217109 - Huawei Enterprise
#217109
TEST
January 2017
REPORT
Commissioned by
Huawei Technologies Co., Ltd
Huawei S9700 Series Terabit Routing Switches
Programmable Capability, Performance and Feature Validation
Executive Summary
The Huawei S9700 series Terabit Routing Switch is a fully
programmable core switch based on Huawei’s high-end core
router platform technology. With the Ethernet Network
Processor (ENP), the S9700 provides high capacity, large buffer,
programmability at the forwarding layer, integrated T-bit Access
Controller (AC) capability, Unified User Management, and
multiple user-defined functions. The S9700 can also implement
wired and wireless convergence and vertical virtualization.
Tolly engineers verified Huawei’s S9700 series Terabit Routing
Switches in multiple areas including the native wireless AC
capability, Super Virtual Fabric (SVF), iPCA real-time network
quality monitoring, unified user management, high availability,
easy-operation, Zero Touch Provisioning (ZTP), performance, and
capacity.
The Bottom Line
Huawei S9700 Series Terabit Routing Switches:
1
2
Support wireless Access Controller functions natively with Tbit wireless forwarding capability, up to 2K wireless Access
Points and up to 32K wireless users management capacity,
as well as real-time AC backup for high availability
Support Huawei’s proprietary Super Virtual Fabric (SVF) to
virtualize devices on different layers, including wireless APs,
into 1 network element for management. SVF supports two
layers of clients with up to 2K wireless access points and 576
physical access switches. One SVF instance can cross thirdparty vendors’ Layer 2 network
3
Support the Packet Conservation Algorithm for Internet
(iPCA) technology. iPCA uses actual service flows to detect
the network quality at any node, any time, without
additional cost
4
Support unified user management with MAC, 802.1x, and
Portal authentication modes
Huawei Super Virtual Fabric (SVF) Architecture
Figure 1
Source: Tolly, October 2016
This document #217109 is an updated version of #215169 with several additional tests run in October 2016.
© 2017 Tolly Enterprises, LLC
Tolly.com
Page 1 of 10
Huawei S9700 Series Terabit Routing Switches
Test Results
Native T-bit Wireless Access
Controller (AC)
T-bit Capability
#217109
(ENP) line cards which also support Ethernet
switching. Whenever one device (a physical
S9700 switch or a virtual device with two
S9700 switches using the CSS technology)
has one ENP line card, the device supports
wireless Access Controller (AC) functions
natively.
Traditionally, wireless Access Controller (AC)
functions are implemented by independent
physical devices or cards. Huawei native T-bit
ACs, which are based on Ethernet Network
Processor (ENP) technology, integrate AC
processing and Ethernet switching on the
ENP line card (X1E series line card) of the
S9700 switch. Tolly engineers verified that the
entire system on one S9712 switch could
provide 960Gbps CAPWAP tunnel
encapsulation/decapsulation and data
forwarding capability. Compared with
traditional independent ACs, the native T-bit
AC can support more wireless Access Points
(APs) and users.
Tolly engineer verified that when the S9700
device (physical or virtual) has two ENP line
cards, the failure of one ENP line card did not
cause Ping packet loss between the wired
client and wireless client. Also, the wireless
users were still online after failure.
Wired and Wireless Convergence
To address these problems, Huawei
developed the Super Virtual Fabric (SVF)
technology. SVF virtualizes different network
layers’ devices including wired and wireless
ones into a single network element. The
entire network is a large virtual switch to
simplify network deployment and
management. Administrators can configure
or upgrade the member switches from the
parent switch.
Tolly engineers verified that one S9700
switch could manage up to 2K (2,048) APs
and 32K (32,768) concurrent online wireless
users and provide connectivity between the
wired and wireless networks to achieve wired
and wireless network convergence.
Switch Redundancy for Wireless
Access
When two S9700 switches were virtualized
into one virtual device using the Huawei
Cluster Switch System (CSS) technology, the
two switches supported real-time AC backup.
