I-Mylinking™ Network Tap Bypass Tshintsha i-ML-BYPASS-100
2*Bypass plus 1*Jonga iModyuli yoYilo, 10/40/100GE uQhagamshelwano, Max 640Gbps
Ushwankathelo
I-Mylinking™ Network Tap Bypass Switch iphandiwe kwaye iphuhliswe ukuba isetyenziselwe ukuhanjiswa okubhetyebhetye kweentlobo ngeentlobo zezixhobo zokhuseleko ezingaphakathi ngelixa ibonelela ngokuthembeka okuphezulu kwenethiwekhi.
Ngokusebenzisa i-Mylinking™ Smart Bypass Switch Tap:
- Abasebenzisi banokufaka ngokulula / bakhuphe izixhobo zokhuseleko / izixhobo kwaye aziyi kuchaphazela kwaye ziphazamise inethiwekhi yangoku;
- I-Mylinking™ Network Tap Bypass Tshintshela ngomsebenzi wokubona impilo ekrelekrele ukuya esweni ngexesha lokwenyani lemeko yokusebenza eqhelekileyo yezixhobo zokhuseleko ezingaphakathi. Emva kokuba izixhobo zokhuseleko ezingaphakathi zisebenza ngaphandle, umsebenzi wokukhusela uya kudlula ngokuzenzekelayo ukugcina unxibelelwano oluqhelekileyo lwenethiwekhi;
- Itekhnoloji ekhethiweyo yokukhusela i-traffic ingasetyenziselwa ukuhambisa izixhobo ezithile zokhuseleko lokucoca i-traffic, iteknoloji ye-encryption esekelwe kwisixhobo sophicotho. Ukuqhuba ngokufanelekileyo ukukhuselwa kokufikelela kwi-inline yohlobo oluthile lwetrafikhi, ukukhulula uxinzelelo lokusingatha ukuhamba kwesixhobo esingaphakathi;
- Itekhnoloji yoKhuseleko lweNdlela eLungileyo yoMlayisho ingasetyenziselwa ukuthunyelwa ngokudibeneyo kwezixhobo ezikhuselekileyo ze-serial ezingaphakathi zokhuseleko ukuhlangabezana nokhuseleko lwe-inline kwiindawo eziphezulu ze-bandwidth.
I-Network Tap Bypass Tshintsha iiMpahla eziPhezulu kunye nobuGcisa
IMowudi yoKhuselo ye-Mylinking™ “SpecFlow” kunye neModi yoKhuselo “iFullLink”
I-Mylinking™ iFast Bypass Switching Protection
I-Mylinking™ “LinkSafeSwitch”
I-Mylinking™ “WebService” iDynamic Strategy Forwarding/Issue
Mylinking™ Intelligent Heartbeat Message Ukufunyanwa komyalezo
Imiyalezo yeMylinking™ echaza ukubetha kwentliziyo (Iipakethi zokubetha kwentliziyo)
I-Mylinking™ Multi-link Load Balancing
Mylinking™ Intelligent Traffic Distribution
Mylinking™ Dynamic Load Balancing
ITekhnoloji yoLawulo lweRemote ye-Mylinking™(HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Iimpawu)
I-Network Tap Bypass Switch Optional Configuration Guide
Imodyuli ye-BYPASSIsilothi seModyuli yesiKhuseli:
Le slot ingafakwa kwimodyuli ye-BYPASS yokukhusela i-port kunye nesantya esahlukileyo / inombolo ye-port. Ngokutshintsha iintlobo ezahlukeneyo zeemodyuli, inokuxhasa ukukhuselwa kwe-BYPASS yeemfuno ezininzi ze-10G / 40G / 100G zekhonkco.
ILISO ImodyuliIsilothi seModyuli yePort;
Le slot ingafakwa imodyuli ye-MONITOR kunye nezantya ezahlukeneyo / izibuko. Inokuxhasa amakhonkco amaninzi e-10G / 40G / 100G yokusetyenziswa kwesixhobo sokubeka iliso kwi-serial ngokutshintsha iimodyuli ezahlukeneyo.
