surveillance

125

Enterprise Networking Solutions and Cases

Energy

Success Stories Gas Station Network Project for Sinopec Guangdong Oil Products Company Project Background • Sinopec Guangdong Oil Products Company planned to upgrade the bandwidth from 2 Mbit/s to 10 Mbit/s for OA, billing, and surveillance services, but TP-Link routers at the egress of its live network failed to meet the requirements of service expansion and enrichment.

中国石化 SINOPEC

Huawei Solution • Deployed 2200 AR1200s to cover all gas stations throughout Guangdong province. The AR1220 uses a multicore processor and processes services in distributed mode. As a new generation service router with carrier-class reliability, the AR1220 router has powerful service processing and 450 kpps forwarding capabilities, and integrates multiple functions such as data, voice, routing, security, switching, and VPN through its abundant interfaces. Customer Benefits

Gas station AR 1220 Eth

WLAN

• Well suitable for customer demands and also support for future service expansion

Enterprise Networking Solutions and Cases

126

Huawei Network Solutions for the Finance Industry The finance industry is one of industries with the largest ICT investment. The yearly ICT investment of the finance industry is approximately US$500 billion, among which about US$15 to 20 billion is used to purchase network devices (including switches, routers, optical transmission products, and access products). Over recent years, financial institutions have invested a lot in three aspects: (1) data center redundancy network construction, (2) campus network improvement and equipment upgrade, and (3) branch and ATM access network reconstruction. Against this backdrop, Huawei has launched three major solutions for the finance industry, as shown in the following figures.

Data Center Redundancy Network Solution

127

Enterprise Networking Solutions and Cases

Converged Campus Network Solution

One-stop Branch Access Solution

Finance

Data Center Redundancy Network Solution Solution Overview (Three Data Centers at Two Locations)

Geographic redundancy center Carrier network

Local backup center

MSTP/SDH

Main data center

DWDM

Redundancy is functionally classified into local redundancy and geographic redundancy. The local redundancy center implements real-time data backup and service switchover to ensure service continuity. The geographic redundancy center protects data against natural disasters. In terms of the network structure, a redundancy internal network and a data center interconnection network are defined.

Currently, most financial companies are building or plan to build a data center redundancy network. This brings many opportunities to Huawei.

Construction Drivers

Market Opportunities

Huawei Opportunities

• After data centralization, a single data center is prone to single point of failure. To ensure service continuity, a redundancy center must be set up.

• Data center redundancy is the important market opportunity for the finance industry. Estimates show that the 2012 global data center redundancy market is worth about US$30 billion, among which 5% (about US$1.5 billion) is for IP products (60% of IP products are for the finance industry).

• Huawei is a leading global ICT solutions provider and can offer end-to-end, high-reliability data center redundancy network solutions to financial customers.

• A redundancy center is required to prevent data loss.

• The data center redundancy project is a large project, and the customer's HQ often organizes unified purchase. This is aligned with Huawei's sales model.

Enterprise Networking Solutions and Cases

128

Data Center Redundancy Network Solution Typical Networking

External access area

Subsidiary and branch

External companies

Internet

Active center

Extranet area

Online banking area

Backup area and disaster recovery area

Branch access area

SDH/DWDM DMZ

IPS firewall

Firewall

DMZ

IPS firewall

CSS

CSS

Application optimization

CSS

Core area

CSS

Core layer

iStack

CSS

Server area

Management area

Convergence layer

Access layer

CSS

iStack

Storage area

Core service area

129

IP SAN

Enterprise Networking Solutions and Cases

Convergence layer

Access layer

CSS

iStack

Management area

FC SAN

CSS

Convergence layer

Access layer

iStack

OA area

FC switch

Convergence layer

Access layer

CSS

iStack

Other service areas

Finance

Solution Overview Area-based construction:

High security and strict access control

• Different areas are defined based on service functions. This helps deploy security policies and easily expand the network structure.

• Firewalls are generally deployed at egresses of many service processing areas such as the core service area, management area, and extranet area. In addition, various types of security devices are installed at the Internet area.

Hierarchical construction: • Core switches (at the core switching area), aggregation switches (at egresses of service areas), and access switches (at the top of the rack or in the array cabinet; may function as the aggregation switch) are used. In addition, routers are deployed in the access area, extranet area, and Internet area to support private line access.

Heterogeneous network • Many customers want to use equipment from different vendors to build a heterogeneous network for their primary and backup data centers. This avoids overreliance on the same vendor and also prevents system crash due to the same network attack.

Selected Equipment Optical transmission equipment:

Routers:

• OSN1800/OSN8800: used to connect the primary data center and the local redundancy center

• NE40E-X3/X8

• OSN3500/OSN550: used to connect the geographic redundancy center and the primary data center and local redundancy center

NMS • eSight/U2000

Switches: • Core switch: S9700/CE12800 • Aggregation switch: S7700; access switch: S5700/S6700/CE6800

Solution Highlights Comprehensive solution

• Optical transmission device • Router • Switch • Security product

Low latency

• μs-level latency, achieving realtime backup of service systems

High reliability

• LFR+ASON • Equipment-level redundancy design • Networking redundancy design

High performance

Wide certification

• E2E 100G high bandwidth to reduce the convergence ratio and improve data synchronization

IBM, Hitachi, HP, MacData, EMC, SUN, and Brocade

Enterprise Networking Solutions and Cases

130

Data Center Redundancy Network Solution Success Stories Dual-plane Data Center Redundancy Network for PBC

Project Background • The People's Bank of China (PBC) intended to expand the production area, OA area, and testing management area of its backup data centers.

Server Storage device

Storage device

C

Management and testing area

Quidway S5300 Production area

• Higher reliability (service switchover within 50 ms) and easier network expansion and upgrade

Network core area

WAN upstream WAN downstream Tier-2 organizations

Local organizations

• Used six wavelengths at early stages, which can increase to 80 wavelengths in the future. Customer Benefits • Reduced power consumption (30% lower than the industry average), improved network reliability, mitigated equipment running risks, and decreased investment

Quidway S5300

Quidway S5300 WAN access area

Huawei Solution • Used 20 S53xx switches at the service access layer. • Deployed 20 OSN6800 devices at the three data centers to form a dual-plane network (the two planes back up each other).

