TOLLYT H E · PDF fileHWTACACS, successfully emu-lated Cisco TACACS and pro-vided dependable...
6
H3C Technologies Co., Limited H3C AR46 Enterprise Core Routers Series Feature Verification and Performance Evaluation of Intelligent Multi-service Enterprise Core Routers Premise: With the number of applications on networks continually increasing, it is becoming more urgent for routers to provide diverse services, which can offer maximum flexibility of deployment and easy management. This can greatly reduce the complexity of middle- to low-end enterprise networks. Additionally, supporting multiple services simultaneously and dependably without compromising processing capacity and maintaining high performance, security and manageability. 3C commissioned The Tolly Group to evaluate a wide array of features, as well as the perform- ance, of the H3C AR46 Enhanced Routing Processing Unit (ERPU) series routers. The H3C AR46 routers can serve as core routers for corporate networks, edge routers on carrier networks, or routers for converged voice, data and video networks. The H3C AR46 series has three models, each of which offers Gigabit Ethernet (GbE) ports. Tolly Group engineers awarded 60 Tolly Verified (TV) certifications for LAN/ WAN protocols, IP applications, IP rout- ing, Multiple Protocol Label Switching (MPLS), Authentication Authorization Accounting (AAA), firewall, security, reliability, and congestion management, among other features. Tests show the H3C AR46 series delivered Layer 3 GbE throughput in bidirectional full-mesh configurations. Tests were conducted in October 2006. Test Summary TOLLY T H E GROUP Achieves excellent forwarding and encryption performance: up to 1.7 million pps and 600 Mbps, respectively Delivers outstanding reliability via hot-swappable modules, VRRP, and diverse QoS measures such as traffic monitoring/ shaping, congestion management, etc. Supports diverse VPN and security features: MPLS/BGP, Layer 2 MPLS, Dynamic VPN, Layer 2 Tunneling Protocol, IPSec, as well as diverse firewall functions Offers IP routing protocols, LAN/WAN protocols, and management protocols, such as Ethernet, PPP, SLIP, frame relay, X.25, ATM, OSPF, BGP, PIM-DM/SM, SNMP, MIB Earns comprehensive set of 60 Tolly Verified certifications Test Highlights No. 206200 December 2006 H © 2006 The Tolly Group Page 1 Figure 1 Model Throughput (Mbps) H3C AR46 Series Gigabit Ethernet Layer 3 Bidirectional Throughput in a Full-Mesh Configuration with 64-Byte Packets (as reported by Spirent) Source: The Tolly Group, December 2006 H3C AR46-20 H3C AR46-40 H3C AR46-80
Transcript of TOLLYT H E · PDF fileHWTACACS, successfully emu-lated Cisco TACACS and pro-vided dependable...
H3C Technologies Co., LimitedH3C AR46 Enterprise Core Routers SeriesFeature Verification and Performance Evaluation ofIntelligent Multi-service Enterprise Core Routers
Premise: With the number of applications on networks continually increasing, it is becoming more urgent for routers to provide diverse services, which can offer maximum flexibility of deployment and easy management. This can greatly reduce the complexity of middle- to low-end enterprise networks. Additionally, supporting multiple services simultaneously and dependably without compromising processing capacity and maintaining high performance, security and manageability.
3C commissioned The Tolly Group to evaluate a wide array of features, as well as the perform-
ance, of the H3C AR46 Enhanced Routing Processing Unit (ERPU) series routers. The H3C AR46 routers can serve as core routers for corporate networks, edge routers on carrier networks, or routers for converged voice, data and video networks.
The H3C AR46 series has three models, each of which offers Gigabit Ethernet (GbE) ports.
Tolly Group engineers awarded 60 Tolly Verified (TV) certifications for LAN/WAN protocols, IP applications, IP rout-ing, Multiple Protocol Label Switching (MPLS), Authentication Authorization Accounting (AAA), firewall, security, reliability, and congestion management, among other features.
Tests show the H3C AR46 series delivered Layer 3 GbE throughput in bidirectional full-mesh configurations.
Tests were conducted in October 2006.
Test
Summary
TOLLYT H E
G R O U P
Achieves excellent forwarding and encryption performance:
up to 1.7 million pps and 600 Mbps, respectively
Delivers outstanding reliability via hot-swappable modules,
VRRP, and diverse QoS measures such as traffic monitoring/
shaping, congestion management, etc.
