1.OWD908102 GGSN9811 Hardware and Software Overview(NE40E) ISSUE1.01

Course Name N-0

软件结构改成ＧＧＳＮ的图

Confidential Information of Huawei. No Spreading Without Permission

Course Name N-1


Course Name N-2


Course Name N-3


Course Name N-4


Course Name N-5

� GGSN9811 is a gateway GPRS support node developed independently by Huawei. It can be used in either the 2.5G GPRS or the 3G UMTS. The GGSN9811 is a gateway for a MS to


used in either the 2.5G GPRS or the 3G UMTS. The GGSN9811 is a gateway for a MS to access the external PDN. It is located at the junction between the GPRS/UMTS packet core network and the external PDN.

� GGSN is used to provide packet data services. The GGSN routes and encapsulates the data

packets between the GPRS/UMTS network and the external PDN. The GGSN performs the

following functions:

� Acting as an interface to the external PDN: The GGSN acts as a gateway for MSs to access

the external PDN. The GGSN exchanges routing information for the external PDN. The GGSN

serves as a router for all IP addresses of users in the GPRS/UMTS network.

� GPRS/UMTS session management: The GGSN sets up communication between MSs and the

external PDN.

� Data receiving and processing: The GGSN receives data from MSs and routes the data to the

external PDN. The GGSN also receives data from the external PDN, and selects a channel in

the GPRS/UMTS network to route the data based on the destination address. Then, the GGSN

sends the data to the SGSN through the selected channel.

� Abundant charging functions: The GGSN provides the functions of common charging, hot

billing, content-based charging, and online charging.

Course Name N-6


Course Name N-7


Course Name N-8


Course Name N-9

� The N68E-22 consists of the rack, front door, back door, and side panels.


� The N68E-22 cabinet is fixed with single-leaf right-handed doors at the front and the

rear. The side panels are secured to the rack with panel screws.

� The front mount angles in the cabinet are used to fix internal components. The

grounding points on the back mount angles are used to ground the internal

components and interconnection the protection grounding (PGND) cables between

cabinets.

� The N68E-22 cabinet can be installed either on the ESD-preventive floor or on the

cement floor directly. When the N68E-22 cabinet is installed on the ESD-preventive

floor, the N6X supports must be used.

Dimensions(H x W x D)

2200 mm x 600 mm x 800 mm

Capacity Height of available space of a cabinet: 46 U (1 U = 44.45 mm).

Weight An empty cabinet weighs 100 kg. NOTEAn empty cabinet consists of the rack, front door, back door, left side panel, and right side panel.

Cabling Mode The cabinet supports both upward cabling and downward cabling.

Heat Dissipation The cabinet is equipped with many vents on the front and rear doors and the top and bottom plates to facilitate heat dissipation. It provides front-to-back and bottom-to-top cooling.

Course Name N-10

� The design of the GGSN9811 subrack complies with the IEC297 standard. The dimensions is

886.00 mm (height) x 442.00 mm (width) x 669.00 mm (depth).


886.00 mm (height) x 442.00 mm (width) x 669.00 mm (depth).

� 1. Fan panel

� 2. Fan module

� 3. Board cage

� 4. Air intake frame

� 5. Power system panel

� 6. Power supply module

� 7. Handle

� 8. Mounting ear

� 9. Cabling trough

Course Name N-11

� The configuration principle of boards is as follows:


� Two SRUs must be inserted in slots 9 and 10.

� Two SFUs must be inserted in slots 11 and 12.

� Based on actual requirements, insert one, two, three or four LPUs. For the cabling

convenience of the cabinet, slots 1, 2, 3 and 4 are reserved for LPUs.

� Based on actual requirements, insert two to six SPUs. The two adjacent SPUs are one

pair. The pairs of SPUs can be inserted in slots 3 and 4, slots 5 and 6, and slots 7 and

8.

Course Name N-12

� SRU


� The SRUs work in 1+1 backup mode. It serves as the system clock source and the

management and maintenance unit, and provides the functions of the control plane

and the system maintenance plane. The SRU is composed of the main processing unit

(MPU) and SFU modules. The two SFU modules on the two SRUs and two SFUs work

in backup mode.

� SFU

� The SFUs work in load-sharing mode, and can support line-rate switching of 640

Gbit/s (160 Gbit/s x 4) traffic.The GGSN9811 is equipped with two independent SFUs,

and the two SFU modules are populated on the two SRUs.

� SPU

� The SPUs work in load-sharing or 1+1 backup mode. The operating mode is defined

in the license file. In 1+1 backup mode, the SPUs guarantee service reliability.