OA area

Enterprise Networking Solutions and Cases

Switch

B

Switch

131

• PBC required high-density interfaces for GE access and a high-reliability network.

Server

Switch Server Storage device

Bank HQ

• PBC also hoped to interconnect the primary data center and two local redundancy centers to prevent service interruption.

Double-plane DWDM disaster recovery network A

Finance

Success Stories Data Center Redundancy Networkfor Sberbank of Russia Project Background • Sberbank of Russia is the largest financial institution in Russian, taking up 26% and 30% of the total bank assets and capitals in Russia's bank market. Based on Tier 1 Capital, Sberbank ranks No.43 in the world. • To support its considerable online services, Sberbank required a reliable network that ensures service continuity. • Sberbank also called for multi-service support, including FE,GE, 10GE, FC, and STM-x services. • Low latency for SAN services and quick service response were also Sberbank's demands. Huawei Solution • Deployed two OSN 8800s at the primary data center and additional one OSN8800 at data center 2 and another two OSN8800s at data center 3.

Datacenter 1 (Master)

Datacenter 3 (Backup)

• Deployed six OSN 6800s at six branches in Stavropolskiy Kray to connect these branches to HQ.

Datacenter 2 (Backup)

Customer Benefits • Saving of rack resources due to the use of high-integration OSN8800s (one rack supports 128*10G) • Easier network expansion (1.28T OTN XC meets the customer's fast-growing service requirements) • Higher network reliability

OSN Data Center Backup Network for Shanghai Stock Exchange Project Background • Shanghai Stock Exchange intended to build a local redundancy center for its data center and systems to ensure the stable operation of transaction systems. It placed high requirements for network reliability and latency. In addition, Shanghai Stock Exchange hoped to build a WDM network to provide abundant service interfaces. Huawei Solution • Used Huawei's WDM equipment after rigorous selection to build the desired network. • Deployed eight OSN6800s, with nine wavelengths per link (each link used a four-core optical fiber). • Provided 1+1 protection for connections to improve security and stability. • Provided abundant interfaces and supported multiple services such as IP and storage services. • Used the U2000 NMS to uniformly manage equipment and services.

Primary data center

Local redundancy center DWDM OSN6800

Customer Benefits • Stable operation of equipment and systems, flexible and smoothnetwork expansion based on service demands, and multi-service access and protection Enterprise Networking Solutions and Cases

132

Converged Campus Network Solution The campus network for financial institutions refers to the OA network within the office buildings at HQ and branches. More collaborative services such as videoconferencing, unified communications (UC), and VoIP are introduced, which raises higher requirements for the bandwidth, QoS, and reliability of the campus network. However, existing campus networks of many financial institutions are established

early and they cannot support these collaborative services. Therefore, financial institutions want to optimize these networks. Huawei has unveiled a Converged Campus Network Solution specifically designed for financial institutions, helping them improve their campus networks.

Success Stories Converged Campus Network for BOC

Project Background • The Bank of China (BOC) has large office buildings, many of which must support more than 1000 users. • The campus network to be built must be reliable and secure and support multiple services. MAN

Huawei Solution • Used more than 200 S9300/S5300/S3300/S2300 series switches to build a quality campus network that covers BOC's branches in Guangdong, Shenzhen, Zhejiang, and Guizhou.

Core switch S9300 cluster Convergence layer S5300

• Deployed CSS cluster technology and stacked switch technology to improve network reliability.

Access layer S2300/ S3300

IP terminal

133

Enterprise Networking Solutions and Cases

PC

ATM

Customer Benefits • Improved network performance and anti-attack capabilities

Bank account checkingterminal

• Enhanced network reliability and quick service switchover within 50 ms without deploying xSTP technology • Multi-service support, simplified network structure, and easier service provisioning

Finance

Success Stories Converged Campus Network for ABC Project Background • The Agricultural Bank of China (ABC) has a large office network in its Beijing branch (including Gongzhufen,Jinyu, and Dongdan office sites). • The network must support thousands of users and must be highly secure and reliable to support complex office services. Huawei Solution • Deployed 57 S9300s to build a quality campus network. Customer Benefits • Investment protection and good compatibility with equipment from other vendors at the access layer

MAN WAN area

• Improved network performance and anti-attack capabilities • Higher reliability, 50 ms switching protection,multiservice support, simplified network structure, and easier service provisioning

Core area: S9300 Convergence area: S9300 Extranet area

Production terminal access area

Server area

CCTV Monitoring Network for SEHK Project Background • The Stock Exchange of Hong Kong ("SEHK") is the fourth largest stock exchange in the world. It has stringent requirements for the reliability and stability of network equipment. • SEHK intended to build a closed-circuit television (CCTV) monitoring network for its newly built office building. Huawei Solution • Provided an E2E CCTV monitoring network. • Deployed two S9300 switches at the core layer and provided cluster functions to enhance network reliability. At the convergence layer, deployed 11 S5700 switches to provide dual-homing access functions for equipment at the access layer. At the access layer, used 38 POE-capable S3700 switches to provide power supply for more than 5000 cameras and reserve 20% ports for future network expansion. • Deployed security features to prevent unauthorized access to the network. Customer Benefits • Higher network reliability and stability to ensure service continuity

S9300 CSS S5700

S3700-PWR

• Flexible network architecture to facilitate future service expansion • Higher security that protects CCTV monitoring services • Reduced risks through POC testing that ensures the feasibility of Huawei's solution Enterprise Networking Solutions and Cases

134

Converged Campus Network Solution Success Stories OA Network for NBK Project Background • The National Bank of Kuwait (NBK) is the largest bank in Kuwait and has more than 175 branches in 17 countries. • NBK intended to build a reliable, secure, and easy-to-maintain OA network. Huawei Solution • In Phase I, deployed 24 S5300 switches at some branches to build the access layer for the OA network. • Leveraged the S5300's rich QoS features to achieve differentiated QoS for services and maximize the bandwidth utilization. • Deployed application security policies to protect the entire network. Customer Benefits • A reliable, secure, and easy-to-maintain OA network that meets growing service demands while mitigating network risks

Core layer

• Good compatibility with existing network, thereby protecting investment and avoiding over-reliance on the same vendor

IP Phone

135

Enterprise Networking Solutions and Cases

PC

ATM

Query

Finance

One-stop Branch Access Solution Financial institutions' branches provide face-to-face services to customers. Their major functions include dealing with customers' financial requests (account opening or cancellation, deposits or withdrawals, and transfer), promoting financial products, and handling customer complaints. Branches often are small and have fewer than 30 employees. At present, the biggest challenges for branches are to:

• Reduce costs in private line resources, shorten the network construction period (now two or three months), and quickly restore the system in case of disasters. • Decrease network management costs, reduce the need of onsite O&M, and efficiently monitor the quality of private lines.

