Zte ZXR10 5250-28TC, ZXR10 5250-52TC, ZXR10 5250-52PM, ZXR105250-28SM Product Description

ZXR10 5250 Product
Description

ZXR10 5250 Product Description

ZTE Confidential Proprietary

© 2013 ZTE CORPORATION. All rights reserved.

I

ZXR10 5250 Product Description

Version

Date

Author

Approved By

Remarks

V1.0

201 1-07-25

Liusheng

Not open to the Third Party

V1.1

2012-12-05

Liusheng

ZHUOMUNIAO modification

© 2013 ZTE Corporation. All rights reserved.
ZTE CONFIDENTIAL: This document contains proprietary information of ZTE and is not to be

disclosed or used without the prior written permission of ZTE.
Due to update and improvement of ZTE products and technologies, information in this document is

subjected to change without notice.

ZXR10 5250 Product Description
II

© 2013ZTE CORPORATION. All rights reserved.

ZTE Confidential Proprietary

TABLE OF CONTENTS

1 Overview ......................................................................................................... 1

2 Highlights ........................................................................................................ 2

2.1 Energy saving and green .................................................................................. 2

2.2 Easy deployment and easy management ......................................................... 2

2.3 POE Features ................................................................................................... 3

2.4 Better video service experience ........................................................................ 3

2.5 Perfect security design ..................................................................................... 3

2.6 Smart VLAN...................................................................................................... 4

2.7 Overall supervision ........................................................................................... 4

2.8 Bidirectional ACL .............................................................................................. 4

2.9 Precision user locating ...................................................................................... 4

2.10 Ethernet OAM ................................................................................................... 5

2.11 Off-power alarm ................................................................................................ 5

3 Functions ........................................................................................................ 6

3.1 Basic service functions ..................................................................................... 6

3.1.1 MAC address management .............................................................................. 6

3.1.2 VLAN ................................................................................................................ 7

3.1.3 STP features..................................................................................................... 8

3.1.4 Link aggregation ............................................................................................... 8

3.1.5 Basic Ethernet features .................................................................................... 8

3.2 Value-Added Service (VAS) .............................................................................. 9

3.2.1 DHCP-based batch upgrade ................................................................ ............. 9

3.2.2 IPTV ................................................................................................................. 9

3.2.3 ACL ................................................................................................................ 10

3.2.4 SFLOW ........................................................................................................... 10

3.2.5 RSPAN ........................................................................................................... 11

3.2.6 Global counter ................................................................................................ 12

3.2.7 IP source guard .............................................................................................. 12

3.2.8 Dynamic ARP Inspection (DAI) ................................ ....................................... 12

3.2.9 LLDP .............................................................................................................. 13

3.2.10 UDLD ............................................................................................................. 13

3.2.11 Voice vlan ....................................................................................................... 13

3.2.12 802.1x authentication ...................................................................................... 13

3.2.13 Ring protection ............................................................................................... 14

3.2.14 ZESS smart switching ..................................................................................... 14

3.2.15 DHCP relay .................................................................................................... 15

3.2.16 TACACS+ ................................ ................................................................ ....... 15

3.2.17 SSH ................................................................................................................ 16

3.2.18 Port loopback check ....................................................................................... 16

3.2.19 MButton .......................................................................................................... 16

4 System Architecture ..................................................................................... 17

4.1 Appearance .................................................................................................... 17

4.2 Hardware Architecture .................................................................................... 17

4.2.1 Overall Hardware Architecture ........................................................................ 17

ZXR10 5250 Product Description

ZTE Confidential Proprietary

© 2013 ZTE CORPORATION. All rights reserved.

III

4.2.2 Working Principle of Hardware System ........................................................... 18

4.2.3 Introduction to Card ........................................................................................ 18

4.3 Software Architecture ..................................................................................... 20

4.3.1 Operation Support Sub-system ....................................................................... 20

4.3.2 MUX Sub-system ............................................................................................ 21

4.3.3 L2 Sub-system ................................................................................................ 22

4.3.4 NM and Maintenance Sub-system .................................................................. 22

5 Technical Indexes and Specifications ......................................................... 23

5.1 Physical Indexes ............................................................................................. 23

5.2 Basic Specifications ........................................................................................ 23

6 Operation and Maintenance ......................................................................... 26

6.1 NetNumen U31 Integrated NM Platform ......................................................... 26

6.1.1 NM Networking ............................................................................................... 26

6.1.2 NetNumen U31 NM System ............................................................................ 27

7 Comprehensive Networking Applications .................................................. 30

7.1 Community Access for Enterprise network ..................................................... 30

7.2 Corridor Access for MAN ................................................................................ 31

8 Abbreviations ................................................................................................ 32

ZXR10 5250 Product Description
IV

© 2013ZTE CORPORATION. All rights reserved.

