Huawei CX916 Quick reference guide

Huawei CX916 Switch Module
V100R001
White Paper
Issue 01
Date 2017-10-12
HUAWEI TECHNOLOGIES CO., LTD.

Copyright © Huawei Technologies Co., Ltd. 2017. All rights reserved.
No part of this document may be reproduced or transmitted in any form or by any means without prior written
consent of Huawei Technologies Co., Ltd.
Trademarks and Permissions
and other Huawei trademarks are trademarks of Huawei Technologies Co., Ltd.
All other trademarks and trade names mentioned in this document are the property of their respective
holders.
Notice
The purchased products, services and features are stipulated by the contract made between Huawei and the
customer. All or part of the products, services and features described in this document may not be within the
purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,
and recommendations in this document are provided "AS IS" without warranties, guarantees or
representations of any kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute a warranty of any kind, express or implied.
Huawei Technologies Co., Ltd.
Address: Huawei Industrial Base
Bantian, Longgang
Shenzhen 518129
People's Republic of China
Website: http://www.huawei.com
Email: [email protected]
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
i

About This Document
Overview
This document describes the functions, advantages, appearance, specifications, internal
networking, standards, and certifications of the CX916 switch module.
Intended Audience
This document is intended for:
lHuawei presales engineers
lChannel partner presales engineers
lEnterprise presales engineers
Symbol Conventions
The symbols that may be found in this guide are defined as follows.
Symbol Description
Indicates a hazard with a high level or medium level of risk which, if
not avoided, could result in death or serious injury.
Indicates a hazard with a low level of risk which, if not avoided, could
result in minor or moderate injury.
Indicates a potentially hazardous situation which, if not avoided, could
result in equipment damage, data loss, performance deterioration, or
unanticipated results.
Provides a tip that may help you solve a problem or save time.
Provides additional information to emphasize or supplement important
points in the main text.
Huawei CX916 Switch Module
White Paper About This Document
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
ii

Change History
Issue 01 (2017-10-12)
This issue is the first official release.
Huawei CX916 Switch Module
White Paper About This Document
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
iii

Contents
About This Document.....................................................................................................................ii
1 Overview......................................................................................................................................... 1
1.1 Functions........................................................................................................................................................................ 2
1.2 Advantages................................................................................................................................................................... 10
1.3 Appearance................................................................................................................................................................... 12
1.4 Ports.............................................................................................................................................................................. 15
1.5 Indicators...................................................................................................................................................................... 19
1.6 Internal Networking of a Chassis................................................................................................................................. 21
1.7 Software and Hardware Compatibility......................................................................................................................... 24
1.8 Technical Specifications............................................................................................................................................... 26
2 Standards and Certifications.....................................................................................................29
2.1 Standards Compliance.................................................................................................................................................. 30
2.2 Certifications................................................................................................................................................................ 32
Huawei CX916 Switch Module
White Paper Contents
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
iv

1 Overview
1.1 Functions
1.2 Advantages
1.3 Appearance
1.4 Ports
1.5 Indicators
1.6 Internal Networking of a Chassis
1.7 Software and Hardware Compatibility
1.8 Technical Specifications
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1

1.1 Functions
The CX916 is a switching control unit that provides data switching functionality for compute
nodes in the blade server chassis and centrally provides service and management ports to
connect to external devices. The Ethernet and FC switching planes of the CX916 are
physically isolated from each other and work independently.
The CX916 is installed in a rear slot of the E9000 chassis and is connected to compute nodes
and management modules through the chassis midplane. It exchanges internal data packets
and control and management packets through high-speed data transmission.
Table 1-1 describes the functions of the Ethernet switching plane. Table 1-2 describes the
functions of the FC switching plane.
Table 1-1 Functions of the Ethernet switching plane
Function Description
Ethernet features Ethernet lFull-duplex and autonegotiation working
modes
lEthernet ports support 10GE, 25GE, and
40GE.
NOTE
lDownlink ports connected to compute nodes
operate at 10GE. Uplink ports connected to
aggregation switches operate at 10GE, 25GE, or
40GE.
l25GE ports support 25GE passive direct attached
cables, 25GE multi-mode or single-mode optical
modules, 10GE passive cables, and 10GE multi-
mode or single-mode optical modules.
l40GE ports support multi-mode and single-mode
optical modules and passive cables. A 40GE port
can be split into four 10GE ports.
lPort traffic control
lJumbo frames
lLink aggregation
lLoad balancing among links of a trunk
lPort isolation and forwarding restriction
lBroadcast storm suppression
l40GE port splitting
l25GE ports can operate at 10GE.
lProtocol-based packet statistics
lM-LAG
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
2

