Multi Service Distributed Frame Core Router AP-KH1105-E

Mainly used in finance, operators, education, large and medium-sized enterprise networks, wide area core and aggregation nodes, large campus network outlets, and various data center edge aggregation, networking with AP-KH0625, AP-KH1185-E, AP-KH1254-X, and AP-KH6812-X series aggregation router products, to achieve "one-stop" delivery of the overall WAN solution

Product characteristics:

Using CLOS non blocking switching and advanced distributed multi service processing architecture, data forwarding is non blocking

Support IPsec VPN and SM1/SM2/SM3/SM4 encryption algorithms with proprietary intellectual property rights in China to ensure the security of critical data

Perfect HQoS strategy, achieve refined traffic management, and improve the network experience of key users

Power redundancy and line cards support hot swapping, providing high system reliability and maintaining uninterrupted business

Intelligent fan module supports multi-level speed regulation, energy saving and noise reduction

Comprehensive architecture upgrade

The AP-KH1105-E series chassis is based on an elastic and scalable platform, using CLOS non blocking switching and advanced distributed multi service processing architecture. The chassis adopts an independent switching network board, while the routing engine, service engine, and forwarding engine are completely independent, achieving the separation of management, control, and data in three planes, thereby achieving a single slot forwarding capability of up to 2Tbps (*), and line speed forwarding without packet loss. The AP-KH1105-E series uses a dual plane data exchange architecture, which relies on independent switching network board redundancy compared to traditional high-end routers, further improving the high availability of services.

Modular and fully compatible

The AP-KH1105-E series adopts a separate design of daughter and mother cards. Currently, it provides two modular products, AP-KH1254-X and AP-KH6812-X, using a unified hardware and software platform. The two device line cards are fully compatible, which can adapt to the application requirements of different network levels of developing enterprises.

Green energy-saving design

The design of the AP-KH1105-E series implements the design concept of environmental protection and energy conservation. The chassis supports efficient modular power supplies, and the chassis adopts the method of independent power supply by zones, improving the efficiency of the power supply system and reducing the energy consumption of the computer room.

The chassis adopts a partition heat dissipation method of physical partition isolation. The intelligent fan module supports partition temperature control, multi-level speed regulation, energy saving and noise reduction, greatly saving air conditioning energy consumption for users.

High performance full service built-in

The AP-KH1105-E series distributed service line cards have built-in full service features, incorporating technologies such as NAT, IPv6, BGP, IPSec, MPLS VPN, H-QoS, and multicast. When new business features need to be loaded, there is no need to purchase a software license or multi business board, saving customers investment costs.

The AP-KH1105-E series has built-in support for distributed NAT and IPFIX service features, and is suitable for campus network exports. The NAT capability of the entire machine can be improved by adding business cards, which can be interfaced with the existing operation management system of the campus network to achieve refined and intelligent operation and maintenance of the campus network. Support DNS forward proxy, intelligent DNS, intelligent routing, and other functions, effectively improving the online experience of park network users.

The AP-KH1105-E series has built-in support for traffic visualization, and achieves 7% of network traffic through international standard IPFIX technology and a sampling ratio of up to 1 to 1 × 24-hour continuous monitoring, timely detection of abnormal and sudden traffic, elimination of potential failures in the bud, ensuring the healthy and reliable operation of the network; Relying on Anpson's flow table technology to achieve traffic sampling while having a "zero" impact on router service performance.

The AP-KH1105-E series built-in supports distributed IPSec, GRE, L2TP, and other VPN networking related business features, facilitating the construction of mobile broadband private networks by enterprises using 3G and 4G. The AP-KH1105-E series takes advantage of distributed computing and achieves the superposition of processing capabilities by expanding business sub cards.

The AP-KH1105-E series provides high-performance and flexible QoS features, supporting up to 5 levels of refined H-QoS and 200ms message caching for both uplink and downlink, meeting high-performance and manageable centralized QoS deployments, and meeting the networking requirements of corporate networks such as finance and government.

Strong routing processing capabilities

Support IPv4/IPv6 static routing, various dynamic routing protocols, and meet various networking requirements; In addition, it supports the policy routing function, which can flexibly control and schedule network traffic, and meet the routing characteristics requirements of users such as financial, government, and enterprise networks.

Relying on high-performance flow table and fast forwarding technology, BFD can improve the convergence mechanism of traditional routing protocols through functions such as GR, FRR, and BFD. BFD can support 3.3 ms detection interval and 10 ms fault detection time, achieving rapid convergence of large networks.

