H3C AR 46 Series Routers Installation Manual Chapter 1 Router Overview
1-2
which each router makes forwarding decision. It thus provides faster forwarding speed,
gets support from IP routing and control protocols, and accommodates to emerging
applications. In an MPLS network, labeled packets are transmitted along a label
switched path (LSP) formed by label switching routers. As an LSP is virtually a tunnel
across the public network, MPLS has an intrinsic advantage in terms of VPN
implementation. The AR 46 series usually acts as label edge routers (LERs) to connect
an MPLS domain with a non-MPLS domain or connect MPLS domains of different
service providers, implementing service classification, label distribution, encapsulation,
and multi-label peel-off.
V. Data security and reliability
The following are the data security and reliability features that the AR 46 series
supports:
z NAT. Besides some basic functions, NAT can limit concurrent connections to a
single user, and thus alleviate negative impact caused by malicious resources
occupation without affecting the normal network applications. In addition, NAT of
the AR 46 series also provides the application layer gateway (ALG) function
specific to FTP and ICMP.
z Identity authentication protocols such as PAP, CHAP, data RADIUS, VoIP
RADIUS, and TACACS.
z Packet filter and application specific packet filter (ASPF), which fend off external
attacks.
z VPN (including GRE, L2TP, DVPN, and MPLS L2/L3 VPN) and the technologies
of IPSec and IKE. They can ensure security of private networks in an Internet
environment.
z Backup center and virtual router redundancy protocol (VRRP). By providing a
backup scheme in case of communication line or device failures, they enhance
robustness and reliability of networks. Backup center also supports backup load
sharing.
z Hot swappable fans, interface cards, and PSUs to ensure high reliability.
VI. Online software upgrading
You are allowed to upgrade application and Boot ROM programs, and add new
features and functions on line as needed.
VII. Abundant fault isolation methods
z You are available with the means to monitor the states of system configurations,
system service channels, and system resources, as well as fault indication via
console and network management host. In addition, logging function is provided
for recording and outputting the abnormal information.
z You are allowed to monitor the FIC running state and make the judgment by
observing the LEDs on FIC panels.