Professional Documents
Culture Documents
eCorridors Program
2003 Virginia Polytechnic Institute and State University, Blacksburg, VA. All rights reserved.
Preface
This series of reports, entitled Strategic Technology Infrastructure for Regional Competitiveness in the Network Economy and packaged in eleven Volumes, is the culmination of a dedicated effort of the following individuals and organizations. Each Volume can be viewed as a stand-alone publication; however, it should be noted that each Volume was written in the context of the overall project. The project utilized the Southside and Southwest Virginia regions as a model for a low-cost Geodesic Mesh network design and viable financial model that could be replicated in any region of the U.S.
Volumes
1) 2) 3) 4) 5) 6) 7) 8) 9) 10) 11) Rationale, Environment, and Strategic Considerations Connecting the Regional Infrastructure to National and International Networks A Fiber Optic Infrastructure Design for Southside and Southwest Virginia Fiber Optic Infrastructure Design Guide Financial Feasibility and Investment Rationale Leveraging Advanced Optical and Ethernet Technologies Speculative and Alternative Technologies Community, Applications and Services Demographics for Southside and Southwest Virginia Health Information Technology and Infrastructure Education in the 21st Century
emntsckowldgA
The following individuals and organizations contributed to the development and preparation of this series of reports.
Allen, Morgan Arellano, Christian Aughenbaugh, John Bevis, Jeff Blythe, Erv Bohland, James Bottom, Beth Bowden, Phillip Brown, Eric Charlton, Garland Chen, Daniel Cohen, Marc Colbert, Joy Croasdale, Hud Crowder, Jeff Dalton, Jody de Vries, Marten Dwyer, Sharon Fisher, Tommy Franklin, Nancy Gaylord, Clark Hach, Richard Hall, Shannon Hares, Glynn Harris, Carl Hey, Bryan Hoover, Maynard Horton, Helen Jones, Brian Jones, Doug Kanter, Theresa Kidd, Jeff Lee, Steven Lilly, Judy L. Martin, David Martin, Evelyn Mathai, Mathew McCann, Jessica Morrison, Brandon Neidigh, Brenda Nichols, John Pelt, Ranson Perry, Mike Pheley, Al Plymale, V. Jean Plymale, Bill Pollard, John Rodgers, Pat Sanghvi, Harsh Shepherd, Scott Sheppard, Scott Shumaker, Richard Stewart, Jeb Stock, Doris Tyree, Charles Waddell, Bobby Wenrich, John Woods, Cindy Zirkle, Mary
ii
iii
Table of Contents
Introduction .....................................................................................................................1 Historical Perspective......................................................................................................3 What is Metropolitan/Regional Ethernet? ........................................................................6 Ethernet in the First Mile...........................................................................................7 Backbone Networks for Non-Ethernet Broadband Access......................................11 Interconnecting Service Provider Networks ...................................................................14 Cross-connects as Meet Points ..............................................................................14 Packet Switching or Multiplexing as Meet Points ....................................................16 Collocation at Meet Points......................................................................................16 Ethernet-Based Internet Exchange Points ..............................................................17 Cost and Manageability Benefits of Metro Ethernet .......................................................19 Limitations of Current Metro Ethernet Technology.........................................................22 Slow Recovery From Link Failures .........................................................................22 Lack of Remote Fault Isolation ...............................................................................24 Lack of In-Service Performance Monitoring and OAM ............................................25 Limited VLAN Tag Space .......................................................................................25 Spanning Tree Inefficiencies on Highly Meshed Networks .....................................26 Lack of End-to-End Service Guarantees.................................................................26 Is Metro Ethernet Ready for Prime Time?...............................................................27 Best Practices for Metro Ethernet Networks ..................................................................29 Architecture: Link Layer or Network Layer Switching..............................................29 Spanning Tree Configuration..................................................................................30 Forwarding Table Considerations...........................................................................31
iv
Volume 6: Leveraging Advanced Optical and Ethernet Technologies Protocol Filtering ....................................................................................................32 Rate Limits on Broadcast and Multicast Frame Flooding ........................................32 IP Multicast Frame Flooding and Rate-Limiting ......................................................33 Quality-of-Service Controls.....................................................................................33 Acronym Glossary .........................................................................................................35 Acknowledgements .......................................................................................................38 References....................................................................................................................39
List of Figures
