Netmanias 기술문서: Carrier Ethernet 기술.Enterprise Service

2008년5월18일
NMC Consulting Group(tech@netmanias.com)

2
Enterprise Service (MEF: Metro Ethernet Forum)
E-Line Servicecloud2
Router2
Small Enterprise
Medium Enterprise
Router2
Point-to-Point EVC
Carrier Ethernet Network
dertified
Remote DSLAM
CE
UNI
UNI
CE
Remote DSLAM
dertified
E-LAN Service
cloud2
Multipoint-to-Multipoint EVCMedium Enterprise
ServiceProvider Central Office
University
bildin
Router2
Remote DSLAM
Carrier Ethernet
Network
Remote DSLAM
Remote DSLAM
CE
UNI
dertified
Large Enterprise
Remote DSLAM
CE
Router2
dertified
Router2
Router2
dertified
dertified
Router2
dertified
UNI
skyscrapers-r
7750_red_sr12
World2-r
ggsn-s
EVC
Enterprise Internet
E-Line + Enterprise Internet
Service
Enterprise Internet Service
skyscrapers-r
7750_red_sr12
World2-r
ggsn-s
Enterprise Internet

3
Enterprise VPN
E-LINEE-LINEEoMPLSVPLSE-LINEE-LINEE-LINEE-LINEE-LINEE-LINEMPLS L3 VPN
E-LINE (PBT)
E-LAN (PBB+PLSB)
MetroBackboneNative EthernetMPLS-basedPBT-based P2PPBB/PLSB-based MP
E-LINE (VLAN)
E-LAN (VLAN)
MetroBackbone1.IP/MPLS는Native Ethernet 기술의단점을보안하면서,
2.EoMPLS를통해E-LINE 서비스를제공하고, VPLS (또는H-VPLS)를통해E-LAN 서비스를제공할수있다3.Carrier Ethernet 기술역시IP/MPLS와동일한서비스를제공할수있어야한다.
1.Slow Network Recovery: STP2.VPN ID (=VLAN ID 4K) Limitation3.MAC Learning Issue4.No Traffic Engineering1.Fast Convergence (MPLS FRR)
2.VPN ID Scalability: Elimination of VLAN space limitation3.MAC Learning: EoMPLS (No MAC Learning), VPLS (Edge MAC Learning)
4.Traffic Engineering5.Point-to-Point, Multipoint 지원BT에서PBT 기술채택을포기한이유중에하나가Multipoint
미지원때문이었음
PBT-based VPLSTraffic Engineered PBT TunnelPBT-based MP

4
Enterprise VPN

5
Market & System Requirement for Enterprise Service
1. Enterprise Internet service: PBT
2. E-LINE (P2P) service: PBT
3. E-LAN (MP) service: (1) PBB + PSLB (2) PBT based VPLS (3) VPLS PE + PBT Transport
Market Requirement
.Enterprise service로Internet Access, P2P L2VPN, MP L2 VPN을제공할수있어야함
.Multi-Service UNI (L2 (L2 VPN) and L3 (Internet Access) services on same port, L2
multipoint and pt-to-pt services on same port)를지원해야함(MEF)
System Requirement
4. E-LINE (P2P) + Enterprise Internet service: PBT
Short Stubby dark blue
Short Stubby dark blue
뒤에서예시Short Stubby dark blue

6
PBT를적용한E-LINE(P2P) + Internet 서비스망구조(예시1)
Internet 4093PBB-TE TrunkI-SID2001
S-VID=10S-VID=11Port 1
S-VID=12S-VID=13Port 2MSANCO-SW1AGG-SWER/PES-VID=10S-VID=11S-VID=12S-VID=13Port 1Port 1Port 2CO-SW2
METRO-SWCustomer VLANInternet 4093S-VLAN 10Enterprise UserCustomer VLANInternet 4093ServiceS-VLANC-VLANS-VLAN 10Internet 4093PBB-TE TrunkI-SID1001S-VLAN 10Customer VLANS-VLAN 10S-VID=10S-VID=11S-VID=12S-VID=13S-VID=10S-VID=11S-VID=12S-VID=13Port 1Port 2Port 3Port 416M 개수의Enterprise P2P 가입자수용이가능함Enterprise Internet 가입자를ER/PE
하단에4K 밖에수용하지못함Egress Node에서S-VLAN
rewrite를통해E-LINE 서비스에대한S-VLAN 4K 제약해결VLAN TranslationFlexible Service MappingC-VLAN (range), S-VLAN,
Physical Port 값을통해Service
(EFP = SAP) 매핑함