Three-dimensional safety design

The AP-KH1105-E series supports targeted security access control from the link layer to the application layer, from MAC addresses, VLANs, and URLs; Through the fully built-in status firewall function, it provides multiple security features such as status detection, URL filtering, and achieves hardware level attack defense from device ports to CPUs; Through flexible access strategies, it helps users to easily plan the permission division of access terminals; For VPN communication across wide area networks, the security level certified by the National Cryptographic Administration (NCA) is used to consolidate the national secret and business secret SM1/2/3/4 encryption algorithm, and the 2014 IPSec VPN national secret specification is fully supported to ensure end-to-end secure access to the corporate headquarters. Taking IPSec VPN as an example, the AP-KH1105-E series of complete machines can support encryption and decryption performance of up to 20Gbps.

Comprehensive MPLS VPN functionality

The AP-KH1105-E series supports comprehensive MPLS protocols and high-performance P/PE applications; Support fully distributed Layer 2 and Layer 3 VPN services, and support MPLS TE and other functions. Provide high-performance, secure, and multi-level MPLS VPN solutions.

The AP-KH1105-E series supports distributed multicast VPNs, enabling high-performance multicast services on the MPLS VPN network online to meet users' multicast business needs such as video conferencing and distance learning.

The AP-KH1105-E series supports MPLS VPN network fault location function and MPLS PING/TRACEROUTE, which can help users quickly locate fault points.

Comprehensive IPv6 support

Support multiple IPv6 routing technologies, such as static routing, equivalent routing, policy routing, OSPFV3, RIPng, BGP4+, and IS-ISv6, to meet the deployment of large-scale IPv6 networks in the future.

Support multiple IPv6 transition technologies, such as dual stack, manual tunneling, ISATAP, and 6to4 tunneling. These transition technologies can effectively meet the transition from IPv4 networks to IPv6 networks.

In addition, it also supports a large number of IPv6 related technologies such as address automatic configuration, ICMPv6, ICMPv6 redirection, ACL for IPv6, TCP/UDP for IPv6, QoS for IPv6, and IPv6 multicast.

Through comprehensive support for IPv6, users' existing investments are protected, enabling current IPv4 networks to smoothly migrate to IPv6.

Service Oriented WAN Link Transmission Optimization

In response to the current situation of network quality in the domestic Internet, the AP-KH1105-E series of innovative and built-in WAN link transmission optimization technologies have more than doubled the efficiency of inter operator and inter regional visits within the enterprise's internal network. The daily delivery of business systems such as ERP and CRM will become smooth and can still be handled in a timely manner during network peaks.

In business practices such as smart cities, Ping An cities, and financial security video surveillance, the AP-KH1105-E series serves as a video surveillance convergence router, supporting the establishment of infinitely scalable, high-fidelity municipal monitoring networks, improving the clarity and smoothness of video surveillance in 3G and 4G network environments, and improving the intelligent response level of smart cities, Ping An cities, and financial security.

Telecommunication level reliability design

Redundancy of key modules: routing engine redundancy, switching network board redundancy, power supply N+N redundancy.

Hot plugging of key components: The routing engine, service carrier board, service sub card, power module, and fan frame all support hot plugging.

Comprehensive fast rerouting technology: supports IP-FRR, can be linked with static routing, policy routing, RIP, OSPF, IS-IS, BGP, etc., and combines BFD functions to achieve fast routing switching of failed links; MPLS TE FRR is supported, which can be combined with BFD functions to reduce service interruption time caused by link failures.

Comprehensive GR (Graceful Restart) function, supporting OSFP, RIP, BGP, MPLS LDP, and other protocol environments, and achieving uninterrupted forwarding during active and standby routing engine switching.

Support VRRP and combine BFD/DLDP fault fast detection mechanism to achieve fast VRRP switching capability; Support link backup mechanism and route backup.

All RSR series routers use the same APOS software system, which brings great convenience to maintenance.

Flexible device management

The AP-KH1105-E series supports hierarchical user management and password protection, and achieves separation of control and forwarding through multi-core CPU technology, ensuring that device management can be achieved in any environment; Authenticate the logged in user, and grant different management permissions to users at different levels to ensure the safety of the device.

Comprehensive hardware virtualization capabilities

The AP-KH1105-E series achieves the management of multiple routers and centralized data processing through a flexible virtualization architecture design for router management and data levels, ensuring real-time and high availability of the network core layer, and providing highly reliable assurance for users' critical services. The virtualization technology implemented using a professional hardware architecture ensures the high performance of the virtualization business platform and provides a more flexible practice for the future expansion of the user network core.