Chinja cheMylinking™ Network Tap Bypass ML-BYPASS-200
2*Bypass pamwe ne1*Monitor Modular Design, 10/40/100GE Links, Max 640Gbps
1-Ongororo
Nekushandisa Mylinking™ Smart Bypass Switch:
- Vashandisi vanogona kuisa/kubvisa michina yekuchengetedza zviri nyore uye havazokanganisi network iripo kana kukanganisa;
- Mylinking™ Network Tap Bypass Switch ine basa rekuona hutano rakangwara kuti ritarise mamiriro ekushanda kwesevhisi yekuchengetedza serial panguva chaiyo, kana mudziyo wekuchengetedza serial wangoshanda, dziviriro inozongoerekana yadarika kuti irambe iine kutaurirana kwakajairika kwenetiweki;
- Tekinoroji yekudzivirira traffic inogona kushandiswa kuisa michina yekuchengetedza yekuchenesa traffic, tekinoroji yekuvhara data yakavakirwa pamidziyo yekuongorora. Ita zvinobudirira dziviriro yekupinda mumigwagwa yemhando chaiyo yetraffic, uchibvisa kumanikidzwa kwekufambisa kwemidziyo yemhando iyi;
- Tekinoroji yekudzivirira traffic yakarongeka inogona kushandiswa pakuisa zvishandiso zvakachengeteka zve serial kuti zvizadzise kudiwa kwekuchengetedzwa kwe serial munzvimbo dzine bandwidth yakawanda.
Nekukura kuri kuita internet nekukurumidza, njodzi yekuchengetedzeka kwemashoko enetwork iri kuramba ichikura, saka maapplication akasiyana-siyana ekudzivirira ruzivo ari kushandiswa zvakanyanya. Ingave iri michina yekudzora kupinda (firewall) yechinyakare kana rudzi rutsva rwenzira dzekudzivirira dzakanyanya senge system yekudzivirira kupinda (IPS), Unified threat management platform (UTM), Anti-denial service attack system (Anti-DDoS), Anti-span Gateway, Unified DPI Traffic Identification and Control System, uye zvishandiso zvakawanda zvekuchengetedza zviri kuiswa mumatanho e network key nodes, kushandiswa kwemutemo wekuchengetedza data unoenderana kuti uone uye ugadzirise traffic yepamutemo / isiri pamutemo. Panguva imwe chete, zvisinei, network yemakomputa ichakonzera kunonoka kukuru kwenetwork kana kutokanganisa network kana paine kutadza, kugadzirisa, kusimudzira, kutsiva michina nezvimwewo munzvimbo ye production network application yakavimbika, vashandisi havagone kuzvitsungirira.
2-Network Tap Bypass Switch Advanced Features uye Technologies
Mylinking™ “SpecFlow” Protection Mode uye tekinoroji ye “FullLink” Protection Mode
Mylinking™ Fast Bypass Switching Protection Technology
Tekinoroji yeMylinking™ "LinkSafeSwitch"
Mylinking™ “WebService” Dynamic Strategy Kutumira/Kuburitsa Tekinoroji
Tekinoroji yeMylinking™ Intelligent Heartbeat Detection Messages
Tekinoroji yeMylinking™ Definible Heartbeat Messages
Tekinoroji yeKuenzanisa Mutoro weMylinking™ ine Zvisungo Zvakawanda
Tekinoroji yeMylinking™ ine Hungwaru yekuparadzira Traffic
Tekinoroji yeKuenzanisa Mutoro yeMylinking™
Tekinoroji yeMylinking™ Remote Management (HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Hunhu)
Gwaro re3-Network Tap Bypass Switch Configuration
NZVARANzvimbo yeModule yeChiteshi cheDziviriro:
Nzvimbo iyi inogona kuiswa mu BYPASS protection port module ine nhamba yakasiyana yekumhanya/port. Nekutsiva mhando dzakasiyana dzemamodule, inogona kutsigira BYPASS kuchengetedzwa kwema 10G/40G/100G links akawanda.
ONGORORANzvimbo yePort Module;
Nzvimbo iyi inogona kuiswa muMONITOR port module ine kumhanya/maport akasiyana. Inogona kutsigira kuiswa kwemidziyo yakawanda ye10G/40G/100G link online serial monitoring device nekutsiva mamodheru akasiyana.
