Details

---

H3C CR16000-F Series Router
The CR16000-F is a high-end router series independently developed by H3C. It utilizes distributed hardware forwarding, and non-blocking switching technology. It adopts an advanced CLOS architecture with a separate control plane and forwarding plane. It supports high-density FE/GE, 10GE, 25GE, 40GE, 50GE, 100GE, 400GE interfaces, with flexible single-slot performance expansion to meet different network position requirements. It supports the advanced Comware 7 network operating system, which perfectly integrates with the CR16000-F in multiple aspects such as multi-core CPU support, distributed computing, modular design, high availability architecture, virtualization, and openness. It uses mature virtualization technology to improve network reliability while reducing device maintenance workload. It supports powerful BRAS functionality and carrier-grade CGN, meeting the development needs of multi-service edge MSE devices for operators and core devices for campus networks. It supports various network protection technologies and 1588v2 synchronous Ethernet, serving as an ER router to meet the IPRAN networking needs of operators. It supports the SR/SRv6, FlexE, iFIT, and NETCONF technologies, and has comprehensive SDN capabilities. Combined with the AD-WAN controller, it can achieve automatic business distribution, flexible network scheduling, multi-dimensional business assurance, and intelligent network O&M. With the support of IPSec VPN technology, it can meet users' demands for a trusted network.

 

Features:
Comprehensive SDN capabilities

With the rapid development of the intelligent era, businesses are becoming increasingly complex and diverse, and traffic is growing rapidly. Traditional wide area network (WAN) issues are becoming more prominent, such as uncontrollable forwarding paths, invisible services, and difficult maintenance. It is necessary to introduce SDN and intelligent technologies to achieve unified resource management, full utilization, automatic application deployment, rapid deployment, dynamic business perception, proactive adaptation, differentiated protection, and visible quality.
CR16000-F provides the following benefits:
Supports SR/SRv6+EVPN technology, simplifying network configuration and achieving manageable and controllable network paths.
Supports sub-interface slicing, FlexE, and other hard isolation technologies, reserving broadband resources and ensuring high reliability for high-priority services.
Supports iFIT + Telemetry deep flow detection technology, proactively monitoring network health and transforming passive maintenance into proactive maintenance.
Supports NETCONF and YANG, providing configuration APIs to achieve network configuration automation and accelerate network device and service deployment.
Supports CBTS functionality, selecting different tunnel paths based on different business priorities to achieve differentiated forwarding services.
Supports EVPN/VXLAN, learning MAC addresses and routing information remotely to implement Layer 2 and Layer 3 VPN based on VXLAN.
The CR16000-F, combined with the AD-WAN controller, achieves comprehensive network management, control, and analysis. It can work with SDN components to achieve centralized management, control, and analysis of the wide area network, supporting unified management and control, single-domain, multi-domain, and cross-layer business automation.

Powerful BRAS functions

Traditional SR routers carry telecom services such as Mobile, Business, and IPTV, and BRAS serves as the access gateway for broadband network applications, performing user authentication and management. The CR16000-F combines SR and BRAS functions, improving the efficiency of user network device utilization and saving user investment. It provides the following benefits:
Supports Intelligent Target Account (iTA), which distinguishes business types by destination address, realizing billing, bandwidth control, and QoS for different types of user businesses, providing users with differentiated business operation solutions.
Supports unified wired and wireless authentication, simplifying user management costs. It meets the needs of massive user terminal access through high-capacity BRAS, while also meeting the mobility and seamless authentication needs of wireless terminals.
Supports BRAS IRF hot backup, avoiding single point of failures while simplifying operations, maintenance, and management.

Mobile carrier network IP RAN

Traditional mobile operator base station backhaul networks are built on TDM/SDH. However, with the deployment and development of 3G and LTE services, data services have become the main carrier, and the demand for bandwidth is rapidly increasing. The traditional SDH TDM exclusive channel network expansion model is difficult to support, and the construction of a packetized backhaul network is an irreversible trend. IP RAN has become the mainstream solution in the mobile backhaul network field. The CR16000-F provides powerful functionality for IP RAN:
Supports various link detection and protection technologies, including: IP FRR, LDP FRR, Bypass PW, BFD For PW, and Y.1731.
Supports the 1588V2 clock synchronization protocol, achieving more accurate frequency synchronization and time synchronization.
Supports Ethernet clock synchronization, with clock recovery quality reaching 0.01 ppm.

