Chinja cheMylinking™ Network Tap Bypass ML-BYPASS-100
2*Bypass pamwe ne1*Monitor Modular Design, 10/40/100GE Links, Max 640Gbps
Pfupiso
Mylinking™ Network Tap Bypass Switch inotsvakurudzwa uye yakagadzirwa kuti ishandiswe pakuisa mhando dzakasiyana dzemidziyo yekuchengetedza iri mukati memota uku ichipa kuvimbika kwakanyanya kune network.
Nekushandisa Mylinking™ Smart Bypass Switch Tap:
- Vashandisi vanogona kuisa/kubvisa midziyo/maturusi ekuchengetedza nenzira inochinjika uye havazokanganisi kana kukanganisa network iripo;
- Mylinking™ Network Tap Bypass Switch ine basa rekuona hutano rakangwara kuti ritarise mamiriro ekushanda kwemidziyo yekuchengetedza iri mumutsara panguva chaiyo. Kana michina yekuchengetedza iri mumutsara yangoshanda, basa rekudzivirira rinozongoerekana rapfuura kuti rirambe richishanda zvakanaka netiweki;
- Tekinoroji yekudzivirira traffic inogona kushandiswa kuisa michina yekuchengetedza yekuchenesa traffic, tekinoroji yekuvhara data yakavakirwa pamidziyo yekuongorora. Ita zvinobudirira kudzivirira kupinda kwemukati kwerudzi rwetraffic, uchibvisa kumanikidzwa kwekubata kwemvura kwemudziyo wemukati;
- Tekinoroji yeLoad Balanced Traffic Protection inogona kushandiswa pakuisa zvishandiso zvekuchengetedza zviri mumutsara wakabatana kuti zvisangane nekuchengetedzwa kwemukati munzvimbo dzine bandwidth yakawanda.
Network Tap Bypass Switch Advanced Features & Technologies
Mylinking™ “SpecFlow” Protection Mode uye “FullLink” Protection Mode
Dziviriro yeMylinking™ Fast Bypass Switching
"LinkSafeSwitch" yeMylinking™
Kutumira/Kuburitsa Matanho Akasimba eMylinking™ “WebService”
Kuona Mashoko Ekurova Kwemwoyo Kwangu ...
Mashoko Ekurova Kwemwoyo Anotsanangurwa neMylinking™ (Mapaketi Ekurova Kwemwoyo)
Kuenzanisa Mutoro weMylinking™ weZvisungo Zvakawanda
Kuparadzirwa kweTraffic neUngwaru neMylinking™
Kuenzanisa Kwemutoro weMylinking™ Kuchinja-chinja
Tekinoroji yeMylinking™ Remote Management (HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Hunhu)
Gwaro Rekugadzirisa Netambo yeNetwork Tap Bypass
Module yeBypassNzvimbo yeModule yeChiteshi cheDziviriro:
Nzvimbo iyi inogona kuiswa mu BYPASS protection port module ine nhamba yakasiyana yekumhanya/port. Nekutsiva mhando dzakasiyana dzemamodule, inogona kutsigira BYPASS kuchengetedzwa kwezvinodiwa zve 10G/40G/100G link.
Module yeMONITORNzvimbo yePort Module;
Nzvimbo iyi inogona kuiswa MONITOR module ine kumhanya/maport akasiyana. Inogona kutsigira malink akawanda e10G/40G/100G ekuisa mudziyo wekutarisa we inline serial nekutsiva mamodule akasiyana.
Mitemo Yekusarudza Module
Zvichibva pane zvakasiyana-siyana zvinongedzo zvakaiswa uye zvinodiwa zvekutarisa kuiswa kwemidziyo, unogona kusarudza magadzirirwo akasiyana emamodule kuti usvike pane zvauri kuda; ndapota tevera mitemo inotevera paunenge uchisarudza module yako:
1. Zvikamu zvechassis zvinosungirwa uye munofanira kusarudza zvikamu zvechassis musati masarudza mamwe mamodule. Panguva imwe chete, ndapota sarudzai nzira dzakasiyana dzemagetsi (AC/DC) zvichienderana nezvamunoda.