� LPU

� The LPU provides physical interfaces that connect the GGSN9811 to NEs or external

networks, such as the SGSN, PDN, AAA server, and charging gateway (CG). The

interfaces are as follows: FE (10/100 Mbit/s) interface, GE (1000 Mbit/s) electrical

interface, GE (1000 Mbit/s) optical interface, ATM interface. The LPU is composed of

the LPU module, switching network fabric adaptor (FAD), and physical interface card

(PIC). The three modules work together to quickly process and forward service data.

In addition, they maintain and manage link protocols and forwarding information

base (FIB) tables.

Course Name N-13

� The SRU board provides the following function:


� The switching function. There is an integrated SFU module in the SRU board. This SFU

module working as the load sharing with the stand alone SFU board.

� The OAM function. This is fulfill by MPU module of SRU board.

� The storage function. There are two hard disk in SRU board. One is for BAM, other is

for CDR storage.

� The routing function. The SRU will collect the routing information and generate the

routing table.

� The panel of SRU board:

� OFL button: An offline button. Before drawing out a board, press the OFL button for

about 6s till the OFL indicator is on.

� NOTE: This button takes effect only on the backup SRU.

� ACT active/standby indicator (Green). If the indicator is on, the SRU is in the active

state. If the indicator is off, the SRU is in the standby state.

� ETH0 (10M/100M/1000M BASE-TX auto negotiation): Used to connect the system

network workstation.



� Console interface: Used to connect the console for system configuration.

� AUX interface: Used to connect to the Power Distribution Box for monitor Power

Distribution Box.

Course Name N-14

� The panel of SFU board.


� OFL button: An offline button. Before drawing a board out, press the OFL button for


� ACT active/standby indicator (Green): If the indicator is on, the SFU is in the normal

state. If the indicator is off, the SFU is in the abnormal state.

Course Name N-15

� The panel of SPU board.




Course Name N-16

� The panel of LPU board.




Course Name N-17


Number of input power supplies 1 or 2 or 3

Rated input voltage -48 V DC or -60 V DC

Input voltage range -40 V DC to -72 V DC

Maximum input current 100 A/input

Rated output voltage -48 V DC or -60 V DC

Output voltage range -40 V DC to -72 V DC

Number of output 10

Maximum output current 50 A/output

Course Name N-18


Item Description

Dimensions 184 mm x 450 mm x 127 mm (W x D x H)

Weight 9 kg

Power consumption 50 W

Input rated voltage –48 V DC

Input voltage –72 V DC to –36 V DC

Maximum input current 79 A

Input surge current 150 A

Maximum output current 85 A

Maximum output power 3700 W

Rated current of the air switch 50 A

Power consumption of the active power module

100 W

Power consumption of the standby power module

60 W

Course Name N-19


Course Name N-20

� The hardware of the GGSN9811 uses the structure of separated monitoring, data, and

control planes. The traffic channel among active and standby SRUs and service boards is


control planes. The traffic channel among active and standby SRUs and service boards is

connected through high speed data link called series-deseries (SerDes), and the management

channel among them is connected through fast Ethernet (FE) link. All the service boards

realize non-blocking data exchange through switching network units on the SRUs and SFUs.

Service data is processed by the network processor (NP) on each service board. This enables

the GGSN9811 to process service data at high speed.

� All the service boards are connected to the management switching network modules of the

active and standby SRUs through Ethernet management paths.

� The SRUs and SPUs work in 1+1 hot backup mode. Thus, data of online users can be

switched and protected when hardware faults occur, or when the system upgrades. The two

SFU modules embedded in the two SRUs form four exchange planes with the two SFUs. The

four exchange planes exchange data in load-sharing mode.

� Serving as the management center of the system, the SRU can read the status of the power

supply of the subrack, power supply of each board, and temperature through the monitoring

plane in real time. Through the status information, the SRU controls the fan module.

� In addition, the SRU can determine and control the status of the power distribution box (PDB)

in the cabinet through the RS232 serial port.

Course Name N-21

� Ethernet Management Planes


� The Ethernet management planes are high speed data planes that connect the

management paths of the active and standby SRUs with the management paths of

the service boards in the GGSN9811 subrack. The SRU loads, manages, and maintains

the LPUs and SPUs through the Ethernet management planes. The Ethernet

management planes that are developed on the Versatile Routing Platform (VRP) also

serve as the maintenance paths for routing tables.

� The GGSN9811 extends the functions of the Ethernet management planes, which

guarantees a 100 Mbit/s bandwidth for each management path from each board to

the SRU. In addition, service data, such as generated charging data records (CDRs),

cached CDRs, bearer context management data, and SPU backup data, is also

exchanged through the Ethernet management planes.

� The Ethernet management planes are physically connected with each board through

pins on the backplane installed in the GGSN9811 subrack.

� Service Data Exchange Planes

� The service data exchange planes are the platforms for medium and high speed

service data exchange in the GGSN9811 subrack. The service data exchange planes

enable non-blocking exchange of service data flows between service boards.