Function Description
Virtual Local
Area Network
(VLAN)
lMultiple access modes: access, trunk, and
hybrid
lPort-based, MAC-based, and IP subnet-based
VLANs
lVLAN aggregation
lMultiplex VLAN (MUX VLAN)
lTransparent transmission of protocol packets
in a VLAN
lBatch configuration of VLANs
QinQ (802.1Q in
802.1Q)
lBasic QinQ
lFlexible QinQ
VLAN mapping l1 to 1
l2 to 1
l2 to 2
GARP VLAN
Registration
Protocol (GVRP)
GVRP
Media Access
Control (MAC)
lSticky MAC
lAutomatic MAC address learning and aging
lStatic, dynamic, and blackhole MAC address
entries
lFiltering based on source MAC addresses
lMAC address limiting
Link Layer
Discovery
Protocol (LLDP)
LLDP
Ethernet loop
protection
Multiple
Spanning Tree
Protocol (MSTP)
lSpanning Tree Protocol (STP)
lRapid Spanning Tree Protocol (RSTP)
lMSTP
lVLAN-based Spanning Tree (VBST)
lBridge protocol data unit (BPDU), root, and
loop protection
lPartitioned STP and Layer-2 protocol
transparent transmission
Ethernet Ring
Protection
Switching (ERPS)
G.8032 v1/v2
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
3

Function Description
IP features Address
Resolution
Protocol (ARP)
lStatic and dynamic ARP entries
lARP in a VLAN
lARP entry aging
lGratuitous ARP
lProxy ARP
lARP-Ping
lARP gateway anti-collision
IPv6 lIPv4/IPv6 dual-stack
lNeighbor Discovery (ND)
lIPv6 over IPv4 manual tunnel
lIPv6 over IPv4 GRE (Generic Routing
Encapsulation)
l6to4 tunnel
Dynamic Host
Configuration
Protocol (DHCP)
lDHCP server
lDHCP snooping
lDHCP relay
lDHCPv6 relay
IP forwarding Unicast routing lIPv4 and IPv6 static routing
lRouting Information Protocol version 1/2
(RIP-1/RIP-2) and Routing Information
Protocol Next Generation (RIPng)
lOpen Shortest Path First version 2 (OSPFv2)
and OSPFv3
lIntermediate System to Intermediate System
(IS-IS)
lBorder Gateway Protocol Version 4 (BGP4)
and BGP4+
lRouting policies
lPolicy-based routing
lUnicast Reverse Path Forwarding (URPF)
check
Virtual Private
Network (VPN)
features
lMulti-VPN-Instance CE (MCE) and IPv6
MCE
lGRE tunneling
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
4

Function Description
Multicast routing lInternet Group Management Protocol Version
1/2/3 (IGMPv1/v2/v3)
lProtocol Independent Multicast-Sparse Mode
(PIM-SM) IPv4 and IPv6
lProtocol Independent Multicast Source-
Specific Multicast (PIM-SSM) IPv4 and IPv6
lMulticast Listener Discovery version 1
(MLDv1) and MLDv2
lMLD Source-Specific Multicast (SSM)
Mapping
lMultiprotocol BGP (MBGP)
lMulticast Source Discovery Protocol (MSDP)
lMulticast routing policies
lReverse Path Forwarding (RPF)
lBidirectional PIM IPv4 and IPv6
Reliability Bidirectional
Forwarding
Detection (BFD)
lBFD IPv4 and IPv6
lAssociation between BFD and Eth-Trunks
lAssociation between BFD and OSPF
lAssociation between BFD and OSPFv3
lAssociation between BFD and IS-IS
lAssociation between BFD and IS-IS IPv6
lAssociation between BFD and BGP
lAssociation between BFD and BGP4+
lAssociation between BFD and PIM IPv4
lAssociation between BFD and PIM IPv6
lAssociation between BFD and IPv4 static
routing
lAssociation between BFD and IPv6 static
routing
lAssociation between BFD and Virtual Router
Redundancy Protocol (VRRP)
lAssociation between BFD and VRRP6
Other lVRRP and VRRP6
lDevice Link Detection Protocol (DLDP)
lSmart Link
lEthernet in the First Mile (EFM) 802.3ah
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
5