Figure 1: MSAP extending access network .....................................................................8 Figure 2: MSAPs connecting Ethernet rings ....................................................................9 Figure 3: Schematic of traditional DSL access network .................................................11 Figure 4: MSAP connecting multiple ISPs and access networks ...................................12 Figure 5: Schematic of cross-connect pedestal as meet point .......................................15 Figure 6: Collocation at meet points ..............................................................................17 Figure 7: Link Aggregation between MSAPs .................................................................23
vi
Introduction
Telecommunications services delivery over the last ten years has been dominated by digital circuit-based technologies such as Time Division Multiplexing (TDM) and Synchronous Optical Network (SONET). These technologies are readily adapted to large-scale voice communications, as they effectively multiplex resources with fixed units. For the same reasons, they are less suited for data communications, where the resource demands of the applications are highly variable. Packet switching technologies such as Frame Relay and ATM played an important role in the unprecedented growth in the data telecommunications market, ushered in by the rise of the Internet. With the realization of digital voice and video transmission, the efficiencies of packet switching can also be applied to these applications. Inarguably, all of these technologies have been extraordinarily effective. Yet, they where designed and developed for a very different telecommunications economy than that which exists today. In todays telecommunications market, service providers must be agile to seize opportunities. The Internet and all things around it move at a very fast pace. Service providers must be able to scale capacities upward to meet surging demands in order to remain competitive. Todays service provider cannot assume a decades-long return on capital investments in switching, multiplexing, and line termination equipment. While SONET, ATM, and Frame Relay will continue to play an important role in telecommunications for many years to come, increasingly, service providers are looking to Ethernet technology as the platform for cost-effective delivery of converged voice, video, and data telecommunications services. Originally developed for use in local area network environments, Ethernet has in recent years evolved such that it is a costeffective, robust, scalable, manageable platform for metropolitan and regional telecommunications. The ubiquity of Ethernet technology in enterprise networks and its increasing role in metropolitan networks has created an enormous and highly competitive market for Ethernet equipment. This, along with the relative simplicity of the technology, has led to twenty-year history of ten-fold increases in link capacities for approximately three times the cost of the preceding generation of equipment.[4] 1
Volume 6: Leveraging Advanced Optical and Ethernet Technologies Furthermore, the near-total market adoption of each new generation of Ethernet technology has ultimately driven down costs even further. In this report, we examine the role that Ethernet technology can play delivering telecommunications services on a metropolitan and regional scale. We examine the case in favor of so-called metro Ethernet networks, and consider the foremost limitations of the current generation of metro Ethernet equipment.
Historical Perspective
Early wide area data telecommunications networks utilized modems on dial-up or leased telephone lines. The point-to-point nature of such services greatly limited scalability, since a new line was needed for each concurrent data connection to another remote location. True scalability in wide-area data telecommunications networks was ushered in by packet switching. Packet switching protocols such as X.25 became popular because a single dial-up or leased line connection to the network allowed communication with multiple remote locations via the concept of virtual circuits. The first packet switching protocols were burdened with the need to operate effectively over analog leased lines with very high bit-error rates. The X.25 protocol and its many predecessors and relatives were greatly complicated by error detection and correction mechanisms. With the advent of digital transmission lines, the need for a lightweight packet switching protocol resulted in the development and large scale deployment of Frame Relay. Frame Relay networks retained the fundamental label-swapping techniques of X.25 virtual circuit switching while dispensing with the error correction mechanisms. The simplicity and elegance of Frame Relay allowed it to easily operate at speeds up to 1.5 megabits per second, which was quite impressive at the time. Motivated by a desire to converge applications such as voice, video, and data communications on the same network, and to meet the future needs for increased bandwidth, in the late 1980s the telecommunications industry developed specifications for Broadband ISDN (B-ISDN). The B-ISDN specification consisted of two significant components: Synchronous Digital Hierarchy (SDH, known in the U.S. and hereafter in this document as SONET) and Asynchronous Transfer Mode (ATM). SONET provided a robust ring-based architecture for synchronous digital transmission over fiber-optic cable. SONET was critical to meeting the capacity demands imposed by rapid growth and competition in the long distance voice market, as well as the unprecedented demand for bandwidth that followed the privatization and subsequent commercialization of the Internet.