2. Mudziyo wese unotsigira kusvika ku2 BYPASS module slots uye 1 MONITOR module slot; haugone kusarudza zvinopfuura nhamba yemigero yekugadzirisa. Zvichienderana nekusanganiswa kwenhamba yemigero uye module model, mudziyo unogona kutsigira kusvika ku4 10GE link protections; kana kuti unogona kutsigira kusvika ku40GE links ina; kana kuti unogona kutsigira kusvika ku100GE link imwe chete.
3. Module model "BYP-MOD-L1CG" inogona kungoiswa muSLOT1 kuti ishande nemazvo.
4. Rudzi rwemodule "BYP-MOD-XXX" runogona kungoiswa muBYPASS module slot chete; rudzi rwemodule "MON-MOD-XXX" runogona kungoiswa muMONITOR module slot chete kuti ishande zvakanaka.
| Muenzaniso weChigadzirwa | Maparamita ebasa |
| Chassis (Mugamuchiri) | |
| ML-BYPASS-M100 | 1U standard 19-inch rackmount; simba rekushandisa zvakanyanya 250W; modular BYPASS protector host; 2 BYPASS module slots; 1 MONITOR module slot; AC neDC optional; |
| Module yeBypass | |
| BYP-MOD-L2XG(LM/SM) | Inotsigira dziviriro ye serial ye 10GE link ine nzira mbiri, 4*10GE interface, LC connector; inovakwa mukati me optical transceiver; optical link single/multimode optional, inotsigira 10GBASE-SR/ LR; |
| BYP-MOD-L2QXG(LM/SM) | Inotsigira dziviriro ye serial ye 40GE link ine nzira mbiri, 4*40GE interface, LC connector; inovakwa mukati me optical transceiver; optical link single/multimode optional, inotsigira 40GBASE-SR4/ LR4; |
| BYP-MOD-L1CG (LM/SM) | Inotsigira dziviriro ye serial ye 100GE link, 2*100GE interface, LC connector; inovakwa mukati me optical transceiver; optical link single multimode optional, inotsigira 100GBASE-SR4/LR4; |
| MONITOR MODULE | |
| MON-MOD-L16XG | module yechiteshi chekutarisa ine 16*10GE SFP+; hapana module ye transceiver yemaziso; |
| MON-MOD-L8XG | 8*10GE SFP+ module yekutarisa port; hapana optical transceiver module; |
| MON-MOD-L2CG | 2*100GE QSFP28 module yekutarisa port; hapana module ye transceiver ye optical; |
| MON-MOD-L8QXG | 8* 40GE QSFP+ module yekutarisa port; hapana optical transceiver module; |
Magadzirirwo eNetwork TAP Bypass Switch
| Kugadziriswa Kwechigadzirwa | ML-BYPASS-M100 Inline Network Tap Bypass Switch | |
| Rudzi rweInterface | Chinongedzo cheMGT | 1*10/100/1000BASE-T Adaptive management interface; Tsigira manejimendi yeHTTP/IP iri kure |
| Nzvimbo yeModule | Nzvimbo ye2*Bypass module; 1*MONITOR module slot； | |
| Zvinongedzo zvinotsigira huwandu hwepamusoro | Rutsigiro rwemudziyo rwakanyanya 4*10GE links kana 4*40GE links kana 1*100GE links | |
| Kutarisa | Rutsigiro rwemudziyo rwakanyanya 16*10GE monitoring ports kana 8*40GE monitoring ports kana 2*100GE monitoring ports； | |
| Basa | Kugona kwakazara kwekugadzirisa duplex | 640Gbps |
| Zvichibva pakudzivirira kweIP/protocol/port five tuple specific traffic cascade | Inotsigirwa | |
| Dziviriro yeCascade yakavakirwa pakufamba kwakazara kwemotokari | Inotsigirwa | |
| Kuenzanisa mutoro kwakawanda | Inotsigirwa | |
| Basa rekuona kurova kwemoyo rakajairwa | Inotsigirwa | |
| Tsigira rusununguko rwepakeji yeEthernet | Inotsigirwa | |
| SWITCH YEKUDZOKA | Inotsigirwa | |
| Switch yeBypass isina flash | Inotsigirwa | |
| CONSOLE MGT | Inotsigirwa | |
