H3C SR8800 10G Core Routers (hereinafter referred to as the SR8800) are developed by Hangzhou H3C Technologies Co., Ltd., based on its thorough research and deep understanding of user needs. The SR8800 can be widely deployed at IP backbone networks, metropolitan area networks (MANs) and the core and distribution layers of large IP networks. Featuring powerful forwarding capabilities and a variety of functions, the SR8800 can well satisfy users' diversified networking needs.
The SR8800 is designed of plane separation and three-engine forwarding. The SR8800 uses distributed high-performance network processors (NPs) for hardware forwarding and adopts the large-volume crossbar non-blocking switching technology to ensure high processing performance and excellent scalability. Through the distributed dedicated quality of service (QoS) modules, the SR8800 provides fine-tuning control and end-to-end QoS for the core applications running on it. In addition, the SR8800 ensures non-interrupted businesses with the distributed operation, administration and maintenance (OAM) detection engine, which realizes fault detection within 30 ms. The SR8800 adopts IRF2, which virtualizes multiple SR8800 routers into one logical router. The logical router uses one control plane and one forwarding plane, reducing network nodes, simplifying network configuration, and improving network availability. In short, by taking full advantage of the innovative technologies and the fine-tuning QoS mechanism, the SR8800 guarantees the smooth operation of concurrent applications for multiple users.
H3C SR8800 10G core routers
The following contents are relatively complicated, please use PC for browsing.
Pls enter c.h3c.com.cn in the PC browser and follow the instruction from the page, you will continue to sync to PC.
Continue mobile phone browsing.
Using the innovative architecture of four-plane separation and three-engine forwarding, the SR8800 integrates the crossbar non-blocking switching technology into its 10G NP platform, thus satisfying users' requirements on application processing performance and capacity. This plane separation architecture minimizes the impact on the forwarding plane caused by system functional modules such as the management module and monitor module, so that the forwarding plane can focus on the application processing to realize 10 Gbps line speed forwarding. The distributed forwarding engine enables the use of hardware in processing applications on the base cards. The SR8800 base cards accommodate NP engine, QoS engine and table search engine at the same time. They use a dedicated forwarding control engine to redirect processes such as table entry lookup and QoS, all of which are previously handled by the NP engine, to the table search engine and QoS engine. This method greatly speeds up the application processing, allowing the system to implement fine-tuning QoS and genuine end-to-end flow control in addition to the 10 Gbps line speed processing of applications.
On the basis of the two planes (control plane and forwarding plane) of traditional core routers, the SR8800 is designed with a unique OAM detection plane using the dedicated OAM engine. This plane monitors network operation and ensures non-interrupted operation with the capability of 30 ms failure detection and 20 ms switchover. The detection plane, which is independent of the control plane and the forwarding plane, ensures carrier-class reliability for users.
In addition, the SR8800 supports a complete reliability mechanism including 1+1 redundancy backup for key components, hot swapping, and hotfix.
The built-in QoS engine supports hierarchical QoS (HQoS), enabling QoS scheduling based on ports, individual users, user groups, and user applications. The cooperation of HQoS and MPLS TE allows bandwidth reservation and dispatch by tunnel or by application.
The QoS engine provides a variety of functions including multiple queuing mechanisms (priority queuing, low latency queuing, custom queuing, weighted fair queuing, class-based weighted fair queuing), congestion avoidance, traffic policing, traffic shaping and priority marking, ensuring differentiated services (bandwidth, delay and jitter) for different users and applications.
The QoS engine also provides a powerful packet buffer capability of 200 ms, which can effectively solve the packet loss problem caused by burst traffic on the network.
The Crossbar switching fabric on the SR8800 supports virtual output queuing (VOQ) and end-to-end flow control technologies, which can effectively avoid head of line (HOL) blocking and implement differentiated services on the Crossbar.
Inherited with H3C's design idea of open application architecture (OAA), the SR8800 adopts open architecture platform (OAP) cards, such as build-in firewall card and intrusion protection system (IPS) card, satisfying the requirements for business customization and system upgrade, and realizing the seamless integration of the core router and application systems.