Volume 6: Leveraging Advanced Optical and Ethernet Technologies ATM was intended to address the inefficiencies of time division multiplexing (TDM) that were inherent to SONET and its T1 roots. Through the use of statistical multiplexing and virtual-circuit-level class-of-service parameters, it allowed delay sensitive traffic classes such as voice and video to be mixed freely with other traffic types on a common digital transmission line. Proponents of ATM believed that it would become the fundamental means of supporting voice, video, and data telecommunications. Carrier deployments of ATM in the mid-to-late1990s further fueled the rapid growth of the Internet and the use of the Internet Protocol (IP) for intranet, extranet, and other applications, by providing more bandwidth and more flexibility than had previously been available. ATM also contributed to the continued success of Frame Relay, by providing a scalable backbone network that was interoperable with Frame Relay and would allow carriers to meet the growing demands for Frame Relay service that accompanied the rise of the Internet. While ATM continues to be an important component of carrier networks, it did not achieve the goal of convergence for which it was originally intended. The success of ATM in achieving convergence depended on end-to-end deployment of the technology. In particular, this meant that the enormous installed base of personal computers in enterprise networks would need to be directly connected to local area ATM networks in order to fully leverage the capabilities of ATM. However, in local area networks, there was already a dominant technology that would not be easily displaced: Ethernet. When ATM emerged as a potential LAN technology, it offered significant advantages over Ethernet. At that time, Ethernet was relatively primitive, relying on broadcast media, and providing only 10 megabits per second of bandwidth shared between all users on the LAN. Furthermore, Ethernet provided no capability for differentiated levels of service that would allow mission-critical or time-sensitive applications to be prioritized above routine traffic on the network. Ethernet networks were interconnected using transparent bridges and multi-protocol routers, which partitioned the Ethernet into smaller shared segments. Partitioning the network in this manner added stability and scalability, at the expense of greater end-to-end packet delay, and increased packet loss. Despite these shortcomings, Ethernet was inexpensive and easy to implement and was adopted by enterprise networks of all sizes.
Volume 6: Leveraging Advanced Optical and Ethernet Technologies The installed base of existing shared Ethernet might not have precluded ATM from taking over the LAN environment. However, the development and rapid deployment of Ethernet switching technology and 100 megabit per second Ethernet delivered a crushing blow to any hope that ATM might one day rule the enterprise network environment. Ethernet switching was a relatively simple variation on the transparent bridge. Advances in semiconductor technology enabled the development of inexpensive high-density Ethernet switches that could be used to replace existing shared hubs. This allowed the existing Ethernet base to migrate to networks providing much greater amounts of bandwidth, while not requiring wholesale replacement of existing components. In particular, existing desktop computer hardware and software could continue to be used on a switched Ethernet network. Fast Ethernet, as the 100 megabit per second variant is known, provided the means to increase the bandwidth on backbone segments by an order of magnitude, in addition to providing very high capacity links for network intensive server applications. Enterprise network managers found that by simply eliminating congestion on their networks, virtually all applications could be made to work successfully, without the need for ATMs advanced traffic management capabilities. Any remaining hope for ATM in the enterprise was lost as Ethernet switches evolved to include features such as traffic prioritization, rate limiting, and advanced queuing. These features are critical to supporting real-time applications such as voice and video. The maximum Ethernet link speed also increased by an order of magnitude, to 1000 megabits per second (1 gigabit per second). The extraordinary capacity and advanced traffic management capabilities of Ethernet obviated any need for a technology other than Ethernet at the data link layer of the enterprise. Indeed, by the turn of the century, rapid advances in Ethernet technology made it feasible for use in metropolitan area networks where SONET, ATM, and Frame Relay technologies ruled. Todays Ethernet technology supports line speeds from 10 megabits per second to 10,000 megabits per second (10 gigabits per second). Only SONET itself offers line speeds that are comparable to Ethernet, but the inefficiencies of the time division multiplexing inherent to SONET combined with the historically higher capital costs for SONET equipment make Ethernet a far more cost-effective alternative in metropolitan and regional area networks.
Volume 6: Leveraging Advanced Optical and Ethernet Technologies networks, including packet classification, marking, rate limiting or policing, and transmit queue scheduling with multiple queues. Some examples of common and proposed uses of metro Ethernet networks are: Residential and commercial Internet access (so-called Ethernet in the First Mile) Backbone networks for other broadband access technologies (e.g. DSL, cable modem, wireless broadband) Corporate LAN extension
MSAP
Internet
Ethernet Switch
Ethernet
1000Base-X
SONET ADM 1000Base-LX ONT 10/100/1000TX Wireless IP Phone Ethernet Switch Router
MSAP
1000Base-X
1000Base-X
1000Base-X
Internet
MSAP
MSAP
1000Base-X
1000Base-X
1000Base-X
Volume 6: Leveraging Advanced Optical and Ethernet Technologies Efforts are underway in the IEEE 802.17 Resilient Packet Ring working group to define fault-tolerant ring standards for Ethernet that will ultimately provide a robust architecture that meets or exceeds the resiliency of venerable SONET ring architecture. The Multimedia Service Access Point is described in greater detail in the section entitled Interconnecting Service Provider Networks.