• Simplify network structure and ensure network simplicity and standards compliance, thereby reducing network construction and management costs.

Solution Overview

Subsidiary network One-stop Branch Access Solution

AR3200/NE40E-X3 AR1200/AR2200

Branch

Branch

The One-stop Branch Access Solution aims to connect all branches and ATMs to the subsidiaries or data centers in wireline or wireless mode by way of one piece of equipment.

Branch

Branch

Selected products include: • Subsidiary side: AR2240/AR3260/NE40E-X3 • Branch side: AR2200/AR1200/AR200+S2700/S5700

Enterprise Networking Solutions and Cases

136

One-stop Branch Access Solution Solution Overview One-stop branch network, 3G access, and remote management (automated configuration and SLA management forprivate lines)

Highlight 1: "In a Box" Branch Network Solution One-stop Transmissionequipment (provided by carriers)

Standard Air cabinet conditioner

Router

• Multiple ICT devices in one box (these devices include data, voice, power supply, air conditioning, and environment monitoring devices as well as servers)

Switch

Standards-compliance

Monitoring server (Optional)

• Standard cabinets for quick deployment and easy maintenance

UPS host

Security and reliability

UPS battery

• Embedded firewall, environment monitoring unit, and UPS to ensure security and reliability

Highlight 2: 3G Branch Access Solution Remote branch

Carrier Network

HQ

AR G3

AR G3 (LNS) 3G

AAA server VPDN

AAA server L2TP

IPSEC • Flexible wireless access: 3G USB card and 3G plug-in card, which can smoothly evolve to LTE • Service quality assurance: abundant QoS features (EF, AF, and BE) • High reliability: hot-swappable AR G3 cards and power supply redundancy • Strong security: SIM card+password authentication and IPSec encryption 137

Enterprise Networking Solutions and Cases

Finance

Success Stories One-stop Branch Access Network for Caixa in Brazil Project Background • Caixa is the second largest state-owned bank in Brazil. It has numerous branches that are geographically dispersed. • Caixa required reliable and one-stop access to these branches in order to reduce CAPEX and OPEX. Huawei Solution • Deployed AR series routers to connect terminals such as PCs, telephones, and ATMs at branches. • Leveraged the features of AR G3 routers (such as PBX voice,VPN, xDSL, and xPON features) to reduce the number of devices at branches, simplify network structure, and facilitate remote management and maintenance.

AR

PBX

Customer Benefits • Quick network buildout (426 AR routers deployed within a short time)

AR

VPN-2 Backbone Router IP/MPLS Cloud

VPN-1

IP Backbone

SBC

• Good compatibility with Cisco equipment on the live network • One-stop branch access that reduces network buildout and O&M costs.

PBX

One-stop Branch Access Network for Santander in Spain Project Background • In 2011, Santander ranked as the 4th largest bank in the world in terms of brand values. • Santander intended to build a multi-service network. To mitigate over-reliance on the same vendor, Santander also required IP standards-based open products to ensure good interoperability. Huawei Solution • Provided E2E, open, and feature-rich products to meet Santander's requirements for multi-service support. • Delivered more than 600 switches since 2011 Q2 to support Santander's branches.

ARG3

Customer Benefits • Reduced risks as Huawei's switches and routers have passed Santander's stringent testing

SX700

• Good interoperability through the use of Huawei's open and standards-compliant products, thereby protecting investment • Cost-effective solution

Enterprise Networking Solutions and Cases

138

Success Stories One-stop Branch Access Network for HDB in Egypt Project Background • The Housing and Development Bank (HDB) in Egypt has more than 60 branches and more than 150 ATMs. It intended to build a reliable branch access network. Huawei Solution • Deployed three NE20E-8 core routers (two at HQ and the remaining one at the backup data center). • Installed more than 140 AR routers as egress routers at branches. Customer Benefits • Reliable network with redundancy backup design • 3G linksas backup links at some branches and as primary links at other branches

One-stop Branch Access Network for ICBC Project Background • Commercial banks are transforming their business. Their branches are shifting from a service processing center to a sales service channel. Customer-centric, effective, real-time, and customizable financial services bring tremendous changes to network applications of branches. Apart from conventional real-time services and OA services, branches will embrace more converged applications such as UC, collaboration, and digital media applications. • The Industrial and Commercial Bank of China (ICBC) intended to build a quality network that supports ubiquitous access and meets branches' business transformation.

Switch S2700

Huawei Solution • Deployed more than 500 AR G3 routers (at the network side) and S2700 switches to build a ubiquitous branch access network for ICBC's seven regions. In addition, provided multiple types of products to meet the requirements of branches of all sizes.