When one switch failed, the wired and
wireless users were still online. Traffic of the
wired and wireless network was properly
forwarded.
ENP Line Card Redundancy for
Wireless Access
The native AC functions are supported with
the Huawei Ethernet Network Processor
© 2017 Tolly Enterprises, LLC
Super Virtual Fabric
Enterprise campus networks are built stepby-step and have numerous access nodes,
multiple layers, and complex topologies. The
wide deployment of wireless networks
makes enterprise campus networks more
difficult to manage.
A chassis switch contains the Main Processing
Units (MPUs) and line cards, providing a
visualized management view for
administrators. Huawei SVF virtualizes core/
aggregation layer devices into the virtual
switch’s MPU, access switches into the line
cards, and wireless APs into the ports.
Tolly engineers verified that when one S9700
switch worked as the SVF parent switch, the
SVF supported 2,048 wireless APs and 64
Access Switch clients while each Access
Switch (AS) client supports a stack of up to 9
physical access switches using the iStack
Tolly.com
Huawei
Technologies, Co.,
Ltd
S9700 Series
Terabit Routing
Switches
Performance
Evaluation
and Feature
Validation
Tested
October
2016
technology. So 576 physical access switches
were supported in one SVF instance.
Tolly engineers also verified that the SVF
instance can cross third-party vendor
devices with Layer 2 connectivity. One Cisco
Catalyst 3750 switch was used between the
parent Huawei device and the client Huawei
device in the SVF test.
SVF could be managed by the Huawei
eSight Unified Management Platform.
iPCA
The S9700 adopts Huawei’s proprietary
Packet Conservation Algorithm for Internet
(iPCA). Unlike traditional detection
technologies, such as Network Quality
Analyzer (NQA) and Y.1731 that use
simulated or inserted streams, iPCA
implements the evolution from estimated to
accurate Operations and Maintenance
(O&M). NQA technology uses simulated streams
to detect network quality, and the Y.1731
technology uses inserted streams. Both
methods actually detect link quality by
simulating service flows. Therefore, these
detection methods cannot reflect the actual
link quality or accurately locate fault sources.
From Huawei’s field experience, latency,
jitter, and packet loss accuracy of traditional
Page 2 of 10
Huawei S9700 Series Terabit Routing Switches
methods is only about 30 percent. Since
traditional methods locate faults by reducing
fault impact ranges, the fault location is less
precise and the fault isolation process can
take weeks or longer.
iPCA is an in-line detection technology that
uses programmable service flows to detect
network quality, dye the packets with no
overhead, count real service flows, and
detecting service flow link quality anytime
and anywhere. According to Huawei, the
latency, jitter, and packet loss detection
accuracy of iPCA can reach 99 percent. Each
Ethernet Network Processor (ENP) has two
built-in detection points that cover all
forwarding paths on links, cards, and
processors. Faults are reported based on fine
granularity. If a network problem that affects
user experience occurs, iPCA can locate the
link, card, or processor where the problem
occurs within seconds.
Tolly engineers verified that the S9700 switch
supported iPCA to detect the device level, link
level and network level packet loss
accurately.
Unified User Management
Due to high user management capabilities,
Broadband Remote Access Server (BRAS)
devices are widely used in carrier networks.
But high prices have hindered BRAS’
deployment in campus networks. The S9700
switch with the ENP line cards features
powerful programming capabilities and
provides Unified User Management, which
authenticates both wired and wireless users.
Tolly engineers verified that the S9700
shielded capability and access differences
between devices and supported multiple
authentication modes, including 802.1X,
MAC address, Portal and IPoE for both wired
and wireless clients. It also supports PPPoE for
wired clients.
© 2017 Tolly Enterprises, LLC
#217109
Traditional operation and maintenance
methods focus on device management;
therefore, only limited Access Control Lists
(ACLs) can be used to manage user
bandwidth and control user rights. The S9700
adopts a user-oriented management design,
assigning each user an individual table to
control rights, bandwidth, and Quality of
Service (QoS), allowing authorization based
on groups, domains, or time.