| IP/WEB MGT | Inotsigirwa | |
| SNMP V1/V2C MGT | Inotsigirwa | |
| TELNET/SSH MGT | Inotsigirwa | |
| Nzira yeSYSLOG | Inotsigirwa | |
| Mvumo yemushandisi | Zvichibva pakubvumidzwa kwepassword/AAA/TACACS+ | |
| Zvemagetsi | Rated supply voltage | AC-220V/DC-48V【Sarudzo】 |
| Rated simba frequency | 50HZ | |
| Rated input current | AC-3A / DC-10A | |
| Simba Rakayerwa | 100W | |
| Zvakatipoteredza | Kushanda Tembiricha | 0-50℃ |
| Tembiricha yekuchengetedza | -20-70℃ | |
| Kushanda hunyoro | 10% -95%, Hapana kunyorovesa | |
| Kugadziriswa kwemushandisi | Kugadziriswa kweConsole | RS232 interface, 115200,8,N,1 |
| Kunze kwebhendi yeMGT interface | 1*10/100/1000M Ethernet interface | |
| Mvumo yepassword | Inotsigirwa | |
| Kureba kweChassis | Nzvimbo yechasisi (U) | 1U 19 inches, 485mm*44.5mm*350mm |
Kushandiswa kweNetwork TAP Bypass Switch (sezvinotevera)
5.1 Njodzi yeMidziyo Yekuchengetedza Yakabatana (IPS / FW)
Zvinotevera iIPS (Intrusion Prevention System) yakajairika, FW (Firewall) deployment mode, IPS / FW inoshandiswa semidziyo ye network iri mukati (yakadai sema routers, switch, nezvimwewo) pakati petraffic kuburikidza nekuita macheki ekuchengetedza, zvichienderana nemutemo wekuchengetedza unoenderana kuti uone kuburitswa kana kuvharwa kwetraffic inoenderana, kuti uwane simba rekudzivirira kuchengetedza.
Panguva imwe chete, tinogona kuona IPS (Intrusion Prevention System) / FW (Firewall) senzira yekuisa michina mukati memutsara, inowanzoiswa panzvimbo yakakosha yenetwork yebhizinesi kuti iite inline security, kuvimbika kwemidziyo yayo yakabatana kunokanganisa zvakananga kuwanikwa kwenetwork yebhizinesi. Kana michina yekuchengetedza mukati memutsara yawandisa, yaparara, software updates, policy updates, nezvimwewo, kuwanikwa kwenetwork yebhizinesi rese kuchakanganiswa zvakanyanya. Panguva ino, isu chete kuburikidza ne network cut, physical bypass jumper inogona kuita kuti network idzorerwe, asi zviri kukanganisa zvakanyanya kuvimbika kwenetwork. IPS (Intrusion Prevention System) / FW (Firewall) nedzimwe michina mukati memutsara kune rumwe rutivi zvinovandudza kuiswa kwekuchengetedzwa kwenetwork yebhizinesi, kune rumwe rutivi zvinoderedzawo kuvimbika kwenetwork dzebhizinesi, zvichiwedzera njodzi yekuti network isawanikwe.
5.2 Dziviriro yeMidziyo yeInline Link Series
Mylinking™ "Bypass Switch" inoshandiswa se inline pakati pemidziyo yenetwork (routers, switches, nezvimwewo), uye kufamba kwedata pakati pemidziyo yenetwork hakuchatungamiri zvakananga kuIPS (Intrusion Prevention System) / FW (Firewall), "Bypass Switch" kuenda kuIPS / FW, kana IPS / FW nekuda kwekuwanda, kuparara, software updates, policy updates nezvimwe zvinhu zvekukundikana, "Bypass Switch" kuburikidza ne intelligent heartbeat message detection Function ye timetime discovery, uye nokudaro skip the error device, pasina kukanganisa preference yenetwork, rapid network midziyo yakabatana zvakananga kuchengetedza normal communication network; apo IPS / FW failure recovery, asiwo kuburikidza ne intelligent Heartbeat Packets Detection of timely detection of the function, the original link to restoration detections of enterprise network security checks.