Router AR1220/2220/2240 To subsidiary

• Deployed BFD technology between branches and subsidiaries to ensure quick fault detection and service switchover within microseconds and no service interruption. Customer Benefits • High-bandwidth, strong-reliability, and superb-stability wireless and mobile branches whose scope of financial services are extended with the help of Huawei's expertise in WLAN, wireless, and 3G data card fields • Environmentally-friendly branch network that features reduced power consumption and noise

139

Enterprise Networking Solutions and Cases

Finance

One-stop Branch Access Solution Success Stories One-stop Branch Access Solution for PICC

Project Background • PICC is one of the largest insurance companies in China. PICC has over 12,000 branches in total. • PICC required a high-quality access network to provide ubiquitous and efficient access for its branches. Huawei Solution • Deployed AR G3 routers to build a ubiquitous branch access network for PICC and allow branches at any geographical locations to efficiently access the company's network. • Deployed 20 AR2220 devices to make for efficient access of all branches. Customer Benefits • Ubiquitous and efficient access for branches, thereby expanding the scope of service and improving QoS

Aggregationat subsidiaries

AR G3

• Sufficient bandwidth, high reliability design, and support for future service development

E1, MSTP

• Reduced O&M costs (especially for branches located far away from subsidiaries and HQ) with the help of AR G3 routers' powerful remote maintenance functions AR G3

Enterprise Networking Solutions and Cases

140

Overview of Large Enterprises • Definition of a large enterprise: an enterprisethat has reached a certain level in terms of annual sales, general assets, and employees and has certain influence in its industry. • Business development targets of Huawei: Fortune 500 companies, international enterprises, and regional large enterprises. • Industries of the targeted large enterprises: ISP, manufacturing, commerce, logistics, real estate, etc.

Huawei Solutions for Large Enterprises

Internet Data Center (IDC) Network Solution

xPON Solution for High-end Residential Areas

Applicable to broadcasting, multimedia, information, and Internet companies

Applicable to hotels, holiday villages, and high-end residential areas

Commercial Building Network Solution Applicable to commercial buildings such as office buildings, enterprise OA buildings, and high-rise apartments

Based on the characteristics of ISP, commerce, and real estate industries, Huawei has unveiled three major solutions accordingly: IDC Network Solution, xPON Solution for High-end Residential Areas, and Commercial Building Network Solution. For large enterprises in other industries, horizontal network solutions can be used. 141

Enterprise Networking Solutions and Cases

In the cloud computing era, new services constantly come up, which pose many higher requirements for the IDC. Additionally, as more servers are used in the IDC, internal interconnection is dramatically required for the IDC network. Internet companies have varying requirements for the access scale, large Layer 2, VM migration, and network convergence of the IDC network. Based on the service type,

the IDC can be classified into a search-type IDC (represented by Baidu and Google) and storage-type IDC (exemplified by Facebookand Sina). Search-type data centers have high requirements for inter-server collaborative computing, while storage-type data centers focus on service load-balancing. At present, IDCs are increasingly converged, with unified network functions and structures.

Industry Trends Convergence trends: As Internet services are gradually converged, IDCs will also be converged into comprehensive ones that support both search-type and storagetype IDC functions.

Search-type IDC: requires greater access volume and data mining.

IDC trends: comprehensive IDC Multi-data center construction trends: Internet companies must build multiple data centers to accelerate service response, improve user experience, and enable the customer to quickly benefit form accessible and on-demand data center services.

Storage-type IDC: requires more data-to-desktop and information applications.

IDC Network Development Trends Evolution The future-proof 400G cloud network platforms and desktop clouds that support cloud computing and virtualization technologies will become the industry trends.

Availability

Pooling

Visualization

The IDC network must be highly reliable and secure to ensure that services run uninterruptedly around the clock. In addition, loop free reliable (LFR) Ethernet, end of row (EOR) large-buffer, and IP+optical multi-level disaster recovery solutions will be widely used.

More network virtualization technologies will be used to schedule data and network resources efficiently and on demand and ensure stable service operation. In addition, network structure will be further simplified and services will be isolated more effectively.

Intelligent and visualized network management functions, such as unified IP and IT management, network topology management, and graphic network traffic analysis, will become the basic network management functions of the IDC.

Enterprise Networking Solutions and Cases

142

Large Enterprise

IDC Network Solution

IDC Network Solution Solution Overview The IDC solution has two variants: (1) Large IDC Solution and (2) Small and Midsize IDC Solution. These two variants are defined based on the number of servers. A large IDC houses more than 5000 servers. Due to its large size, the large IDC is traditionally divided into different service function areas. These areas are connected using Layer 3 technologies. However, as large Layer 2 technologies become mature, it will be a good choice to

connect these service function areas through large Layer 2 technologies. Small and midsize IDCs primarily target a specific service, and do not need to define different service function areas. Whether to select a two-layer or threelayer architecture for small and midsize IDCs is determined based the quantity of servers. For large IDCs, Huawei promotes CE series switches; for small and midsize IDC, Huawei highlights S series switches.

Typical Networking a) Architecture of the Large IDC Solution Multi-path flattened network (large buffer)

CE12800

Port buffer

Trill CE12800

CE6800/ CE5800 Master Slave Slave Slave

Master Slave Slave Slave

Area 1

Area 3

Master Slave Slave Slave

Area n

Solution Highlights Area-based construction: Classifies the network into different areas and connects these areas through the core layer. Higher reliability: Uses CSS clustertechnology inside an area to build an LFR Ethernet network, thereby reducing the possibility of loops and simplifying the network structure. In addition, deploys the Trill protocol (a large Layer 2 protocol) between areas to build a wider Layer 2 network and support cross-area VM migration.

143

Enterprise Networking Solutions and Cases

Large capacity: Leverages the prominent features of the CE12800, such as 48T forwarding capability, 1T bandwidth per slot, and a larger number of MAC entries, to support more servers. Data center features: Fully uses the prominent features (such as FCoE and one physical device virtualized into multiple devices) of CE series switches to provide a converged and virtual network, thereby reducing investment.

Core layer: S9700

Cluster + LAG + Stacking

Large Enterprise

b) Architecture of the Small and Midsize IDC Solution

LFR Ethernet

Convergence layer: S7700 Access layer: S5700/S6700

Solution Highlights Hierarchical design: Defines the network into different layers (core layer+access layer or core layer+convergence layer+access layer) based on the number of users.

Large buffer: Leverages the high-end switch S9700 that provides 200 ms buffering capability to guard against traffic congestion.

Reliability: Uses CSS+LAG+iStack technologies to build an LFR network, thereby enhancing the reliability of the ISP network.