Tolly engineers verified that the S9700 could
dynamically assign the new VLAN and ACL to
a user when the user got authenticated.
the DHCP server. Then it gets the easy
deployment configuration for the type of
switch it belongs to and receives the FTP
server’s IP address and credential as well as
the configuration file’s position. Lastly, it
downloads the configuration file from the
FTP server and runs it.
Centralized software upgrading and patch
deployment - Administrators can remotely
upgrade the software or deploy a patch to
a member switch from the command
switch.
Also, with the help of the Huawei UCL user
group, administrators could create an ACL
rule “rule 1 deny IP source UCL-group name
Test destination [File Server’s IP address]” to
dynamically block all users in the “Test”
group to access the file server. UCL Group
information is deployed to the switches as
the HW_UCL_Group attribute from the
RADIUS server when a user gets
authenticated.
Faulty device replacement without
configuration - The commander switch
backs up the configuration of all member
switches periodically. When a member
switch fails, administrators can take it down
and put an out-of-box switch of the same
model to the network. The commander
switch automatically loads the latest
backup configuration file of the faulty switch
to the new switch so no configuration is
needed on the replacement switch.
When a user was already authenticated, Tolly
engineers were able to change the dynamic
VLAN of the user by assigning a new dynamic
VLAN on the RADIUS server using the Change
of Authentication (CoA) feature supported by
the S9700.
Tolly engineers verified the three features
when the S9700 switch was a commander
switch. The centralized software upgrading
and patch deployment feature was also
verified when the S9700 switch was a
member switch.
The S9700 also supported Destination
Address Accounting (DAA) to dynamically
adjust the bandwidth and accounting
according to the destination address
(different services) of different users.
Tolly engineers also verified that the
Huawei eSight Unified Management
Platform supported the Zero Touch
Provisioning (ZTP) feature. Administrators
can plan the network topology using
eSight’s graphic Web interface and specify
the configuration for each remote device.
The S9700 switch which is managed by
eSight can then work as the root device to
automatically deploy planned configurations
to the remote devices when the out-of-box
remote devices connects to the network.
Easy-operation
Three features of easy-operation was
verified:
Zero Touch Provisioning (ZTP) of New
Switches - Administrators can specify a
configuration file for each type of switch.
When an out-of-box switch is connected to
the network, it receives the commander
switch’s IP address using option 148 from
Tolly.com
Page 3 of 10
Huawei S9700 Series Terabit Routing Switches
#217109
Huawei 9700 Series Terabit Routing Switch
Tolly Verified Features and Performance
Native T-bit Wireless Access Controller (AC)
Performance and Capacity
✔
T-bit Capability
960Gbps CAPWAP tunnel encapsulation and decapsulation capability
✔
Forwarding Capability: ~3,840Mpps with one S9712 switch
~2,880Mpps with one S9706 switch
~2,160Mpps with one S9703 switch
✔
Wired and Wireless Convergence
Manage2,048 wireless access points (APs), 32,768 concurrent online wireless users and provide
connectivity between wired and wireless networks
✔
EH1D2X16SSC2 16*10GbE Ports Line Card: 100% line-rate forwarding
✔
Switch Chassis Redundancy for Wireless Access
with two S9700 switches stacked using the Huawei CSS technology,
Real-time wireless Access Controller (AC) backup
✔
EH1D2X32SSC0 32*10GbE Ports Line Card: 100% line-rate forwarding, <1.2µs latency
✔
ENP Line Card Redundancy for Wireless Access
✔
EH1D2L08QFC0 8*40GbE Ports Line Card: <1µs latency
✔
EH1D2C02FEE0 2*100GbE Ports Line Card: 100% line-rate forwarding, <1.2µs latency
Super Virtual Fabric
✔
SVF Parent Switch
with 2,048 wireless APs and 64 Access Switch (AS) clients (each AS client supports a stack of 9
physical access switches using the Huawei iStack technology). So 576 physical access switches
were supported in one SVF instance
✔
more than 200ms buffer on one GbE port of the ES1D2S08SX1E line card
more than 200ms buffer on one 10GbE port of the ES1D2S08SX1E line card
✔
SVF across third-party vendors’ devices
(Layer 2 connectivity)
✔
ACL Capacity: 64K rules
iPCA
✔
Security - Next Generation Firewall (NGFW) Module
Device Level, Link Level and Network Level Packet Loss Monitoring with actual service packets
Unified User Management
✔
Load Balancing
Modes: Round Robin, Weighted Round Robing, Source Address Hash, etc.