7
PBT를적용한E-LINE(P2P) + Internet 서비스망구조(예시1) (cont)
PBB-TE TrunkPBB-TE TrunkPort4, S-VLAN=10EFP301I-SID2001AGG-SWEFP DefinitionInput (EFP)OutputPortS-VIDEVC (I-SID)
4102001PBB-TE Trunk (E-LINE)
AGG-SWI-SID2001Port4PBB-TE Trunk (E-LINE)
EFP Definition: CO-SW1Input (EFP)OutputPortS-VIDC-VIDEVC (I-SID)
1101~40921001110409320011111~4092100211140932002Port1, S-VLAN=10, C-VLAN=1~4092EFP300I-SID1001Port1, S-VLAN=10, C-VLAN=4093EFP301I-SID2001CO-SW1CO-SW1I-SID1001I-SID2001VLANTranslationUpstream
S-VID=10S-VID=11Port 1
S-VID=12S-VID=13Port 2MSANCO-SW1AGG-SWER/PES-VID=10S-VID=11S-VID=12S-VID=13Port 1Port 1Port 2CO-SW2
METRO-SWS-VID=10S-VID=11S-VID=12S-VID=13S-VID=10S-VID=11S-VID=12S-VID=13Port 1Port 2Port 3Port 4Port1DownstreamFlexible Service Mapping

8
PBT를적용한E-LINE(P2P) + Internet 서비스망구조(예시2)
C-VLAN 10PBB-TE TrunkI-SID2001
S-VID=10S-VID=11Port 1
S-VID=12S-VID=13Port 2MSANCO-SW1AGG-SWER/PEE-LINE: S-VID = 10Internet: S-VID=100, C-VID=10Port 1Port 1Port 2CO-SW2
METRO-SWCustomer VLANInternet 4093S-VLAN 10Enterprise UserCustomer VLANInternet 4093ServiceS-VLANC-VLANS-VLAN 100C-VLAN 10PBB-TE TrunkI-SID1001S-VLAN 10Customer VLANS-VLAN 100Port 1Port 2Port 3Port 4MSAN IDEnterprise UserS-VLANC-VLANVLAN ManipulationE-LINE: S-VID = 10Internet: S-VID=100, C-VID=10Flexible Service MappingC-VLAN (range), S-VLAN,
Physical Port 값을통해Service
(EFP = SAP) 매핑함16M 개수의Enterprise P2P 가입자수용이가능함ER/PE 하단에4K 제한을해결하기위해, CO-SW에서VLAN
Manipulation 수행if (C-VLAN = 4093)
S-VLAN = MSAN IDC-VLAN = S-VLAN value of originate packetelseS-VLAN/C-VLAN is not changed

9
PBT를적용한E-LINE(P2P) + Internet 서비스망구조(예시2) (cont)
PBB-TE TrunkPort4, S-VLAN=10EFP301I-SID2001EFP DefinitionInput (EFP)OutputPortS-VIDEVC (I-SID)
4102001PBB-TE Trunk (E-LINE)
AGG-SWI-SID2001Port4PBB-TE Trunk (E-LINE)
EFP Definition: CO-SW1Input (EFP)OutputPortS-VIDC-VIDEVC (I-SID)
1101~40921001110409320011111~4092100211140932002Port1, S-VLAN=10,
C-VLAN=1~4092EFP300I-SID1001Port1, S-VLAN=10,
C-VLAN=4093EFP301I-SID2001CO-SW1I-SID1001I-SID2001VLANTranslationPort1UpstreamVLANManipulation
S-VID=10S-VID=11Port 1
S-VID=12S-VID=13Port 2MSANCO-SW1AGG-SWER/PEE-LINE: S-VID = 10Internet: S-VID=100, C-VID=10Port 1Port 1Port 2CO-SW2
METRO-SWPort 1Port 2Port 3Port 4E-LINE: S-VID = 10Internet: S-VID=100, C-VID=10DownstreamVLANManipulationPBB-TE Trunk