Function Description
Layer-2
multicasting
Layer-2
multicasting
lIGMP snooping
lIGMP Proxy
lFast leave mechanism
lMulticast traffic control
lMulticast VLAN
Quality of Service
(QoS) features
Traffic
classification
lTraffic classification based on the
combination of the Layer-2 protocol header,
IP quintuple information, outbound port, and
802.1p priority
lTraffic classification based on the C-VID and
C-PRI of QinQ packets
lMatching internal packet information
encapsulated in a GRE tunnel
lMatching internal packet information
encapsulated in a Virtual Extensible LAN
(VXLAN) tunnel
Traffic behavior lAccess control after traffic classification
lTraffic policing based on traffic classification
lRe-marking based on the results of traffic
classification
lClass-based packet queuing
lAssociation between traffic classification and
traffic behavior
Queue scheduling lPriority queuing (PQ) scheduling
lDeficit round robin (DRR) scheduling
lPQ+DRR scheduling
lWeighted round robin (WRR) scheduling
lPQ+WRR scheduling
Congestion
avoidance
lTail drop algorithm
lWeighted Random Early Detection (WRED)
drop algorithm
Outbound port
rate limiting
Outbound port rate limiting
ACL-based
simplified traffic
policies
lACL-based packet filtering
lACL-based redirection
lACL-based traffic statistics
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
6

Function Description
Virtualization Many-to-one
virtualization
lIntelligent stack (iStack)
liStack splitting and merging
liStack dual-active detection
liStack version and configuration
synchronization
Data center
features
VXLAN lConfiguring a VXLAN tunnel manually
lConfiguring a VXLAN tunnel through the
Ethernet VPN (EVPN) BGP dynamically
Virtualization
awareness
lVirtualization awareness
lAutomatic deployment of policies
lAutomatic migration of policies
lNetwork Load Balancing (NLB) cluster
association
–NLB cluster association
–Association between one multicast MAC
address and multiple outbound ports
VEPA forwarding Virtual Ethernet Port Aggregator (VEPA)-based
traffic forwarding
Configuration and
maintenance
Terminal services lCommand line configuration
lPrompt and help information in English
lTerminal services such as Console and Telnet
lInformation sending between terminal users
File system lFile systems with file directories and file
management
lUploading and downloading files through File
Transfer Protocol (FTP), Trivial File Transfer
Protocol (TFTP) and Secure File Transfer
Protocol (SFTP)
Debugging and
maintenance
lUnified management of logs, alarms, and
commissioning information
lElectronic labels
lUser operation logs
lDetailed debugging information for network
fault diagnosis
lNetwork testing tools such as Tracert and the
ping command
lPort mirroring and traffic mirroring
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7

Function Description
Version upgrade Software upgrade through the BootLoader menu
NOTE
To ensure service security, upgrade the switch module
software version regularly.
Security and
management
System security lCommand line-based hierarchical protection
to prevent unauthorized access
lSecure Shell (SSH)
lRemote Authentication Dial In User Service
(RADIUS) IPv4 and IPv6 user authentication
lHuawei Terminal Access Controller Access
Control System (HWTACACS) IPv4 and
IPv6 user authentication
lAccess control list (ACL) filtering
lDynamic ARP Inspection (DAI)
lDHCP packet filtering (with the Option 82
field)
lPrevention of control packet attacks
lAttack defense
–Defense against flood attacks without IP
payloads, attacks from IGMP null payload
packets, LAND attacks, Smurf attacks, and
attacks from packets with invalid TCP flag
bits
–Defense against attacks from many
fragments, attacks from many packets with
offsets, attacks from repeated packet
fragments, Tear Drop attacks, Syndrop
attacks, NewTear attacks, Bonk attacks,
Nesta attacks, Rose attacks, Fawx attacks,
Ping of Death attacks, and Jolt attacks
–Defense against TCP SYN flood attacks,
UDP flood attacks (including Fraggle
attacks and UDP diagnosis port attacks),
and ICMP flood attacks
lLogs about attacking MAC addresses
lUnicast Reverse Path Forwarding (URPF)
l802.1x authentication
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8