✔
Dynamic Smart VPN (DSVPN)
✔
802.1X, MAC Address, Portal, and IPoE Authentication for both wired and wireless clients
PPPoE for wired clients
✔
Monitoring 2,000,000 streams’ traffic statistics with the NetStream feature
✔
Dynamic VLAN and ACL for each user when the user gets authenticated
✔
up to 20Gbps Aggregated Throughput
✔
Dynamic User Access Control with the UCL Group
e.g. an ACL rule “rule 1 deny IP source UCL-group name Test destination [File Server’s IP address]”
can dynamically block all users in the “Test” group to access the file server. UCL Group
information is deployed to the switches as the HW_UCL_Group attribute from the RADIUS server
when a user gets authenticated
✔
Maximum concurrent sessions: 12,000,000
✔
Change of Authorization (CoA)
e.g. change the dynamic VLAN of an authenticated user from the RADIUS server
✔
Maximum new sessions connection rate: 400,000 connections per second
✔
Destination Address Accounting (DAA)
Hardware
Easy-operation (as the commander)
✔
✔
Zero Touch Provisioning (ZTP) of new switches
Commander switch automatically loads the specified configuration to out of box member
switches
✔
Centralized software upgrading and patch deployment
Update the software or load a patch to a member switch from the commander switch (S9700
could work as the member service as well)
✔
Faulty device replacement without configuration
Commander switch automatically load the backed up configuration of the faulty member device
to the replacement switch
✔
Zero Touch Provisioning (ZTP) using the eSight Unified Management Platform
Hardware Architecture: Modular Fan Frame and Left-to-back Airflow
High Availability
✔
ERPS with multiple instances
Features
✔
802.1AE IEEE MAC Security standard (MACsec) Interoperability with Third-party (e.g. Juniper)
✔
1588v2
✔
Synchronous Ethernet (SyncE)
High-speed Self Recovery (HSR) Solution
✔
Table 1
Source: Tolly, October 2016
© 2017 Tolly Enterprises, LLC
The maximum failover time of all cross-station traffic was less than 50ms in all test cases
Tolly.com
Page 4 of 10
Huawei S9700 Series Terabit Routing Switches
#217109
Performance
NGFW Module
Forwarding Capability
The firewall module on the Huawei S series
chassis switches is a high performance Nextgeneration Firewall (NGFW) board. It can be
fully integrated with Huawei chassis
switches for easy deployment and flexible
scalability. In addition to the basic firewall
features, according to Huawei, the NGFW
board supports application layer based IPS,
AV, anti-spam, and Web security features.
Each S9712 switch supported about
3,840Mpps forwarding capability. Each S9706
switch supported about 2,880Mpps
forwarding capability. Each S9703 switch
supported about 2,160Mpps forwarding
capability. See Table 2 and the Test
Methodology section for details.
ACL Capacity
64K ACL rules were applied to one S9700
switch. Each rule pointed to one exclusive
MAC address. Tolly engineers verified that
the 64K ACL rules could all work to block
traffic.
Line Card Performance
Throughput and Latency
Throughput and latency were evaluated for
several line cards which are compatible with
the S9700 switch.
The EH1D2X16SSC2 16*10GbE ports line
card, the EH1D2X32SSC0 32*10GbE ports
line card, the EH1D2L08QFC0 8*40GbE ports
line card, and the EH1D2C02FEE0 2*100GbE
ports line card all supported 100% line-rate
forwarding with all ports in full-mesh
topology. See Table 3 for all throughput
results.