ZTE Confidential Proprietary

FIGURES

Figure 3-1 Typical QinQ networking ..................................................................................... 7

Figure 3-2 sFlow frame ...................................................................................................... 11

Figure 3-3 ZESS network topology ..................................................................................... 15

Figure 4-1 ZXR10 5252-28TC ............................................................................................ 17

Figure 4-2 ZXR10 5252-52TC ............................................................................................ 17

Figure 4-3 ZXR10 5250-28SM ........................................................................................... 17

Figure 4-4 ZXR10 5250-52PM ........................................................................................... 17

Figure 4-6 Working principle of the system......................................................................... 18

Figure 4-7 Control principle ................................................................................................ 19

Figure 4-8 System framework diagram ............................................................................... 21

Figure 4-9 L2 system structure ........................................................................................... 22

Figure 7-1 Desktop access for enterprise network.............................................................. 30

Figure 7-2 MAN access ...................................................................................................... 31

TABLES

Table 5-1 Physical indexes ................................................................................................ 23

Table 5-2 System specifications ......................................................................................... 24

Table 8-1 Abbreviations ..................................................................................................... 32

ZTE Confidential Proprietary

2013 ZTE CORPORATION. All rights reserved

1

ZXR10 5250 Product Description

1 Overview

As a new-generation GE access L2 Ethernet intelligent switch introduced by ZTE, ZXR10
5250 series enhances its features in energy saving, user information security, access
control as well as management and maintenance. 5250 when compared with similar
products are outstanding for its powerful forwarding capability, flexible ACL and rich
monitoring manners. It supports Ethernet OAM and voice vlan, so that is can satisfy MAN
and enterprise network access needs.

ZXR10 5250 include 4 models: ZXR10 5250-28TC, ZXR10 5250-52TC, ZXR10
5250-28SM and ZXR10 5250-52PM

ZXR10 5250 Product Description
2

2013 ZTE CORPORATION. All rights reserved

ZTE Confidential Proprietary

2 Highlights

2.1 Energy saving and green

ZXR10 5250 perfectly supports 802.3az. It can dynamically set port as idle when there’s
no traffic goes through so as to save the power. It functions well to save the consumption
at single port by reducing 70% consumption at single port. Meanwhile, the device can
provide the statistics of consumption saved by the port and the device so as to provide a
practical effect of energy saving to the customer.

ZXR10 5250 supports dynamic fan adjustment. It can adjust fan speed dynamically
based on the temperature inside the equipment. It raises the fan speed and increases air
flow when the temperature is high. It reduces fan speed when the temperature is low.

By using multiple energy-saving technologies, for example, disable idle ports and adjust
port power consumption as per cable length, ZXR10 5250 try their best to decrease the
power consumption for the customer maximally.

The material used for the product conforms to Europe RoHS environment protection
standard. The environment pollution of the materials is reduced to the least. We make
certain contribution to protection of the whole environment.

2.2 Easy deployment and easy management

Automatic remote batch upgrade can upgrade the equipment of the same type at one
time, which avoids the hardship of the OAM staff going up and down the building carrying
their computers.

Creative M-Button enables the administrator to obtain the status of equipment port,
memory and CPU without logging in the system.

It supports system information display. Via one command, the system operation
information can be collected, which gives conveniences to information collection and
failure location.

It supports off-power warning. When the device is out of power, it is still capable of
sending off-power warning to remote server. In this way, the administration center can be
informed of the failure in the shortest time.

At the same time, the device supports multiple management manners, e.g., web, telnet
and snmp, etc. Also, the equipment can carry out local or remote authority authentication
to guarantee the reliability of the operation.

ZTE Confidential Proprietary

2013 ZTE CORPORATION. All rights reserved

3

ZXR10 5250 Product Description

2.3 POE Features

ZXR10 5250 series supports full-port POE and POE+ power supply, conforming to

802.3af and 802.3at standard. It is also compatible with PD equipment which doesn’t
conform to 802.3af or 802.3at standard. The maximal power supply of POE is 15.4W and
the maximal power supply of POE+ is 30W.

The port supports time-sharing POE power supply configuration. It can automatically
forcefully shut down POE power supply of the electrical interface during the period when
power supply is unneeded.

2.4 Better video service experience

ZXR10 5250 supports MVR, provides various rules and channel combination, and
supports multicast QoS. It solves traffic engineering management problem brought by
multiple egress duplication of multicast services, optimizes delay, jitter and packet loss
problem of video flow, and reduces join-in and offline delay of users’ video services. At
the same time, it supports multicast service access control, which guarantees security of
multicast service access and users’ high-quality video service experience.

2.5 Perfect security design

The security design of ZXR10 5250 is based upon two aspects: one is to guarantee the
normal operation of the device, the other is to ensure the security of the data.

