Eudemon8000E High-End Security Gateway Promotion Brochure

8/11/2019 Eudemon8000E High-End Security Gateway Promotion Brochure

http://slidepdf.com/reader/full/eudemon8000e-high-end-security-gateway-promotion-brochure 1/8

Huawei Eudemon8000E Series High-EndSecurity Gateway

Huawei Technolog ies Co., Ltd.



Eudemon 8000E High-End Security Gateway

1

Product Overview

With the emergence of the triple play, Web 2.0, P2P video, and High Definition broadband,

requirements for network bandwidth are growing rapidly. Gigabit and 10-Gigabit bandwidths

are no longer new concepts. Many switches and routers have 10-Gigabit high-capacity

interfaces. Large-scale enterprises, such as telecom carriers, are facing services integration

and network expansions. Traditional firewalls inevitably becomes the bottleneck, because

they are not applicable to high-speed networks.

Based on the rich experience of hardware design and combined the professional network

processor (NP) chip and distributed hardware platform, Huawei launches the professional

security gateway device Eudemon8000E, which has an advanced NP + multi-system +

distributed architecture.

The Eudemon8000E provides firewalls with high Virtual Private Network (VPN) performanceand ensures users' requirements for high reliability and performance. Besides, security

requirements for high-end applications can be satisfied with low capital investment, such as

carriers' high-speed networks, large-scale financial data centers, large-scale Web sites,

governments, and vertical networks of large-scale enterprises.




2

Product Series

Eudemon8080E Eudemon8160E

Product Features

Advanced NP + mul ti -system + dis tr ibuted arc hi tecture-breaking traditi onal

performance bottl enecks

The Eudemon8000E adopts the architecture of independent control modules, interface

modules, and service processing modules. Based on the dual NP, the interface module

ensures the linespeed forwarding of interface traffic. Based on the multi-core and multi-thread

architecture , the service processing module ensures the high-speed concurrent processing of

multiple services, such as the Network Address Translation (NAT), Application Specific Packet

Filter (ASPF), Anti-DDoS, and VPN. The Eudemon8000E series contain the Eudemon8080E

and the Eudemon8160E. They have eight and sixteen slots respectively and support multiple

service modules. They adopt the distributed concurrent processing mechanism, which greatly




3

enhances the product performance. Thus, users can expand capacities with low pre-phase

investment.

High firewall performance- guaranteeing users’ key services

The three main indexes of the Eudemon8000E, throughput, number of connections

established per second, and maximum number of concurrent connections, are in leading roles.

The throughput of one service processing module of the Eudemon8000E is 10 G; the number

of connections established per second is 250,000; and the maximum number of concurrent

connections is 4,000,000. For one processing module, its specification has already exceeded

that of a 10-Gigabit firewall. Furthermore, the Eudemon8000E has a maximum of eight

service processing modules and its entire throughput reaches 80 G; the number of

connections established per second is 2,000,000; the maximum number of concurrent

connections is 32,000,000; and the number of virtual firewalls is 1024. The high performance

and expandability of the Eudemon8000E can meet high-end users’ requirements for high

performance.

Stable and reliable security gateway- ensuring consistency of users’ services

Network security is a key point for enterprise operations. The Eudemon8000E supports the

redundant components, such as interface, fan, and power, networking of hot swap, dual

processing engine, master/backup, master/master, and high reliability. Different service

boards of the Eudemon8000E supports the load balancing and mutual hot backup, so the

abnormity of a single board will not influence the entire system. Meanwhile, together with

Huawei BYPASS devices, services will not be interrupted even if faults or power failures occur

on devices. The mean time between failures of the Eudemon8000E is as long as 500,000

hours, and the failover time is less than 0.1 second. These ensures the consistent and stable

service operations.

Abundant network interfaces- facil itating users ' networking applicat ion

Besides the Ethernet interfaces of 5 × GE, 10 × GE, 24 × GE, and 1 × 10 GE, the

Eudemon8000E also supports the POS interfaces frequently used in the backbone network,

including 8 × 155 M, 4 × 622 M, 4 × 2.5 G, and 1 × 10 G, and the interconnection with the

Synchronous Digital Hierarchy (SDH) devices. All of these effectively enhance the

transmission efficiency. The Eudemon8000E has a maximum interface capacity of 160 G, and

provides eight 10 GE interfaces and 196 GE interfaces. The Eudemon8000E supports thecross-board binding, which meets the requirements for large interface capacity and high

interface intensity of the complicated networking, such as the carrier Metropolitan Area

Networks (MANs), large-scale enterprises, and data centers.

Optimal VPN performance- adapting to requirements f or encrypted transmission of

mass services

With the increase of network applications, more and more services need to be transmitted on

the public network safely. Subsequently, services that require mass VPN access gateway of

100-Gigabit emerge, such as mobile security access, Short Message Service (SMS) push,

and email push. The Eudemon8000E provides a maximum of 32 Gpbs encryption and




4

decryption performance and supports 320,000 concurrent VPN tunnels, which is the VPN

access gateway of the highest performance for the moment.

The Eudemon8000E also supports the IKEv2 protocol and enhances the functions of user

authentication, packet authentication, and NAT traversal. Thus, the Eudemon8000E

eliminates the hidden hazards of the middleman attack and the DDoS attack., and supportswireless authentication protocols, such as EAP-SIM and EAP-AKA, which effectively ensures

the wireless network security.

Typical Networking

Defense solution for a large-scale IDC




5

Defense solution for vertical network headquarters of governments and large-scale enterprises

Application of mass wireless mobile VPN access




6

Product Specifications

Product Eudemon8080E Eudemon8160E

Number of slots Eight slots, in which service

boards and interface boardscan be inserted.

Sixteen slots, in which service

boards and interface boardscan be inserted.

Throughput 10 G × 4 10 G × 8

Number of concurrentconnections

4,000,000 × 4 4,000,000 × 8

Number of connectionsestablished per second

250,000 × 4 250,000 × 8

VPN performance 4 G × 4 4 G × 8

Quantity of VPN tunnels 40,000 × 4 40,000 × 8

Virtual firewall 1024 1024

Reliability Hot swap of modules and components, dual-system hotbackup, link aggregation, dual main control boards, andBYPASS

Ethernetinterfaces

5 × GE,10 × GE, 1 × 10 GE ,24 × GE(optical or electrical)Interfacetypes

POSinterfaces

8 × 155 M, 4 × 622 M, 4 × 2.5 G, 1 × 10 G

Ethernetinterfaces

96 × GE, 4 × 10 GE 192 × GE, 8 × 10 GEMaximumnumber ofinterfaces

POSinterfaces

16 × 2.5 G, 4 × 10 G 32 × 2.5 G, 8 × 10G

Dimensions (mm)(W*D*H)

442 × 669 × 886 442 × 669 × 1600

Weight 100 Kg 150 Kg

Power 700 W 900 W

MTBF 57 years 57 years




7

Huawei Technologies Co., Ltd.

Al l r ights reserved.

The information contained in this document isor reference purpose only, and is subject tohange or withdrawal according to specificustomer requirements and conditions.


Address: Huawei Industrial Base Bantian,Longgang Shenzhen People's Republic of

ChinaTelephone: 86 (0755) 28780808

Post code: 518129

www.huawei.com


ress: Huawei Industrial Base Bantian, LonggangShenzhen People's Republic of China

Telephone: 86 (0755)28780808

Post code: 518129

www.huawei.com

Documents

Eudemon8000E High-End Security Gateway Promotion Brochure