As the fundamental protocol of the next generation network, IPv6 has been widely recognized for its unique technical advantages. The SR8800 supports the complete IPv6 protocol suite, including IPv6 static routing, RIPng, OSPFv3, IS-ISv6 and BGP4+. It also supports the IPv4-to-IPv6 transition technologies, such as IPv6 manual tunnels, 6to4 tunnels, ISATAP tunnels, GRE tunnels, and IPv4-compatible automatic tunnels.
The SR8800 supports distributed layer 3 MPLS VPN, VLL and VPLS/H-VPLS services, and high-performance P/PE applications. It provides a high-quality and multi-layer MPLS VPN solution. The SR8800 also supports distributed multicast VPN, so that users can initiate high-performance multicast applications in the MPLS VPN very conveniently to enjoy multicast services such as video conference and remote education.
The SR8800 supports a variety of security cards, such as firewall card, IPS card, Secure Sockets Layer (SSL) VPN card, application control gateway (ACG) card, and load balancing (LB) card. The security cards extend protection to every port of the router and enable the ports to provide DoS/DDoS attack protection, traffic monitoring, Uniform Resource Locator (URL) filtering, and application layer filtering.
The SR8800 supports hierarchical user management and password protection. Users of different levels are assigned with different configuration authorities. To log in to the SR8800, a user needs to pass AAA authentication or RADIUS authentication. Besides, the SR8800 supports the following:
SSH2.0, providing secure encrypted channel for user login.
Standard and extended ACLs, filtering packets to prevent network attacks.
Host firewall function, preventing attacks.
URPF technology, preventing network attacks by source address spoofing.
The SR8800 supports distributed and centralized NAT, and supports load sharing over multiple NAT interface card to enhance the entire NAT performance. The NAT interface card for the SR8800 delivers abundant features, including NAT, NAPT, internal servers, application layer gateway (ALG), blacklist, and multi-instance NAT. It supports load sharing on multiple ISP egress interfaces and internal servers, bi-directional NAT, and twice NAT. With all these features, the SR8800 can fully satisfy users' requirements for a broad range of NAT network applications.
The SR8800 supports distributed and centralized NetStream. The SR8800 NetStream supports traffic sampling, traffic accounting, and NetFlow services export protocol v5/v8/v9. In conjunction with the log auditing system of H3C IMC, the SR8800 provides total network traffic analysis solutions for users. To avoid statistics loss, the SR8800 can send log data simultaneously to both primary and secondary servers (if any). The network traffic analysis function draws a clear picture of application traffic distribution on a network and provides abundant analysis reports, allowing administrators to optimize their networks and reassign network resources in response to traffic changes.
Integrated chassis, which can be installed in a 19-inch rack
Base card slots
Physical dimensions (H × W × D)
265 × 442 × 443 mm (10.43 × 17.40 × 17.44 in)
486 × 442 × 450 mm (19.13 × 17.40 × 17.72 in)
975 × 436 × 450 mm (38.39 × 17.17 × 17.72 in)
753 × 442 × 450 mm (29.65 × 17.40 × 17.72 in)
Weight (all components installed)
≤ 40 kg (88.18 lb)
≤ 85 kg (187.39 lb)
≤ 110 kg (242.50 lb)
≤ 120 kg (264.55 lb)
1.44 Tbps/8.64 Tbps
Packet forwarding rate
360 Mpps/1200 Mpps
576 Mpps/1920 Mpps
864 Mpps/2880 Mpps
Static routing, RIP, OSPF, IS-IS, BGP-4
GRE and IPv4 over IPv4 tunneling
IPv4/IPv6 dual stack
IPv6 static routing, RIPng, OSPFv3, IS-ISv6, and BGP4+
Neighbor Discovery Protocol, Path MTU Discovery
Ping v6, Telnet v6, FTPv6, TFTPv6, DNSv6, ICMPv6
IPv4 to IPv6 transition technologies, including IPv6 manual tunnels, 6to4 tunnels, ISATAP tunnels, GRE tunnels, automatic IPv4-compatible IPv6 tunnels
PIM-DM, PIM-SM, PIM-SSM, MSDP, MBGP and Any-RP. The maximum number of multicast groups is 32 K.