Load Balancing with the NGFW
Module
Tolly engineers verified that the NGFW
module supported load balancing with
Round Robin, Weighted Round Robing, and
Source Address Hash modes.
DSVPN with the NGFW Module
Huawei’s Dynamic Smart VPN (DSVPN)
allows branches (spokes) to dynamically
establish direct data forwarding tunnels in
the hub and spoke model. DSVPN can
provide IPsec encryption for security and is
suitable for large enterprise VPN networks.
Tolly engineers verified that a GRE tunnel
was established automatically between two
spoke switches with the NGFW module with
the help of the hub switch with the NGFW
module. Traffic passed through the tunnel
without loss.
The store-and-forward LIFO latency for the
32*10GbE ports line card and the 48*10GbE
ports line card was less than 1.2µs. The LIFO
latency for the 8*40GbE ports line card was
less than 1µs. See Table 4 for all latency
results.
NGFW NetStream Capacity
Port Buffer
NGFW Performance
Tolly engineers verified that one 10GbE port
and one GbE port on the EH1D2S04SX1E line
card supported more than 200ms buffer
with line-rate traffic.
Tolly engineers verified that the NGFW
module on the S9700 switch supported
20Gbps throughput.
© 2017 Tolly Enterprises, LLC
12,000,000 maximum concurrent TCP
sessions. The maximum new session
connection rate was 400,000 connections
per second. There was no connection failure
during the test.
Hardware
Tolly engineers verified that the S9700
switch was equipped with modular fan
frames and left-to-back airflow, as well as
modular power supplies.
High Availability
ERPS with Multiple Instances
The S9700 switch supported ITU-T G.8032
Ethernet Ring Protection Switching (ERPS)
with multiple instances.
Features
MACsec Interoperability
The S9700 switch supported the IEEE
802.1AE MAC Security standard (MACsec) to
encrypt and decrypt frames. Tolly engineers
also verified that the MACsec feature on the
Huawei S9700 switch interoperated with a
Juniper EX4200 switch.
1588v2 and SyncE
The S9700 switch supported 1588v2 and
Synchronous Ethernet (SyncE) for time and
frequency synchronization.
The NGFW module supported monitoring
the traffic statistics of 2,000,000 streams with
the NetStream feature. It can then cache and
upload all the statistics information to the
network management platform.
Tolly engineers also verified that the NGFW
module on the S9700 switch supported
Tolly.com
Page 5 of 10
Huawei S9700 Series Terabit Routing Switches
#217109
Huawei S9700 Switch Layer 3 10GbE Ethernet RFC2544 Throughput
(as reported by HUTAF Tesgine 3.0 xStream V300R005C10B400)
Throughput (percentage of line-rate) with zero frame loss
Frame Sizes
64-Byte
128-Byte
256-Byte
512-Byte
1024-Byte 1280-Byte 1518-Byte
9216-Byte
S9712
256 x 10GbE ports in Full-mesh1
100%
100%
100%
100%
100%
100%
100%
100%
S9706
192 x 10GbE ports in Full-mesh2
100%
100%
100%
100%
100%
100%
100%
100%
S9703
96 x 10GbE ports in Full-mesh3
100%
100%
100%
100%
100%
100%
100%
100%
Note: 1. Twelve EH1D2X32SSC0 32x10GbE ports interface modules on one S9712 switch were tested with two EH1D2SRUDC00 SRUs. Not all ports were
used.