Course Name N-22

� Each SRU provides ten 100 Mbit/s and two 1000 Mbit/s Ethernet links for external devices.

The ten 100 Mbit/s Ethernet links are connected to the Ethernet management interfaces of


The ten 100 Mbit/s Ethernet links are connected to the Ethernet management interfaces of

the service boards and the SFUs. One 1000 Mbit/s Ethernet link is connected to the main

control module of the SRU, and the other 1000 Mbit/s Ethernet link is the backup link.

� Each service board and each SFU provide two 100 Mbit/s Ethernet management interfaces

and they are connected with planes A and B respectively.

� The two Ethernet management planes work in active/standby mode. The service boards

monitor the status of links connected to planes A and B in real time. If the active link fails, the

standby management path switches to the active path.

� The two SRUs interconnect with the management switching network modules of the peer

SRUs through the main control modules. When the active and standby Ethernet management

paths switch, seamless data switchover is realized through the interconnected links.

Course Name N-23

� Each SRU or SFU provides sixteen lanes, and each lane includes two 3.2Gbit/s high speed

series-deseries (SerDes) links. The SerDes links are physically connected to the switching


series-deseries (SerDes) links. The SerDes links are physically connected to the switching

network interface chips of all service boards through the connectors on the backplane.

� Each service board provides eight SerDes links, of which two links exclusively access each of

the four planes.

� The four service data exchange planes are independent of each other. The service boards

detect the statuses of links that are connected to planes A, B, C, and D in real time. If the link

to a switching network plane fails, alarms are reported to the SRU. In addition, all services on

this plane are switched to the other three switching network planes, thus realizing the

redundancy feature of the switching network planes.

Course Name N-24

� The monitoring principles of the GGSN9811 PDB are as follows:


� The PDB is equipped with an internal monitoring unit that is used to collect the status

of the PDB.

� The monitoring unit provides two RS232 serial ports working in active/standby mode.

The serial ports are connected to the AUX ports on the active and standby SRUs

through external cables.

� The SRU processes the information collected by the monitoring unit of the PDB. If

abnormalities occur, alarms are generated. The upper and lower alarm thresholds for

input voltages can be set on the SRU.

Course Name N-25

� The working principles of the fan monitoring module of the GGSN9811 are as follows:


� The fan box is equipped with an internal monitoring module that is used to monitor

the running status of the fan box.

� The monitoring module provides an interface to connect the fan module with the

backplane of the subrack. The SRU monitors the statuses and controls the fan speed

through the control area network (CAN) bus.

� The SRU processes the information collected by the fan monitoring module. If

abnormalities occur, alarms are generated.

� The running status of the fan box can be monitored through the maintenance system.

Course Name N-26


Course Name N-27

� AM


� This module implements the role adaptation, access control, user authentication and

authorization, address assignment, and bearer context management functions. It is

the interface of the GGSN9811 directed to the access networks and other NEs (SGSN)

of the core network. It is the main component for the GGSN9811 to support various

access modes.

� SM

� This module obtains and controls the policy for a service data flow.

� CM

� This module processes charging protocols and manages charging data records (CDRs).

In addition, it works with the external charging gateway and the external charging

system to realize multiple charging modes.

� PS

� This module distributes and processes signaling packets and data packets of the

GGSN9811. It works with relevant modules to perform the charging and service

control functions. In addition, it performs functions such as system support, operation

and maintenance, and routing.

� OM

� This module provides OM functions such as device management, data configuration

management, and alarm management.

� LMT

� This module provides graphical user interfaces (GUIs).

Course Name N-28

� The OM system is the management center of the GGSN9811 and provides interactive

interfaces between users and the GGSN9811.


interfaces between users and the GGSN9811.

� Externally, the OM system provides the network management systems (NMSs) with the

unified command line interface (CLI), through which the NMSs can access the GGSN9811.

Internally, the OM system coordinates with the other subsystems to maintain and monitor the

GGSN9811.

� Based on the location of a module, the OM system can be classified into the back

administration module (BAM) and front administration module (FAM).

� The BAM manages the interactive input and output between the OM system and

users, categorises and delivers OM tasks, and collects and reports the system

monitoring data. The BAM runs in the SRU.

� The FAM directly interacts with the service subsystems. The FAM is located in all the

boards of the GGSN9811.

Course Name N-29

� Routing forward subsystem


� The routing forward subsystem is composed of the routing modules on the LPU and

SPU, packet distribution module, signaling distribution module, uplink data packet

forward module, and downlink data packet forward module. This subsystem performs

functions such as packet forwarding and data protection.

� ACL subsystem

� The access control list (ACL) subsystem runs in the LPU and SPU, and is composed of

the rule sending module, rule matching module, and action execution module. This

subsystem performs ACL rule matching for packets based on the entire system or

access point names (APNs).

