Course Name

N-0

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-1

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-2

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-3

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-4

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-5

GGSN9811 is a gateway GPRS support node developed independently by Huawei. It can be used in either the 2.5G GPRS or the 3G UMTS. The GGSN9811 is a gateway for a MS to access the external PDN. It is located at the junction between the GPRS/UMTS packet core network and the external PDN. GGSN is used to provide packet data services. The GGSN routes and encapsulates the data packets between the GPRS/UMTS network and the external PDN. The GGSN performs the following functions: Acting as an interface to the external PDN: The GGSN acts as a gateway for MSs to access the external PDN. The GGSN exchanges routing information for the external PDN. The GGSN serves as a router for all IP addresses of users in the GPRS/UMTS network. GPRS/UMTS session management: The GGSN sets up communication between MSs and the external PDN. Data receiving and processing: The GGSN receives data from MSs and routes the data to the external PDN. The GGSN also receives data from the external PDN, and selects a channel in the GPRS/UMTS network to route the data based on the destination address. Then, the GGSN sends the data to the SGSN through the selected channel. Abundant charging functions: The GGSN provides the functions of common charging, hot billing, content-based charging, and online charging.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-6

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-7

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-8

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-9

The N68E-22 consists of the rack, front door, back door, and side panels. The N68E-22 cabinet is fixed with single-leaf right-handed doors at the front and the rear. The side panels are secured to the rack with panel screws. The front mount angles in the cabinet are used to fix internal components. The grounding points on the back mount angles are used to ground the internal components and interconnection the protection grounding (PGND) cables between cabinets. The N68E-22 cabinet can be installed either on the ESD-preventive floor or on the cement floor directly. When the N68E-22 cabinet is installed on the ESD-preventive floor, the N6X supports must be used.
Dimensions (H x W x D) Capacity Weight 2200 mm x 600 mm x 800 mm Height of available space of a cabinet: 46 U (1 U = 44.45 mm). An empty cabinet weighs 100 kg. NOTE An empty cabinet consists of the rack, front door, back door, left side panel, and right side panel. The cabinet supports both upward cabling and downward cabling. The cabinet is equipped with many vents on the front and rear doors and the top and bottom plates to facilitate heat dissipation. It provides front-to-back and bottom-to-top cooling.

Cabling Mode Heat Dissipation

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-10

The design of the GGSN9811 subrack complies with the IEC297 standard. The dimensions is 886.00 mm (height) x 442.00 mm (width) x 669.00 mm (depth). 1. Fan panel 2. Fan module 3. Board cage 4. Air intake frame 5. Power system panel 6. Power supply module 7. Handle 8. Mounting ear 9. Cabling trough

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-11

The configuration principle of boards is as follows: Two SRUs must be inserted in slots 9 and 10. Two SFUs must be inserted in slots 11 and 12. Based on actual requirements, insert one, two, three or four LPUs. For the cabling convenience of the cabinet, slots 1, 2, 3 and 4 are reserved for LPUs. Based on actual requirements, insert two to six SPUs. The two adjacent SPUs are one pair. The pairs of SPUs can be inserted in slots 3 and 4, slots 5 and 6, and slots 7 and 8.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-12

SRU The SRUs work in 1+1 backup mode. It serves as the system clock source and the management and maintenance unit, and provides the functions of the control plane and the system maintenance plane. The SRU is composed of the main processing unit (MPU) and SFU modules. The two SFU modules on the two SRUs and two SFUs work in backup mode. SFU The SFUs work in load-sharing mode, and can support line-rate switching of 640 Gbit/s (160 Gbit/s x 4) traffic.The GGSN9811 is equipped with two independent SFUs, and the two SFU modules are populated on the two SRUs. SPU The SPUs work in load-sharing or 1+1 backup mode. The operating mode is defined in the license file. In 1+1 backup mode, the SPUs guarantee service reliability. LPU The LPU provides physical interfaces that connect the GGSN9811 to NEs or external networks, such as the SGSN, PDN, AAA server, and charging gateway (CG). The interfaces are as follows: FE (10/100 Mbit/s) interface, GE (1000 Mbit/s) electrical interface, GE (1000 Mbit/s) optical interface, ATM interface. The LPU is composed of the LPU module, switching network fabric adaptor (FAD), and physical interface card (PIC). The three modules work together to quickly process and forward service data. In addition, they maintain and manage link protocols and forwarding information base (FIB) tables.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-13