2. Six EH1D2X32SSC0 32x10GbE ports interface modules on one S9706 switch were tested with two EH1D2SRUDC00 SRUs.
3. Three EH1D2X32SSC0 32x10GbE ports interface modules on one S9703 switch were tested with two EH1D2MCUAC00 MPUs.
Source: Tolly, October 2016
Table 2
Huawei S9700 Switch Line Cards Layer 3 Throughput
(as reported by Spirent TestCenter 4.50)
Throughput (percentage of line-rate) with zero frame loss
Frame Sizes
64-Byte
128-Byte
256-Byte
512-Byte
1024-Byte 1280-Byte 1518-Byte
EH1D2X16SSC2 16*10GbE Ports Line Card
(Aggregated 160Gbps)
100%
100%
100%
100%
100%
100%
100%
100%
EH1D2X32SSC0 32*10GbE Ports Line Card
(Aggregated 320Gbps)
100%
100%
100%
100%
100%
100%
100%
100%
EH1D2L08QFC0 8*40GbE Ports Line Card
(Aggregated 320Gbps)
100%
100%
100%
100%
100%
100%
100%
100%
EH1D2C02FEE0 2*100GbE Ports Line Card
(Aggregated 200Gbps)
100%
100%
100%
100%
100%
100%
100%
100%
Source: Tolly, October 2016
9216-Byte
Table 3
Huawei S9700 Switch Line Cards Layer 2 Latency
(as reported by Spirent TestCenter 4.50)
Average Latency (µs) - LIFO
Frame Sizes
64-Byte
128-Byte
256-Byte
512-Byte
1024-Byte 1280-Byte 1518-Byte
9216-Byte
EH1D2X16SSC2 16*10GbE Ports Line Card
1.277
1.277
1.281
1.28
1.276
1.278
1.281
1.273
EH1D2X32SSC0 32*10GbE Ports Line Card
1.191
1.192
1.188
1.192
1.185
1.187
1.186
1.185
EH1D2L08QFC0 8*40GbE Ports Line Card
0.944
0.944
0.946
0.945
0.947
0.947
0.941
0.941
EH1D2C02FEE0 2*100GbE Ports Line Card
8.029
8.090
8.241
8.473
8.933
9.142
9.329
15.805
Note: Bidirectional 100% line-rate traffic between port 1 and port 2 of each line card was used. Store-and-forward latency measured LIFO latency.
Thus, store-and-forward results reported here do not include the time required to store the frame.
Source: Tolly, October 2016
© 2017 Tolly Enterprises, LLC
Table 4
Tolly.com
Page 6 of 10
Huawei S9700 Series Terabit Routing Switches
#217109
Agile Switches. The solution is developed for
transportation as well as broadcasting and
television industries to provide less than
50ms failover time for any node or link
failure.
High-speed Self Recovery
(HSR) Solution
Taking advantage of the fully programmable
capability of the Ethernet Network Processor
(ENP), Huawei developed the unique Highspeed Self-Recovery (HSR) Solution using the
solution provided less than 50ms station-tostation traffic failover time for link and node
failures with IP&VPN FastReroute (FRR),
MPLS TE Hot-standby, MPLS L3VPN FRR,
Virtual Router Redundancy Protocol (VRRP),
and hardware-based fast Bidirectional
Forwarding Detection (BFD) technologies.
See Figure 2 and Table 5 for detail.
Tolly evaluated Huawei’s HSR solution in a
Metro system network and verified that the
Huawei High-speed Self Recovery (HSR) Solution with Huawei Agile Switches
IP & VPN FRR + MPLS TE Hot-standby + MPLS L3 VPN FRR + VRRP + Hardware-based BFD
7
X
Station 1
X
9
S9700
5X
X3
X
2
S7700
8X
6
X
Station 3
X1
S12700
X4
Station 2
Spirent TestCenter
Link Failure
Line-card Failure
Failure Point
Point 1 Point 2 Point 3 Point 4 Point 5 Point 6 Point 7 Point 8 Point 9 DUT1
Cross Station Traffic
12
12
10
10
4
9
10
13
12
12
Average Traffic
Failover Time (ms)
Note Failure
DUT2
DUT3
DUT1
DUT2
DUT3
11
11
12
12
10
Note: 1. After the failure was recovered, the convergence time of traffic was 0 in all tests.