10
Central Office
Internet
DSLAM ATM Switch
ATM
DSL Modem
POP
11
Volume 6: Leveraging Advanced Optical and Ethernet Technologies Using the community MSAP model and regional fiber infrastructure described in this report, it is feasible for even a small rural telephone cooperative to cost-effectively deploy DSL Internet access services. In the lower-left of Figure 4, we see the central office continuing to serve as the termination point for residential and commercial DSL connections. Using 1000Base-X Ethernet, the DSLAM connects to the community MSAP, where access customers are interconnected with an Internet service provider. The MSAP containing Internet service providers (labeled ISP A and ISP B in Figure 4) could be co-located in the same building facility as the telephone cooperatives central office, or it could be in some other part of the region, where the costs for traditional highcapacity SONET-based access to the Internet are lower.
1000Base-X
1000Base-X
1000Base-X
MSAP
Internet Internet
ISP A
1000Base-X
ISP B
1000Base-X
Central Office
Broadband Wireless DSLAM Ethernet Switch
12
Volume 6: Leveraging Advanced Optical and Ethernet Technologies Figure 4 also illustrates Ethernet-based network access, DSL access, and wireless broadband access all coming together at the community MSAP. This emphasizes a key function performed by the MSAP: interconnection.
13
14
Volume 6: Leveraging Advanced Optical and Ethernet Technologies point. This may reduce costs significantly over constructing separate facilities to each potential other service provider. The value of the cross-connect meet point may be increased by having numerous such meet points distributed throughout a geographic region. The entity operating the crossconnect point could connect these distributed meet points via fiber optic cable, and lease access to this dark fiber facility to further reduce the costs to service providers who are closer to some of these. This distributed cross-connect extends the reach of service providers beyond what they may have otherwise been able to cost-effectively construct. In the model of cross-connect meet points, each connection between service providers is still a dedicated connection and still consumes resources from switching electronics, lasers, etc. For N service providers connecting at such a meet point to each other, this is a total of N(N-1) such connection points; each of the N service providers would have N-1 connections to deploy this full mesh approach. The cost of the connecting electronics may still dominate the cost for such interconnections. If the meet point could more efficiently use these connections via shared media, this may further reduce the costs associated with service provider interconnection.
Provider A
Pedestal provides full mesh cross-connect between providers. Provider A Provider B Provider C Provider D
Provider B
Patch bay
Provider C
Provider D
15
16
Volume 6: Leveraging Advanced Optical and Ethernet Technologies are better suited by collocation service to connect to the meet points. To more costeffectively connect these collocated providers, the meet point operator may provide copper-based services in addition to the fiber-based services needed to support connections from outside the facility.
Provider A Provider B
WWW Server
Mail Server
WWW Server
Mail Server
Media Server
Media Server
Meet Point 1
Provider A
Provider B
Provider C
Mail Server
Media Server
Provider D
17
Volume 6: Leveraging Advanced Optical and Ethernet Technologies building multiple locations and interconnecting them via Ethernet switches, the meet point operator can distribute the Ethernet exchange point over a region. Typically, service providers have certain local IP addresses they would like all connecting peers to be able to reach via the Ethernet exchange point. To better enable this strategy, the meet point operator can also operate route servers available to all participating service providers for the purpose of exchanging local routes. In addition to having a common Ethernet broadcast domain available for service providers who wish to exchange IP traffic, an Ethernet based meet point can be used to establish virtual private connections, using Ethernets Virtual LAN technology, 802.1Q. Using VLANs, connecting service providers can use the same physical Ethernet connection to virtually connect to other providers, in much the same fashion as ATM and Frame Relay provide virtual circuit functionality. Such an Ethernet meet point, with available route servers and virtual LANs, has been dubbed a Multimedia Service Access Point (MSAP). In addition to these stated MSAP services, there may be dark fiber and collocation facilities available, as well as management access to collocated equipment. By expanding from the role of simple cross-connect to an open architecture for Internet based services, the MSAP leverages the cost-effective and ubiquitous nature of Ethernet. This allows for the myriad of Internet applications to be offered by providers at the MSAP: electronic mail, web hosting, streaming media, fiber-based residential and business Internet access all these become enabled by having an open, provider-neutral infrastructure for service providers.