Supports diverse VPN and security features: MPLS/BGP,
Layer 2 MPLS, Dynamic VPN, Layer 2 Tunneling Protocol,
IPSec, as well as diverse firewall functions
Offers IP routing protocols, LAN/WAN protocols, and
management protocols, such as Ethernet, PPP, SLIP, frame
relay, X.25, ATM, OSPF, BGP, PIM-DM/SM, SNMP, MIB
Earns comprehensive set of 60 Tolly Verified certifications
Test Highlights
No. 206200 December 2006
H
© 2006 The Tolly Group Page 1
Figure 1Model
Thr
ough
put (
Mbp
s)
H3C AR46 Series Gigabit Ethernet Layer 3 Bidirectional Throughput in a Full-Mesh Configuration with 64-Byte Packets
(as reported by Spirent)
Source: The Tolly Group, December 2006
H3C AR46-20 H3C AR46-40 H3C AR46-80
Executive SummaryThe H3C AR46 (ERPU) series successfully passed all Tolly Verified certifications with zero-loss performance on Layer 3 throughput.
Tests show that the H3C AR46 router series offers the per-formance and functions de-signed to protect company in-vestments and meet existing and future network needs for enterprise networks.
Tests show that H3C’s AR46 router series delivers Layer 3 and IPSec throughput with no frame loss when transferring GbE traffic from a SmartBits 6000C.
Test also reveal that the H3C AR46 provides a rich set of
features that meet the needs of enterprise and carrier networks.
Tolly Group engineers awarded 60 TV certifications for a broad range of features and functions verified by engineers.
On the LAN/WAN side, tests show the H3C AR46 series de-livers broad support for Ethernet II, VLAN, Point-to-Point Protocol (PPP), PPP over Ethernet (PPPoE) client/server, frame relay Multilink Frame Relay, and much more. The router earned 15 TV certifica-tions for this category.
Tolly Group engineers also came away impressed by the H3C AR46’s security functions, awarding six Tolly Verified certifications.
The Tolly Group also awarded certifications to the H3C AR46 for its Layer 3 and IPSec throughput and demonstration of high frame forwarding rates.
The H3C AR46 series delivered Layer 3 GbE throughput in a bidirectional full-mesh scenario.
With regard to IPSec throughput, the H3C AR46 also delivered solid performance across two GbE ports in a unidi-rectional full-mesh configura-tion.
With regards to traffic management, tests show that the H3C AR46 offers broad support for a range of queuing functions to manage Layer 3 traffic con-gestion. Moreover, a mechanism on the H3C AR46 can even con-trol flow of data on ingress and egress ports.
Performance
Layer 3 GbE
Throughput
Tolly Group engineers measured the H3C AR46’s bidirectional throughput using a SmartBits 6000C to generate traffic and
H3C Technologies Co., Limited H3C AR46 series
© 2006 The Tolly Group Page 2
H3C AR46 (ERPU) Series
Middle- to Low-End Enterprise Core Routers
Product Name TV URL Product Description
H3C AR46-20 (ERPU)
http://www.tolly.com/TVDetail.aspx?ProductID=210
Three GbE and two Flexible Interface Card slots
H3C AR46-40 (ERPU)
http://www.tolly.com/TVDetail.aspx?ProductID=211
Three GbE and four Flexible Interface Card slots
H3C AR46-80 (ERPU)
http://www.tolly.com/TVDetail.aspx?ProductID=212
Three GbE and eight Flexible Interface Card slots
SmartFlow 5.50 reported that the H3C AR46 Layer 3 bidirec-tional throughput for H3C AR46-20 and H3C AR46-40 was 1,175 Mbps and the packet forwarding rate for both mod-els peaked at 1.7 millions packets per second (pps). The H3C AR46-80 Layer 3 bidirec-tional throughput was 1,163 Mbps with more than 1.7 mil-lions pps packet forwarding. (See Figures 1 and 3.)
IPSec Throughput
DES with MD5
The Tolly Group awarded one TV certification to the H3C AR46 series for achieving throughput of 573 Mbps for all three models. (See Figure 4.)
The packet-forwarding rates for two models, H3C AR46-20 and H3C AR46-40 were the same at 50,433 pps. For the H3C AR46-80 results, it per-formed a little higher with 50,479 pps packet forwarding. (See Figure 5.)