Mitemo Yekusarudza Module
Zvichibva pane zvakasiyana-siyana zvinoshandiswa uye zvinodiwa zvekutarisa kuiswa kwemidziyo, unogona kusarudza magadzirirwo akasiyana emamodule kuti aenderane nezvinodiwa zvako chaizvo; ndapota tevera mitemo inotevera paunenge uchisarudza:
1. Zvikamu zvechassis zvinosungirwa uye munofanira kusarudza zvikamu zvechassis musati masarudza mamwe mamodule. Panguva imwe chete, ndapota sarudzai nzira dzakasiyana dzemagetsi (AC/DC) zvichienderana nezvamunoda.
2. Muchina wese unotsigira kusvika ku2 BYPASS module slots uye 1 MONITOR module slot; haugone kusarudza zvinopfuura nhamba yemigero yekugadzirisa. Zvichienderana nekusanganiswa kwenhamba yemigero uye module model, mudziyo unogona kutsigira kusvika ku4 10GE link protections; kana kuti unogona kutsigira kusvika ku40GE links ina; kana kuti unogona kutsigira kusvika ku100GE link imwe chete.
3. Module model "BYP-MOD-L1CG" inogona kungoiswa muSLOT1 kuti ishande nemazvo.
4. Rudzi rwemodule "BYP-MOD-XXX" runogona kungoiswa muBYPASS module slot chete; rudzi rwemodule "MON-MOD-XXX" runogona kungoiswa muMONITOR module slot chete kuti ishande zvakanaka.
| Muenzaniso weChigadzirwa | Maparamita ebasa |
| Chassis (Mugamuchiri) | |
| ML-BYPASS-M200 | 1U standard 19-inch rackmount; simba rekushandisa zvakanyanya 250W; modular BYPASS protector host; 2 BYPASS module slots; 1 MONITOR module slot; AC neDC optional; |
| Module yeBypass | |
| BYP-MOD-L2XG(LM/SM) | Inotsigira dziviriro ye serial ye 10GE link ine nzira mbiri, 4*10GE interface, LC connector; inovakwa mukati me optical transceiver; optical link single/multimode optional, inotsigira 10GBASE-SR/ LR; |
| BYP-MOD-L2QXG(LM/SM) | Inotsigira dziviriro ye serial ye 40GE link ine nzira mbiri, 4*40GE interface, LC connector; inovakwa mukati me optical transceiver; optical link single/multimode optional, inotsigira 40GBASE-SR4/ LR4; |
| BYP-MOD-L1CG (LM/SM) | Inotsigira dziviriro ye serial ye 100GE link, 2*100GE interface, LC connector; inovakwa mukati me optical transceiver; optical link single multimode optional, inotsigira 100GBASE-SR4/LR4; |
| MONITOR MODULE | |
| MON-MOD-L16XG | module yechiteshi chekutarisa ine 16*10GE SFP+; hapana module ye transceiver yemaziso; |
| MON-MOD-L8XG | 8*10GE SFP+ module yekutarisa port; hapana optical transceiver module; |
| MON-MOD-L2CG | 2*100GE QSFP28 module yekutarisa port; hapana module ye transceiver ye optical; |
| MON-MOD-L8QXG | 8* 40GE QSFP+ module yekutarisa port; hapana optical transceiver module; |
Magadzirirwo e4-Network TAP Bypass Switch
| Kugadziriswa Kwechigadzirwa | ML-BYPASS-M200 Switch yeSerial Bypass | |
| Rudzi rweInterface | Chinongedzo cheMGT | 1*10/100/1000BASE-T Adaptive management interface; Tsigira manejimendi yeHTTP/IP iri kure |
| Nzvimbo yeModule | Nzvimbo ye2*Bypass module; 1*MONITOR module slot； | |
| Zvinongedzo zvinotsigira huwandu hwepamusoro | Rutsigiro rwemudziyo rwakanyanya 4*10GE links kana 4*40GE links kana 1*100GE links | |
| Monitor | Rutsigiro rwemudziyo rwakanyanya 16*10GE monitoring ports kana 8*40GE monitoring ports kana 2*100GE monitoring ports； | |
| Basa | Kugona kwakazara kwekugadzirisa duplex | 640Gbps |
| Zvichibva pakudzivirira kweIP/protocol/port five tuple specific traffic cascade | Tsigiro | |
