The Service Engine 2 (SE-2) is a high-performance aggregation router for advanced service enforcement. In a compact form factor, the SE-2 offers up to 24Gbit/s packet processing through its powerful 16-core network processor (NPU). The system offers a full Layer 2 bridging and Layer 3 routing featureset, allowing it to be used in all common broadband network architectures in deployment today. The service enforcement features, including shaping, policing, Quality of Service(QoS) and deep packet inspection can be applied on both bridged and routed traffic.  Cost efficient aggregation of multiple access technologies  NPU-based for full feature flexibility  Enables advanced service differentiation and customization  Treats each service individually for separation at service level F.net F.net The SE-2 provides cost effective aggregation of all common access technologies, such as ADSL2+, xDSL, PON, Ethernet over COAX, Wireless technology and more. Even in a network with a mix of different access technologies, the same services can be provided on top of all technologies – a homogenous service portfolio for the network. Using the SE-2 the network operator can deliver a complete mix of broadband services including Internet, IP telephony and IPTV. Service policies defined in the SE-2 are applied to users connected through the access technology. The SE-2 allows centralized expensive BRAS solutions to be replaced by a much more scalable and distributed solution. The SE-2 offers an expansion slot that can hold an additional port module to either increase the number of Gigabit interfaces or to provide 10Gbit/s uplinks to the router. The SE-2 can treat each service individually, allowing multiple services to the same end-user at the same time. Each service can have individual parameters for packet filtering, bandwidth shaping per host, per subnet, per VLAN or per interface, parameters for QoS, security and priority. Services can be bridged or routed, even in combination, and the same client host can have multiple services simultaneously where each service can have a specific bandwidth and a customized policy for routing or bridging. Using weighted fair queuing (WFQ), clients receive optimal traffic distribution between different destinations. The SE-2 provides a complete feature set for network security. Built in DHCP snooping and server capabilities are used to enforce network security and prevent users from injecting malicious traffic. The system prevents ARP, MAC and IP spoofing and ensures Layer 2 traffic separation between end-users. The SE-2 also deploys the realtime protocol monitoring of IPTV, a vital tool to provide insight into the quality of multicast IPTV streams in the broadband network. The programmable script motor allows customized and autonomous service control. Service conditions and behavior can be adapted to fit any type of existing service deployment structure used by operators. Existing RADIUS based mechanisms, used for xDSL, can be reused by the SE2 which reduces investment costs in the OSS system for service providers when new services are deployed in the network. 802.1x or DHCP messages activate a script in the ASR6000. The script uses programming logic to determine what actions to take. Examples of script actions are:   An authentication request may be sent to a RADIUS server, which can respond with attributes that the script converts into configuration para-meters, such as bandwidth control. Content of DHCP server responses can be analysed – for example if an IPv6 prefix delegation option is present, a static route for the prefix can be installed by the script. The SE2 supports the concept of service templates. A service template consist of the configuration commands to activate for a particular service. When a trigger packet is received, the SE2 can interact with a central server to determine which service to activate for a client and then perform self activation of configuration commands. This allows per client defined service parameters such as bandwidth and QoS Particularly in fibre-to-the-home networks, TV distribution using IP multicast is increasing. Networks are deploying hundreds of TV channels. Typical access switches have relatively modest packet buffers and operate at high speeds. If the multicast source (TV playout) generates a bursty media stream, then the combined traffic of unicast and multicast may cause buffer exhaustion and packet drop. This is experienced by the end user as freezing pictures or even loss of video. The SE-2 is able to shape bursty multicast traffic using the network processor which will benefit any switch-based access network downstream of the ASR because the traffic pattern of the multicast stream is evenly distributed. The SE-2 can also inspect multicast MPEG streams using the Realtime Protocol Monitoring (RPM) feature to measure the MPEG quality. The RPM feature supports MPEG over RTP as well as UDP, and collects and analyzes metrics at RTP level, Transport Stream level and Packetized Elementary Stream level. The errors detected include:  sequence-error per RTP multicast group  jitter per RTP multicast group  missing-sync-byte per TS multicast group  misaligned per TS multicast group Any detected errors can be logged, read using SNMP, or shown by the ASR CLI. Each ASR that runs RPM becomes a probe, capable of monitoring up to 50 TV channels at the same time. If an end user reports a problem with the TV service, the RPM data provides an immediate notification if a problem is seen in the network, and if it affected the entire network or only a part of the network. The