Huawei Eudemon8000E Series High-End

Security Gateway






Huawei Technologies Co., Ltd.

Eudemon 8000E High-End Security Gateway
1
Product Overview
With the emergence of the triple play, Web 2.0, P2P video, and High Definition broadband,
requirements for network bandwidth are growing rapidly. Gigabit and 10-Gigabit bandwidths
are no longer new concepts. Many switches and routers have 10-Gigabit high-capacity
interfaces. Large-scale enterprises, such as telecom carriers, are facing services integration
and network expansions. Traditional firewalls inevitably becomes the bottleneck, because
they are not applicable to high-speed networks.
Based on the rich experience of hardware design and combined the professional network
processor (NP) chip and distributed hardware platform, Huawei launches the professional
security gateway device Eudemon8000E, which has an advanced NP +multi-system +
distributed architecture.
The Eudemon8000E provides firewalls with high Virtual Private Network (VPN) performance
and ensures users' requirements for high reliability and performance. Besides, security
requirements for high-end applications can be satisfied with low capital investment, such as
carriers' high-speed networks, large-scale financial data centers, large-scale Web sites,
governments, and vertical networks of large-scale enterprises.
Eudemon 8000E High-End Security Gateway
2
Product Series

Eudemon8080E Eudemon8160E

Product Features
Advanced NP + multi-system + distributed architecture-breaking traditional
performance bottlenecks
The Eudemon8000E adopts the architecture of independent control modules, interface
modules, and service processing modules. Based on the dual NP, the interface module
ensures the linespeed forwarding of interface traffic. Based on the multi-core and multi-thread
architecture, the service processing module ensures the high-speed concurrent processing of
multiple services, such as the Network Address Translation (NAT), Application Specific Packet
Filter (ASPF), Anti-DDoS, and VPN. The Eudemon8000E series contain the Eudemon8080E
and the Eudemon8160E. They have eight and sixteen slots respectively and support multiple
service modules. They adopt the distributed concurrent processing mechanism, which greatly
Eudemon 8000E High-End Security Gateway
3
enhances the product performance. Thus, users can expand capacities with low pre-phase
investment.
High firewall performance- guaranteeing users key services
The three main indexes of the Eudemon8000E, throughput, number of connections
established per second, and maximum number of concurrent connections, are in leading roles.
The throughput of one service processing module of the Eudemon8000E is 10 G; the number
of connections established per second is 250,000; and the maximum number of concurrent
connections is 4,000,000. For one processing module, its specification has already exceeded
that of a 10-Gigabit firewall. Furthermore, the Eudemon8000E has a maximum of eight
service processing modules and its entire throughput reaches 80 G; the number of
connections established per second is 2,000,000; the maximum number of concurrent
connections is 32,000,000; and the number of virtual firewalls is 1024. The high performance
and expandability of the Eudemon8000E can meet high-end users requirements for high
performance.
Stable and reliable security gateway- ensuring consistency of users services
Network security is a key point for enterprise operations. The Eudemon8000E supports the
redundant components, such as interface, fan, and power, networking of hot swap, dual
processing engine, master/backup, master/master, and high reliability. Different service
boards of the Eudemon8000E supports the load balancing and mutual hot backup, so the
abnormity of a single board will not influence the entire system. Meanwhile, together with
Huawei BYPASS devices, services will not be interrupted even if faults or power failures occur
on devices. The mean time between failures of the Eudemon8000E is as long as 500,000
hours, and the failover time is less than 0.1 second. These ensures the consistent and stable
service operations.
Abundant network interfaces- facilitating users' networking application
Besides the Ethernet interfaces of 5 GE, 10 GE, 24 GE, and 1 10 GE, the
Eudemon8000E also supports the POS interfaces frequently used in the backbone network,
including 8 155 M, 4 622 M, 4 2.5 G, and 1 10 G, and the interconnection with the
Synchronous Digital Hierarchy (SDH) devices. All of these effectively enhance the
transmission efficiency. The Eudemon8000E has a maximum interface capacity of 160 G, and
provides eight 10 GE interfaces and 196 GE interfaces. The Eudemon8000E supports the
cross-board binding, which meets the requirements for large interface capacity and high
interface intensity of the complicated networking, such as the carrier Metropolitan Area
Networks (MANs), large-scale enterprises, and data centers.
Optimal VPN performance- adapting to requirements for encrypted transmission of
mass services
With the increase of network applications, more and more services need to be transmitted on
the public network safely. Subsequently, services that require mass VPN access gateway of
100-Gigabit emerge, such as mobile security access, Short Message Service (SMS) push,
and email push. The Eudemon8000E provides a maximum of 32 Gpbs encryption and
Eudemon 8000E High-End Security Gateway
4
decryption performance and supports 320,000 concurrent VPN tunnels, which is the VPN
access gateway of the highest performance for the moment.
The Eudemon8000E also supports the IKEv2 protocol and enhances the functions of user
authentication, packet authentication, and NAT traversal. Thus, the Eudemon8000E
eliminates the hidden hazards of the middleman attack and the DDoS attack., and supports
wireless authentication protocols, such as EAP-SIM and EAP-AKA, which effectively ensures
the wireless network security.
Typical Networking

Defense solution for a large-scale IDC
Eudemon 8000E High-End Security Gateway
5

Defense solution for vertical network headquarters of governments and large-scale enterprises

Application of mass wireless mobile VPN access










Eudemon 8000E High-End Security Gateway
6
Product Specifications
Product Eudemon8080E Eudemon8160E
Number of slots Eight slots, in which service
boards and interface boards
can be inserted.
Sixteen slots, in which service
boards and interface boards
can be inserted.
Throughput 10 G 4 10 G 8
Number of concurrent
connections
4,000,000 4 4,000,000 8
Number of connections
established per second
250,000 4 250,000 8
VPN performance 4 G 4 4 G 8
Quantity of VPN tunnels 40,000 4 40,000 8
Virtual firewall 1024 1024
Reliability Hot swap of modules and components, dual-system hot
backup, link aggregation, dual main control boards, and
BYPASS
Ethernet
interfaces
5 GE,10 GE, 1 10 GE ,24 GE(optical or electrical) Interface
types
POS
interfaces
8 155 M, 4 622 M, 4 2.5 G, 1 10 G
Ethernet
interfaces
96 GE, 4 10 GE 192 GE, 8 10 GE Maximum
number of
interfaces
POS
interfaces
16 2.5 G, 4 10 G 32 2.5 G, 8 10G
Dimensions (mm)
(W*D*H)
442 669 886 442 669 1600
Weight 100 Kg 150 Kg
Power 700 W 900 W
MTBF 57 years 57 years








Eudemon 8000E High-End Security Gateway
7
















Huawei Technologies Co., Ltd.
All rights reserved.
The information contained in this document is
or reference purpose only, and is subject to
change or withdrawal according to specific
customer requirements and conditions.
Huawei Technologies Co., Ltd.
Address: Huawei Industrial Base Bantian,
Longgang Shenzhen People's Republic of
China
Telephone: 86 (0755) 28780808
Post code: 518129
www.huawei.com

Huawei Technologies Co., Ltd.
dress: Huawei Industrial Base Bantian, Longgang
Shenzhen People's Republic of China
Telephone: 86 (0755)
28780808
Post code: 518129
www.huawei.com