Selected Equipment Network Module

S series switch

Selected Equipment

Description

S9700/ S7700

A core switch that supports CSS technology, 40*10GE high-density cards, 48*GE, 200 ms buffering, and all-in-one valued-added service cards.

S6700

A 10GE TOR switch that provides high-density 48-port 10GE cards and supports cluster technology.

S5700

A GE TOR switch that provides high-density 48-port GE cards, supports cluster technology and plug-in cards, and offers 10GE uplinks. Supports data center features such as large Layer 2, equipment virtualization, and VM migration.

CE12800 CE switch (planned TR5 in 2012 Q4)

Uses a CLOS orthogonal architecture that supports amaximum capacity of 48T. Allows for GE, 10GE, 40GE, and 100GE evolution and supports a maximum of 288*40GE and 1152*10GE to meet the requirements of large IDCs.

CE6800

A 48-port TOR access switch that supports 10GE downstream transmission, 40GE upstream transmission, FCoE, Trill, and cluster features.

CE5800

A 48-port TOR access switch that supports GE downstream transmission, 10GE and 40GE upstream transmission, Trill, and cluster features. Enterprise Networking Solutions and Cases

144

Internet Data Center Network Solution Success Stories IDC Network for Yandex in Russia Project Background • Yandex is a Russian Internet company that provides a large number of Internet-based services, such as search, news, map, encyclopedia, mailbox, e-Commerce,and Internet advertising. • Yandex has a large number of access switches in its data center. It has low requirements for equipment features but is highly sensitive to the price, switching capacity, and interface quantity of the equipment. Huawei Solution • Used high-density S5700 switches as access switches to support a large number of servers. (At the largest data center node, 3000 servers are supported costeffectively.)

Backbone

Fastbone

MP-BGP RR

• Used the S9300 switches as P and PE equipmentto support data backup between data centers and interoperate with Cisco's Nexux7000 for quick traffic forwarding between data centers.

MP-BGP RR

Cisco 6500

Cisco 6500

IBGP RR Customer Benefits • Real-time data backup and higher reliability by way of hot backup technology used between data centers (each application service is load-balanced to more than 1000 servers of different data centers) • Investment protection due to seamless interoperability between Huawei's S9300 and Cisco's Nexux7000

Datacenter FOLOA Cisco N7K

Huawei S9300 Only L2

10GE

10GE 10GE

S5300

S5300 S5300

1GE

1GE

1GE

Servers

145

Enterprise Networking Solutions and Cases

Cisco 6500

Large Enterprise

Success Stories IDC Network for Baidu

Project Background • Baidu is the largest search service provider in China, with a market share of 77.7%, according to iResearch's 2011 statistics. • Massive website visits, requiring parallel-computingcapable servers • Heavy data traffic, calling for access and convergence devices that have a large switching capacity and high packet forwarding capabilities Huawei Solution • Deployed multiple S9300 switches and 40 S6700 switches to build a large Layer 2 network (S9300: provides 10GE aggregation; S6700: provides 10GE access). • Used end-to-end high reliability design. Customer Benefits • Real-time search services for worldwide users • Line speed and congestion-free upstream transmission on all access switches

Core Layer S9300 Access Layer S6700

• End-to-end reliability assurance to ensure the user experience

Enterprise Networking Solutions and Cases

146

IDC Network Solution Success Stories IDC Network for Shanghai Giant Network Technology Co., Ltd. Project Background • Shanghai Giant Network Technology Co., Ltd. is a famous interactive entertainment company that mainly focuses on online games. • It intended to build a high-bandwidth and highreliability IDC to support more users and turn itself into a more appealing game platform in China. • Easy network management was also the company's key requirement. Huawei Solution • Used stacking technology and S series switches (providing high-density GE/10GE ports) to offer a large switching capacity for data center services. • Adopts high-reliability design for equipment and the entire network to secure services and ensure service profitability. • Used an efficient and powerful NMS system to achieve visualized network management and speed up service provisioning. Customer Benefits • Good benefits from Huawei's technical service capabilities • Improved application performance and support for a large number of users as expected IP/FC SAN

147

Enterprise Networking Solutions and Cases

Large Enterprise

xPON Solution for High-end Residential Areas Industry Requirements Characteristics of high-end residential areas, high-end hotels, and villas: 1. At present, users do not have so high requirements for bandwidth. However, as bandwidth-hungry services such as IPTV, video communications, and online gaming are successively launched, more bandwidths will be required. 2. Traditional voices and TV services are still strongly required. As a result, a unified network is needed to support all services.

3. Users have strong payment capabilities and the network is used for a long time. Therefore, the network must be easy to maintain. Fire To The x (FTTx) solutions are well suited for these scenarios and efficiently support bandwidth-hungry services such as IP data, video, and voice services.

Requirements from IP and traditional services

Large-campus, low-density, and large-bandwidth network coverage

Durable and easy maintenance

High-end residential areas

Complex access scenarios

Solution Introduction To respond to market demands, Huawei has unveiled an FTTx Campus Solution for high-end residential areas. This solution uses xPON and other local access technologies to support a variety of services, such as data communications, conventional voice, conventional TV, VoIP, IPTV, and video surveillance services.

This FTTx Campus Solution contains three major solutions: FTTx Solution, FTTC (WLAN+ Camera) Solution, and RF Overlay Solution.

xPON Solution for High-end Residential Areas FTTx Solution

FTTC (WLAN+Camera) Solution

RF Overlay Solution

Enterprise Networking Solutions and Cases

148

xPON Solution for High-end Residential Areas 1. FTTx Solution Solution Overview This solution helps build a point-to-multipoint (P2MP) passive optical network (PON). The PON network features a high bandwidth of 2.5 Gbit/s to even 10 Gbit/s, wide coverage, and long transmission distance. In addition, this network supports comprehensive QoS features and provides multiple protection schemes, thereby efficiently supporting multiple services, such as voice, data, and video. The PON

network consists of the optical line terminal (OLT), optical distribution network (ODN), and optical network unit (ONU) or optical network terminal (ONT). This solution supports indoor and outdoor scenarios. Based on different access scenarios, FTTx is classified into FTTB, FTTH, and FTTC.

