Maitiro Ekuisa Inline Bypass Tap kudzivirira Kuwedzeredza kana Kuparara kweChengetedzo Zvishandiso?

Iyo Bypass TAP (inodaidzwawo kuti bypass switch) inopa kutadza-kuchengetedzeka madoko kune akamisikidzwa anoshanda ekuchengetedza emidziyo senge IPS uye inotevera-chizvarwa firewall (NGFWS).Iyo bypass switch inoiswa pakati petiweki zvishandiso uye pamberi petiweki kuchengetedza maturusi kuti ape yakavimbika poindi yekuzviparadzanisa pakati petiweki uye yekuchengetedza layer.Vanouya nerutsigiro rwakazara kunetiweki uye maturusi ekuchengetedza kudzivirira njodzi yekudzima network.

Solution 1 1 Link Bypass Network Tap(Bypass Switch) - Yakazvimirira

Application:

Iyo Bypass Network Tap (Bypass Shandura) inobatanidza kune maviri network zvishandiso kuburikidza neLink ports uye inobatana kune yechitatu-bato server kuburikidza neDhidhiyo ports.

Iyo inokonzeresa yeBypass Network Tap (Bypass Switch) yakaiswa kuPing, iyo inotumira inoteedzana zvikumbiro zvePing kune server.Kamwe sevha yamira kupindura pings, iyo Bypass Network Tap (Bypass Switch) inopinda bypass mode.

Kana sevha inotanga kupindura zvakare, iyo Bypass Network Tap (Bypass Switch) inoshandura kudzokera kunzira yekufambisa.

Ichi chishandiso chinogona kushanda chete kuburikidza neICMP (Ping).Hapana mapaketi ekurova kwemoyo anoshandiswa kutarisa kubatana pakati pesevha neBypass Network Tap (Bypass Switch).

2

Solution 2 Network Packet Broker + Bypass Network Tap (Bypass Switch)

Network Packet Broker(NPB) + Bypass Network Tap(Bypass Switch) -- Normal chimiro

Application:

Iyo Bypass Network Tap (Bypass Switch) inobatanidza kune maviri network zvishandiso kuburikidza neLink ports uye kune Network Packet Broker (NPB) kuburikidza neChishandiso ports.Iyo yechitatu-bato sevha inobatana neNetwork Packet Broker (NPB) ichishandisa 2 x 1G tambo dzemhangura.Network Packet Broker(NPB) inotumira mapaketi ekurova kwemoyo kuseva kuburikidza nechiteshi #1 uye inoda kuvagamuchira zvakare pachiteshi #2.

Iyo inokonzeresa yeBypass Network Tap (Bypass Switch) yakaiswa kune REST, uye Network Packet Broker (NPB) inomhanyisa iyo yekupfuura application.

Traffic in throughput mode:

Chishandiso 1 ↔ Bypass Switch/Tap ↔ NPB ↔ Server ↔ NPB ↔ Bypass Switch/Tap ↔ Chishandiso 2

3

Network Packet Broker(NPB) + Bypass Network Tap(Bypass Switch) -- Software Bypass

Software Bypass tsananguro:

Kana Network Packet Broker (NPB) ikasaona kurova kwemoyo mapaketi, inogonesa software kunzvenga.

Kugadziriswa kweNetwork Packet Broker (NPB) inoshandurwa otomatiki kutumira traffic inouya kuBypass Network Tap (Bypass Switch), nekudaro ichidzoreredza traffic muiyo mhenyu link nekurasikirwa kushoma kwepaketi.

Iyo Bypass Network Tap(Bypass Switch) haidi kupindura zvachose nekuti zvese zvekupfuura zvinoitwa neNetwork Packet Broker(NPB).

Traffic muSoftware Bypass:

Chishandiso 1 ↔ Bypass Switch/Tap ↔ NPB ↔ Bypass Switch/Tap ↔ Chishandiso 2

1

Network Packet Broker(NPB) + Bypass Network Tap(Bypass Switch) -- Hardware bypass

Hardware Bypass tsananguro:

Kana Network Packet Broker (NPB) ikatadza kana kubatana pakati peNetwork Packet Broker (NPB) neBypass Network Tap (Bypass Switch) ikabviswa, iyo Bypass Network Tap (Bypass Switch) inochinja kubypass mode kuchengetedza chaiyo- time link inoshanda.

Kana iyo Bypass Network Tap (Bypass Switch) ichipinda mubypass mode, Network Packet Broker(NPB) uye sevha yekunze inopfuudzwa uye isingagamuchire chero traffic kudzamara Bypass Network Tap(Bypass Switch) yachinja ichidzokera kunzira yekubuda.

Iyo bypass modhi inotangwa kana iyo Bypass Network Tap (Bypass Switch) isisina kubatana kune magetsi.

Hardware off-line traffic:

Chishandiso 1 ↔ Bypass Switch/Tap ↔ Chishandiso 2

4

Solution 3 Maviri Bypass Network Taps(Bypass Swichi) kune yega link

Configuration mirayiridzo:

Mukuseta uku, 1 copper link yezvishandiso zviviri zvakabatana kune inozivikanwa sevha inopfuudzwa neBypass Network Taps (Bypass Switches).Kubatsira kweiyi pamusoro peiyo 1 bypass mhinduro ndeyekuti kana network packet broker (NPB) yekubatanidza ikakanganiswa, sevha ichiri chikamu cheiyo live link.

5

2 * Bypass Network Taps(Bypass Swichi) pane chinongedzo - Software Bypass

Software Bypass tsananguro:

Kana Network Packet Broker (NPB) ikasaona kurova kwemoyo mapaketi, inogonesa software kunzvenga.Iyo Bypass Network Tap(Bypass Switch) haidi kuita zvachose nekuti zvese zvekupfuura zvinoitwa neNetwork Packet Broker(NPB).

Traffic musoftware bypass:

Chishandiso 1 ↔ Bypass Switch/Tap 1 ↔ Network Packet Broker(NPB) ↔ Bypass Switch/Tap 2 ↔ Mudziyo 2

6

 

2 * Bypass Network Taps(Bypass Swichi) pane chinongedzo - Hardware Bypass

Hardware Bypass tsananguro:

Kana iyo Network Packet Broker(NPB) ikatadza kana kubatana pakati peBypass Network Tap(Bypass Switch) neNetwork Packet Broker(NPB) ikabviswa, ese Bypass Network Taps(Bypass Switches) anochinjirwa kubypass mode kuchengetedza. iyo inoshanda link.

Mukupesana neiyo "1 Bypass per link" kuseta, sevha ichiri kuverengerwa mukurarama link.

Hardware off-line traffic:

Chishandiso 1 ↔ Bypass Switch/Tap 1 ↔Server ↔ Bypass Switch/Tap 2 ↔ Mudziyo 2

7

Solution 4 Maviri Bypass Network Taps(Bypass Switches) akagadzirirwa kune yega link pane maviri saiti.

Setting instructions:

Sarudzo: Maviri Network Packet Brokers(NPBs) anogona kushandiswa kubatanidza nzvimbo mbiri dzakasiyana pamusoro peGRE tunnel pane imwe Network Packet Broker(NPB).Kana sevha inobatanidza masaiti maviri ikatadza, ichapfuura sevha uye traffic iyo inogona kugoverwa kuburikidza neGRE tunnel yeNetwork Packet Broker (NPB) (sezvinoratidzwa muFigure pazasi).

8

9


Nguva yekutumira: Mar-06-2023