IXP1200 Multi-Service Network Platform

Product Overview

Next-generation multi-service network products must meet the growing user demand for the integrated solution of packet filter, packet inspection and state-checking techniques. In addition to implementing pivotal technologies, such as multi-layer filter and content detection at wire speed, equipment manufacturers must deliver their products that can be easily upgraded in software under stringent time-to-market deadline. This capability is important because it can facilitate the cost-effective deployment of new services without extensive hardware replacement.

Based on Intel IXP1200 network processor and Solidums PP1200 stream classifier, FIDS 1200 meets these requirements richly. Intel® network processor delivers high-performance and flexibility to value-add services because of its powerful parallel and programmable multi micro-engines. Solidums stream classifier, PP1200, provides feasibility for Gigabit wire speed content inspection. In conjunction with HW platform-FIDS12MC1/FID12CC1/FIDS12CC2 and FIDS1200 SDK, FIDS1200 can dramatically meet the requirements of next generation Firewall, IDS, Network monitoring, Load balance, Content filter etc, Traffic statistics/ accounting, Protocol analysis.

 




Product Highlights


 Accelerates time-to-market of security products based on IXP1200, IXF1002/ IXF440/ IXF6012 and stream classifier
 Platform subsystem include FIDS12MC1 - base card, which is a 6U cPCI card with an Intel Network Processor IXP1200, interface card, and BSP level /    Application level software for IDS and Firewall
 I/O options include:FIDS12CC2 POS/ATM interface card, FIDS12CC1 8FE-2GE interface card
 FIDS SDK 1.0 include:
   1.BSP/ Drivers for RT Linux and VxWorks
   2.Reference designs.
   3.Documents of system structure/ software structure/ interface spec
 Hardware, software, document and tools form a total platform

FIDS1200 HW System Consist Of Three Subsystems

 FIDS12MC1 C NPU Base Card

The FIDS12MC1 Network Processor Base Card occupies two 6U slots within the cPCI system. It includes a 200 MHz IXP1200 network processor with 66 MHz IX Bus and a memory subsystem consisting of 8 Mbytes of flash memory (up to 64M), 6 Mbytes of SSRAM, and 128 Mbytes of SDRAM (up to 256M). Other components include a PP1200 stream classifier, a 2Mb TCAM, an Intel 21555 Non-Transparent PCI-to-PCI bridge chip, and an Intel 82559 Fast Ethernet chip.

 The front-panel features:

1.Two Gigabit Ethernet connectors
2.One 10/100 RJ-45 Ethernet connector for the PCI/Ethernet interface
3.Eight 10/100 RJ-45 Ethernet connectors, or Two Giga Ethernet ports
4.One RS232 9-pin D-sub serial port connector
5.One recessed master reset switch
6.Green/Red- Pass/Fail indicator LEDs

 The board features:

1.Two IX Bus/slow port 114-pin connectors
2.Two PCI Mezzanine connectors
3.One SDRAM debug connector (three 38-pin Mictor connectors)
4.One SSRAM debug connectors
5.Power connector for standalone application without CPCI interface used


The interface to the Compact-PCI back-plane is via two standard cPCI connectors (J1, J2) providing a standard 64-bit bus at speeds up to 66 MHz.

 FIDS12CC1 C FE/GE interface card
Including an Intel IXF440 Dual-Speed Multi-port Ethernet MAC and Intel IXF1002 Dual-Port Gigabit Ethernet MAC, providing eight 10BASE-T or 100BASE-T connections and 2 GE connections.

 FIDS12CC2 C GE/POS interface card
Including an Intel IXF1002 Dual-Port Gigabit Ethernet MAC and an Agilent PM5351, providing two GE interface and four 155M interface


Software Components Of FIDS1200 SDK

 BSP and Drivers for LINUX and VxWorks
 PDL template for most RFC, ATM and telecom protocol stacks.
 Reference Design including following functions:
        1.MAC and IP binding
        2.NAT
        3.VLAN
        4.ARP/ICMP/IGMP filter under ARM control
        5.TCP session state check
        6.5-7 command abstract
        7.URL filter under ARM control
        8.ActiveX filter under ARM control
        9.Java-script filter under ARM control
        10.Content filter


Application Example

 Firewall with Content filter/ Status checking
Gigabit level Firewall based on FIDS1200 provides content filter and status checking functions. With VLAN function, FIDS1200 supports virtual security area. Because of programming of IXP1200 micro-engine, Firewall based on FIDS1200 support flexible security schema.

 Intrusion Detect System
DS based on FIDS1200 collects information for intrusion detection analysis engine running on
HOST computer or on FIDS1200. Information type can be defined by intrusion detection analysis engine flexibly.

 Load Balance
Load Balance equipment distributes traffic to different server based on MAC/ IP/ connection/ content. At the same time FIDS1200 can finish pre-processing function to decrease the working load of backend server. For example, FIDS1200 can differentiate server cared strings in received packet.
FIDS1200 provide ATM or POS interface for uplink.

 Network Monitoring
Monitor equipment differentiate, filter or deliver different packet to backend server, based on packet every protocol field or packet content. At the same time FIDS1200 can finish some pre-processing function to decrease the working load of backend server.

 Traffic Accounting
FIDS1200 differentiates different traffic for accounting server. The traffic classification standard can be defined flexibly.

 Protocol Analysis
With PP1200, FIDS1200 provide powerful protocol analysis function. Using PDL language user can define any protocol packet format for protocol analysis.


Mainboard Features And Benefits

 Feature 

 Benefits 

 FIDS12MM1 - Network Processor PMC Card

 Intel IXP1200 network processor

 A flexible, intelligent network processor

 Memory subsystem - 256 MB
SDRAM, 6MB SSRAM

 Fast table-lookup support

 16 MB FLASH

 Hardware platform to meet various requirement

 IX Bus connector

Flexibility to connect a wide range of I/O devices to the IntelrrrIXP1200 network processor IX Bus interface

 PMC connector

Additional flexibility to connect a wide range of industry standard I/O modules to Intel® IXP1200 network processor

Dimension: 15.75"W x 9.2"H x 11.7"D
 

*Our product is compatible with ROHS

*More information, please contact us via Sales@flexcomm.com

Datasheet

 FIDS1200 Product Brief [PDF File]