1. DRO Router Introduction

2.  Market positioning and demand analysis  Router introductions  Advantages & selling point  Competition analysis  Case share Agenda

3. CPU under attack. The router can’t be managed. Financial and operational service can't be protected. The online video can’t be smoothly displayed. Internet access is too slow. Traffic can not be monitored Sometimes this may happen…

4. QoS High performance Reliability Management New demands for network

5.  Market positioning and demand analysis  Router introductions  Advantages & selling point  Competition analysis  Case share Agenda

6. Access Router DRO-1002DRO-2014DRO-2024 Aggregation Router DRO-3044 DRO-5020 DRO-5040 DRO-5080 Router portfolio

7. SIC-1HS SIC-1E1-F SIC-1CE1 SIC-1B-S/T SIC-1B-U SIC-4ESW SIC-2FXS SIC-2FXO SIC modules DRO support

8. NMX-24ESW NMX-2GEH NMX-4E1/CE1H NMX-8E1/CE1H NMX-1CPOS-STM1H NMX module DRO support

9. ModuleDRO-5020DRO-5040DRO-5080 CPUDual-core NP SDRAM 512M （ default ）， 1G Flash 32M （ default ）， 96M Console/AUX1/1 Fixed Ethernet interface 3GE （ combo ） USB222 NMX slot248 DNMX slot122 Power module233 Dimension （ L X W X H mm 121×445×412 ， 3U161×445×412 ， 4U243×445×412 ， 6U Backplane bandwidth28Gbps Forwarding capacity4.5Mpps DRO-50 Specification

10. Control Module-Slot 0 Slot 7Slot 8 Slot 5Slot 6 Slot 3Slot 4 Slot 1Slot 2 FANFAN Power 0 Power 1 Power 2  DRO-5020 has two power module slots.  DRO-5040 and DRO-5080 has three power module slots. DRO-50 Hardware Design

11. NMX Power aux console NMX Power aux console NMX Power aux console DRO-50 Hardware Design (cont.)

12. Temp Detect Dual Network Processor 20Gbps HT Network interface 2Gbps PCI Bus DDR RAM GE HT Bridge Fast AIM Encrypt Engine GE GE Combo GE USB AIM Encrypt Engine 2Gbps PCI Bus 2Gbps PCI Bus 50Gbps DDRRAM BUS GE Combo Local BUS FLASH UART BootROM AUXConsole USB HT Bridge Network interface Network interface Network interface 2Gbps PCI Bus Network interface 2Gbps PCI Bus Network interface Network interface Network interface DRO-50 Hardware Design (cont.)

13. ModuleDRO-3044 CPU MPC SDRAM 512M Flash 512M Console/AUX 1/1 Fixed Ethernet interface 2GE （ combo ） USB 2 USB2.0 Routing engine slot 1 Service slot 8 （ 4 NMX ， 4 SIC ） Power supply module 2 Dimension （ L×D×H ， mm ） 440X412X161.4 Forwarding capacity 2Mpps DRO-3044 Specification

14. SIC-6SIC-8 Control Module SIC-5SIC-7 NMX-3NMX-4 NMX-1NMX-2 FanFan Power DRO-3044 Hardware Design

15. ModeDRO-2014DRO-2024 Appearance Forwarding capacity 280kpps300kpps Console/AUX1/1 Fixed routing port 3FE2FE SIC slot 44 NMX slot 12 USB 22 Maximum switching port 2452 DRO-20 series specification

16. AUX Console 3*10/100M SIC slot NMX slot 2*USB  Built-in encryption engine  Capacity to 280kpps DRO-2014

17. 4*SIC slot 2*NMX slot AUX Console2*USB 2*10/100M  Built-in encryption engine  Capacity to 300kpps DRO-2024

18. ModeDRO-1002 Appearance Forwarding capacity 260Kpps Fixed routing port 2FE SIC module slot 2 NMX module slot N USB N Dimension 44 ×268×185 (mm) DRO-10 specification

19. 2*SIC Console 2*10/100M  Built-in encryption engine  Capacity to 260kpps DRO-1002

20.  Market positioning and demand analysis  Router introductions  Advantages & selling point  Competition analysis  Roadmap  Case share Agenda

21. High performance 2 Multi-service High security 3 1 Topic 4 High availability

22.  With the access mode becoming more and more, the speed is faster and faster (MSTP 、 fiber 、 PON), the bandwidth requirement is growing rapidly.  With multi -services running, DRO router can achieve 100M wire-speed forwarding.  Nearly no interruption when using ACL 、 QOS 、 PBR 、 NAT. Under 100M line ， DRO router won’t be the bottleneck of network. High performance ---In services

23. DEF－D-link Express Forwarding DEF achieve multi-service integration, Increase performance of ACL, PBR，NAT，FW，QOS etc. Accept packet … Header Inspection Packet encapsulation QOS Packet encapsulation FIB ADJ Fast State processing Fast ACL Fast PBR Flow create Whole ACL Whole PBR Send packet Extreme path Fast flow path Whole NAT Complete flow path Fast NAT High performance --- D-link DEF fast forwarding