FTTB (Fiber To The Building) FTTB applies to shopping malls, stores, and clubs. By using access devices and AR routers or access switches, FTTB provides high-density optical broadband access and supports multiple services (such as OA, voice, and videoconferencing) for SMEs.

149

Enterprise Networking Solutions and Cases

FTTC (Fiber To The Curb) FTTH (Fiber To The Home) FTTH applies to highend residential areas, apartments, andhotels. It provides not only conventional telephony and TV services, but also high-speed Internet (HSI) and triple-play services to households.

FTTC allows for smooth operation of bandwidthhungry services such as video surveillance and WiFi, and also ensures indoor and outdoor coverage throughout the campus.

Large Enterprise

Typical Networking MA5600T MA5603T MA5608T

OLT

Internet

PSTN Router Splitter

MA5669

MA5626 ONU

Splitter ONU ONU Camera(CCTV) LSW

Access control

PC

MA5616 AR

IP Phone

HG8245T HG8247T ONT

ONU

Network monitoring room LSW

MA5669

POTS

Videoconferencing

FTTB/FTTF Stores, restaurants, supermarkets, banks, etc.

PC

RF IPTV POTS (CATV) FTTH Villas, apartments, hotels, etc.

AP

AP

AP

FTTC WLAN covering the residentialarea

Solution Highlights • Provides full-service access to meet requirements in different scenarios. • Supports unified management of all access equipment and ensures easy and efficient network O&M through the use of unified NMS and professional fault diagnosis equipment. • Provides large capacity, high bandwidth, multi-service support, and easy maintenance features (PON is the mainstream construction mode for "last mile" in the industry). • Supports multiple access technologies and uses passive optical splitters to suit various scenarios. • Adopts a P2MP PON that reduces the backbone optical fibers and features strong anti-interference performance and a low fault rate.

Enterprise Networking Solutions and Cases

150

xPON Solution for High-end Residential Areas 2. FTTC (WLAN+ Camera) Solution Intelligent Video surveillance Storage application management equipment system platform

Software client

Video wall Video decoder Software client Control center

Indoor Indoor distributed AP settled AP Indoor Wi-Fi

Office desktop

Outdoor AP Outdoor Wi-Fi

Optical splitter

Optical splitter

Video encoder Analog camera

Indoor security

IP camera Household security

IP camera Campus security

Solution Highlights • Adopts multi-level optical splitting to fully utilize optical resources and achieve wide coverage of the access network. • Uses passive optical splitters that do not need power supply or maintenance, have a low fault rate, and are free from ambient interference. • Supports POE to transmit data packets while supplying power to cameras and APs through Category 5 cables.

151

Enterprise Networking Solutions and Cases

Large Enterprise

3. RF Overlay Solution Solution Overview This solution uses optical transceivers to modulate CATV RF signals into optical signals and then transmits them over the PON network. This solution can leverage the FTTH ODN

network to build an all-optical access network. The RF network provides broadcasting and video services, while the PON network is used for interactive services.

Switch

Solution Highlights • Seamlessly interconnects the broadcasting television network and the Internet and uses the newly built FTTH network to transmit CATV signals to end users. • Uses the newly built FTTH network to provide multiple services, such as Internet access, VoIP, and VoD services. • Provides a unified access platform for data services and previous CATV services (these two services do not affect each other), which facilitates future upgrade from CATV to IPTV.

Enterprise Networking Solutions and Cases

152

xPON Solution for High-end Residential Areas Selected Equipment Equipment Type

Product MA5600T: large-capacity OLT for 8K ONU/ONT access

OLT

MA5603T: medium-capacity OLT for 6K ONU/ONT access MA5608T: small-capacity OLT for 2K ONU/ONT access Multi-service processing: MA5616 Enterprise office: MA5620 and MA5626

ONU

Three-network convergence: MA5612 Simplified edition for enterprises (indoor and outdoor): MA5628 Outdoor integrated: MA5669 Industry level: MA5621 Bridging ONT: HG8010

ONT

Bridging+voice ONT: HG8110, HG8240, and HG8242 Gateway ONT: HG8245, HG8247, and HG8447

AC AP

153

Enterprise Networking Solutions and Cases

Standalone AC: AC6605 Indoor: AP6010DN Outdoor: AP6610DN

Large Enterprise

Success Stories FTTH Project for Burj Khalifa Project Background • Burj Khalifa is the tallest manmade structure in the world, at 829.84 m. It has 1044 deluxe apartments and houses the world's first Armani Hotel with 160 guest rooms and suites. Due to Burj Khalifa's uniqueness and top-class position, customers have stringent requirements for multimedia communications service inside Burj Khalifa. • Burj Khalifa intended to build a network for different scenarios/services and also large-bandwidth and highdensity access. Huawei Solution • Provided 100 Mbit/s ultra-broadband services through FTTH. • Designed different service levels, and provided differentiated quality services and unique services such as customization of targeted advertisements and programs. Customer Benefits • Higher quality, more reliable, and full-service ultrabroadband experience • Differentiated services (triple play service for individual users; VPN/leased line service for common commercial users; P2P service for VIP customers)

Enterprise Networking Solutions and Cases

154

xPON Solution for High-end Residential Areas Success Stories GPON Project for Hangzhou Legend City Project Background • The Legend City is currently the largest building complex in Hangzhou and also the first high-class building complex in Zhejiang Province. It is a complex of high-quality office buildings, city view apartments, internationalized commercial apartments, internationalized hotels, and top-notch stores. • The customer required a network solution that is able to provide ultra-broadband access and carry both traditional and VoIP services. Huawei Solution • The OLT (MA5680T) in the core equipment room provides Internet access and voice services for the whole building complex. It is connected downstream to the UA5000 (which uses GPON for upstream transmission) for voice service access through UA5000's POTS ports, and also to the MA5626 for data service access. The OLT also implements FTTH for ultrabroadband services.