WAN & LAN
Protocols
The H3C AR46 models tested received two TV certifica-tions for LAN protocols (Ethernet II and VLAN). On the WAN protocol side, the H3C AR46 tested demon-strated support for a wide ar-ray of capabilities to create and manage Asynchronous Transfer Mode (ATM) connec-tions over IP or Point-to-Point Protocol (PPP) links. In total, the H3C AR46s earned 13 TV certifications for WAN protocol support.
Internet Protocol
Application
The H3C AR46 models tested support several key IP-related network services. The H3C AR46 demonstrated the ability to provide DHCP services and emulate a DHCP Server, DHCP Client and DHCP Re-lay device. In addition to DHCP, the H3C AR46s tested also support the File Transfer
H3C Technologies Co., Limited H3C AR46 series
© 2006 The Tolly Group Page 3
H3C
H3C AR46 series
Middle-to-Low End Enterprise Core Router
Product SpecificationsVendor-supplied information not
necessarily verified by The Tolly Group
H3C AR46 seriesMulti-Service Capabilities:
VoIP services: H.323, SIP, VOFR, IP Fax, IPHC, ISDN BRI, E1/T1 VoiceApplication layer services: Telnet, Dumb Terminal, Terminal Server, FTP, TFTP, Callback, POS, RTUNetwork layer services: IPX, DLSw, IP Fast Switch, DHCP Client/ Server /Relay
High reliability features:Hot-swappable modulesDual PCI bus, dual powers, dual image, group fans
High encryption & Security capabilities:
H3C AR46+ERPU+ENDE: max throughput is 600 Mbps, max tunnel number is 4000.H3C AR46+RPU+HNDE: max throughput is 160 Mbps, max tunnel is number 2000Security supports: AAA, Radius, SSHv2, ASPF, NAT, IPSec, IKE, HW-TACACS, RSA, CA, EAD
Network Interconnection Protocol:Network protocol services: Ethernet, PPP, MP, SLIP, FR, LAPB, X.25, ISDN, HDLC, and ATM
Virtual Private Networks:Provide services for L2TP VPN, GRE VPN, IPSec VPN, MPLS VPN, BGP VPN, MPLS L2VPN, and DVPN
QoS Algorithms:Wide area of QoS: PQ, CQ, WFQ, CBWFQ, CAR, GTS, WRED, and LR
Voice Applications:Voice features: VOIP, VOFR, IP Fax, IPHC, GK Client, ISDN BRI, E1 Voice, T1 Voice, H.323, and SIP
For more information contact:H3C Technologies Co., LimitedEast Of Liuhe Road,Zhijiang Hi-Tech ParkHangzhou Hi-tech Industrial Development ZoneHangzhou 310053P.R.China URL: http://www.H3C.com
Figure 3
Pac
ket F
orw
ardi
ng R
ate
(pp
s in
thou
sand
s)
ModelSource: The Tolly Group, December 2006
H3C AR46 Series GbE Layer 3 Bidirectional 64-Byte Packets Forwarding in a Full-Mesh Configuration
(as reported by Spirent)
H3C AR46-20 H3C AR46-40 H3C AR46-80
Protocol (FTP) with the ability to act as an FTP Server or FTP Client. Additionally, the rout-ers support Trivial FTP (TFTP). In total, the H3C AR46 devices earned six TV certifications for IP applica-tions support.
Internet Protocol
Version 4 Routing
The Tolly Group awarded 10 TVs to the H3C AR46s for providing support for a wide range of IPv4 routing includ-ing: Static routes, Routing In-formation Protocol (RIP) ver-sion 1/2, Open Shortest Path First (OSPF), Border Gateway Protocol (BGP), Intermediate System-to-Intermediate System version 6 (IS-IS), Internet Group Management Protocol (IGMP), Protocol Independent Multicast-Dense Mode (PIM-DM), PIM-Spare Mode (PIM-SM), and unicast Policy-Based Routing (PBR)
Multiprotocol
label switching
protocols
In this section, the H3C AR46 received two TV certifications by providing features such as Label Distribution Protocol (LDP), and Multiprotocol Label Switching Layer 3 Virtual Private Network (MPLS Layer 3 VPN).