IGMPv1/v2/v3, IGMPv1 snooping, IGMPv2 snooping, and IGMPv3 snooping
IPv6 PIM-DM, IPv6 PIM-SM, and IPv6 PIM-SSM
Multicast Listener Discovery (MLD)v1/v2, MLDv1 snooping
Multicast policies and multicast QoS
Two levels of multicast replication on the switching fabric and base cards for optimized multicast performance
P/PE functions, compliant with the RFC 2547 bis standard
Three multi-AS MPLS VPN methods (Option1/Option2/Option3)
Hierarchical PE (HoPE)
VLL (Martini/Kompella approaches), point-to-point layer 2 MPLS VPN functions
VPLS/HVPLS (Martini/Kompella approaches), point-to-multi-point layer 2 MPLS VPN functions
MPLS TE/FRR, FRR switchover less than 50 ms
Distributed multicast VPNs
Standard and extended ACLs
Diff-Serv QoS and Inte-Serv QoS
Hierarchical QoS (HQoS) and queue scheduling mechanisms including PQ, LLQ, CQ, WFQ and CBWFQ
Fine-tuning traffic policing
WRED congestion avoidance
802.1p, TOS, DSCP and EXP priority mappings
802.3d (STP)/802.3w (RSTP)/802.3s (MSTP)
IEEE 802.3ad (link aggregation), static port aggregation and inter-board link aggregation
Port mirroring and flow mirroring
2.5 G/10 G RPR, compliant with IEEE 802.17
Two protection methods: wrapping and steering. The hardware self-healing time is less than 50 ms.
Dynamic and static ring selection methods with improved bandwidth usage
Node topology automatic discovery
Weighted fair algorithm for intelligent bandwidth allocation
Five service levels of A0/A1/B0/B1/C; A0 services can reserve the entire ring to implement fine-tuning QoS.
OC-12 CPOS channelized E3/T3
OC-3 CPOS channelized E1/T1
OC-3 CPOS channelized E1/T1/E3/T3
OC-3 CPOS channelized E3/T3
OC-48 CPOS channelized OC-3
Network traffic analysis
NetFlow services export protocol v5/v8/v9
Traffic sampling and traffic accounting
Multiple log hosts
Load sharing across NetStream modules
Load sharing across NAT interface card
NAT, NAPT, and multi-instance NAT/NAPT
Bi-directional NAT and twice NAT
Preventing DoS/DDoS attacks
Preventing attacks of SYN flood, UDP flood, ICMP flood, HTTP Get flood, Land, Smurf, Fraggle, WinNuke, Ping of Death, Tear Drop, abnormal flags of TCP, address scanning, port scanning, Java/ActiveX blocking and SQL injection
Dedicated hardware OAM detection engine, realizing link failure detection within 30 ms
1+1 redundancy backup for critical components including the MPUs and the power supplies
Passive design for the backboard to prevent single point of failure
Hot swapping for all components
Real-time hot backup of all configuration data on the primary/secondary MPUs
Hotfix function, allowing online patch upgrade
NSF/GR for OSFP/BGP/IS-IS/LDP/RSVP
MP, Ethernet port aggregation, inter-board link aggregation
Inter-board RPR hardware ring protection, self-healing time less than 50 ms
BFD for BGP/IS-IS/OSPF/RSVP/VPLS PW/VRRP, fast failure detection (less than 30 ms) for protocols
IP FRR, TE FRR, service switchover time less than 50 ms
Network availability rate 99.999%
Hierarchical user management and password protection
SSHv2 providing secure encrypted channel for user login
Standard and extended ACLs for packet filtering to prevent network attacks
Preventing attacks using ARP packets, 802.1X packets, unknown multicast packets, broadcast packets, unknown unicast packets, local segment scanning packets, packets whose TTL is 1, and other protocol packets
Host firewall functions
MAC address restriction, IP-to-MAC address binding function
URPF for preventing network attacks using source address spoofing
IEEE 802.1X and IEEE 802.1X SERVER
Portal authentication and RADIUS authentication
OSPF, RIPv2 and BGPv4 plain text authentication and MD5 authentication
Security network management SNMPv3 and SSH2.0
Primary/secondary data backup
Firewall card, IPS card, SSL VPN card, ACG card, and LB card
Command line configuration through Console/AUX Modem/Telnet/SSH2.0
File download/upload management through FTP, TFTP, xmodem and SFTP
RMONv1, supporting 1, 2, 3 or 9 groups
Network Quality Analyzer (NQA)
Failure alarm and automatic recovery
Operating temperature: 0°C to 45°C (32°F to 113°F)
Storage temperature: –40°C to +70°C (–40°F to +158°F)
Environment humidity (non-condensing)
Operating humidity: 10% to 90%
Storage humidity: 5% to 95%
CSA C22.2 No 60950-1:2003
AS/NZS CISPR22 Class A
CISPR22 Class A
EN55022 Class A
ETSI EN 300 386 V1.3.3
FCC Part 15 (CFR 47) Class A
ICES-003 Class A
VCCI Class A
As the high-performance core routers, the SR8800 can be widely deployed at the core or backbone layer of WANs, or the core of large campus networks or MANs. The following examples illustrate the deployment of the SR8800 in some industry networks, for reference purpose only.