18
Based on an implementation using Cisco Catalyst 3550 gigabit Ethernet switches and 1000Base-ZX optical transceivers, with two fully redundant physical connections between the switches. 2 Based on an implementation using Cisco 15454 SONET multiplexers with dual rings for redundancy. 19
Volume 6: Leveraging Advanced Optical and Ethernet Technologies capacity in a SONET-based service delivered to one customer for use in meeting another customers needs. The Ethernet approach uses statistical multiplexing and highly granular bandwidth allocation, just like its cousins, ATM and Frame Relay. These attributes combine to give the service provider an extraordinary degree of flexibility to squeeze as much revenue as possible out the link capacity. While ATM and Frame Relay can provide similar statistical multiplexing with granular allocation of bandwidth, they cannot compete with Ethernet on the basis of capital cost. The cost for lighting the same fiber span using ATM or Frame Relay (while providing the same level of fault resiliency) includes all of the costs for the SONET solution plus the costs for ATM or Frame Relay switches. Furthermore, neither of these solutions can provide the same bandwidth. As previously noted, the maximum link speed available to ATM or Frame Relay implemented over an OC-12 SONET ring is only 155 megabits per second. In addition to lower capital costs, the Metro Ethernet Forum cites rapid provisioning as a key benefit of Ethernet in the metropolitan/regional space. The present lack of customer-centric flexibility, as well as the coarseness of bandwidth granularity for [SONET- and ATM-based] legacy systems are considered major impediments to providing promising, revenue-generating services[4]. Citing service velocity as a key competitive differentiator, the Metro Ethernet Forum promotes Ethernets ability to offer services with line speeds ranging from 10 megabits per second to 10 gigabits per second, and configurable bandwidth provisioning, provided quickly and on-demand. Metro Ethernet has other advantages when applied to enterprise LAN extension applications. Because of the cost-effectiveness of the metro Ethernet solution (largely a product of lower equipment costs), it is possible for service providers to offer customers much greater bandwidth for the same money. This allows enterprise networks to be distributed over larger geographic regions without the WAN penalty the traditional difference in bandwidth available between the LAN and the WAN, due largely to the cost of WAN bandwidth. Additionally, because the enterprise network has traditionally been implemented using Ethernet technology, the metro Ethernet solution avoids complex, costly, and difficult-to-manage internetworking solutions to adapt applications to
20
Volume 6: Leveraging Advanced Optical and Ethernet Technologies prevailing legacy WAN technologies. Ethernet end-to-end results in enterprise network extension that is far more seamless than traditional WAN solutions.
21
In the following sections, we will address each of these limitations in some detail, along with a description of some of the protocols and proposals that seek to overcome these limitations.
22
Volume 6: Leveraging Advanced Optical and Ethernet Technologies topological characteristics can recover from link failures in approximately 1 second. The faster recovery provided by the 802.1w protocol greatly increases the number of applications that can be supported on metro Ethernet. Pre-standard support for the 802.1w protocol is appearing in new Ethernet switches from many vendors, allowing service providers to begin leveraging metro Ethernet to deliver services today. Ratification of the 802.1w specification is expected in the near future. The Link Aggregation protocol (IEEE 802.3ad) can also be used to vastly improve the resiliency and recovery time of metro Ethernet networks. By employing parallel links between Ethernet switches, and utilizing diverse fiber paths, the IEEE 802.3ad protocol can provide load sharing between the parallel links when both links are operational. When a link is broken, failover to the remaining link occurs with a convergence time on the order of 500 milliseconds. See Figure 7.