Function Description
Network
management
lInternet Control Message Protocol (ICMP) for
ping and Tracert
lSimple Network Management Protocol
Version 1/2c/3 (SNMPv1/v2c/v3)
lStandard Management Information Base
(MIB)
lRemote Network Monitoring (RMON)
lNetStream (traffic statistic packet formats:
V5, V8, and V9)
lSampled flow (sFlow)
lNETCONF interfaces
lNetwork Quality Analysis (NQA)
Table 1-2 Functions of the FC switching plane
Function Description
FC switching FC port 8G/16G FC autonegotiation and full duplex
Switching lWorks in native FC switching mode and
transparent transmission mode (referred to as
Access Gateway mode by Brocade) as the
NPV module. NPV is short for N-Port
virtualization.
lSupports free mapping to internal FC ports
and external FC ports in NPV mode.
lSupports network connection between E_Ports
and Brocade FC switches in FC switching
mode. A license is required for the function.
N_Port ID
Virtualization
(NPIV)
A physical port supports multiple virtual N_Port
IDs.
Link aggregation FC port link aggregation expands the port
bandwidth and provides redundancy.
lSupports connection only to Brocade FC
switches.
lRequires a license.
Configuration and
maintenance
Configuration
management
lCommand line configuration
lHTTPS-based WebUI
lSimple Network Management Protocol
Version 1/3 (SNMPv1/v3)
lFC Fabric Element management information
base (MIB)
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
9

Function Description
Connection
mode
lEthernet connection (SSH, Web, SNMP)
lSerial over LAN (SOL) connection
Version upgrade Supports online upgrades for software. Services
are not interrupted during an upgrade. The
upgrade takes effect after a restart.
NOTE
To ensure service security, upgrade the switch module
software version regularly.
Network security System security lHierarchical user permission management to
prevent unauthorized access
lSecure Shell (SSH) and Secure Sockets Layer
(SSL)
lHypertext Transfer Protocol Secure (HTTPS)
lSNMP v1/v3
lRemote Authentication Dial In User Service
(RADIUS) user authentication
lSSH authentication of "account and password"
or "public and private keys"
1.2 Advantages
Main advantages:
lHigh performance and high port density
lMultiple switching planes: 10GE and FC
lVarious uplink speeds: 10GE, 25GE, and 40GE
lSupport for large data center networks
lHigh-performance stacking, easy deployment, simple maintenance
lOn-demand configuration and flexible deployment
lRich data center features
High Performance, High Port Density
Underpinned by the leading hardware platform, the CX916 provides high port density and
line-speed forwarding capability. It supports next-generation server applications that require
super high performance and density.
The Ethernet switching plane of the CX916 provides the following ports:
l32 10GE downlink ports for connecting to high-performance compute nodes
lEight 25GE SFP28 optical ports and two 40GE QSFP+ optical ports for connecting for
uplink aggregation or core switches
lOne 40GE port for interconnecting switch modules in slots 2X and 3X or those in slots
1E and 4E
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
10

lTwo GE ports for connecting to active and standby MM910 modules
lEight 16G FC ports for connecting to the external FC storage or SAN
The Ethernet switching plane supports low-latency forwarding: 642 Gbit/s line-speed
switching capacity (1.284 Tbit/s throughput, excluding the PIC card) and line-speed Ethernet
frame switching capability (packet length over 363 bytes) The forwarding latency for Layer-2
Ethernet frames in cut-through mode is less than 1.5 us.
The FC switching plane of the CX916 provides 384 Gbit/s line-speed switching capacity (768
Gbit/s throughput).
Multiple Switching Planes and Support for Large Data Center Networks
Up to 81920 MAC addresses in large MAC mode and up to 16000 Forwarding Information
Bases (FIBs) in large route mode
High-Performance Stacking, Easy Deployment, and Simple Maintenance
Up to four CX916 switch modules can be stacked, with the following advantages:
lHigh performance: A single stack system provides more than thirty-two 10GE ports.
lLarge bandwidth: 80 Gbit/s stack bandwidth (one 40GE port, bidirectional bandwidth),
which can be increased to 240 Gbit/s through 40GE panel ports
lEasy deployment and maintenance
–Pre-deployment and offline configuration are supported. The system can be pre-
planned and pre-configured. Switch modules can be added as required.
–The stack ID is the same as the switch module slot number to facilitate
identification and maintenance.
–Indicators on the front panel indicate the roles and statuses of stacked switch
modules, so that the stack system can be maintained without using a terminal.
lSimple upgrade operations: The stack system supports quick and automatic software
upgrades, simplifying upgrade operations and reducing the upgrade workload.
–Quick software upgrade: The standby switch module is upgraded before the active
switch module. This ensures that at least one switch module is operating.
–Automatic software upgrade: The standby switch module automatically
synchronizes its software version with the active switch module.
On-Demand Configuration and Flexible Deployment
The FC switching plane of the CX916 provides eight 16G FC ports. Four of the ports are
activated by default, and the other four can be activated with licenses, which addresses
diverse user needs.
NOTE
For details about licenses of the FC switching plane, see MX210&MX220 Software Licensing
Administrator Guide.
Rich Data Center Features
lFC features
–Supports seamless connection with the existing FC infrastructure, protecting
investments on the FC SAN.
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
11