� Security protection subsystem

� The security protection subsystem can filter all incoming and outgoing packets based

on the defined conditions. For example, the security protection subsystem can check

whether source addresses and destination addresses of packets meet the

specifications. Thus, illegal invasion and malicious attacks can be prevented effectively.

� IPSec subsystem

� The IP Security (IPSec) subsystem is composed of the configuration module on the

SRU and the negotiation and processing modules on the SPU. This subsystem provides

IPSec based protection for packets exchanged between the GGSN9811 and external

devices. The protection refers to access control, authentication of data sources,

rejection of repeated packets, data encryption and decryption, and check of data

integrity.

Course Name N-30

� Session management subsystem


� It processes GPRS Tunneling Protocol (GTP) or Proxy Mobile IP Protocol (PMIP)

signaling during user access, transits and controls user session status, and delivers

entries of the data plane.

� Path management subsystem

� It sends and receives GTP or PMIP path messages, maintains path information, and

manages idle paths.

� Address assignment subsystem

� It controls sessions applying to the authentication, authorization and accounting (AAA)

server or Dynamic Host Configuration Protocol (DHCP) server for addresses. The

session control involves operations such as access processing and response

encapsulating. In addition, the address assignment subsystem processes the Remote

Authentication Dial In User Service (RADIUS) or DHCP protocol.

� AAA authentication subsystem

� It authenticates users with the authentication function of RADIUS.

Course Name N-31

� QoS subsystem


� The quality of service (QoS) subsystem identifies user services, handles user QoS

policies (including QoS configuration, QoS selection, QoS upgrade, and QoS

degradation), sets user QoS, and processes QoS related charging.

� Service control subsystem

� The service control subsystem enables the GGSN9811 to process and control various

types of services. For example, with this subsystem, the GGSN9811 can obtain service

polices and identify and control the services.

� DPI subsystem

� By analyzing protocol data of the application layer through the deep packet

inspection (DPI) technology, you can obtain valuable information for the content-

based charging and security concerns.

Course Name N-32

� The charging management system is composed of the online and offline charging subsystems

that integrate charging modes such as content-based charging. The online and offline


that integrate charging modes such as content-based charging. The online and offline

charging subsystems share the charging information, thus guaranteeing the accuracy and

precision of charging.

� The CM charging system runs on the SPU, and it collects, codes, caches, and sends charging

data records (CDRs) to the CG and provides charging information for the billing center.

� The online charging subsystem runs in the SPU, and it interacts with the external online

charging system (OCS) for processing charging protocols defined by the 3rd Generation

Partnership Project (3GPP) over the Gy interface and controlling online charging including

service authentication, quota application, and re-authorization.

Course Name N-33


Course Name N-34


Course Name N-35

� Procedure


� Step 1 Insert the RJ45 connectors of the monitoring cables into the AUX ports on the

SRU in the GGSN9811 subrack.

� Step 2 Insert the RJ45 connectors of the monitoring cables into the Monitor ports on

the PDB.

Course Name N-36


Course Name N-37


Course Name N-38


Course Name N-39


Course Name N-40


Course Name N-41


Course Name N-42

� The Cabinet consists of the following key parts:


� 1. LCD module

� 2. Fan subrack

� 4. boards area

� 8. Power module

� The GGSN9811 Subrack consists of the following parts:

� 1. Plastic panel of the fan Module

� 2. Fan module

� 3. Board cage

� 4. Air intake frame

� 5. Plastic panel of the power supply module

� 6. Power supply module

� 7. Handle

� 8. Angle

� 9. Cabling trough

Course Name N-43

� Two MPUs must be inserted in slots 17 and 18.


� Four SFUs must be inserted in slots 19 to 22.

� Based on actual requirements, insert one to six LPUs. For cabling convenience, slots 1 to 6 are

reserved for the LPUs.

� Based on actual requirements, install one to ten SPUs. Two adjacent SPUs are one pair. The

SPUs can be installed in slots 7 to 16.

Course Name N-44

� The function of MPU board is just same as SRU board, except the switching function. Because

SFU board is separated.


SFU board is separated.

� The panel of SFU board:

� OFL button: An offline button. Before drawing out a board, press the OFL button for


� NOTE: This button takes effect only on the backup SRU.

� ACT active/standby indicator (Green). If the indicator is on, the SRU is in the active

state. If the indicator is off, the SRU is in the standby state.





� Console interface: Used to connect the console for system configuration.

� AUX interface: Used to connect to the Power Distribution Box for monitor Power

Distribution Box.

Course Name N-45


Course Name N-46


Documents

1.OWD908102 GGSN9811 Hardware and Software Overview(NE40E) ISSUE1.01