Security/reliability
The Tolly Group awarded 12 TV certifications to the H3C AR46 for providing Authentication, Authorization, and Accounting (AAA), network security tech-nology, and reliability functions. H3C proprietary technology HWTACACS, successfully emu-lated Cisco TACACS and pro-vided dependable AAA, and ra-dius functionalities. Additionally, the H3C AR46 demonstrated support for access control lists (ACLs), Unicast Reverse Path
Filters (URPF), and other secu-rity features. With regards to reli-ability, the H3C AR46s provided support for the Virtual Router Redundancy Protocol (VRRP) and interface backups.
Traffic monitoring and
congestion Mgmt.
The H3C AR46 earned seven TV certifications for monitoring and managing Layer 3 traffic. For monitoring, the H3C AR46 uses Committed Access Rate (CAR) to control input and output traffic on any certain interfaces. In managing traffic congestion in the network, the H3C AR46 of-fers Priority Queueing (PQ), Weighted Fair Queuing (WFQ), Class-based Queueing (CBQ), RTP Priority Queueing (RTPQ), Generic Traffic Shaping (GTS), and Location Registration (LR).
Network Management
Tolly Group engineers awarded six TV certifications to the H3C
H3C Technologies Co., Limited H3C AR46 series
© 2006 The Tolly Group Page 4
Thr
ough
put (
Mbp
s)
Model
H3C AR46 Series Gigabit Ethernet Unidirectional IPSec DES with MD5 Throughput in a Full-Mesh Configuration with 1,400-Byte Packets
(as reported by Spirent)
AR46 for its support of net-work management functions including:
Simple Network Management Protocol (SNMP) version 1/2c/3, Management Information Base (MIB), system logging (SYSLOG), and Remote Moni-toring (RMON).
Test bed setup &
methodology
Tolly Group engineers tested all three models of H3C AR46 series routers H3C AR46-20, H3C AR46-40, and H3C AR46-80, software version 3.40.
For performance testing, engi-neers utilized a Spirent Smart-Bits 6000C with SmartFlow 5.50 to generate test traffic. (See Figure 6.)
IPv4 Performance:
Layer 3 GbE
Throughput
For performance testing, engi-neers utilized a Spirent SmartBits 6000C with SmartFlow 5.50.
In this test, engineers configured Spirent SmartBits 6000C and SmartFlow 5.50 software to measure throughput at Layer 3. Engineers used a full-mesh con-figuration with four GbE ports. Strict RC 2544 recommendations were used to measure 64-byte packets. Each test was run for 60 seconds three times and the results were averaged to obtain the final value.
IPSec Throughput:
DES with MD5
Engineers used the same configurations for IP Forwarding and created an IPSec tunnel be-tween two DUTs with DES en-cryption and MD5 hashing. H3C ENDE hardware encryption ac-celerator and 1,400-byte packets were used in this performance test.
Other Methodologies
and Configurations
Full test methodology details of the various Tolly Verified certifi-cations earned by the H3C AR46 series can be found at http://www.tolly.com/TV/TV_home.aspx.
H3C Technologies Co., Limited H3C AR46 series
© 2006 The Tolly Group Page 5
H3C AR46 Series Gigabit Ethernet Unidirectional IPSec DES with MD5 Packet (1,400-Byte )Forwarding Rate in a Full-Mesh Configuration
(as reported by Spirent )
Model
Pac
ket F
orw
ardi
ng R
ate
(pps
)
H3C AR46-20 H3C AR46-40 H3C AR46-80
© 2006 The Tolly Group Page 6
206200-gtadq2-cdb-12FEB07
Test Equipment Summary
The Tolly Group gratefully acknowledges the providers of test equipment/software used in this project.
Vendor Product Web
Ethereal, Inc. Ethereal 0.10.13 http://www.ethereal.com
Spirent Communications SmartFlow 5.50 http://www.spirentcom.com
Spirent Communications SmartBits 6000C http://www.spirentcom.com
Spirent Communications SmartBits LAN-3325A http://www.spirentcom.com
Spirent Communications SmartBits LAN-3101A http://www.spirentcom.com
The Tolly Group is a lead-ing global provider of third-party validation services for vendors of IT prod-ucts, com-ponents and serv-ices.
The company is based in Boca Raton, FL and can be reached by phone at (561) 391-5610, or via the Internet athttp://www.tolly.com, [email protected]
H3C AR46 (ERPU) Series GbE Layer 3 Bidirectional Throughput in a Full-Mesh Configuration
H3C Technologies Co., Limited H3C AR46 series
