Huawei Eudemon8000E Series High-End

Security Gateway

Huawei Technologies Co., Ltd.

Eudemon 8000E High-End Security Gateway

Product Overview
With the emergence of the triple play, Web 2.0, P2P video, and High Definition broadband,
requirements for network bandwidth are growing rapidly. Gigabit and 10-Gigabit bandwidths
are no longer new concepts. Many switches and routers have 10-Gigabit high-capacity
interfaces. Large-scale enterprises, such as telecom carriers, are facing services integration
and network expansions. Traditional firewalls inevitably becomes the bottleneck, because
they are not applicable to high-speed networks.
Based on the rich experience of hardware design and combined the professional network
processor (NP) chip and distributed hardware platform, Huawei launches the professional
security gateway device Eudemon8000E, which has an advanced NP + multi-system +
distributed architecture.
The Eudemon8000E provides firewalls with high Virtual Private Network (VPN) performance
and ensures users' requirements for high reliability and performance. Besides, security
requirements for high-end applications can be satisfied with low capital investment, such as
carriers' high-speed networks, large-scale financial data centers, large-scale Web sites,
governments, and vertical networks of large-scale enterprises.

Eudemon 8000E High-End Security Gateway

Product Series

Eudemon8080E

Eudemon8160E

Product Features
Advanced NP + multi-system + distributed architecture-breaking traditional
performance bottlenecks
The Eudemon8000E adopts the architecture of independent control modules, interface
modules, and service processing modules. Based on the dual NP, the interface module
ensures the linespeed forwarding of interface traffic. Based on the multi-core and multi-thread
architecture, the service processing module ensures the high-speed concurrent processing of
multiple services, such as the Network Address Translation (NAT), Application Specific Packet
Filter (ASPF), Anti-DDoS, and VPN. The Eudemon8000E series contain the Eudemon8080E
and the Eudemon8160E. They have eight and sixteen slots respectively and support multiple
service modules. They adopt the distributed concurrent processing mechanism, which greatly

Eudemon 8000E High-End Security Gateway

enhances the product performance. Thus, users can expand capacities with low pre-phase
investment.
High firewall performance- guaranteeing users key services
The three main indexes of the Eudemon8000E, throughput, number of connections
established per second, and maximum number of concurrent connections, are in leading roles.
The throughput of one service processing module of the Eudemon8000E is 10 G; the number
of connections established per second is 250,000; and the maximum number of concurrent
connections is 4,000,000. For one processing module, its specification has already exceeded
that of a 10-Gigabit firewall. Furthermore, the Eudemon8000E has a maximum of eight
service processing modules and its entire throughput reaches 80 G; the number of
connections established per second is 2,000,000; the maximum number of concurrent
connections is 32,000,000; and the number of virtual firewalls is 1024. The high performance
and expandability of the Eudemon8000E can meet high-end users requirements for high
performance.
Stable and reliable security gateway- ensuring consistency of users services
Network security is a key point for enterprise operations. The Eudemon8000E supports the
redundant components, such as interface, fan, and power, networking of hot swap, dual
processing engine, master/backup, master/master, and high reliability. Different service
boards of the Eudemon8000E supports the load balancing and mutual hot backup, so the
abnormity of a single board will not influence the entire system. Meanwhile, together with
Huawei BYPASS devices, services will not be interrupted even if faults or power failures occur
on devices. The mean time between failures of the Eudemon8000E is as long as 500,000
hours, and the failover time is less than 0.1 second. These ensures the consistent and stable
service operations.
Abundant network interfaces- facilitating users' networking application
Besides the Ethernet interfaces of 5 GE, 10 GE, 24 GE, and 1 10 GE, the
Eudemon8000E also supports the POS interfaces frequently used in the backbone network,
including 8 155 M, 4 622 M, 4 2.5 G, and 1 10 G, and the interconnection with the
Synchronous Digital Hierarchy (SDH) devices. All of these effectively enhance the
transmission efficiency. The Eudemon8000E has a maximum interface capacity of 160 G, and
provides eight 10 GE interfaces and 196 GE interfaces. The Eudemon8000E supports the
cross-board binding, which meets the requirements for large interface capacity and high
interface intensity of the complicated networking, such as the carrier Metropolitan Area
Networks (MANs), large-scale enterprises, and data centers.
Optimal VPN performance- adapting to requirements for encrypted transmission of
mass services
With the increase of network applications, more and more services need to be transmitted on
the public network safely. Subsequently, services that require mass VPN access gateway of
100-Gigabit emerge, such as mobile security access, Short Message Service (SMS) push,
and email push. The Eudemon8000E provides a maximum of 32 Gpbs encryption and

Eudemon 8000E High-End Security Gateway

decryption performance and supports 320,000 concurrent VPN tunnels, which is the VPN
access gateway of the highest performance for the moment.
The Eudemon8000E also supports the IKEv2 protocol and enhances the functions of user
authentication, packet authentication, and NAT traversal. Thus, the Eudemon8000E
eliminates the hidden hazards of the middleman attack and the DDoS attack., and supports
wireless authentication protocols, such as EAP-SIM and EAP-AKA, which effectively ensures
the wireless network security.

Typical Networking

Defense solution for a large-scale IDC

Eudemon 8000E High-End Security Gateway

Defense solution for vertical network headquarters of governments and large-scale enterprises

Application of mass wireless mobile VPN access

Eudemon 8000E High-End Security Gateway

Product Specifications
Product

Eudemon8080E

Eudemon8160E

Number of slots

Eight slots, in which service

boards and interface boards
can be inserted.

Sixteen slots, in which service

boards and interface boards
can be inserted.

Throughput

10 G 4

10 G 8

4,000,000 4

4,000,000 8

Number of connections
established per second

250,000 4

250,000 8

VPN performance

4G4

4G8

Quantity of VPN tunnels

40,000 4

40,000 8

Virtual firewall

1024

1024

Reliability

Hot swap of modules and components, dual-system hot

backup, link aggregation, dual main control boards, and
BYPASS

Number of
connections

Interface
types

concurrent

Ethernet
interfaces

5 GE,10 GE, 1 10 GE ,24 GE(optical or electrical)

POS
interfaces

8 155 M, 4 622 M, 4 2.5 G, 1 10 G

Ethernet
interfaces

96 GE, 4 10 GE

192 GE, 8 10 GE

POS
interfaces

16 2.5 G, 4 10 G

32 2.5 G, 8 10G

442 669 886

442 669 1600

Weight

100 Kg

150 Kg

Power

700 W

900 W

MTBF

57 years

57 years

Maximum
number of
interfaces

Dimensions
(W*D*H)

(mm)

Eudemon 8000E High-End Security Gateway

Huawei
Technologies
Co., Co.,
Ltd. Ltd.
Huawei
Technologies
Huawei Technologies Co., Ltd.

dress: Huawei
Industrial
Base Bantian,
Address:
Huawei
IndustrialLonggang
Base Bantian,
Shenzhen
Republic
of Republic
China of
LonggangPeople's
Shenzhen
People's
China

All rights reserved.

The information contained in this document is

or reference purpose only, and is subject to
change or withdrawal according to specific
customer requirements and conditions.

Telephone: 86 (0755)
Telephone: 86 (0755)
28780808
28780808

518129
PostPost
code:code:
518129
www.huawei.com
www.huawei.com