Mylinking™ "Bypass Switch" ine simba rakangwara rekuona mafambiro emoyo, mushandisi anogona kugadzirisa nguva yekurova kwemoyo uye huwandu hwakanyanya hwekudzokorora, kuburikidza nemeseji yekurova kwemoyo yakagadzirwa paIPS / FW yekuyedzwa kwehutano, senge kutumira meseji yekutarisa kurova kwemoyo kuchiteshi chepamusoro / pasi peIPS / FW, uye wobva wagamuchira kubva kuchiteshi chepamusoro / pasi peIPS / FW, uye kutonga kana IPS / FW iri kushanda zvakanaka nekutumira nekugamuchira meseji yekurova kwemoyo.
5.3 Dziviriro ye "SpecFlow" Policy Flow Inline Traction Series
Kana mudziyo wekuchengetedza network uchingoda chete kugadzirisa traffic chaiyo mu series security protection, kuburikidza nebasa reMylinking™ "Network Tap Bypass Switch" traffic per-processing, kuburikidza ne traffic screening strategy yekubatanidza mudziyo wekuchengetedza "Concerned" traffic inodzoserwa zvakananga kune network link, uye "chikamu chetraffic" chiri kubata mudziyo wekuchengetedza uri mu-line kuti uite ongororo dzekuchengetedza. Izvi hazvingogumiri pakuchengetedza mashandiro enguva dzose ekushandisa mudziyo wekuchengetedza, asiwo zvinoderedza kufamba kusina kunaka kwemidziyo yekuchengetedza kuti igadzirise kumanikidzwa; panguva imwe chete, "Network Tap Bypass Switch" inogona kuona mamiriro ekushanda kwemudziyo wekuchengetedza munguva chaiyo. Mudziyo wekuchengetedza unoshanda zvisina kujairika unodarika traffic yedata zvakananga kudzivirira kukanganisa network service.
Mylinking™ Inline Traffic Bypass Tap inogona kuona traffic zvichibva pane L2-L4 layer header identifier, senge VLAN tag, source/destination MAC address, source IP address, IP packet type, transport layer protocol port, protocol header key tag, nezvimwewo. Mamiriro akasiyana-siyana ekufananidza anogona kutsanangurwa nenzira inochinjika kuti atsanangure mhando dzetraffic dzinofarirwa nemudziyo wekuchengetedza uye dzinogona kushandiswa zvakanyanya pakuisa zvishandiso zvekuongorora zvekuchengetedza (RDP, SSH, database auditing, nezvimwewo).
5.4 Kudzivirirwa kweMutoro wakaringana
Mylinking™ "Network Tap Bypass Switch" inoshandiswa pakati pemidziyo yenetwork (routers, switches, nezvimwewo). Kana mashandiro ekugadzirisa eIPS / FW asina kukwana kuti akwanise kubata ne network link peak traffic, basa rekuchengetedza traffic load balancing remudziviriri, "bundling" ye IPS / FW cluster processing network link traffic yakawanda, inogona kuderedza zvinobudirira IPS / FW processing pressure, kuvandudza mashandiro ekugadzirisa ese kuti asangane ne high bandwidth ye deployment environment Claim.
Mylinking™ "Network Tap Bypass Switch" ine basa rakasimba rekuenzanisa mutoro, zvichienderana ne frame VLAN tag, MAC information, IP information, port number, protocol uye rumwe ruzivo pamusoro pekugoverwa kweHash load balancing kwetraffic kuve nechokwadi chekuti IPS / FW yega yega yakagamuchira data flow Session integrity.
5.5 Dziviriro yeMuchina weInline Inoyerera muMateru (Shandura Kubatana kweSerial kuenda kuKubatana kwaParallel)
Mune mamwe malink akakosha (akadai seInternet outlets, server area exchange link) nzvimbo yacho inowanzo kukonzerwa nezvinodiwa zvekuchengetedza uye kuiswa kwemidziyo yakawanda yekuongorora kuchengetedza iri mu-line (yakadai sefirewall(FW), anti-DDOS attack equipment, WEB Application Firewall(WAF), Intrusion Prevention System(IPS), nezvimwewo), michina yakawanda yekuona kuchengetedza panguva imwe chete mumutsara pane link kuti iwedzere link yepoindi imwe chete yekukundikana, zvichideredza kuvimbika kwenetwork. Uye mukushandiswa kwemidziyo yekuchengetedza yataurwa pamusoro apa, kuvandudzwa kwemidziyo, kutsiva michina nezvimwe, zvichaita kuti network ikanganiswe kwenguva yakareba uye chirongwa chikuru chidzivise kuita mapurojekiti akadaro.