24. When ACL, PBR，NAT， FW，QOS is deployed, DEF achieves exact matching with the 1 st packet, and the matching of following packets according to the flow table. No impact on performance between deploying 1 piece of ACL and 500 pieces of ACL! Flow-based speeding mechanism 100 ACL/PBR 500 ACL/PBR 1 ACL/PBR High performance --- D-link DEF fast forwarding

25.  X-FLOW is the data processing mechanism of DEF.  Traffics with the same SIP, DIP, TCP/UDP port number, protocol number, are defined as a flow. DRO applied the flow table technology. ACLNAT QOS IPSec … Packet routing Flow table Look up Direct processing of packets Packet Update flow table according to results 1 st packet ， routing inquiry, record result Following packet using flow table forwarding directly High performance --- X-FLOW Why X-FLOW: when deployed with ACL 、 QOS 、 NAT 、 IPSec, the forwarding performance will not be affected.

26. High performance 1 Multi-service High security 3 Topic 4 High availability 2

27.  DROs can achieve different functions of switch and router by deploying the switching module. Multi-service --- routing, switching all-in-one Why All-in-one design:  Greatly save the cost of TCO 。  Decrease the maintenance cost,  Save installation space  Save one machine’s power for “green world” 。

28. 28 Router master CPU Switching chip Switching CPU Managingtunnel Datatunnel …… Switching port Distributed architecture Separate CPU ， with separate OS Centralized architecture Sharing CPU ， switching function integrated in the router OS. Managingtunnel Datatunnel Router master CPU Switching chip …… Switching port Multi-service --- distributed architecture

29.  Advantage: Modular design, based on the customer’s real need, easy to be extended and flexible to use. Distributed architecture switching module with own CPU and OS, decrease the burden of CPU, promote the stability. Switching module with separate OS, and D-link has nearly million deployment of switches with high maturity OS. All the switch functions are included. Multi-service --- advantage and disadvantage

30. 30 One router with: Routing+Switching+MPLS+NAT+Firewall+VOIP+VPN +3G+IPFIX Multi-service --- routing, switching all-in-one

31. P P P PE VPN A Site 3 VPN A Site 1 VPN B Site2 VPN B Site 1 PE VPN A Site2 CE–A1 CE–B1 CE–A3 CE–A2 CE–B2 P  Fully support MPLS function, support standard MPLS label switching  Layer 3 VPN based on BGP/MPLS VPN  Support IPSec 、 L2tp multi-instance ， achieve perfect integration between IP VPN and MPLS VPN Multi-service --- L2/3 VPN processing

32. Accept packet Classify Sou. interface Dest. interface Sou. port Dest. port Protocol type TOS ACL Classify Queue0 Queue1 Queue2 QueueN RED WRED Queue FIFO PQ SP WRR DRR TokenDrop Continue to send In queue Out queue Token bucket Out port In port CAR L2/L3/L4 Flow classifying schedule Congestion detection/avoidance Flow shaping Multi-service --- QoS

33. Meticulous management  Packet classify marking  Congestion avoidance （ RED 、 WRED ）  Flow supervision （ CAR ）  Flow shaping （ GTS ）  Congestion management （ FIFO,PQ,CQ,WFQ,CBWFQ,LLQ,RTPQ ）  Line efficiency （ CTCP 、 CRTP ）  QoS queuing technology Business packets 1M Physical Port OA packets 100K Video packets 900K Multi-service --- Dedicated QoS

34. 34 Support WCDMA 、 CDMA2000 、 TD-SCDMA. Flexible for remote areas to access. Serve as backup link for enterprise network. Multi-service --- 3G accessing for remote places

35. Multi-service --- AEP application extension platform  AEP: Application Extension Platform  Layer 7 applications can be deeply integrated into DRO router.

36. How many applications? Network attack? Which is the key application? Where does the flow come from? With IPFIX, network is transparent to you. Multi-service --- built-in IPFIX

37. High performance 1 Multi-service High security 2 Topic 4 High availability 3

38. Branch office DRO-20 Router WAN Information center UNIX Hardware encryption card Encryption Built-in Encryption card High security--- application encryption

39. High performance 1 Multi-service High security 2 Topic 3 High availability 4

40.  The V-CPU technology of DRO router, can separate the CPU into two part, the management and data-forwarding.  No matter how large the attack and data flow is, the management will be always available. High availability --- equipments can be managed in any time Why V-CPU: The equipment can be managed at any time!!!

41. CPU resource Data forwarding CPU System Management CPU  VCPU ： Virtual CPU technology ， CPU resources can be virtualized into two part: data forwarding and system management, the resources can be adjusted dynamically.  Data forwarding CPU ： specialized for data forwarding  System management CPU ： control plane and management plane  No matter how large the attack and data flow is, the management won’t be interrupted High availability- --- VCPU

42. Q & A What is the technology helps DRO routers achieve high performance, when applying ACL, QoS, NAT…….?

43.  Market positioning and demand analysis  Router introductions  Advantages & selling point  Competition analysis  Case share Agenda

44. DRO router is widely deployed in the vertical market. D-link DRO series routers ， have been deployed in the finance, government, education, enterprise for more than 100,000. The strategic partner of China Life, PICC ， more than 5,000 deployment. The strategic partner of Construction Bank of China, more than 8,000 deployment. 100,000 vertical deployment with stable routers.