MSAP
MSAP
Ethernet Switch
Ethernet Switch
MSAP
Figure 7: Link Aggregation between MSAPs This is obviously an improvement over 802.1w Rapid Reconfiguration (though an order of magnitude worse than SONET), and is very simple to implement. However, many metro fiber networks have ring topologies that do not lend themselves to using Link Aggregation protocol as a means to improve resiliency. Several vendors (e.g. Extreme, Riverstone) have implemented proprietary approaches to matching or at least approaching the 50 millisecond recovery time in metro Ethernet
23
Volume 6: Leveraging Advanced Optical and Ethernet Technologies networks. These approaches tend to borrow from the architecture of SONET, creating a dual ring topology that transports Ethernet frames. Extreme claims that their Ethernet Automatic Protection Switching (EAPS) dual-ring architecture has a recovery time no worse than 100 milliseconds. The IEEE Resilient Packet Ring working group is presently standardizing such ring-based approaches (as IEEE 802.17), with a goal of matching or even improving upon the SONET benchmark. Proponents of network layer (IP) switching promote Ethernet-over-MPLS (EoMPLS) as the means by which metro Ethernet networks can achieve the resiliency of SONET protection switching, while at the same time addressing other shortcomings in the area of service-level guarantees. The MPLS functions that provide traffic engineering over an MPLS cloud can be used to provide Ethernet transport with guaranteed bandwidth and 50 millisecond recovery from link failures.
24
Volume 6: Leveraging Advanced Optical and Ethernet Technologies Remote fault isolation is an area of active interest and research in the Metro Ethernet Forum and certain IEEE working groups.
25
An alternative approach that allows parallel redundant links to share the network load is the use of the IEEE 802.3ad Link Aggregation protocol. In this case, the parallel redundant links appear to the Spanning Tree protocol as a single logical link. 26
Volume 6: Leveraging Advanced Optical and Ethernet Technologies have the ability to classify and mark 802.1Q frames and/or IP packets for elevated priority, to police traffic classes at particular rates, and to provide multi-queue transmit disciplines such as Weighted Round Robin, and Strict Priority. By implementing appropriate trust boundaries, and using these mechanisms, it is possible to provide an appropriate service level for delay-sensitive applications (e.g. voice, video) in the presence of bursty, best-effort data applications. It is not possible, using current Ethernet technology to, implement quality-of-service guarantees specifying acceptable packet loss, delay, and jitter parameters, with dynamic admission control and optimal path selection. One could argue that while ATM has the capability of signaling QoS requirements in the call setup, it has seen little use in part because of scalability, interoperability, manageability, and policy concerns in the service provider space. Most often, ATM QoS has been applied to permanent virtual circuits, where admission control and optimal path selection are manually determined. Over the long term, proponents of metro Ethernet point to MPLS and its ability to provide QoS guarantees that are analogous to ATM, with dynamic signaling of QoS parameters and constraint-based routing as the solution to service guarantees for metro Ethernet. Using much of the existing hardware and software used to provide traffic classification and transmit scheduling, and by mapping prioritization between the 802.1Q priority bits and the MPLS EXP bits, metro Ethernet can easily be adapted to provide true end-toend QoS.
27
Volume 6: Leveraging Advanced Optical and Ethernet Technologies success of providers such as Yipes, Telseon, and Cogent in metro Ethernet services is a testament to the business case for such an approach. Historically speaking, advances in Ethernet technology have come at a steady pace, and have been quickly adopted by the industry. As the works-in-progress of IEEE working groups and other industry forums come to fruition, the future of Ethernet technology looks very bright, indeed.
28
29
Volume 6: Leveraging Advanced Optical and Ethernet Technologies every customer application. Moreover, network layer switches can work over almost any combination of Ethernet and legacy WAN technologies (ATM, PPP/HDLC over SONET), as well as dark-fiber and optical (e.g. DWDM) networks. Most metro Ethernet service provider networks will employ a combination of switches operating at both the data-link and network layers. In first-mile access and distribution networks, the use of link layer switches interconnected via 1000Base-X Ethernet is a cost-effective and manageable solution. In the core of the network, where access and distribution networks must meet Internet and application service providers, network layer switches provide the greatest flexibility, scalability, and manageability. Additionally, network layer switching solutions support transparent operation over nearly any combination of Ethernet and other link layer environments.
30
Volume 6: Leveraging Advanced Optical and Ethernet Technologies Service providers are strongly advised to establish internal practices and reviews that ensure proper control over the root bridge election via the following means: Configuration of root bridge priority parameter values that ensure that the protocol will elect an administratively and topologically appropriate root bridge for each bridging domain. Configuration of the common so-called root guard feature on all customer facing ports. This feature prevents a bridge in the customers network from becoming the root bridge in the service providers domain. Many metro Ethernet networks will implement the Spanning Tree protocol using switches interconnected over physical ring topologies. Over this physical topology, Spanning Tree will create a logical hub-and-spoke topology, where one of the switches on the ring is the hub (the root bridge), and one link in the ring (most distant from the root bridge) will be blocked. In this case, best results are achieved when the hub is a bridge that interconnects many such rings, such as the switch shown in the MSAP in Figure 2. Furthermore, such a topology is an ideal candidate for deployment of the IEEE 802.1w Rapid Reconfiguration protocol, which will ensure restoration of the ring in approximately one second, should a fiber cut occur anywhere along the ring.