Nekushandisa "Network Tap Bypass Switch" nenzira yakabatana, nzira yekuiswa kwemidziyo yakawanda yekuchengetedza yakabatana mumutsara pane imwe link inogona kuchinjwa kubva ku "physical concatenation mode" kuenda ku "physical concatenation, logical concatenation mode". Chinongedzo pane imwe link yekutadza kuvandudza kuvimbika kwechinongedzo, nepo "bypass switch" pane chinongedzo ichiyerera pakudiwa kwekubata, kuti iwane kuyerera kwakafanana nenzira yekutanga yekugadzirisa kwakachengeteka.
Zvishandiso zvekuchengetedza zvinopfuura chimwe chete panguva imwe chete nedhayagiramu yekuiswa kwemukati:
Dhayagiramu yeMylinking™ Network TAP Bypass Switch Deployment:
5.6 Zvichibva paDynamic Strategy yeDziviriro yeKuona Kuchengetedzeka kweTraffic Traction
"Network Tap Bypass Switch" Imwe nzira yepamusoro yekushandisa yakavakirwa pahurongwa hwekuchengetedza traffic traction, kushandiswa kwenzira iyi sezvakaratidzwa pazasi:
Tora michina yekuongorora kuchengetedzwa ye "Anti-DDoS attack protection and detection", semuenzaniso, kuburikidza nekushandiswa kwe "Network Tap Bypass Switch" uye wobva wabatanidza michina yekudzivirira ye anti-DDOS ku "Network Tap Bypass Switch", mu "Traction protector" yenguva dzose kusvika pahuwandu hwakazara hwe traffic wire-speed forwarding panguva imwe chete iyo flow mirror output kuenda ku "anti-DDOS attack protection device", kana yaonekwa kune server IP (kana IP network segment) mushure mekurwiswa, "anti-DDOS attack protection device" ichagadzira mitemo inoenderana ne traffic flow uye ichaitumira ku "Network Tap Bypass Switch" kuburikidza ne dynamic policy delivery interface. Iyo "Network Tap Bypass Switch" inogona kugadzirisa "traffic traction dynamic" mushure mekugamuchira dynamic policy rules Rule pool "uye pakarepo" mutemo wakarova attack server traffic "traction to the" anti-DDoS attack protection and detection detection "equipment for processing, kuti ishande mushure mekurwiswa uye yozopinzwazve mu network.
Chirongwa chekushandisa chakavakirwa pa "Network Tap Bypass Switch" chiri nyore kushandisa pane chirongwa chekare cheBGP route injection kana chimwe chirongwa chetrack traction, uye nharaunda hainyanyi kutsamira pane network uye kuvimbika kwacho kwakanyanya.
"Network Tap Bypass Switch" ine zvinhu zvinotevera zvinotsigira dziviriro yekuchengetedzwa kwekuchengetedzwa kwedata:
1, "Network Tap Bypass Switch" kupa kunze kwemitemo yakavakirwa paWEBSERIVCE interface, zviri nyore kubatanidzwa nemidziyo yekuchengetedza yevamwe.
2, "BNetwork Tap Bypass Switch" zvichibva pa "hardware pure ASIC chip" inotumira 10Gbps wire-speed packets pasina kuvharira switch forwarding, uye "traffic traction dynamic rule library" zvisinei nenhamba.
3, "Network Tap Bypass Switch" basa rehunyanzvi rakavakirwa mukati meBYPASS, kunyangwe kana chidziviriro chacho chikatadza, chinogonawo kunzvenga chinongedzo chepakutanga cheserial ipapo ipapo, hachikanganisi chinongedzo chekutanga chekutaurirana kwakajairika.