10
Multipoint (E-LAN): (1) PBB + PLSB
ES1ES2ES3ES4ES5ES6ES7ES8ES9ES10ES11ES12ES13ES14ES17
ES15ES16ES18ES19ES20ES21ES22ES23ES24ES25
ES27ES26ES28ES29ES30ES31ES33ES34ES35ES36Configure I-SID = 100 for Enterprise A12132Enterprise ASite 1Enterprise ASite 2Enterprise ASite 3Enterprise BSite 2Enterprise BSite 1PLSB edge-Broadcast/Unknown Packet: Flooding/Broadcasting using multicast MAC assigned per I-SID-Known Packet: UnicastPLSB domain (IS-IS working)
#NAME?
-VPN (I-SID) finding-ES (Ethernet Switch) MAC is installed at FDB by IS-IS-Multicast MAC per VPN (I-SID) is installed at
multicast FDB by IS-ISES35# sh isis plsb unicast-fibB-DA B-VID O-Port--------------------------
ES3 10 2ES33 10 1ES29 10 2ES25 10 1... All PLSB nodeES35# sh isis plsb multicast-fibMulticast-DA I-SID B-VID O-Port-----------------------------------------
03:00:61:00:00:64 100 10 1,2,3
... All Multicast-DA (= # of I-SID)
BDA=ES3BDA=03:00:61:00:00:64PLSB core-Broadcast/Unknown Packet: Drop-Known Packet: Unicast

11
Multipoint (E-LAN): (2) PBT based VPLS
Enterprise ASite 1
ES1ES2ES3ES4ES5ES6ES7ES8ES9ES10ES11ES12ES13ES14ES17
ES15ES16ES18ES19ES20ES21ES22ES23ES24ES25
ES27ES26ES28ES29ES30ES31ES32ES33ES34ES35ES36PBT Tunnel for Enterprise AEnterprise ASite 2Enterprise ASite 3Enterprise BSite 2Enterprise BSite 11/2EFP100PBT
TunnelPBT
TunnelVSI100EFP100PBT
TunnelPBT
TunnelVSI100EFP200PBT
TunnelPBT
TunnelPBT
TunnelVSI200[VSI (Virtual Switch Instance) OPERATION]
.Source MAC learning from local CE and remote CE.Unicast with Known Packet from CE.Flooding and Broadcasting with Unknown/Broadcast Packet from CE.Split Horizon bridgingEnterprise ASite 1Enterprise BSite 1EFP100PBT
TunnelPBT
TunnelVSI100Enterprise ASite 2Enterprise ASite 3PBT Tunnel 100PBT Tunnel 200PBT Tunnel 300ES1ES3ES4MAC1MAC2MAC3111Bridge Table:VSI 100VID MAC Port10MAC1 1-MAC2 PBT-tunnel-100-MAC3 PBT-tunnel-300Bridge Table:VSI 100VID MAC Port10MAC2 1-MAC1 PBT-tunnel-100-MAC3 PBT-tunnel-200Bridge Table:VSI 100VID MAC Port10MAC3 1-MAC1 PBT-tunnel-300-MAC2 PBT-tunnel-200

12
Multipoint (E-LAN): (3) VPLS PE + PBT Transport
Enterprise AEnterprise AEnterprise AES1ES2ES3ES4ES5ES6ES7ES8ES9ES10ES11ES12ES13ES14ES17ES18ES19ES20ES23ES24ES25
ES27ES26ES28ES29ES30ES31ES32ES33ES34ES35ES36
VPLS PE1
VPLS PE2
VPLS PE3
VPLS PE1VPLS PE2VPLS PE3ES13ES23ES19Enterprise A
ES5ES1Enterprise A
ES3ES9
ESES11Enterprise AVPLS PseudowireCE1CE2CE3PBT Tunnel for Enterprise AS-VLAN 10S-VLAN 20Service Mapping (EFP Definition): S-VLAN + Port