31
Volume 6: Leveraging Advanced Optical and Ethernet Technologies 3) MAC address security. Switches used by service providers should provide the capability to accept and lock-down a limited number of source addresses from customer-facing ports. This can, in some cases, address the denial-of-service vulnerability mentioned in (2), above. This capability can also mitigate the effects of undiscovered topological loops (e.g. resulting from Spanning Tree protocol misconfiguration), by preventing addresses from being learned on any port other than the correct port.
Protocol Filtering
While metro Ethernet networks can support any higher-layer protocol that can be encapsulated in an Ethernet frame, service providers may wish to filter unwanted or unsupported protocols received from customer-facing ports. For example, residential access service providers may want to filter all Ethernet frame types other than the conventional encapsulation for IP and ARP. This would ensure that only the protocols needed for supported services are transported on the network and that customers cannot subject the network to protocol families (e.g. AppleTalk) that tend to needlessly consume network resources with overhead traffic, or that otherwise contribute to network instability. Most Ethernet switches include protocol filtering support. Service providers should implement protocol filtering as appropriate to the services delivered.
32
Volume 6: Leveraging Advanced Optical and Ethernet Technologies Service provider Ethernet switches must provide independent configurable rate limits for broadcast and multicast frame flooding. Ideally, the limits should be configurable on a per port basis. True broadcast frame traffic (addressed to the all ones destination address) should, under normal conditions, have a very low bit rate per port. Thus, it is desirable to set broadcast rate limits to be a very small portion of the available bandwidth on each port to ensure that broadcast traffic cannot consume valuable resources or destabilize the network. If controls are provided on a per-port basis, it is possible to provide an engineered solution for broadcast frames from edge to core.
Quality-of-Service Controls
In order to provide a reasonable foundation for providing differentiated services, appropriate for a mix of multimedia applications, switches used by service providers should have the following capabilities:
33
Volume 6: Leveraging Advanced Optical and Ethernet Technologies Ability to classify traffic at ingress port based on Ethernet frame fields and network layer attributes. In particular, the classification should allow the classification of traffic by 802.1Q priority, source or destination MAC address, IP precedence and/or DSCP, IP source/destination address, IP protocol field, and transport-layer addresses (i.e. ports) for TCP and UDP. Ability to set the 802.1Q priority and optionally (strongly recommended) the ability to set the IP DSCP field of outbound frames. Ability to police at ingress to specified bit rates based on classification as described above. Policing should minimally provide granularity on the order of 100 kilobits per second, and burst sizes ranging from 32 kilobytes up to hundreds of megabytes. At least two fully independent transmit queues per port. If only two queues are provided, the ability to select either strict priority or weighted round robin disciplines is strongly recommended. Additionally, the ability to direct outbound frames to the appropriate queue of the egress port based on classification as described above.
34
Acronym Glossary
ARP Address Resolution Protocol. A link-layer protocol used to discover the associations between Internet Protocol (IP) addresses and Media Access Control (MAC) addresses in an Ethernet network. ATM Asynchronous Transfer Mode. A cell-switching paradigm developed as part of the ITU Broadband Integrated Services Digital Network (B-ISDN) specification. BER Bit Error Rate BPDU Bridge Protocol Data Unit. Refers to an Ethernet frame containing a Spanning Tree protocol message. DSCP DiffServ Code Point. A IP packet header field defined to contain a quality-ofservice indicator defined by the Differentiated Services (DiffServ) IETF working group. DSL Digital Subscriber Line. A technology used to provide digital services on the copper customer loop extending between a customer premise and a telephone company central office. DWDM Dense Wave Division Multiplexing. EoMPLS Ethernet over MPLS. Refers to the transparent transport of Ethernet frames over an MPLS switching cloud. IEEE Institute of Electrical and Electronic Engineers. IETF Internet Engineering Task Force. IP Internet Protocol. The OSI network layer protocol used on the Internet and in the vast majority of corporate intranets and extranets.