2. The maximum failover time of all cross-station traffic was less than 50ms in all test cases.
Figure 2, Table 5
Source: Tolly, October 2016
© 2017 Tolly Enterprises, LLC
Tolly.com
Page 7 of 10
Huawei S9700 Series Terabit Routing Switches
#217109
Test Setup &
Methodology
Test Methodology
Test Environment
One S9712 switch with 12 EH1D2S08SX1E
line cards and two EH1D2SRUDC00 SRUs was
tested. Each EH1D2S08SX1E line card has
8*10GbE ports connected to the HUTAF
Native T-bit Wireless Access
Controller (AC)
Huawei S9703, S9706 and S9712 switches
were used in the test. See Table 6.
Tesgine 3.0 test tool. So 96*10GbE ports on
the switch were used. The Tesgine 3.0 sent
960Gbps traffic to the CAPWAP tunnel with
the CAPWAP header. The receiving side of
Tesgine received ~95% of the 960Gbps data
without any frame loss. The receiving side
was not 100% because the S9712 switch
decapsulated the CAPWAP header of each
Performance Test Bed
Huawei S9703 Terabit Routing Switch
96 10GbE links
Huawei S9706 Terabit Routing Switch
192 10GbE links
Huawei S9712 Terabit Routing Switch
192 10GbE links
One HUTAF Tesgine 3.0 (each with
six Multiport 10G Data Generation
and Analysis Boards)
Note: 1. Twelve EH1D2X32SSC0 32x10GbE ports interface modules on one S9712 switch were tested with two EH1D2SRUDC00 SRUs. Not all ports were
used.
2. Six EH1D2X32SSC0 32x10GbE ports interface modules on one S9706 switch were tested with two EH1D2SRUDC00 SRUs.
3. Three EH1D2X32SSC0 32x10GbE ports interface modules on one S9703 switch were tested with two EH1D2MCUAC00 MPUs.
4. The photos here are the -AC models which use Alternating Current. S9703, S9706 and S9712 also have -DC models which use Direct Current.
Source: Tolly, October 2016
© 2017 Tolly Enterprises, LLC
Figure 3
Tolly.com
Page 8 of 10
Huawei S9700 Series Terabit Routing Switches
#217109
frame. The test simulated that the wireless
network sent 960Gbps traffic to the wired
network. So the S9712 switch under test
processed 960Gbps wireless traffic.
more than 240ms buffer. To support more
than 200ms buffer on one 10GbE port,
engineers changed the buffer distribution of
the line card.
Each EH1D2S08SX1E line card with the
Huawei Ethernet Network Processor (ENP)
supports forwarding 80Gbps wireless data.
NGFW Performance
The throughput test of the NGFW module
used 1,518-byte frames.
Switch Redundancy for Wireless
Access
To evaluate the traffic failover, engineers used
one wired client and one wireless client to
ping each other. There was only 0 Ping
packet loss from the wireless client to the
wired client and 0 Ping packet loss from the
wired client to the wireless client when one
S9700 switch failed.
Device Under Test
SVF
The SVF feature was evaluated with physical
S9700 and S5720EI access switches as well as
a wireless AP. The capacity of managed APs
were evaluated with simulated Huawei APs.
Product
Huawei S9703, S9706, S9712 Switch Chassis
Layer 2 Throughput
EH1D2SRUDC00 SRU
Full-mesh: traffic from each port to all other
ports.
EH1D200CMU00 MPU
Forwarding Capability
Tolly engineers verified that one S9706
supported 100% line-rate forwarding with
192 10GbE ports in full-mesh using 64-byte
frames.
In the networking industry, some vendors’
data sheets use 1.4881 as the ratio to convert
Gbps throughput to Mpps packet forwarding
rate while some vendors round the ratio to
1.5. When using 1.5 as the ratio, the
forwarding capability of one S9706 switch is
1,920 * 1.5 = 2,880Mpps.