13
Summary of Enterprise Service
E-LAN service
PBB
PBB+PLSB
PBT based VPLS
VPLS PE + PBT
Transport
Scalability: Ease of adding new clients
Good, Auto discovery by
MRP
Good, Auto discovery by IS-
IS
Bad, New PE requires new
VPN tunnels (I-SID) to all
existing PEs
Bad, New VPLS PE requires
new PW tunnels to all existing
PEs
Scalability: VPN ID
Very Good, 16M VPN ID
Very Good, 16M VPN ID
Very Good, 16M VPN ID
Good, 1M VPN ID
Scalability: # of node in VPN network
Bad, STP limitation
Not So Good, IS-IS
Scalability
Very Good
Good
Client MAC learning Issue
PBB Edge
PLSB Edge
PBT Edge
VPLS Edge
Replication Efficiency
Good
Good
Bad, Replication at Ingress
PE
Bad, Replication at ingress
PE
Path Determinism
STP
Routing path determinism
Full determinism
Full determinism
Traffic Engineering
No
No
Yes
Yes
Link Protection
STP
(maximum 30~40s)
IS-IS
(IP convergence에준함)
CCM+PBT protection
(under 50ms)
CCM+PBT protection
(under 50ms)
End node Protection
STP
IS-IS
Dual-homed PBT
Dual-homed PBT
# of Connection
No tunnel connection
No tunnel connection (Per
source-rooted path tree)
O(N2) PBT tunnel
O(N2) PBT tunnel
Control Complexity
Medium, MRP and STP
control protocol used
Medium, IS-IS control
protocol used
Low, Central management
system used for full mesh
tunnels
High, Central management
system used for full mesh
tunnels and needs several
MPLS control protocols
Network Stability (망안정성)
Not so Good (STP, MRP)
Not so Good (IS-IS)
Good (한번setup하면변화가없음)
Bad (MPLS control protocol)
Standards
Yes
(IEEE 802.1ah)
Yes
(IEEE 802.1aq)
No
Yes
Vendor Support
-
Nortel
Hammerhead, ADVA

14
Market & System Requirement for Enterprise Reliability
2. E-LINE service: PBT Protection
3. E-LAN service:
(1) PLSB: IS-IS convergence
(2) PBT based VPLS: PBT 1:1 Protection
Market Requirement
.Enterprise Internet Access, P2P VPN, MP VPN 서비스에대해서, Link 장애및Node 장애에대한Fast Recovery를제공해야함
System Requirement
1. Enterprise Internet service:
(1) Link Failure: PBT 1:1 Protection
(2) Node (Tunnel End Point) Failure: Dual-homed PBT with VRRP

15
Enterprise Reliability Architecture
PBT
TunnelCPBT
Tunnel
PBT
TunnelPBT
TunnelX1/1CO-SWAGG-SW 1AGG-SW 21/31/4Active VRRP RouterBackup VRRP RouterActive PBT-tunnel-aEFP100Y1/4DEFP100PBT
TunnelPBT
Tunnel1/21/3A1/31/4BEFP1001/11/11/21/2Standby PBT-tunnel-bStandby PBT-tunnel-cCCM (10ms)
PBT
TunnelCPBT
Tunnel
PBT
TunnelPBT
TunnelX1/1CO-SWAGG-SW 1AGG-SW 21/31/4Active VRRP RouterBackup VRRP RouterActive PBT-tunnel-aEFP100Y1/4DEFP100PBT
TunnelPBT
Tunnel1/21/3A1/31/4BEFP1001/11/11/21/2Standby PBT-tunnel-bStandby PBT-tunnel-cCCM (10ms)
PBT 1:1 ProtectionDual-homed PBT
ES1ES2ES3ES4ES5ES6ES7ES8ES9ES10ES11ES12ES13ES14ES17
ES15ES16ES18ES19ES20ES21ES22ES23ES24ES25
ES27ES26ES28ES29ES30ES31ES33ES34ES35ES36Configure I-SID = 100 for Enterprise A12132Enterprise ASite 1Enterprise ASite 2Enterprise ASite 3Enterprise BSite 2Enterprise BSite 1PLSB domain (IS-IS working)
#NAME?
-VPN (I-SID) finding-ES (Ethernet Switch) MAC is installed at FDB by IS-IS-Multicast MAC per VPN (I-SID) is installed at
multicast FDB by IS-ISES35# shisisplsbunicast-fibB-DA B-VID O-Port--------------------------
ES3 10 2ES33 10 1ES29 10 2ES25 10 1... All PLSB nodeES35# shisisplsbunicast-fibB-DA B-VID O-Port--------------------------
ES3 10 2ES33 10 1ES29 10 2ES25 10 1... All PLSB nodeES35# shisisplsbmulticast-fibMulticast-DA I-SID B-VID O-Port-----------------------------------------
03:00:61:00:00:64 100 10 1,2,3
... All Multicast-DA (= # of I-SID)
ES35# shisisplsbmulticast-fibMulticast-DA I-SID B-VID O-Port-----------------------------------------
03:00:61:00:00:64 100 10 1,2,3
... All Multicast-DA (= # of I-SID)
BDA=ES3BDA=03:00:61:00:00:64PBT 1:1 Protection + Dual-homed PBTPLSB IS-IS Convergence
Enterprise ASite 1
ES1ES2ES3ES4ES5ES6ES7ES8ES9ES10ES11ES12ES13ES14ES17
ES15ES16ES18ES19ES20ES21ES22ES23ES24ES25
ES27ES26ES28ES29ES30ES31ES32ES33ES34ES35ES36PBT Tunnel for Enterprise AEnterprise ASite 2Enterprise ASite 3Enterprise BSite 2Enterprise BSite 1Internet AccessE-LINEE-LAN: PBB+PLSB CaseE-LAN: PBT based VPLS CasePBT 1:1 ProtectionPBT 1:1 Protection
Enterprise ASite 1
ES1ES2ES3ES4ES5ES6ES7ES8ES9ES10ES11ES12ES13ES14ES17
ES15ES16ES18ES19ES20ES21ES22ES23ES24ES25
ES27ES26ES28ES29ES30ES31ES32ES33ES34ES35ES36Enterprise ASite 2Enterprise ASite 3Enterprise BSite 2Enterprise BSite 1

