Product Features 

Distributed Multi-Engine Design

• Distributed Control Engine: All service boards are equipped with a high-performance control and processing system, which can efficiently process various protocol and control packets, support fine-grained management and control of protocol packets, and has complete anti-protocol packet attack capability.
• Distributed Detection Engine: All service boards can implement distributed fast fault detection such as BFD and OAM, which is linked with the control plane protocol. It supports millisecond-level fault detection, fast protection switching and convergence to ensure non-stop service operation.
• Distributed Maintenance Engine: The intelligent CPU system supports intelligent power management, which can realize online device status detection and sequential power on/off of boards. This reduces the power surge caused by simultaneous power on of multiple boards, extends the service life of the device, and reduces electromagnetic radiation and system power consumption.

IRF2 (Intelligent Resilient Framework 2)

• Simplified Management & Service: Under the IRF architecture, you can log in to the unified logical entity through a single device and complete the configuration of the entire system at one time without operating each device one by one. Control protocols run in a unified manner, and cross-device link aggregation can replace the Spanning Tree Protocol, which greatly reduces the interaction of protocol packets between devices, simplifies network operation, and shortens the convergence time during network flapping.
• Flexible Scalability: It supports on-demand flexible expansion to protect user investment. Device joining/leaving the IRF architecture supports hot swapping without affecting the normal operation of other devices.
• High Reliability: It achieves high reliability at three levels: link, device and protocol. Multi-link aggregation realizes link-level backup; when the Master device fails, a new Master can be quickly and automatically elected to realize 1:N device-level backup; protocol hot backup can synchronize configuration information to all member devices to realize 1:N protocol-level reliability.
• High Performance: The performance and port density of the IRF system are the sum of all member devices, which can easily achieve multiple times increase in switching capacity and port density, and greatly improve the device performance.
• Easy Management: The entire architecture shares one IP for management, which simplifies network device and topology management, improves operation efficiency, and reduces maintenance costs.

Comprehensive IPv6 Solution

Programming Language Extension

Three-Plane Security Protection Mechanism

• Control Plane: Built-in protocol packet attack identification module to prevent ARP protocol packet attacks; routing protocols such as OSPF/BGP/IS-IS adopt MD5 authentication to prevent network paralysis caused by illegal routing update packets.
• Management Plane: It ensures the security of device management through SNMPv3 network management protocol, SSH V2, user identity authentication based on 802.1x/AAA/Radius, and hierarchical permission management.
• Forwarding Plane: It supports multi-dimensional fine-grained binding of IP, VLAN, MAC, port and other elements; supports uRPF unicast reverse path forwarding to prevent illegal traffic access; adopts the longest match per-packet forwarding mechanism to effectively resist virus attacks.

Enhanced ACL Features