Industry-leading network operating system

The control plane of the CR16000-F adopts multi-core and SMP symmetric multiprocessing technology, running the advanced Comware 7 operating system. Each software module has an independent operating space and can be dynamically loaded and separately upgraded.
Comware 7 supports distributed computing and global services such as MPLS and BGP. It can run on the designated MPU CPU system and distribute the main programs of each global service to different MPU systems, effectively balancing the pressure on each CPU and improving the overall performance of the system. A global service can be further split into sub-functions and the system distributes them to different MPU CPU systems, achieving distributed computing for a global service.

Technical Specifications:
 

Item	CR16006-F	CR16005E-F	CR16010-F	CR16010E-F	CR16010H-F	CR16018-F
Max Forwarding Capacity	2.56T	3.2T	6.4T	19.2T	25.6T	51.2T
Maximum Board capacity	320G	400G	400G	1.6T	1.6T	1.6T
MPU slots	2 (1+1 redundancy)	2 (1+1 redundancy)	2 (1+1 redundancy)	2 (1+1 redundancy)	2 (1+1 redundancy)	2 (1+1 redundancy)
Subcard slots	16	16	32	32	32	64
Line card slots	4	4	8	8	8	16
Switch fabric modules	4 (N+M redundancy)	2+2 (N+M redundancy)	4 (N+M redundancy)	2+2 (N+M redundancy)	5 (N+M redundancy)	5 (N+M redundancy)
Total number of slots (LPUs + MPUs + independent switch fabric modules)	10	6	14	12	15	23
Chassis	Integrated chassis, which can be installed in a 19-inch rack
Power module system	4 × AC or DC power supplies (N+M redundancy) and built-in AC power supplies	4 × AC or DC power supplies (N+M redundancy) and built-in AC power supplies	6 × AC or DC power supplies (N+M redundancy) and built-in AC power supplies	6 × AC or DC power supplies (N+M redundancy) and built-in AC power supplies	8 × AC or DC power supplies (N+M redundancy) and built-in AC power supplies	16 × AC or DC power supplies (N+M redundancy) and built-in AC power supplies
Dimensions (H × W × D)	353 × 440 × 660 mm (13.90 × 17.32 × 25.98 in) (8RU)	264 × 440 × 600 mm (10.39 × 17.32 × 23.62 in) (6RU)	930 × 440 × 660 mm (36.61 × 17.32 × 25.98 in) (21RU)	575 × 440 × 602 mm (22.64 × 17.32 × 23.70 in) (13RU)	931 × 440 × 640 mm (36.65 × 17.32 × 25.20 in) (21RU)	1687 × 440 × 640 mm (66.42 × 17.32 × 25.20 in) (38RU)
Weight in Full Configuration	<85 kg (187.39 lb)	<70 kg (154.32 lb)	<154 kg (339.51 lb)	<130 kg (286.60 lb)	<165 kg (363.76 lb)	<350 kg (771.62 lb)
Interface types	FE, GE, 10-GE (LAN/WAN), 25-GE, 40-GE, 50-GE, 100-GE, 400-GE, 155M POS, 622M POS, 2.5G POS, 10G POS, CPOS, 155M ATM, 622M ATM, E1/T1 400-GE to 100-GE interface switching 100-GE to 40-GE interface switching 155M POS, 622M POS, and GE interface switching ATM to POS interface switching 155M ATM to 622M ATM interface switching
Unicast routing	IPv4/IPv6 dual stack Static routing, RIP, RIPv2, RIPng, OSPF, OSPFv3, IS-IS, IS-ISv6, BGP, BGP4+, and MP-BGP VRRP and VRRPv3 IPv6 neighbor discovery, PMTU discovery, TCP6, ping IPv6, traceroute IPv6, socket IPv6, static IPv6 DNS, specifying an IPv6 DNS server, and TFTP IPv6 client ICMPv6 MIB, UDP6 MIB, TCP6 MIB, and IPv6 MIB ECMP/UCMP Policy-based routing Routing policies Tunneling technologies such as GRE FRR for static routing, OSPF, IS-IS, BGP, and OSPFv3 Filtering routes based on IP address, AS path, and route tag
Multicast	Routing protocols such as PIM-DM, PIM-SM, PIM-SSM, MSDP, MBGP, and anycast-RP IGMP v1/v2/v3 and IGMP snooping v1/v2/v3 PIM6-DM, PIM6-SM, and PIM6-SSM MLD v1/v2 and MLD snooping v1 Multicast policies and multicast QoS BIER