Data center

Softco Core equipment room

Customer Benefits • High-quality, highly-reliable, and full-service experience (including ultra-broadband and voice services) • Lower network maintenance cost using unified platform to carry data and voice services

155

Enterprise Networking Solutions and Cases

1:8 splitratio MA5680T CMNET

Legend City, Hangzhou

Large Enterprise

Success Stories Iusacell FTTH Project Project Background • Iusacell wanted its network to carry more services facing fierce competition in the local access network markets. • The video service has become a missioncritical service for Iusacell to win the market. • An ultra-broadband platform was in urgent need for future FMC services. Huawei Solution • Provided a unified FTTH platform for TV, HSI and VoIP services. • Provided an integrated voice solution (IPTV+RF overlay/FTTH) for different application scenarios. • Designed ODN sites in a professional way to accelerate FTTH deployment. Customer Benefits • Shortened deployment through the use of automatic network configuration and PnP installation • Slashed OPEX with unified management and powerful ONT OAM

Enterprise Networking Solutions and Cases

156

Commercial Building Network Solution Industry Requirements

High performance and integrated wireless

Convergence of data and language

157

Enterprise Networking Solutions and Cases

Rich and comprehensive security policies

Commercial building

Simplified network management

Large Enterprise

Solution Overview

• 1-5 stories • 100-300 information points • High performance, multifunction, flattened network, and high reliability • Traditional voice access • Internet access for services such as sending and receiving emails

Commercial Building Network Solution Architecture of the Abuilding infrastructure platform

WLAN solution for buildings

Voice services solution for buildings

Low-rise building

The commercial building network solution provides an intelligent network that integrates security, wireless access, and unified communications. For various application scenarios of small- and medium-sized enterprises, this solution includes the building basic network solution, building WLAN solution, and inter-building voice solution.

• 5-10 stories • 300-1000 information points • High performance, easy management, high reliability, and clear hierarchy • Network scalability • External services such as website and email • Massive traditional voice access or VoIP access • Remote access and hierarchical department management

High-rise building

Currently, commercial buildings can be classified into low-rise buildings and high-rise ones by the number of stories and information points. Low-rise buildings have less than five stories and 100-300 information points. High-rise buildings have five or more stories and more than 300 information points. Note that the campus network solution, instead of commercial building network solution, is recommended for highrise buildings having more than 10 stories.

Product Configurations for the Solution Internet Egress

Aggregation Switch

Access Switch

Estimated Cost (CNY)

Low-rise Building

AR2200

S5700

S3700

35,000 to 100,000

High-rise Building

AR3200

S7700

S5700

50,000 to 200,000

Enterprise Networking Solutions and Cases

158

Commercial Building Network Solution 1. Building Basic Network Solution Solution Overview Basic Network Solution for Low-rise Buildings

Basic Network Solution for High-rise Buildings

• A typical low-rise building has 100-300 information points.

• A typical high-rise building has 300-1000 information points.

• This solution uses middle-range switches as the central network switching platform and central convergence point, low-end switches for service and terminal access, and AR routers as the egress routers of the entire network. The AR routers integrate basic firewall functions to protect the system boundary security, and they also function as PBXs to provide VoIP and traditional voice services. This solution only requires a simplified network management tool.

• This solution uses function-rich AR routers as the egress routers and deploys professional firewalls. High-density voice boards of AR routers support massive traditional voice service access. • This solution uses S7700s for core convergence. Integrated with AC functions, S7700s have their failure possibilities minimized and are easy to maintain. S5700s are stacked at the convergence layer, simplifying configurations and improving network performance and reliability. • This solution requires a professional network management tool.

Typical Networking Staff on the move

159

Enterprise Networking Solutions and Cases

S5700 stacking

Access layer

Access layer

Core layer

Internal server area eSight NMS

Convergence layer

Core layer

Staff on the move

Internal server area eSight NMS

E series

S7700 Built-in AC

S5700 stacking

Large Enterprise

Solution Highlights • Integration of voice, security, and wireless access: Function-rich AR routers provide built-in PBX functions for traditional and VoIP voice services, and built-in firewall and AC functions for network security and wireless access. • Scalability: A flexible network structure allows future expansion of voice and wireless services, protecting customer investment.

• Easy maintenance: The network is flattened. The NMS can manage IP and IT devices in a unified manner, with no need to assign a dedicated IT engineer. • Clear area division: Departments are physically isolated or logically isolated by VLANs, ensuring service security and facilitating troubleshooting. • High reliability: The core aggregation devices are stacked, and AR routers use redundancy backup for 3G links.

Selected Equipment Equipment Type

Product

Core switch

S7700 (for high-rise buildings)

Aggregation switch

S5700 (for high-rise buildings) and S3700 (for low-rise buildings)

Access switch

S3700

Egress router

AR2200 (for low-rise buildings) and AR3200 (for high-rise buildings)

Enterprise Networking Solutions and Cases

160

Commercial Building Network Solution 2. Building WLAN Solution Solution Overview This solution uses AC-capable AR egress routers and S7700 series switches, PoE-capable S3700 and S5700 series switches, and various wireless APs for unified control and management of wired/wireless users as well as good adaptability to different scenarios. This solution supports multiple WAN upstream modes (for example, 3G) and achieves flexible wired/wireless access.

Soluation Highlights

Extranet area

E series AC6605 Independent AC

Core/ Convergence layer S5700EI

stacking

S7700 Built-in AC Server area (authentication\management\eSight)

Access layer

Wireless Wireless Wireless conaccess access ference

Wireless OA Voice Monitoring Monitoring services

• Provides the 802.11n network, compatible with existing 802.11 a/b/g users. • Supports a maximum rate of 450 Mbit/s for a single frequency, and 900 Mbit/s for dual frequencies (by 2012 Q4); provides products with the world's best radio frequency, strong anti-interference, and large coverage. • Provides intelligent Layer 2 isolation technology and MAC-address-based packet forwarding to avoid broadcast storm; supports IP source guard, DHCP snooping, and DAI in local forwarding mode for a perfect balance of performance and security. Selected Equipment Network Module AC

AP

Selected Equipment AC6605 AR3200/AR2200, S7700 (integrated with an AC board) AP6010 SN (single frequency), AP6010DN (dual-frequency), AP7110 DN (3 x 3MIMO dual-frequency 900 Mbit/s 11n AP), AP6310 SN (indoor 11n AP), AP6510 DN (outdoor dual-frequency 11n AP), and AP6610 DN (full-specification outdoor dual-frequency 11n AP) AR1200/AR200

161

Enterprise Networking Solutions and Cases

Typical Networking

Solution Overview This solution uses an AR router (also has the functions of IP PBX) as the egress router of a building. IP phones are connected to the PoE ports of S3700/S5700 switches. The high-density voice board of an AR router provides a maximum of 256 POTS ports for large-scale analog voice service access.