The SRU board provides the following function: The switching function. There is an integrated SFU module in the SRU board. This SFU module working as the load sharing with the stand alone SFU board. The OAM function. This is fulfill by MPU module of SRU board. The storage function. There are two hard disk in SRU board. One is for BAM, other is for CDR storage. The routing function. The SRU will collect the routing information and generate the routing table. The panel of SRU board: OFL button: An offline button. Before drawing out a board, press the OFL button for about 6s till the OFL indicator is on. NOTE: This button takes effect only on the backup SRU. ACT active/standby indicator (Green). If the indicator is on, the SRU is in the active state. If the indicator is off, the SRU is in the standby state. ETH0 (10M/100M/1000M BASE-TX auto negotiation): Used to connect the system network workstation. ETH1 (10M/100M/1000M BASE-TX auto negotiation): Used to connect the system network workstation. Console interface: Used to connect the console for system configuration. AUX interface: Used to connect to the Power Distribution Box for monitor Power Distribution Box.
Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-14

The panel of SFU board. OFL button: An offline button. Before drawing a board out, press the OFL button for about 6s till the OFL indicator is on. ACT active/standby indicator (Green): If the indicator is on, the SFU is in the normal state. If the indicator is off, the SFU is in the abnormal state.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-15

The panel of SPU board. OFL button: An offline button. Before drawing a board out, press the OFL button for about 6s till the OFL indicator is on.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-16

The panel of LPU board. OFL button: An offline button. Before drawing a board out, press the OFL button for about 6s till the OFL indicator is on.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-17

Number of input power supplies Rated input voltage Input voltage range Maximum input current Rated output voltage Output voltage range Number of output Maximum output current

1 or 2 or 3 -48 V DC or -60 V DC -40 V DC to -72 V DC 100 A/input -48 V DC or -60 V DC -40 V DC to -72 V DC 10 50 A/output

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-18

Item Dimensions Weight Power consumption Input rated voltage Input voltage Maximum input current Input surge current Maximum output current Maximum output power Rated current of the air switch Power consumption of the active power module Power consumption of the standby power module

Description 184 mm x 450 mm x 127 mm (W x D x H) 9 kg 50 W 48 V DC 72 V DC to 36 V DC 79 A 150 A 85 A 3700 W 50 A 100 W 60 W

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-19

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-20

The hardware of the GGSN9811 uses the structure of separated monitoring, data, and control planes. The traffic channel among active and standby SRUs and service boards is connected through high speed data link called series-deseries (SerDes), and the management channel among them is connected through fast Ethernet (FE) link. All the service boards realize non-blocking data exchange through switching network units on the SRUs and SFUs. Service data is processed by the network processor (NP) on each service board. This enables the GGSN9811 to process service data at high speed. All the service boards are connected to the management switching network modules of the active and standby SRUs through Ethernet management paths. The SRUs and SPUs work in 1+1 hot backup mode. Thus, data of online users can be switched and protected when hardware faults occur, or when the system upgrades. The two SFU modules embedded in the two SRUs form four exchange planes with the two SFUs. The four exchange planes exchange data in load-sharing mode. Serving as the management center of the system, the SRU can read the status of the power supply of the subrack, power supply of each board, and temperature through the monitoring plane in real time. Through the status information, the SRU controls the fan module. In addition, the SRU can determine and control the status of the power distribution box (PDB) in the cabinet through the RS232 serial port.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-21

Ethernet Management Planes The Ethernet management planes are high speed data planes that connect the management paths of the active and standby SRUs with the management paths of the service boards in the GGSN9811 subrack. The SRU loads, manages, and maintains the LPUs and SPUs through the Ethernet management planes. The Ethernet management planes that are developed on the Versatile Routing Platform (VRP) also serve as the maintenance paths for routing tables. The GGSN9811 extends the functions of the Ethernet management planes, which guarantees a 100 Mbit/s bandwidth for each management path from each board to the SRU. In addition, service data, such as generated charging data records (CDRs), cached CDRs, bearer context management data, and SPU backup data, is also exchanged through the Ethernet management planes. The Ethernet management planes are physically connected with each board through pins on the backplane installed in the GGSN9811 subrack. Service Data Exchange Planes The service data exchange planes are the platforms for medium and high speed service data exchange in the GGSN9811 subrack. The service data exchange planes enable non-blocking exchange of service data flows between service boards.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-22