Because the national WAN covers a huge geographic area, it has extremely high requirements on the reliability and security of the networking devices. Thanks to its excellent performance, the SR8800 can fully meet these requirements. As shown in the following figure, the SR8812 devices are deployed at the network core layer, the SR8808 devices at the provincial distribution layer, and the SR8805/SR8802 devices are at the municipal access layer. To ensure network security, uplink and downlink devices are separated at the national core layer and the provincial nodes. Both the provincial nodes and municipal nodes act as the aggregation access of the MAN. Narrow band is used for access, and dedicated line is used for aggregation.
This solution is suitable for the establishment, expansion or reformation of large industry backbone networks, such as government administration, taxation, public security, finance, and electric power. In addition, MPLS VPN is supported in the entire network.
National wide area network solution
When building a large area network at a provincial level, some industries such as electric power and railroad require high reliability, and logical isolation among the service units to ensure the security of application systems. To address these needs, the SR8800 provincial WAN solution achieves high system reliability with the ring topology plus the high availability of the SR8800, and implements logical isolation among business units through MPLS VPN.
In this solution, the SR8812/SR8808 devices act as the MPLS core devices to provide MPLS basic forwarding capability, and can also act as inter-AS ASBR devices if there are requests for inter-AS services. As the PE device, the SR8800 can also act as the network address translation (NAT) device to provide Internet access for VPN users. The SR8800 also supports multiple L2VPN methods. As a PE device, it can provide point-to-point VLL services and point-to-multipoint VPLS services. In addition to industries like electric power and railroad, this solution is applicable for most province-wide networking scenarios.
Provincial wide area network solution
When building a MAN or campus network, the full-mesh topology on the backbone requires a large volume of link resources and a high cost for operation and maintenance. In this regard, networking using RPR is a better solution. RPR not only provides the rapid self-healing resilient protection mechanism and efficient bandwidth usage, but also features simple and flexible networking, making it suitable for the establishment of a new MAN. In the network design, the SR8800 devices can act as the backbone routers to form the core ring. They can provide high density downlink interfaces, including 10 GE, GE and FE interfaces, as well as other types such as E1 and POS interfaces. The interfaces can connect to Ethernet switches directly, or to dedicated lines.
Because the SR8800 fully supports MPLS VPN which extends the MPLS domain, the SR8800 acts as the PE device of the MPLS domain, ensuring the extension of the MPLS WANs to the core network of LANs, or even to the access layer. By this, the SR8800 guarantees end-to-end services for audio, video and data transmission in one network.
RPR networking solutions have been widely deployed at the provincial or municipal backbone networks for government administration, taxation, education, power industry, and so on.
MAN/campus network solution
This section lists the available SR8800 racks, router chassis, MPUs, software, base cards, Ethernet cards, subcards, intelligent modules (IMs) and power supplies, and provides the ordering recommendations. The information is subject to change over time. For the most up-to-date information, consult your H3C sales representative.