| Dziviriro yeCascade yakavakirwa pakufamba kwakazara kwemotokari | Tsigiro | |
| Kuenzanisa mutoro kwakawanda | Tsigiro | |
| Basa rekuona kurova kwemoyo rakajairwa | Tsigiro | |
| Tsigira rusununguko rwepakeji yeEthernet | Tsigiro | |
| SWITCH YEKUDZOKA | Tsigiro | |
| Switch yeBypass isina flash | Tsigiro | |
| CONSOLE MGT | Tsigiro | |
| IP/WEB MGT | Tsigiro | |
| SNMP V1/V2C MGT | Tsigiro | |
| TELNET/SSH MGT | Tsigiro | |
| Nzira yeSYSLOG | Tsigiro | |
| Mvumo yemushandisi | Zvichibva pakubvumidzwa kwepassword/AAA/TACACS+ | |
| Zvemagetsi | Rated supply voltage | AC-220V/DC-48V【Sarudzo】 |
| Rated simba frequency | 50HZ | |
| Rated input current | AC-3A / DC-10A | |
| Simba Rakayerwa | 100W | |
| Zvakatipoteredza | Kushanda Tembiricha | 0-50℃ |
| Tembiricha yekuchengetedza | -20-70℃ | |
| Kushanda hunyoro | 10% -95%, Hapana kunyorovesa | |
| Kugadziriswa kwemushandisi | Kugadziriswa kwekonsole | RS232 interface, 115200,8,N,1 |
| Kunze kwebhendi yeMGT interface | 1*10/100/1000M Ethernet interface | |
| Mvumo yepassword | Tsigiro | |
| Kureba kweChassis | Nzvimbo yechasisi (U) | 1U 19 inch, 485mm*44.5mm*350mm |
5-Network TAP Bypass Switch Application (sezvinotevera)
Inotevera ndiyo nzira yakajairika yeIPS (Intrusion Prevention System), FW (Firewall) deployment mode, IPS / FW inoiswa muzvikamu zvakatevedzana kune network midziyo (routers, switches, nezvimwewo) pakati petraffic kuburikidza nekuita security checks, zvichienderana nemutemo wekuchengetedza unoenderana kuti uone kuburitswa kana kuvharwa kwetraffic inoenderana, kuti uwane simba rekudzivirira kuchengetedza.
Panguva imwe chete, tinogona kuona IPS / FW sekushandiswa kwemidziyo serial, inowanzoiswa panzvimbo yakakosha yenetwork yebhizinesi kuti iite security serial, kuvimbika kwemidziyo yayo yakabatana kunokanganisa zvakananga kuwanikwa kwenetwork yebhizinesi. Kana serial devices dzakawandisa, dzadonha, software updates, policy updates, nezvimwewo, kuwanikwa kwenetwork yebhizinesi rese kuchakanganiswa zvikuru. Panguva ino, isu chete kuburikidza ne network cut, physical bypass jumper tinogona kuita kuti network idzorerwe, zvichikanganisa zvakanyanya kuvimbika kwenetwork. IPS / FW nedzimwe serial devices kune rumwe rutivi zvinovandudza kuiswa kwekuchengetedzwa kwenetwork yebhizinesi, kune rumwe rutivi zvinoderedzawo kuvimbika kwenetwork dzebhizinesi, zvichiwedzera njodzi yekuti network isawanikwe.
5.2 Dziviriro yeMidziyo yeInline Link Series
Mylinking™ "Bypass Switch" inoiswa munhevedzano pakati pemidziyo yenetwork (routers, switches, nezvimwewo), uye kufamba kwedata pakati pemidziyo yenetwork hakuchatungamiri zvakananga kuIPS / FW, "Bypass Switch" kuenda kuIPS / FW, apo IPS / FW nekuda kwekuwanda, kuparara, software updates, policy updates nezvimwe zvinhu zvekukundikana, "Bypass Switch" kuburikidza ne intelligent heartbeat message detection Function ye timetime discovery, uye nokudaro skip the error device, pasina kukanganisa preference yenetwork, fast network accessories connected directly to protect the normal communication network; apo IPS / FW failure recovery, asiwo kuburikidza ne intelligent heartbeat packets. Kuona kuonekwa kwebasa panguva yakakodzera, link yekutanga yekudzoreredza kuchengetedzeka kwe enterprise network security checks.