RPM data may even help network engineers to pinpoint the location of the problem in seconds, instead of the usual hours, or even days, of manual troubleshooting. When used in Layer 3 mode, each port on the SE-2 can connect to a different end user. Layer 3 ports towards a large population normally require heavy IPv4 subnetting which rapidly consumes crucial IPv4 address space. iBOS contains a set of features that allows an IPv4 subnet to be shared among end user clients connected on different Layer 3 ports – even across ASRs! Clients are made to believe they share a larger subnet, but any traffic between clients within the subnet is routed through and between ASRs. The result is secure Layer 3 separation between end users, a routed topology for easy network management, and maximum use of scarce IPv4 address space.. The exhaustion of IPv4 address space means that IPv6 deployment is now mandatory in most networks. The SE2 supports unicast IPv6 forwarding. Policies for traffic management and QoS also support IPv6 which means that a client can use either IPv4 and IPv6, or both. The following table lists the main order items in the SE2 family. Order items Article Description SE2-AC Service Engine 2, AC power, iBOS included SE2-DC Service Engine 2, DC power, iBOS included SE2-XMP-10GE2 2 10000base-X (XFP) ports SE2-XMP-GE12 12 1000base-X (SFP) ports SE2 accessories include various types of SFP optical modules. Performance Virtual Private Networking Ethernet and Bridging Routing protocol support 500 tunnels, transparent ethernet bridging over L2TPv3, Port forwarding over L2TPv3, IP over GRE, Ethernet over GRE (for mirroring only), wirespeed IP reassembly and fragmentation IEEE 802.3z – Gigabit Ethernet, IEEE 802.1p and 802.1Q with full VLAN range, IEEE 802.1 D Spanning-tree, IEEE 802.1w Rapid spanning-tree, 16384 MAC addresses, Per VLAN learning Unicast: OSPFv2 Multicast: PIM-SM/SSM, IGMPv2, v3 Quality of Service Packet queueing Policing Weighted round robin (WRR), Weighted Fair queueing scheduling (WFQ scheduling), 16k Single/Dual Token Bucket.Policer, with packet drop or recolor (64kbps - 100Mbps) Shaping 16k Shapers with packet drop or recolor (64kbps - 1000Mbps) Queuing 8 priority queues per port, L1-L4 packet classification Management Security SNMPv1, v2 and v3, TELNET, Industry standard CLI, PFDP – PacketFront Device Protocol, NTP , SYSLOG, RS232 console serial port, DHCP, Realtime Protocol Monitoring MPEG-2, NetFlow v9 IP spoofing protection, wirespeed IP fragment inspection, per Layer 3- nterface packet shaper for packets destined to CPU, Restrictable multicast access, interface mirroring to local or remote interface, UNI isolated ports, DHCP snooping IP Forwarding Interfaces Classification 3000 Layer 3 interfaces Layer 2-4 packet classification with filtering Per service packets and bytes accounting Access list entry hit logging and packet counting Multicast 2048 S, G IPv4 multicast forwarding entries, replication per port and VLAN Unicast 15000 IPv4 routes, up to 4 paths using ECMP, 15000 IPv4 routes Multicast 2048 S, G IPv4 multicast forwarding entries, replication per port and VLAN Physical Ports 10 Combo 1000 Base-T/1000 base-X (SFP) ports, 1000 Base-T ports, 2 out of band, 10/100/1000 BaseT management interface, 1 RS-232 serial console port, 2 USB host port Port module options 2 10000base-X (XFP) ports or 12 1000base-X (SFP) ports Dimensions 87 (H) x 431 (W) x 500 (D) mm, (3.43” x 16.9”x 19.7”) Weight 12 kgs (26.4 lbs) Indicators Link indicators for all ports Power ON LED (Green) System Status LED (Green and Amber) Cooling 4 fans with speed control. Environmental Operating temperature 0 to 40°C, 32 to 104°F Operating humidity 10% to 90%, non condensing Storage temperature -20 to 70°C, -4 to 158°F Storage humidity 10% to 95%, non condensing Rack mounting Standard 19” rack mountable Power and Safety AC model DC model Redundant 1+1 hot swappable power input 90-264V, 50-60 Hz, compliant with ETSI EN 300132 V2.1.1 Part1 Redundant 1+1 hot swappable power input 48V, compliant with ETSI EN300132 V2.1.1 Part2 LED indicators Power LED and A and B for power indication/power failure: Power consumption Typical 150W, maximum 170W BTU/hr Typical 512, maximum 581 Regulatory Compliance EN IEC EN 61000-3-2:2006 EN 61000-3-3:1995/A1:2001/A2:2005 EN 55024:1998/A1:2001/A2:2003 IEC 61000-4-2:1995/A2:2000 IEC 61000-4-3:2002, IEC 61000-4-4:2004 IEC 61000-4-5:1995/A1:2000 IEC 61000-4-6:1996/A1:2000 IEC 61000-4-8:1993/A1:2000 IEC 61000-4-11:1994/A1:2000 PacketFront provides several different support packages with a clearly defined Service Level Agreement (SLA) to give you the mix of technical support and hardware replacement services that best suits your needs. PacketFront is committed to help you protect your investment and our Technical Assistance Center team, or approved Partners, are ready to handle all your support issues. Through our support web site, PacketFront provides software updates and upgrades, and has an extensive Knowledge Base for both general network topics and product specific questions. You will also find documentation, release notes, product specifications and other useful information to help you achieve the best results with your PacketFront products. With over 10 years’ experience in the FTTH industry, PacketFront offers individual pricing and purchasing terms. Our experienced sales team will assist you in making the best buy possible, based on your specific needs and current situation. To find out how you can join the growing number of Gigabit To The Home networks using the SE2, contact sales@packetfront.net.