For self security design, some restrictions to peer-end broadcasting message, multicast
message, unknown unicast message. Therefore, these messages will have less impact
to CPU. For CPU, the device uses control plane security service to classify and control
the speed of the protocol messages that CPU needs to process. This mechanism makes
sure that the speed of the delivered the message for the protocol stacking is within a
proper range, which avoids the breakdown of CPU caused by exceeding messages.
Besides common user name and password management, ZXR10 5250 supports multiple
logins such as SSH to prevent the administrative users being spoofed.

For user data security, besides PVLAN service, ZXR10 5250 also uses DHCP snooping
plus IP source guard to make sure user’s validity. For the messages which do not satisfy
bounding table, they will be discarded.

The device is also capable of DAI service. So that it can effectively restrict ARP-based
DOS attack. The device not only can discard arp message which does not accord with
the condition, but also can restrict the number of arp one port learns. This mechanism
successfully prevents equipment table entity from being occupied maliciously, which
makes sure other people can use the resource normally.

ZXR10 5250 Product Description
4

2013 ZTE CORPORATION. All rights reserved

ZTE Confidential Proprietary

2.6 Smart VLAN

ZXR10 5250 not only gives support to 1:1 vlan map, but also supports N: 1 VLAN map.
In this way, by aggregating vlan at the access side, the device greatly enhances the
usability of vlan resource.

ZXR10 5250 supports standard QinQ service and flexible SVLAN service, which enables
the operator to distinguish user and service at the access side effectively. In this way, the
units can implement different processing policies as per different users and services.

ZXR10 5250 supports dynamic distribution of independent vlan to voice device, and
provide higher priority to data in this vlan by configuring QoS strategy to guarantee voice
quality.

2.7 Overall supervision

 ZXR10 5250 supports message mirroring service. It can classify mirroring image

of different messages, so that different message mirroring image can go to
different port.

 ZXR10 5250 supports sFlow service. It can sample the message and send it to

the designated server.

 ZXR10 5250 support RSPAN service. It is used for the extension of common

mirroring. So that, all the messages on the monitored port will be completely sent
to the remote receiver.

 The device also supports intelligent statistic service. Being different from the

traditional accounting service which can only collect the number of the port or
queue, the intelligent statistic service can count any interested traffic or port. The
counting service can be as precise as one user‘s one service, which accordingly
provides effective monitoring way for precise operation.

2.8 Bidirectional ACL

In the course of further developing similar products, ZXR10 5250 at the same time
supports incoming and outgoing ACL. User can implement both incoming and outgoing
traffic classification and speed restriction at the same time. This mechanism enables
more comprehensive and flexible ACL.

2.9 Precision user locating

Via multiple methods like DHCP, option82, PPPOE+ and VBAS, ZXR10 5250 can
provide user’s accurate location for the network management center. The field with user
location information can be configured freely to meet different operators’ requirements.

ZTE Confidential Proprietary

2013 ZTE CORPORATION. All rights reserved

5

ZXR10 5250 Product Description

2.10 Ethernet OAM

Ethernet Operations, Administration, and Maintenance (OAM) is a guarantee to provide
high-quality carrier-class network. It monitors link status change, makes evaluation of
service quality provided by the link, so as to provide great convenience for network
maintenance staff to locate network failures. ZXR10 5250 supports three OAM protocols:

802.1ag, 802.3ah, and Y1731.

2.11 Off-power alarm

When the power supply is off-power, the device sends alarm message to the designated
server, notifying the server that the device stops working because the power supply is off.
Power supply failure is the major failure of the access device. This function can help OAM
staff to make quick decision on device failure and speed up the processing and failure
recovery.

ZXR10 5250 Product Description
6

2013 ZTE CORPORATION. All rights reserved

ZTE Confidential Proprietary

3 Functions

3.1 Basic service functions

3.1.1 MAC address management

ZXR10 5250 series fulfills the following MAC functions:

 Convert dynamic MAC address into static one

On one hand, the administrator expects that the user is fixed only to a port; on the other
hand, he does not want to configure too many static addresses. The function can be used
to reach the goal.

 Bind MAC address to a port

Dynamic, static or permanent MAC address can be added to MAC address table. The
correspondence relation between static or permanent MAC address and port is fixed, and
cannot be cancelled until the address is deleted manually.

 Limit MAC address number of a port

MAC address table capacity of a switch is limited. When many users are available and
MAC address table will reach the capacity limit, the MAC address number of low-priority
user port will be restricted.

The restriction can prevent MAC address broadcast to drive MAC address table to
overflow the network attack.

 Port MAC address learning protection

When abnormal MAC address learning of a port is checked out, the switch will protect the
MAC address learning for some time. New address learning cannot be done in the
protection. When the protection expires, the port will be in the state of MAC learning
again.

 Unknown-source MAC address filtering of a port

Unknown-source MAC address filtering of a switch port is closed by default, and the port
does not filter the unknown-source MAC address. If a switch port is configured with
enabling the unknown-source MAC address filtering, relative port will discard the packet
of unknown-source MAC address received at the port and learn it.

 MAC address filtering