MPLS VPN	MPLS label distribution protocols such as LDP and RSVP-TE, and LDP label capacity greater than 512K P/PE functions, which comply with RFC2547bis Three inter-AS MPLS VPN methods (Option1/Option2/Option3) Hierarchy of PE (HoPE) Multi-role hosts L2VPN, L3VPN, and inter-AS L2VPN/L3VPN MPLS TE FRR and LDP FRR, with a switchover time of less than 50ms 6PE and 6vPE Distributed multicast VPN ACL-based traffic identification and redirection to different VPNs MPLS VPN troubleshooting features, including MPLS ping and MPLS traceroute L2VPN access to L3VPN VPLS access in QinQ mode
BRAS service	PPPoE, PPPoEoVLAN, and PPPoEoQ access authentication methods PPPoX function, and PPPoA and PPPoEoA access authentication methods Layer 2 portal, Layer 3 portal, and QinQ portal access authentication methods IPoE, IPoEoVLAN, and IPoEoQ access authentication methods Subnet-/interface-/L2VPN-leased access authentication methods L2TP Layer 2 transparent access and Layer 3 transparent access Remote AAA based on RADIUS/TACACS+ RADIUS, TACACS, Diameter, and COPS protocols Intelligent target accounting (ITA), which differentiates services by destination addresses to perform accounting, bandwidth control, and QoS Unified wired and wireless authentication, which meets the access requirements of massive user endpoints through a high-capacity BRAS and meets the mobility requirements of wireless endpoints BRAS IRF, which offers redundancy and simplifies Ops
Value-added services	IPsec on the following types of interface: high-speed link interfaces (FE, GE, 10-GE, 40-GE, 50-GE, 100-GE, 2.5G POS, and 10G POS) and low-speed link interfaces (155M POS, 622M POS, CPOS interface, 155M ATM, 622M ATM, and E1/T1) High-precision NAT: Carrier Grade NAT (CGN) 1588 V2
Virtualization features	Virtualization technology, which virtualizes multiple physical devices into a logical device, manages devices and forwarding entries on a unified interface, and supports multi-chassis link aggregation
ACL	IPv4/IPv6 standard ACLs and extended ACLs Layer 2/Layer 3/Layer 4-based ACLs Ingress/Egress ACLs Hardware ACLs
QoS	Hierarchical QoS (HQoS) and queue scheduling mechanisms such as PQ, WFQ, and CBWFQ 5-level HQoS scheduling for granular service management Traffic shaping Congestion avoidance technologies such as tail drop (TD) and Weighted Random Early Detection (WRED) Priority marking/remarking, and 802.1p, ToS, DSCP, and EXP priority mappings Congestion avoidance, traffic policing (CAR), and traffic shaping Packet marking based on IP address, port number, 802.1p priority, and DSCP value Multi-level queue scheduling mechanisms (including CQ, PQ, LLQ, and WFQ) for packets Multicast QoS QPPB, and QoS for MPLS TE
Ethernet	802.1Q ARP with up to 512K ARP entries NDP with up to 512K ND entries 802.1Q VLAN trunk QinQ termination 802.3d (STP), 802.3w (RSTP), and 802.3s (MSTP) IEEE 802.3ad (link aggregation), static link aggregation, and multi-card link aggregation Aggregation of interfaces at different rates Port mirroring (SPAN/RSPAN) and flow mirroring MACsec FlexE Subinterface channelization (slicing) On-demand channelization (slicing)
SDN	VXLAN Layer 2 gateway and VXLAN Layer 3 gateway (distributed and centralized) EVPN VXLAN Layer 2 gateway and EVPN VXLAN Layer 3 gateway (distributed and centralized) PECP Network information collection protocols such as BGP-LS NETCONF and YANG SR/SRv6 CBTS OpenFlow v1.3 BGP FlowSpec Telemetry APN6 SRv6 TE policy OSPFv3 over SRv6 and IS-IS over SRv6 L2VPN over SRv6, EVPN VPWS over SRv6 policy, and EVPN VPLS over SRv6 policy Color-based traffic steering and DSCP-based traffic steering by SRv6-TE policy Optimization capabilities based on latency, bandwidth, and packet loss rate by SRv6 policy Switchover to SRv6 BE path upon SRv6 policy path failure EVPN E-tree over SRv6 EVPN VPLS over SRv6 policy SR-MPLS BE, SR-MPLS TE, and SR-MPLS TE policy Ping, trace, and traffic statistics collection based on SR/SRv6 TE policy paths, and ping and trace based on SR BE 32k or more SRv6 TE policy tunnels 10 layers of SIDs in the header for SRv6 TE policy without affecting forwarding capabilities