35
Volume 6: Leveraging Advanced Optical and Ethernet Technologies ISDN Integrated Services Digital Network. ITU International Telecommunications Union, formerly CCITT. LAN Local Area Network. LOS Loss Of Signal. A SONET fault isolation indicator. MAC Media Access Control. Most often used in the context of MAC address, which refers to a link layer frame address (e.g. an Ethernet nodes hardware address). MST Multiple Spanning Trees. The approach to multi-VLAN spanning tree specified by the IEEE 802.1s working group, wherein multiple spanning trees are operated, each one providing a loop-free logical topology for a subset of the virtual LANs within the bridged network. MPLS Multi-Protocol Label Switching, also cited as Multi-Protocol Label Swapping. Provides label stack switching of IP packets in manner similar to that used in Frame Relay and ATM networks, but with the ability to work over virtually any link layer protocol (PPP/HDLC over SONET, Frame Relay, ATM, Ethernet, etc). OAM Operations, Administration, and Management. Sometimes specified OAMP, where the P represents Provisioning. OSI Open Systems Interconnect. An idealized model for representing the peer and interface interactions between communications protocols, arranged in a stack. Specified by the International Standards Organization (ISO). PHY A physical electrical or physical optical network interface component. PVST Per-VLAN Spanning Tree. A proprietary approach to implementing the Spanning Tree Protocol (STP) in multi-VLAN networks, wherein each VLAN runs its own instance of STP.
36
Volume 6: Leveraging Advanced Optical and Ethernet Technologies QoS Quality of Service. Refers to the mechanisms, specifications, and/or service-level agreements associated with providing end-to-end or node-to-node service guarantees or assurances on the basis of packet loss, delay, and/or jitter. RDI Remote Defect Indicator. A SONET fault isolation indicator. SONET Synchronous Optical Network. Specified as the Synchronous Digital Hierarchy (SDH) in the ITU Broadband Integrated Services Digital Network (B-ISDN) specification. It provides the basis for synchronous transport services in traditional telco carrier networks and is the underlying transport for both ATM and Frame Relay services, as well as DS1, DS3, OC3c, and higher speed point-to-point services. STP Spanning Tree Protocol. A data-link layer protocol for estabilishing a loop-free logical topology over an arbitrary interconnecting of data-link layer bridges. TDM Time Division Multiplexing. TCP Transport Control Protocol. A transport layer protocol providing reliable bulk data transfer over the Internet Protocol (IP). UDP User Datagram Protocol. A transport layer protocol providing message passing (datagram) capability over the Internet Protocol (IP). VLAN Virtual Local Area Network. A means of supporting multiple distinct bridging domains on a common Ethernet switching network. While developed for local area networks, the VLAN concept is used in metro Ethernet networks to provision distinct services, providing a virtual private network for each customer. WAN Wide Area Network.
37
Acknowledgements
The authors would like to express their gratitude to Cisco Systems, Inc, and, in particular, Richard Shumaker and Scott Shepard, for their generous contribution of time, effort, and content to this report.
38
References
[1] Black, Ulyess and Waters, Sharleen. Sonet and T1: Architectures for Digital Transport Networks. Prentice Hall, 1997. Clark, Kennedy and Hamilton, Kevin. Cisco LAN Switching. Cisco Press, 2001 Goralski, Walter J. Introduction to ATM Networking. McGraw-Hill, 1995. Metro Ethernet Forum. Metro Ethernet Networks: A Technical Overview. 2002 Norton, William B. Interconnection Strategies for ISPs. Equinex, Inc, 1999. Perlman, Radia. Interconnections, 2nd Edition. Addison-Wesley, 2000. Spurgeon, Charles. Ethernet: The Definitive Guide. OReilly, 2000.
39
4) 5) 6) 7) 8) 9) 10) 11)
40
Volume 6: Leveraging Advanced Optical and Ethernet Technologies 16) 17) How much would all this cost? (Volume 3, Volume 5) What is the appropriate organization model for managing and sustaining the Tobacco Commissions investment in critical technology infrastructure? (Volume 5) Tobacco region communities are underserved because the private sector does not see a profitable business case. What makes this feasible from a business perspective? (Volume 5) If the traditional investment model for developing critical technology infrastructure has failed, what is the alternative? (Volume 5) How much would it cost for consumers in the region to use the network? (Volume 5) What technologies enable use of the fiber? (Volume 6) How does the choice of technology to light the fiber impact the cost? (Volume 6) How do wireless technologies fit into this framework? (Volume 7) What is meant by the term open access? (Volume 8) What is the difference between the broadband hype and the next generation networks? (Volume 8) What are some next generation Internet (NGI) applications? (Volume 8)
18)
41