Mylinking™ "Bypass Switch" ine simba rekuona meseji yemoyo ine hungwaru, mushandisi anogona kugadzirisa nguva yemoyo uye huwandu hwakanyanya hwekuyedza, kuburikidza nemeseji yemoyo yakagadzirwa paIPS / FW yekuyedzwa kwehutano, senge kutumira meseji yekutarisa moyo kuchiteshi chepamusoro / pasi peIPS / FW, uye wobva wagamuchira kubva kuchiteshi chepamusoro / pasi peIPS / FW, uye kutonga kana IPS / FW iri kushanda zvakanaka nekutumira nekugamuchira meseji yemoyo.
5.3 Dziviriro ye "SpecFlow" Policy Flow Inline Traction Series
Kana mudziyo wekuchengetedza network uchingoda chete kugadzirisa traffic chaiyo mu series security protection, kuburikidza nebasa reMylinking™ "Bypass Switch" traffic per-processing, kuburikidza ne traffic screening strategy yekubatanidza mudziyo wekuchengetedza "Concerned" traffic inodzoserwa zvakananga kune network link, uye "chikamu chetraffic" chiri kudhonzwa kune in-line safety device kuti iite security checks. Izvi hazvingogumiri pakuchengetedza security device, asiwo zvinoderedza kufamba kusina kunaka kwemidziyo yekuchengetedza kuti igadzirise dzvinyiriro; panguva imwe chete, "Bypass Switch" inogona kuona mashandiro emudziyo wekuchengetedza munguva chaiyo. Mudziyo wekuchengetedza unoshanda zvisina kujairika unopfuura data traffic zvakananga kudzivirira kukanganisa network service.
Mylinking™ Traffic Bypass Protector inogona kuona traffic zvichibva pane L2-L4 layer header identifier, senge VLAN tag, source/destination MAC address, source IP address, IP packet type, transport layer protocol port, protocol header key tag, nezvimwewo. Mamiriro akasiyana-siyana ekufananidza anogona kutsanangurwa nenzira inochinjika kuti atsanangure mhando dzetraffic dzinofarirwa nemudziyo wekuchengetedza uye dzinogona kushandiswa zvakanyanya pakuisa zvishandiso zvekuongorora zvekuchengetedza (RDP, SSH, database auditing, nezvimwewo).
5.4 Kudzivirirwa kweMutoro wakaringana
Mylinking™ "Bypass Switch" inoiswa muzvikamu zvakasiyana-siyana pakati pemidziyo yenetwork (routers, switches, nezvimwewo). Kana mashandiro ekugadzirisa eIPS / FW imwe chete asingakwani kugadzirisa traffic yepamusoro yenetwork link, basa rekuchengetedza traffic load balancing remudziviriri, "bundling" ye IPS / FW cluster processing network link traffic yakawanda, inogona kuderedza zvinobudirira IPS / FW processing pressure imwe chete, kuvandudza mashandiro ekugadzirisa ese kuti asangane nebandwidth yakakwira yenzvimbo yedeployment.
Mylinking™ "Bypass Switch" ine basa rakasimba rekuenzanisa mutoro, zvichienderana ne frame VLAN tag, MAC information, IP information, port number, protocol uye rumwe ruzivo pamusoro pekugoverwa kweHash load balancing kwetraffic kuve nechokwadi chekuti IPS / FW yega yega yakagamuchira data flow Session integrity.