16
Multiple Failure Issue
EnterpriseMPLS RestorationCO (384)
POP(48)
RN(12)
CN(2)
PE/ER
ResidentialMobileEnterprise
ResidentialMobileEnterprise
CO (384)
POP(48)
RN(12)
CN(2)
PBT 1:1 Protection망내복수장애발생시에도망복구방안이제시되어야한다. 기존의IP Routing 망이나MPLS망에서는Restoration 기능이있으므로복수장애발생시에도경로가하나라도존재하면망은복구되고서비스단절은없다. 그러나, PBT망에서는1:1
Protection 기반이므로복수장애발생시망복구가안되는문제점이있다.
KT의경우이중장애까지고려하여망설계를함(KT경우, Fiber Cut이연평균50회임, Planned 포함)
.IP, MPLS에서는Restoration 기능을제공하고, PBT, SONET에서는제공하지않음

17
Market & System Requirement for Multiple Failure Resiliency
1. Per-Hop Dual-homed PBT
2. Multiple Protection Tunnels Provisioning
3. Control Protocol for Dynamic Restoration
Short Stubby dark blue
Short Stubby dark blue
Market Requirement
.망내복수장애발생시에도망복구방안이제시되어야함
System Requirement
Short Stubby dark blue
뒤에서예시

18
Protection of Multiple Failure: (1) Per-Hop Dual-homed PBT
VS.

19
Protection of Multiple Failure: (1) Per-Hop Dual-homed PBT (cont)
PBT Tunnel3006PBT Tunnel3001PBT Tunnel3000PBT Tunnel3002PBT Tunnel3003PBT Tunnel3004PBT Tunnel3005Port2, S-VLAN=25,
C-VLAN=32EFP100EFP200EFP300Port1, UntaggedPort1, C-VLAN=10Port2, C-VLAN=10Port3, S-VLAN=30,
C-VLAN=2~4093EFP500VLANTranslationBridgingVSII-SID1000I-SID1001I-SID1002I-SID1004I-SID1005I-SID1006I-SID1006I-SIDXCVLANTranslationVLANTranslationVLANTranslationEFP400Port1, C-VLAN=10Port2, C-VLAN=11I-SID1003VLANTranslationVLANXCEFP: Ethernet Flow Point (=SAP: Service Access Point)
EVC: Ethernet Virtual Circuit (=I-SID in PBB-TE)
EFP600Port1, UntaggedI-SID1000VLANTranslationI-SIDTranslationI-SID Cross Connect TableInputOutputTunnelI-SIDTunnelI-SID30041006300510063005100630051006I-SID Cross Connect

20
Protection of Multiple Failure: (2) Multiple Protection Tunnels Provisioning
Enterprise ASite 1
Enterprise ASite 2Enterprise ASite 3Enterprise BSite 2
Working TunnelProtection Tunnel (Preference = 1)
Protection Tunnel (Preference = 2)
Tunnel Provisioning ServerCO-SWWorking
TunnelProtectionTunnelXCO-SWSAP100YProtectionTunnelPreference = 1Preference = 2Working
TunnelProtectionTunnelXCO-SWSAP100YProtectionTunnelPreference = 1Preference = 2CO-SWPBB-TE Trunk: WorkingPBB-TE Trunk: Protection w/ Preference = 1PBB-TE Trunk: Protection w/ Preference = 2

21
End of Document