Huawei NetEngine40E Hardware Description

HUAWEI NetEngine40E Universal ServiceRouter
Hardware Description
6 Boards
Issue 01 (2012-09-30)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
176
Item
Specifications
Storage conditions
Storage temperatu-e: -40°C to +70°C ( -40°F to 158°F )
Storage humidity: 0% to 95%
6.5.3 Integrated Versatile Service Unit 20 A (VSUI-20-A)
This chapter describes the structure and specifications of the VSUI-20-A.
Overview
Internet Protocol Security (IPSec) is a Layer 3 VPN protocol. Data streams in different VPNs
can be authenticated and encrypted, and then transmitted through secure IPSec tunnels.
Security associations are conventions on parameters of the IPSec tunnel to be established
between two communication ends. The Internet Key Exchange (IKE) protocol is used to
generate a key for IPSec.
Carrier Grade NAT (CGN) include NAT and DSLITE. It addresses the IPv4 address shortage
problem and provides a solution to IPv4-to-IPv6 network evolution.
Network Address Translation (NAT) is a technology for sharing IP addresses, which solves
the problem of a lack of valid IPv4 addresses on a growing Internet. With NAT, multiple users
can share a small number of valid IPv4 addresses to access the Internet. In addition, accesses
to the Internet are transparent to most applications, and no additional configuration needs to
be performed on clients.
The VSUI-20-A provides the following functions:

PAT NAT, symmetric NAT and full cone NAT

Enabling external hosts to access a server on a private network

Application level gateway (ALG) for special applications

Limit on the maximum number of private network users
Dual-Stack Lite (DS-Lite) is a technology that combines tunneling and NAT. Currently, more
and more operators are establishing IPv6 networks. IPv4 services and IPv4 users, however,
also need to develop. Therefore, DS-Lite is introduced to bear IPv4 services. DS-Lite will be
applied in the middle and final phases of IPv6 evolution. An IPv4 over IPv6 tunnel is
established between a CPE and a CGN. The CPE forwards an IPv4 private-network packet of
a user to the CGN over the tunnel. After receiving the packet, the CGN performs NAT to
translate the IPv4 private-network address contained in the packet into an IPv4
public-network address, and then sends the packet to the IPv4 public network. In this manner,
the user attached to the CPE can access the IPv4 public network.
The VSUI-20-A provides the following functions:

NAT

NAT server

NAT ALG

Limit on the number of connections

Limit on the number of interfaces

Dynamic establishment of tunnels

Tunnel PMTU

Huawei NetEngine40E Specifications

General

Brand	Huawei
Model	NetEngine40E
Category	Network Router
Language	English