Each SRU provides ten 100 Mbit/s and two 1000 Mbit/s Ethernet links for external devices. The ten 100 Mbit/s Ethernet links are connected to the Ethernet management interfaces of the service boards and the SFUs. One 1000 Mbit/s Ethernet link is connected to the main control module of the SRU, and the other 1000 Mbit/s Ethernet link is the backup link. Each service board and each SFU provide two 100 Mbit/s Ethernet management interfaces and they are connected with planes A and B respectively. The two Ethernet management planes work in active/standby mode. The service boards monitor the status of links connected to planes A and B in real time. If the active link fails, the standby management path switches to the active path. The two SRUs interconnect with the management switching network modules of the peer SRUs through the main control modules. When the active and standby Ethernet management paths switch, seamless data switchover is realized through the interconnected links.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-23

Each SRU or SFU provides sixteen lanes, and each lane includes two 3.2Gbit/s high speed series-deseries (SerDes) links. The SerDes links are physically connected to the switching network interface chips of all service boards through the connectors on the backplane. Each service board provides eight SerDes links, of which two links exclusively access each of the four planes. The four service data exchange planes are independent of each other. The service boards detect the statuses of links that are connected to planes A, B, C, and D in real time. If the link to a switching network plane fails, alarms are reported to the SRU. In addition, all services on this plane are switched to the other three switching network planes, thus realizing the redundancy feature of the switching network planes.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-24

The monitoring principles of the GGSN9811 PDB are as follows: The PDB is equipped with an internal monitoring unit that is used to collect the status of the PDB. The monitoring unit provides two RS232 serial ports working in active/standby mode. The serial ports are connected to the AUX ports on the active and standby SRUs through external cables. The SRU processes the information collected by the monitoring unit of the PDB. If abnormalities occur, alarms are generated. The upper and lower alarm thresholds for input voltages can be set on the SRU.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-25

The working principles of the fan monitoring module of the GGSN9811 are as follows: The fan box is equipped with an internal monitoring module that is used to monitor the running status of the fan box. The monitoring module provides an interface to connect the fan module with the backplane of the subrack. The SRU monitors the statuses and controls the fan speed through the control area network (CAN) bus. The SRU processes the information collected by the fan monitoring module. If abnormalities occur, alarms are generated. The running status of the fan box can be monitored through the maintenance system.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-26

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-27

AM This module implements the role adaptation, access control, user authentication and authorization, address assignment, and bearer context management functions. It is the interface of the GGSN9811 directed to the access networks and other NEs (SGSN) of the core network. It is the main component for the GGSN9811 to support various access modes. SM This module obtains and controls the policy for a service data flow. CM This module processes charging protocols and manages charging data records (CDRs). In addition, it works with the external charging gateway and the external charging system to realize multiple charging modes. PS This module distributes and processes signaling packets and data packets of the GGSN9811. It works with relevant modules to perform the charging and service control functions. In addition, it performs functions such as system support, operation and maintenance, and routing. OM This module provides OM functions such as device management, data configuration management, and alarm management. LMT This module provides graphical user interfaces (GUIs).

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-28

The OM system is the management center of the GGSN9811 and provides interactive interfaces between users and the GGSN9811. Externally, the OM system provides the network management systems (NMSs) with the unified command line interface (CLI), through which the NMSs can access the GGSN9811. Internally, the OM system coordinates with the other subsystems to maintain and monitor the GGSN9811. Based on the location of a module, the OM system can be classified into the back administration module (BAM) and front administration module (FAM). The BAM manages the interactive input and output between the OM system and users, categorises and delivers OM tasks, and collects and reports the system monitoring data. The BAM runs in the SRU. The FAM directly interacts with the service subsystems. The FAM is located in all the boards of the GGSN9811.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-29