Port Buffer
One EH1D2S08SX1E line card has eight GbE
ports and eight 10GbE ports. With the
default configuration, one GbE port provides
© 2017 Tolly Enterprises, LLC
Software
Version
EH1D2C02FEE0 2-Port 100GBASE-X Interface Card
S9700
EH1D2L08QFC0 8-Port 40GBASE-X Interface Card
EH1D2X32SSC0 32-Port 10GBASE-X Interface Card
V200R008
V200R009
V200R010
EH1D2X16SSC2 16-Port 10GBASE-X Interface Card
EH1D2S04SX1E 4-Port 10GBASE-X + 4-Port 100/1000BASE-X Interface Card
EH1D2S08SX1E 8-Port 10GBASE-X + 8-Port 100/1000BASE-X Interface Card
EH1D2VS08000 Cluster Switching System Service Unit with eight 10G ports
ET1D2FW00S02 Next-generation Firewall (NGFW) Module
Source: Tolly, October 2016
Tolly.com
V100R001
Table 6
Page 9 of 10
Huawei S9700 Series Terabit Routing Switches
#217109
Test Equipment Summary
About Tolly
The Tolly Group companies have been
delivering world-class IT services for
more than 25 years. Tolly is a leading
global provider of third-party
validation services for vendors of IT
products, components and services.
Vendor
Product
Huawei
HUTAF Tesgine 3.0 Traffic Generator/Analyzer
Version: xStream V300R005C10B400
You can reach the company by E-mail
at [email protected], or by telephone at
+1 561.391.5610.
Spirent
TestCenter 4.50
Ixia
XM12 Chassis, BreakingPoint
Visit Tolly on the Internet at:
http://www.tolly.com
Logo
Terms of Usage
This document is provided, free-of-charge, to help you understand whether a given product, technology or service merits additional
investigation for your particular needs. Any decision to purchase a product must be based on your own assessment of suitability
based on your needs. The document should never be used as a substitute for advice from a qualified IT or business professional.
This evaluation was focused on illustrating specific features and/or performance of the product(s) and was conducted under
controlled, laboratory conditions. Certain tests may have been tailored to reflect performance under ideal conditions; performance
may vary under real-world conditions. Users should run tests based on their own real-world scenarios to validate performance for
their own networks.
Reasonable efforts were made to ensure the accuracy of the data contained herein but errors and/or oversights can occur. The test/
audit documented herein may also rely on various test tools the accuracy of which is beyond our control. Furthermore, the
document relies on certain representations by the sponsor that are beyond our control to verify. Among these is that the software/
hardware tested is production or production track and is, or will be, available in equivalent or better form to commercial customers.
Accordingly, this document is provided "as is", and Tolly Enterprises, LLC (Tolly) gives no warranty, representation or undertaking,
whether express or implied, and accepts no legal responsibility, whether direct or indirect, for the accuracy, completeness,
usefulness or suitability of any information contained herein. By reviewing this document, you agree that your use of any
information contained herein is at your own risk, and you accept all risks and responsibility for losses, damages, costs and other
consequences resulting directly or indirectly from any information or material available on it. Tolly is not responsible for, and you
agree to hold Tolly and its related affiliates harmless from any loss, harm, injury or damage resulting from or arising out of your use of
or reliance on any of the information provided herein.
Tolly makes no claim as to whether any product or company described herein is suitable for investment. You should obtain your
own independent professional advice, whether legal, accounting or otherwise, before proceeding with any investment or project
related to any information, products or companies described herein. When foreign translations exist, the English document is
considered authoritative. To assure accuracy, only use documents downloaded directly from Tolly.com. No part of any document
may be reproduced, in whole or in part, without the specific written permission of Tolly. All trademarks used in the document are
owned by their respective owners. You agree not to use any trademark in or as the whole or part of your own trademarks in
connection with any activities, products or services which are not ours, or in a manner which may be confusing, misleading or
deceptive or in a manner that disparages us or our information, projects or developments.
217109-iv-15--yx-2017-01-17-VerA
© 2017 Tolly Enterprises, LLC
Tolly.com
Page 10 of 10
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertisement