High performance router CR16010-F

High performance router CR16010-F

H3C’s CR16000-F series includes high-performance routers designed primarily for carrier/metropolitan backbone networks and large enterprise core networks that feature high data transfer performance, high port density and variety of supported port types. The CR16000-F routers use CLOS architecture and a distributed routing and switching system to provide higher network availability and scalability. The Comware V7 operating system provides greater compatibility for the CR16000-F routers, allowing the installation of security blades and open application platform modules to meet a variety of customer needs.

The CR16000-F series of routers is represented by the CR16006-F, CR16010-F, CR16010H-F and CR16018-F models, which allow you to build networks of any level thanks to the presence of 4/8/8/16 slots for service cards.

Innovative IRF virtualization technology for distributed networks

Traditional distributed networks use 1+1 redundancy of channels and devices to ensure availability, which increases reliability network, but at the same time leads to low load of channels and devices and at the same time increases the complexity of management and maintenance. Focusing on the needs for virtualization of cloud computing advanced networks, H3C uses IRF technology in devices for distributed networks. IRF technology virtualizes multiple physical devices into a single IRF fabric, which significantly reduces network management and maintenance costs while increasing utilization (efficiency) of channel and device bandwidth. Thanks to IRF technology, the CR16000-F routers realize the following advantages:

Using link aggregation technology across different chassis for load balancing and redundancy of multiple backbone connections. This improves network reliability and improves link resource utilization.

Virtualizes multiple CR16000-F routers into a single IRF fabric, providing a unified control plane and transmission plane data. This simplifies the network topology, improves management efficiency and reduces maintenance costs.

Use proprietary H3C technology for fault-tolerant, stateful routing with real-time redundancy for control plane and data plane data across the entire virtualized architecture. This ensures that there are no service interruptions due to critical elements whose failure could lead to the failure of the entire system.

Powerful BRAS functionality

Traditional service routers provide telecommunications services such as mobile access, corporate communications and IP television. BRAS devices act as gateways to access the broadband network, providing authentication and user management functions. CR16000-F models combine the functions of a service router and BRAS, providing greater utilization of device resources and cost savings.

Intellectualaccountingby purpose(iTA) – ensures differentiation of service types depending on destination addresses and implements accounting, bandwidth management and QoS parameters for each service type.

Offers a unified user authentication mechanism for a large number of wired and wireless clients, supporting mobility requirements of wireless terminals and unified authentication for all services.

Switchingon reserveBRASinIRF withcontrolstate – eliminates service interruptions that can be caused by the failure of a critical element affecting the entire system and simplifies management and maintenance.

Industry-leading network operating system

The control plane of the CR16000-F router uses multi-core and symmetric multiprocessing (SMP) processing technologies enabled by the Comware V7 platform. Each software module operates in an independent address space with support for dynamic loading and isolated updates.

The Comware V7 platform supports distributed computing functions. Global services such as MPLS and BGP can be assigned to specific MPUs. By distributing global services across different MPUs, processor load is reduced and system performance is improved. Thanks to distributed computing in the system, it becomes possible to divide global services into subservices with the distribution of subservices among different processors.

Comprehensive set of services

The CR16000-F router uses an Open Application Architecture OAA) and offers Open Application Platform (OAP) modules to meet customization and upgrade needs. For example, firewall modules, intrusion prevention system (IPS) modules, and load balancing modules are offered to effectively combine core routers and service systems.

High performance and reliability

< p style="font-weight: 400;">The CR16000-F router offers traffic forwarding performance of 800 Gbps in each slot, as well as high port density of 10GE / 40GE / 100GE.

CR16000-F routers provide redundancy for all major components, including control boards, independent switching matrices, power supplies, fans, etc.

CR16000-F routers support a full range of reliability features to help maintain network availability even if an entire link or node fails, including BFD, LAG, NQA, ECMP, FRR and others.

Additional information

Dimensions 93 × 44 × 66 cm
MPU module slots


Line Card Slots



Integrated chassis that can be installed in a 19" rack

Power supply configuration

Supports 6 power supplies (AC or DC) and N+M redundancy

Unicast routing

ECMP, etc., ICMPv6 MIB, UDP6 MIB, TCP6 MIB, IPv6 MIB, IP FRR, IPv4 to IPv6 transition technologies, IPv4/IPv6 Dual Stack, IPv6 Neighbor Discovery, OSPFv3, IS-IS, IS-ISv6, BGP-4 and BGP4+ VRRP and VRRPv3, PMTU Discovery, Policy Routing, Routing Policies, Static Routing, RIP, RIPng, OSPF, TCP6, ping for IPv6, traceroute for IPv6, IPv6 sockets, static DNS for IPv6, specifying IPv6 DNS server and IPv6 TFTP client, Tunneling technologies such as GRE


etc .p., IGMP V1/V2/V3 and IGMP snooping v1/2/3, MLD V1/V2 and MLD snooping v1, Multicast Policies and Quality of Service (QoS) Management for Multicast, PIM-DM, PIM-SM, PIM-SSM, MSDP, MBGP, anycast-RP, PIM6-DM, PIM6-SM and PIM6-SSM


Hierarchy of PE (HoPE), meeting the requirements of the RFC 2547 bis standard, P/PE functionality, Three MPLS VPN support options for multiple autonomous systems (Option1/Option2/Option3)


Access authentication via Layer 2/3 portal and QinQ, EDSG, IPoE (64 thousand users), IPoEoVLAN, IPoEoQ, DHCP and authentication for access from unknown IP addresses, L2TP, Mobility and Unified Authentication for Wireless Terminals, PPPoE (64 thousand users), PPPoEoVLAN and PPPoEoQ, Remote Authentication, Authorization and Accounting (AAA) based on RADIUS/TACACS+ iTA protocol, Stateful IRF BRAS Failover, Unified User Authentication Mechanism for a large number of wired and wireless clients, VPN access authentication

Access Control Lists (ACLs)

Ingress/Exit ACLs, IPv4/IPv6 Standard and Extended ACLs, Layer 2/Layer 3/Layer 4 ACLs


5-level Hierarchy of QoS (HQoS) and queue scheduling mechanisms, including PQ, WFQ and CBWFQ, 802.1p Priority Mapping, TOS, DSCP and EXP, Multicast QoS, Outbound Limiting, Priority Marking/Remarking, TD/WRED


802.3d (STP)/802.3w (RSTP)/802.3s (MSTP), IEEE 802.3ad (link aggregation), static port aggregation and link aggregation on various cards, Port mirroring ( port mirroring) and flow mirroring, QinQ, VLAN 802.1Q/802.1Q

Network traffic analysis

Analysis of incoming and outgoing traffic at the port level, Flow monitoring to identify illegitimate traffic, Hardware analysis of network traffic, IPv4/IPv6/MPLS traffic analysis, Multiple logging, NetStream data export for Netflow v5/v8/v9, Test samples and traffic accounting


1+1 redundancy is critical critical components including MPUs, fabric modules, power supplies, and fans, BFD, Fast fault detection for protocols with sub-50ms switchover, Fast FRR rerouting with sub-50ms switchover and 99.999% network availability, Hot-swappable all components, IP TRUNK, MP and ETH port aggregation, NSF, NSR and GR, OAM for Ethernet and Y.1731, Passive backplane design to eliminate critical component whose failure could result in failure of the entire system, PW redundancy


Authentication in OSPF, RIPv2 and BGPv4 using plaintext and MD5, Authentication, authorization and accounting (AAA), Firewall, Hierarchical user control, Password protection, Prevent attacks using ARP packets, unknown multicast packets, broadcast packets, Secure, encrypted channel for connecting users to the system based on SSHv2, SNMPv3, Standard and extended ACLs for packet filtering and preventing network attacks, URPF to prevent network attacks with source address spoofing

System management

Configuration using command line via AUX/Telnet/SSH2.0 console port/modem, Failure Alarms and Automatic recovery, ICMP, In-band and Out-of-band management, Logging, Managing file upload/download via FTP, TFTP, Xmodem and SFTP, NQA, NTP, RMONv1/v2, support 1, 2, 3 or 9 groups, SNMPv1/v2/v3, Syslog, Telnet access for multiple users, Traceroute

The page is under development

This section is under development.

We apologize for the temporary inconvenience

Let call
Please enable JavaScript in your browser to complete this form.