400G ADM/Muxponder/Transponder with Layer 1 encryption

The PL-4000M is a cost-effective solution for rolling out multi-rate 10/25/100GbE, 16G FC, OTU2/2e/4 services, or increasing existing network capacity. The device delivers 600G in a 1U chassis using dual 400G CFP2-DCO Open ROADM standard-based pluggable coherent modules for metro and long haul applications.

Image

The PL-4000M delivers cost-effective, high-capacity transport of 400G over a single wavelength by aggregating any mix of 10/25/100GbE, 16/32G FC, and OTU2/2e/4 services into one or 2 400G coherent uplinks. The equipment uses globally adopted, standards-based technology, which ensures an extended lifespan, eliminating vendor lock in, reducing long-term total cost of ownership (TCO), and speeding ROI. All optical modules are replaceable and pluggable from the front panel, which simplifies growth and maintenance. The PL-4000M supports pluggable fan units and dual redundant hot-pluggable AC/DC power supply units.

The PL-4000M provides full demarcation point between the service and the OTN/DWDM network, and is interoperable with any third party switch or router. This provides full visibility and performance monitoring of both line optical transport layer (OTN) and 10/25/100GbE, 16G FC, and OTU2/2e/4 service interfaces.

Facility Protection

In 1+1 facility protection (fiber path protection) the emphasis is on protecting the fiber link and is enabled by an optical switch embedded in the PL-4000M, as shown in Figure 2.

Image

The optical switch enables fiber path protection by switching between the working and protecting paths in less than 50 milliseconds.

In order to provide secured fiber optic link, a combination of protection methods must be in place: physical on-site protection, secured management protocols, encryption, and monitoring. This combination provides network administrators with the tools they need to prevent, detect, isolate and counter any potential or occurring data hacking attempt.

Layer 1 GCM-AES-256 Encryption

Image

The PL-4000M is FIPS 140-2 Level 2 and Common Criteria EAL2 compliant, and provides GCM-AES-256 bit encryption and key exchange based on the Diffie-Hellman (DH) protocol, without compromising performance. It supports independent bi-directional encryption/decryption machines, where each port can be configured to a different service rate/type, and has its own key exchange and pre-shared secret.

The Layer-1 encryption solution is agnostic to the application layer and the SAN and LAN equipment used, which makes it cost effective and simple to deploy. The solution
integrates with existing WDM infrastructure and encrypted wavelengths and can be added
at any time with no impact on the existing applications.

Management

PacketLight LightWatchTM provides full fault management, configuration, accounting, performance, security (FCAPS) functionality and is compliant with telecommunications management network (TMN) standards.

Image

LightWatch is built with a client-server architecture. It uses the MySQLTM database, and is built with modular client pay-as-you-grow offerings, scalable to 500 network elements and 20 clients.

Advanced management features may be accessed through dedicated Management Ports.  Copper and fibre interfaces are both provided for Ethernet access. A serial RS232 port is also provided as is  OTN in-band GCC channel access.

Management options include:
 ■ Web browser over HTTP/HTTPS
 ■ PacketLight LightWatch™ NMS/EMS
 ■ Third party NMS over SNMP
 ■ CLI over RS-232
 ■ CLI over Telnet/SSH

Protocol support: SNMP v1/v2/v3, HTTP/HTTPS, Telnet/SSH, Syslog, RADIUS, SNTP, TFTP and FTP