N68-1.8m AC rack
N68-2.2m AC rack
N68-1.8m DC rack
N68-2.2m DC rack
H3C SR8802 10G Core Router
H3C SR8805 10G Core Router
H3C SR8808 10G Core Router
H3C SR8812 10G Core Router
H3C SR8800 MPU (2F)
H3C SR8800 MPU (1F)
H3C SR8800 MPU (2G)
H3C SR8800 MPU (1G)
H3C SR8802 MPU
H3C SR8800 router software
Single-channel base card (the second generation)
Enhanced single-channel base card (the second generation)
Dual-channel base card (the second generation)
Enhanced dual-channel base card (the second generation)
Multiservice base card
4-port 10 Gbps optical Ethernet interface card
48-port 1000 Mbps optical Ethernet interface card
48-port 1000 Mbps electrical Ethernet interface card
2-port 10 Gbps optical Ethernet interface card
16-port 1000 Mbps optical Ethernet interface and 8-port Combo interface card
l SFP/ LC for fiber ports
l RJ-45 for copper ports
H3C SR8800-SR0M2GP48LA0-48-port 1000 Mbps optical Ethernet interface card
H3C SR8800-SR0M2GP24LA0-16-port 1000 Mbps optical Ethernet interface and 8-port 1000 Mbps Combo interface card
l SFP/ LC for fiber ports
l RJ-45 for copper ports
H3C SR8800-SR0M2GT48LA0-48-port 1000 Mbps electrical Ethernet interface card
H3C SR8800-SR0M2XP4LA0-4-port 10 Gbps optical Ethernet interface card
H3C SR8800-SR0M2XP2LA0-2-port 10 Gbps optical Ethernet interface card
H3C SR8800-SR0M2XP16R0-16-port 10 Gbps optical Ethernet interface card (RA)
10-port 1000 Mbps optical Ethernet interface card
20-port 1000 Mbps optical Ethernet interface card
20-port 1000 Mbps electrical Ethernet interface card
1-port 10 Gbps optical Ethernet interface card
2-port OC-48c/STM-16c RPR optical interface card
1-port OC-192c/STM-64c RPR optical interface card
1-port OC-192c/STM-64c POS optical interface card
8-port OC-3c/OC-12c POS/GE optical interface card
2-port OC-3c/STM-1c POS optical interface and 6-port 1000 Mbps optical Ethernet interface card
2-port OC-12c/STM-4c POS optical interface and 6-port 1000 Mbps optical Ethernet interface card
4-port OC-48c/STM-16c optical interface card
2-port OC-48c/STM-16c POS optical interface and 4-port 1000 Mbps optical Ethernet interface card
1-port OC-3/STM-1 channelized to E1/T1 CPOS optical interface and 8-port 1000 Mbps optical Ethernet interface card
2-port OC-3/STM-1 channelized to E1/T1 CPOS optical interface and 8-port 1000 Mbps optical Ethernet interface card
1-port OC-48/STM-16 channelized to OC-3/STM-1 CPOS optical interface card
1-port OC-12/STM-4 channelized to E3/T3 CPOS optical interface and 4-port 1000 Mbps optical Ethernet interface card
4-port OC-3/STM-1 channelized to E3/T3 CPOS optical interface and 4-port 1000 Mbps optical Ethernet interface card
4-port OC-3/STM-1 channelized to E3/T3/E1/T1 CPOS optical interface and 8-port 1000 Mbps optical Ethernet interface card
2-port OC-3/STM-1 channelized to E3/T3/E1/T1 CPOS optical interface and 8-port 1000 Mbps optical Ethernet interface card
4-port 155M ATM optical interface card
1-port 622M ATM optical interface card
8-port E1/T1 electrical interface and 8-port 1000 Mbps optical Ethernet interface card
l RJ-45 for copper ports
l SFP/LC for fiber ports
32-port E1/T1 electrical interface and 2-port 1000 Mbps optical Ethernet interface card
l 2*DB28, female for for copper ports
l SFP/LC for fiber ports
MIC subcard (applicable to the MPE-1004)
8-port 1000 Mbps optical Ethernet interface card
4-port 1000 Mbps Ethernet combo interface card
16-port E1/T1 electrical interface card
2-port OC-3/STM-1 CPOS optical interface card or 2-port OC-3c/STM-1c POS optical interface card
4-port OC-3c/STM-1c POS/ATM optical interface card or 1-port OC-12c/STM-4c POS/ATM optical interface card
4-port OC-3/STM-1 CPOS optical interface card or 4-port OC-3c/STM-1c POS optical interface card
Network address translation service processing card (the second generation)
Network analysis service processing card (the second generation)
H3C SR8800 firewall service processing card (the second generation)
H3C SR8800 GE intrusion protection system card
H3C SR8800 SSL VPN service card
H3C SR8800 application control gateway card
H3C SR8800 load balancing service card
AC power supply-800 W
DC power supply-1300 W
DC power supply-2000 W
DC power supply-3500 W
AC power supply-1800 W
3500 W AC power supply frame, which can accommodate two 1800 W standard power supplies