Commercial building A (HQ)

Commercial building B

Solution Highlights • Provides One Number Link You (ONLY), paging, and call transfer services (by AR). • Provides 3G backup and local survival for branches to improve service reliability (by AR functioning as the enterprise voice gateway). • Allows services to be carried over the IP network, saving toll communication costs.

Success Stories Long Wish Hotel Network Project Project Background • Long Wish Hotel International, with the investment of more than CNY3 billion, is a five-star modern hotel with super-standard. • With the growing services, the Hotel needed to provide sufficient bandwidth for diversified services like OA, multimedia conferencing, high-speed Internet access, digital TV on demand, and video surveillance.

Customer Benefits • Shortened network rollout to meet multi-service requirements • Good service experience through the use of Huawei's function-rich X7 all-series switches

Internal server area eSight NMS

E series

S7700 Built-in AC

Convergence layer

• Employed enhanced Ethernet protocols from the S7700 at the core layer to the S5700/S2700 at the access layer, ensuring hitless service switching.

Access layer

• Deployed four networks (operation network, hotel room network, hotel room control board, and digital TV on demand network), each using S7700 as the core device; used S5700 access the access device for the hotel room network and S2700 for the other three.

Access layer

Huawei Solution

S5700 stacking S2700SI Extranet access

S2700SI Extranet access

Enterprise Networking Solutions and Cases

162

Large Enterprise

3. Inter-building Voice Solution

Success Stories Office Network Project for Beijing Zhongye Building Project Background • The office network of Zhongye Building for Patent Examination Cooperation Center of SIPO involved two parts: intranet and extranet. They are physically isolated and connected to the SIPO intranet and extranet separately. • The office network needed to cover 1800 information points and be scalable for future service expansion. • Wireless coverage was required for all stories to achieve mobile office. Huawei Solution • Deployed function-rich switches (redundancy configuration of key modules; hot-swappable, integrated service modules) in the intranet. • Used special software for 110 APs to ensure wireless coverage in the building. • Used the 10GE optical fiber to connect two core switches, preventing failures of key nodes Customer Benefits • Higher work efficiency with efficient, ubiquitous, and integrated wired/wireless access • No service interruption through the use of full-redundancy design

AC6605

Independent AC Core/ Convergence layer S5700EI stacking

S7700 Built-in AC

Server area (authentication\management\eSight)

Access laye

Wireless access

• Shortened network rollout to accelerate the customer's multiservice footprint and protect their investment

Wireless access

Wireless conference

Wireless OA

Voice Monitoring Monitoring services

Arqiva Arqnet Enterprise Access Project Project Background • Arqiva, the communications infrastructure and media services company, operates at the heart of the broadcast, satellite and mobile communications markets. Customers include major broadcasters such as the BBC, BSkyB and the independent radio groups • Aqriva required a high-performance integrated CPE for government, mobile, and enterprise user access. Huawei Solution

Core layer

Internationally assigned employees

• Provided AR G3, an integrated CPE. The function-rich (highspeed Internet access, high-performance LAN switching, embedded voice service, Wi-Fi/3G/4G wireless access, and abundant interfaces) AR G3 simplifies network design, accelerates service launch, and better protects customer investment. Customer Benefits

Access layer

• Cost-saving through the use of an all-in-one (Internet access, LAN switching, VPN, and security) CPE • Industry-leading performance and scalability with the use of the multi-core CPU and non-blocking switching architecture • Accelerated multi-service footprint and maximized return on investment (ROI) 163

Enterprise Networking Solutions and Cases

Large Enterprise

Commercial Building Network Solution Success Stories Transnational communications Project for China CTDI Engineering Corporation Project Background • China CTDI Engineering Corporation (CTDI for short) is headquartered in Chongqing, China. The headquarters originally communicated with the branch in Laos through the international line, but the cost was high and the voice functions were limited. To achieve highly-efficient and cost-effective transnational communication, CTDI decided to purchase new devices. Huawei Solution • Deployed AR2240 as an IP-PBX in the headquarters and AR1220V as an IP-PBX in Laos branch; deployed SIP trunks over the Internet for VoIP services between the headquarters and branch. • Merely added boards and IP phones for the growing demands. Customer Benefits • Extensive services including voice conference, voice mailbox, IVR, call waiting, call transfer, call forwarding, secretary, and remote office • Slashed cost (saving more than 90%) for transnational communications • Secure communications based on industry-leading VPN/IPSec; adaptable to poor network environment using HQoS

External fixed-line phones/mobile phones

Fixed-line phones at branches

Laos AR1220V

IP phones at branches

Fixed-line phones at HQ

External fixed-line phones/mobile phones

Chongqing AR2240

IP phones at HQ

Enterprise Networking Solutions and Cases

164

Copyright © Huawei Technologies Co., Ltd. 2012. All rights reserved. No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd. Trademarks and Permissions and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd. All other trademarks and trade names mentioned in this document are the property of their respective holders. Notice The information in this document may contain predictive statements including, but not limited to, statements regarding future financial and operating results, future product portfolios, and new technologies. There are many uncertainties in practice; therefore, the actual results may be different from the predicted information. The information in this document is for reference only and does not constitute a warranty of any kind, express or implied. The information in this document is subject to change without notice.

Huawei Technologies Co., Ltd. Huawei Industrial Base Bantian, Longgang Shenzhen 518129 People's Republic of China Tel: +86 755 28780808 www.huawei.com