Network flow analysis	NetStream, which supports the v5/v8/v9 data export formats, sampling, and flow statistics collection Multiple log hosts Hardware-based network traffic application analysis IPv4/IPv6/MPLS traffic collection and analysis Traffic collection and analysis in the inbound and outbound directions of interfaces Abnormal traffic detection and monitoring
Availability	Redundant backup for the key components, including the MPUs, switching fabric modules, power supplies, and fans MPU and LPU separation, and module plus submodule design Passive design for the backplane to prevent single point of failure Network processor (NP) architecture design, which prevents services from affecting forwarding capabilities Hot swapping for all components, and hot swapping of switching fabric modules without removing fan modules Intelligent fan rotation speed tuning Built-in DC and AC power supplies, which can be installed on the same router and do not occupy service slots Bit error detection Stateful failover, NSF, NSR, and GR IP trunk, MP, and Ethernet interface aggregation IP/LDP/VPN/TE/VLL FRR NSR for OSPF/OSPFv3/ISIS/ISISv6/BGP/BGP4+/VRRP/IPv6 VRRP/PIM SM/PIM DM/LDP MPLS L3VPN/6VPE/MPLS TE primary/secondary switchover without packet loss TI-LFA FRR for SRv6 with switchover time no longer than 50ms PW redundancy, MPLS/Ethernet OAM, Y.1731, routing protocol/port/VLAN damping, and other protection mechanisms Hardware-based BFD, which supports fast failure detection for various protocols (with minimum packet interval of 3.3ms) and a failover time of less than 50ms Comprehensive FRR features: IP/IPv6/LDP/TE/VPNv4/VPNv6 FRR, with a service switchover time less than 50ms and a network availability of 99.999% In-situ flow information telemetry (iFIT), which can detect network failures in real time, troubleshoot the network failures, and implement visible management over performance data RFC2544, which supports automatically sending packets to detect the throughput, delay, jitter, and packet loss rate of links MTBF greater than 20 years and MTTR no more than 0.5 hours on average
Security	Firewall modules High-performance SM-based encryption modules, which support SM2, SM3, and SM4 encryption algorithms AAA security authentication protocols (for example, RADIUS and TACACS+) Control plane attack defense Security authentication SSHv1/v2/v3, providing a secure encrypted channel for user login Standard and extended ACLs, which filter packets and prevent network attacks Defense against attacks by packets such as ARP, unknown multicast, broadcast, unknown unicast, local subnet route scanning, TCP SYN, packets with TTL 1, PADI, DHCP, portal, and protocol packets PADI, DHCP, and portal attack defense Unicast Reverse Path Forwarding (uRPF), which prevents network attacks based on source address spoofing Plaintext and MD5 authentication for RIPv2, OSPF, IS-IS, BGP, OSPFv3, IS-ISv6, and BGP4+ protocols, and keychain feature that allows different keys to be active based on time ranges Secure network management through SNMPv3
System management	In-band management and out-of-band management CLI-based configuration through console/AUX modem/Telnet/SSH2.0 File upload/download through FTP, TFTP, XMODEM, and SFTP SNMP v1/v2c/v3 RMON v1/v2, which supports groups 1, 2, 3, and 9 NTP clock Network Quality Analyzer (NQA) Failure alarms and automatic recovery DHCP Data logs ICMP Syslog Traceroute Multi-threaded access to devices through Telnet Hot patching to achieve smooth software upgrade
Operating environment	Operating temperature: 0 to 45℃ (32 to 113°F)