Routing forward subsystem The routing forward subsystem is composed of the routing modules on the LPU and SPU, packet distribution module, signaling distribution module, uplink data packet forward module, and downlink data packet forward module. This subsystem performs functions such as packet forwarding and data protection. ACL subsystem The access control list (ACL) subsystem runs in the LPU and SPU, and is composed of the rule sending module, rule matching module, and action execution module. This subsystem performs ACL rule matching for packets based on the entire system or access point names (APNs). Security protection subsystem The security protection subsystem can filter all incoming and outgoing packets based on the defined conditions. For example, the security protection subsystem can check whether source addresses and destination addresses of packets meet the specifications. Thus, illegal invasion and malicious attacks can be prevented effectively. IPSec subsystem The IP Security (IPSec) subsystem is composed of the configuration module on the SRU and the negotiation and processing modules on the SPU. This subsystem provides IPSec based protection for packets exchanged between the GGSN9811 and external devices. The protection refers to access control, authentication of data sources, rejection of repeated packets, data encryption and decryption, and check of data integrity.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-30

Session management subsystem It processes GPRS Tunneling Protocol (GTP) or Proxy Mobile IP Protocol (PMIP) signaling during user access, transits and controls user session status, and delivers entries of the data plane. Path management subsystem It sends and receives GTP or PMIP path messages, maintains path information, and manages idle paths. Address assignment subsystem It controls sessions applying to the authentication, authorization and accounting (AAA) server or Dynamic Host Configuration Protocol (DHCP) server for addresses. The session control involves operations such as access processing and response encapsulating. In addition, the address assignment subsystem processes the Remote Authentication Dial In User Service (RADIUS) or DHCP protocol. AAA authentication subsystem It authenticates users with the authentication function of RADIUS.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-31

QoS subsystem The quality of service (QoS) subsystem identifies user services, handles user QoS policies (including QoS configuration, QoS selection, QoS upgrade, and QoS degradation), sets user QoS, and processes QoS related charging. Service control subsystem The service control subsystem enables the GGSN9811 to process and control various types of services. For example, with this subsystem, the GGSN9811 can obtain service polices and identify and control the services. DPI subsystem By analyzing protocol data of the application layer through the deep packet inspection (DPI) technology, you can obtain valuable information for the contentbased charging and security concerns.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-32

The charging management system is composed of the online and offline charging subsystems that integrate charging modes such as content-based charging. The online and offline charging subsystems share the charging information, thus guaranteeing the accuracy and precision of charging. The CM charging system runs on the SPU, and it collects, codes, caches, and sends charging data records (CDRs) to the CG and provides charging information for the billing center. The online charging subsystem runs in the SPU, and it interacts with the external online charging system (OCS) for processing charging protocols defined by the 3rd Generation Partnership Project (3GPP) over the Gy interface and controlling online charging including service authentication, quota application, and re-authorization.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-33

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-34

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-35

Procedure Step 1 Insert the RJ45 connectors of the monitoring cables into the AUX ports on the SRU in the GGSN9811 subrack. Step 2 Insert the RJ45 connectors of the monitoring cables into the Monitor ports on the PDB.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-36

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-37

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-38

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-39

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-40

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-41

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-42

The Cabinet consists of the following key parts: 1. LCD module 2. Fan subrack 4. boards area 8. Power module The GGSN9811 Subrack consists of the following parts: 1. Plastic panel of the fan Module 2. Fan module 3. Board cage 4. Air intake frame 5. Plastic panel of the power supply module 6. Power supply module 7. Handle 8. Angle 9. Cabling trough

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-43

Two MPUs must be inserted in slots 17 and 18. Four SFUs must be inserted in slots 19 to 22. Based on actual requirements, insert one to six LPUs. For cabling convenience, slots 1 to 6 are reserved for the LPUs. Based on actual requirements, install one to ten SPUs. Two adjacent SPUs are one pair. The SPUs can be installed in slots 7 to 16.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-44

The function of MPU board is just same as SRU board, except the switching function. Because SFU board is separated. The panel of SFU board: OFL button: An offline button. Before drawing out a board, press the OFL button for about 6s till the OFL indicator is on. NOTE: This button takes effect only on the backup SRU. ACT active/standby indicator (Green). If the indicator is on, the SRU is in the active state. If the indicator is off, the SRU is in the standby state. ETH0 (10M/100M/1000M BASE-TX auto negotiation): Used to connect the system network workstation. ETH1 (10M/100M/1000M BASE-TX auto negotiation): Used to connect the system network workstation. Console interface: Used to connect the console for system configuration. AUX interface: Used to connect to the Power Distribution Box for monitor Power Distribution Box.

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-45

Confidential Information of Huawei. No Spreading Without Permission

Course Name

N-46

Confidential Information of Huawei. No Spreading Without Permission