–Supports FIP Snooping Bridge (FSB), FCoE Forwarder (FCF), and N-Port
Virtualization (NPV) to connect to the storage arrays or SAN.
lVirtualization and virtual machines (VMs)
–Supports server virtualization to improve the data center interface bandwidth usage.
–Supports virtualization awareness. During VM migration, network policies can be
automatically migrated through virtualization awareness so that network resources
can be allocated as required. Working with large Layer-2 networks, VMs can be
freely migrated within the data center.
lVirtual Extensible Local Area Network (VXLAN)
–VXLAN encapsulates data packets sent from VMs into UDP packets and
encapsulates IP and MAC addresses used on the physical network into outer
headers. The network is only aware of the encapsulated parameters. This greatly
reduces the number of MAC address entries required on large Layer-2 networks.
–VXLAN uses a VXLAN network identifier (VNI) field similar to the VLAN ID
field of IEEE 802.1Q. The VNI field has 24 bits and can identify a maximum of 16
million [(2^24-1)/1024^2] VXLAN segments.
–If VXLAN is used to construct a large Layer-2 network, VM IP addresses and
MAC addresses remain unchanged during VM migration.
1.3 Appearance
Appearance
Figure 1-1 shows a CX916.
Figure 1-1 Appearance
Installation Positions
The CX916 switch modules can be installed in slots 1E, 2X, 3X, and 4E at the rear of the
E9000 chassis.
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
12

Figure 1-2 Installation positions and slot numbers
NOTE
lThe LOM on a compute node connects only to slots 2X and 3X. Therefore, if the CX916 is installed
in slot 1E or 4E, only its FC switching plane is useful and it provides the same function as the
CX220. In this case, the CX220 is recommended.
lIf the CX916 is installed in slot 2X or 3X, its Ethernet and FC switching planes can both work.
Panels
Figure 1-3 shows the panel of the CX916.
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
13

Figure 1-3 Panel
1 Product model 2 Stack status indicator
3 Health indicator 4 Ejector lever (with an ESN
label)
5 Management serial port 6 PIC slot
7 25GE port 8 Connection status indicator of a
25GE port
9 Data transmission status indicator
of a 25GE port
10 40GE port indicator
11 40GE port 12 16G FC port
13 Connection status indicator of a
16G FC port
14 Diagnosis status indicator of a
16G FC port
NOTE
The numbers on the left of the panel are port numbers. The triangle mark directions indicate the port
positions.
ESN
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
14

An Equipment Serial Number (ESN) is a string that uniquely identifies a server. An ESN is
required when you apply for technical support to Huawei.
Figure 1-4 shows the ESN format.
Figure 1-4 ESN format
No. Description
1 ESN ID (two digits)
2 Item identification code (eight characters)
3 Vendor code (two characters)
4 Year and month of production (two characters)
The first character indicates the year. The digits 1 to 9 indicate
2001 to 2009, and the letters A to Z indicate 2010 to 2035. The
second character indicates the month. The digits 1 to 9 indicate
January to September, and the letters A to C indicate October to
December.
5 Serial number (six digits)
6 RoHS compliance (one character)
7 Internal model number of the switch module
1.4 Ports
The CX916 provides ports to send and receive data.
The Ethernet ports are numbered in the Slot number/Subcard number/Port serial number
format.
lSlot number indicates the slot number of the switch module. The value ranges from 1 to
4, mapping to slot numbers 1E, 2X, 3X, and 4E.
lSubcard number ranges from 1 to 21.
lPort serial number indicates the serial number of the port on the subcard.
The FC ports on the CX916 are numbered 1 to 8.
For details, see Table 1-3, Table 1-4, and Table 1-5.
Figure 1-5 shows the port numbers.
Huawei CX916 Switch Module
White Paper 1 Overview
Issue 01 (2017-10-12) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
15