5.5 Dziviriro yeMuchina weInline Inoyerera muMateru (Shandura Kubatana kweSerial kuenda kuKubatana kwaParallel)
Mune mamwe malink akakosha (akadai seInternet outlets, server area exchange link) nzvimbo inowanzo kuve nekuda kwezvinodiwa zvekuchengetedza uye kuiswa kwemidziyo yakawanda yekuongorora kuchengetedza iri mu-line (yakadai sefirewall, anti-DDOS attack equipment, WEB application firewall, intrusion prevention Equipment, nezvimwewo), michina yakawanda yekuona kuchengetedza panguva imwe chete mumutsara pane link kuti iwedzere link yepoindi imwe chete yekukundikana, zvichideredza kuvimbika kwenetwork. Uye mukushandiswa kwemidziyo yekuchengetedza yataurwa pamusoro apa, kuvandudzwa kwemidziyo, kutsiva michina nezvimwe, zvichaita kuti network ikanganiswe kwenguva yakareba uye chirongwa chikuru chidzivise kuita mapurojekiti akadaro.
Nekushandisa "Bypass Switch" nenzira yakabatana, nzira yekuisa zvishandiso zvakawanda zvekuchengetedza zvakabatana mumutsara pane imwe link inogona kuchinjwa kubva ku "physical concatenation mode" kuenda ku "physical concatenation, logical concatenation mode". Chinongedzo pane imwe link yekutadza kuvandudza kuvimbika kwechinongedzo, nepo "bypass switch" pane chinongedzo ichiyerera pakudiwa kwekubata, kuti iwane kuyerera kwakafanana nenzira yekutanga yekugadzirisa kwakachengeteka.
Zvishandiso zvekuchengetedza zvinopfuura chimwe chete panguva imwe chete mudhayagiramu yekuiswa kweseji:
Dhayagiramu yeMylinking™ Network TAP Bypass Switch Deployment:
5.6 Zvichibva paDynamic Strategy yeDziviriro yeKuona Kuchengetedzeka kweTraffic Traction
"Bypass Switch" Imwe nzira yepamusoro yekushandisa yakavakirwa pahurongwa hwekuchengetedza hwekuona traffic traction, kushandiswa kwenzira iyi sezvakaratidzwa pazasi:
Tora michina yekuongorora kuchengetedzwa ye "Anti-DDoS attack protection and detection", semuenzaniso, kuburikidza nekushandiswa kwe "Bypass Switch" uye anti-DDOS protection equipment wozobatanidzwa ne "Bypass Switch", mu "Traction protector" yenguva dzose kusvika pahuwandu hwakazara hwe traffic wire-speed forwarding panguva imwe chete iyo flow mirror output kuenda ku "anti-DDOS attack protection device", kana yaonekwa kune server IP (kana IP network segment) mushure mekurwiswa, "anti-DDOS attack protection device" ichagadzira mitemo inoenderana ne traffic flow uye ichaitumira ku "Bypass Switch" kuburikidza ne dynamic policy delivery interface. Iyo "Bypass Switch" inogona kugadzirisa "traffic traction dynamic" mushure mekugamuchira dynamic policy rule pool "uye pakarepo" mutemo wakarova attack server traffic "traction to the" anti-DDoS attack protection and detection equipment "yekugadzirisa, kuti ishande mushure mekurwiswa uye yozopinzwazve mu network.
Chirongwa chekushandisa chakavakirwa pa "Bypass Switch" chiri nyore kushandisa pane chirongwa chekare cheBGP route injection kana chimwe chirongwa chetrack traction, uye nharaunda hainyanyi kutsamira pane network uye kuvimbika kwacho kwakanyanya.
"Bypass Switch" ine hunhu hunotevera hunotsigira dziviriro yekuona kuchengetedzwa kwemutemo unochinja:
1, "Bypass Switch" kupa kunze kwemitemo yakavakirwa paWEBSERIVCE interface, zviri nyore kubatanidzwa nemidziyo yekuchengetedza yevamwe.
2, "Bypass Switch" zvichibva pa "hardware pure ASIC chip" inotumira 10Gbps wire-speed packets pasina kuvharira switch forwarding, uye "traffic traction dynamic rule library" zvisinei nenhamba.
3, "Bypass Switch" basa rehunyanzvi rakavakirwa mukati meBYPASS, kunyangwe kana chidziviriro chacho chikatadza, chinogonawo kunzvenga serial link yekutanga nekukasika, hachikanganisi link yekutanga yekutaurirana kwakajairika.