45. Financial cases 2 Government cases 1 Topic

46. 100M 2M SDH 155M SDH 1000M City Shandong Branch Hebei Branch Guangdong Branch …… …… Beijing Data center Shanghai Data center Jiangsu Data center Province DRO-30*2 CNC ATM ATM SDH CNC ATM China Telecom ATM 110 cities ， 2*DRO-30 for uplink for each city110 cities ， 2*DRO-30 for uplink for each city Backbone network of China Life Insurance

47. Small nodeBig nodeATM node Branches DRO- 50 DRO-20 S5700/S7600/S8600 S2600 S3700 Backbone Area Core switch WAN core WAN Area To HQ WAN Area DRO-20 S3700 100M 2M SDH 155M SDH 1000M 2007-2008 ， 6 provincial network Neimenggu ： 14*branch ， 400*node Hebei ： 11*branch ， 1100*node Ningxia ： 9*branch ， 200*node Qinghai ： 9*branch ， 150*node Hunan ： 20*branch ， 600*node Guangxi ： 14*branch ， 400*node Others ： Hubei ： 700*node. Jinagsu:800*node Shandong ： 600*node, Xinjiang ： 300*node Fujian ： 400*node, Henan ： 200*node ………………………… CPOSATM 2M SDH CPOS Network of Construction Bank of China

48. 100M 2M SDH 155M SDH 1000M DRO-1002 Branches ATM SW Office PC Service PCTerminal SW Small node ATM Normal node ATM Office PCService PCTerminal Office segment Service segment Office segment Service segment DRO-2014 DRO-2024 Beijing ： 400 Xinjiang ： 300 Jilin ： 100 Gansu ： 200 Guizhou ： 300 Shandong ： 400 Ningxia ： 100 Guangdong ： 200 Liaoning ： 200 Dalian ： 100 Guangxi ： 100 ……………… MSTP/2M SDH Master 2M SDH Backup SW Network of Industrial & Commercial Bank of China

49. … INTERNET To HQ ShanxiGuangdong Fujian HebeiHunan DRO-20SecVPN100 branches R3642 DRO-50 R3740 R3642 Shanxi 600 Guangdong 300 Hunan 200 Hebei 200 Fujian 200 Shandong 100 Neimenggu 100 Xinjiang 100 Gansu 100 Hubei 100 Tianjin 100 Henan 50 Beijing 50 Ningxia 50 Zhejiang 50…… ADSL National VPN network of China Insurance

50. 100M 2M SDH 155M SDH 1000M City Branches branches City Branches 2M SDH/MSTP ServiceOffice Node DRO- 20/R27 00 Guangdong ： 2000 Jiangsu ： 2000 Shanxi ： 600 Shanghai ： 400 Hainan ： 300 Guangxi ： 500 Heilongjiang ： 300 Liaoning ： 500 ………………………… ServiceOffice Node DRO- 20/R27 00 ServiceOffice Node DRO- 20/R27 00 2M SDH/MSTP SW Network of Agriculture Bank of China

51. Financial cases 1 Government cases Topic 2

52. XX Army DRO-2014 DRO-2014 DRO-2014 DRO-2014 DRO-5080 Xinhua News Agency HQ SDH HQ deployed 2*DRO-5080, adopted 155M CPOS connecting 19 army branches. Each army branch deployed DRO-2014 100M 2M SDH 155M SDH 1000M 155M CPOS …… 2M SDH Military branch network Xinhua News Agency

53. ISP Xinhua HQ Xinhua Shanghai Branch Exchange office Stock office Xinhua 08 access DRO-5080DRO-5080 Servers 100M 2M SDH 155M SDH 1000M Xinhua News Agency deployed 6*DRO-5080 ， 2 were deployed for Xinhua 08 service, others were deployed for mobile reporting platform, uses CPOS or 4E1 binding. 08 transmission platform of Xinhua News Agency

54. National Government Network Private Network for Ministries Private Network for Ministries Ministry of Audit Branch DRO-2024 100M 2M SDH 155M SDH 1000M Branch DRO-2024 Branch Branch Provincial Government Network Provincial Government Network Branch DRO-2024 Branch 2 nd phase of “Gold Audit” Network

55. Video monitor center MAN Camera Storage Encoding &decodingMonitor center DRO-5080DRO-5080 Office DRO-5080 Camera Office DRO-5080 Office DRO-5080 Office DRO-5080 Office DRO-5080 Office DRO-5080 Office DRO-5080 Office DRO-5080 23*Branch office Video monitoring network of Xuanwu District, Beijing

56. Thank you!