Imithetho yokuKhethwa kweModyuli
Ngokusekwe kumakhonkco ahlukeneyo asetyenzisiweyo kunye nokubeka iliso kwiimfuno zokusasazwa kwezixhobo, unokukhetha ngokulula ulungelelwaniso lwemodyuli eyahlukeneyo ukuhlangabezana nesicelo sakho sokwenyani sokusingqongileyo; Nceda ulandele le migaqo ilandelayo ngexesha lokukhetha imodyuli yakho:
1. Amacandelo e-chassis anyanzelekile kwaye kufuneka ukhethe amacandelo e-chassis phambi kokuba ukhethe ezinye iimodyuli. Kwangaxeshanye, nceda ukhethe iindlela ezahlukeneyo zobonelelo lwamandla (AC/DC) ngokweemfuno zakho.
2. Isixhobo sonke sixhasa ukuya kuthi ga kwi-slots yemodyuli ye-BYPASS kunye ne-1 MONITOR slot module; awukwazi ukukhetha ngaphezu kwenani leendawo zokubeka ukuze uqwalasele. Ngokusekelwe kwindibaniselwano yenani lee-slots kunye nemodeli yemodyuli, isixhobo sinokuxhasa ukuya kuthi ga kwizikhuselo ezine ze-10GE zekhonkco; okanye inokuxhasa ukuya kuthi ga kwiikhonkco ezine ze-40GE; okanye inokuxhasa ukuya kuthi ga kwikhonkco elinye le-100GE.
3. Imodeli yemodyuli "BYP-MOD-L1CG" inokufakwa kuphela kwi-SLOT1 ukuze isebenze ngokufanelekileyo.
4. Uhlobo lwemodyuli "BYP-MOD-XXX" lunokufakwa kuphela kwi-slot yemodyuli ye-BYPASS; uhlobo lwemodyuli "MON-MOD-XXX" ingafakwa kuphela kwimodyuli yeslot ye-MONITOR yokusebenza okuqhelekileyo.
| Umzekelo weMveliso | Iiparamitha zomsebenzi |
| I-Chassis(Umkhosi) | |
| I-ML-BYPASS-M100 | 1U umgangatho we-19-intshi ye-rackmount; ukusetyenziswa kwamandla aphezulu 250W; imodyuli yeBYPASS yomkhuseli; 2 iindawo zokubeka iimodyuli ze-BYPASS; 1 Imodyuli yokubeka iliso slot; I-AC kunye ne-DC ngokuzithandela; |
| IMOdyuli yokudlula | |
| BYP-MOD-L2XG(LM/SM) | Ixhasa i-2-indlela ye-10GE yekhonkco yokukhusela i-serial, i-4 * 10GE i-interface, i-LC connector; i-transceiver optical eyakhelwe-ngaphakathi; ikhonkco optical enye / multimode ozikhethelayo, ixhasa 10GBASE-SR/ LR; |
| BYP-MOD-L2QXG(LM/SM) | Ixhasa i-2-indlela ye-40GE yekhonkco yokukhusela i-serial, i-4 * 40GE i-interface, i-LC connector; i-transceiver optical eyakhelwe-ngaphakathi; ikhonkco optical single / multimode ozikhethelayo, ixhasa 40GBASE-SR4/ LR4; |
| BYP-MOD-L1CG (LM/SM) | Ixhasa i-1 ye-channel ye-100GE yekhonkco yokukhusela i-serial, i-2 * 100GE i-interface, i-LC connector; i-transceiver optical eyakhelwe-ngaphakathi; ikhonkco optical single multimode ozikhethelayo, ixhasa 100GBASE-SR4/LR4; |
| HLOLA IMODYULI | |
| I-MON-MOD-L16XG | 16 * 10GE SFP + imodyuli yokubeka iliso kwizibuko; akukho modyuli ye-optical transceiver; |
| I-MON-MOD-L8XG | I-8*10GE SFP+ imodyuli yokubeka iliso kwizibuko; akukho modyuli ye-optical transceiver; |
| I-MON-MOD-L2CG | I-2 * 100GE QSFP28 imodyuli yokubeka iliso kwizibuko; akukho modyuli ye-optical transceiver; |
| I-MON-MOD-L8QXG | I-8* 40GE QSFP+ imodyuli yokubeka iliso kwizibuko; akukho modyuli ye-optical transceiver; |
Network TAP Bypass Switch Specifications
| Indlela yeMveliso | I-ML-BYPASS-M100 I-Inline Network Tap Bypass Switch | |
| Uhlobo lwesiNxulumanisi | Ujongano lweMGT | I-1 * 10/100/1000BASE-T i-adaptive management interface; Ukuxhasa ulawulo olude lwe-HTTP/IP |
| Slot yemodyuli | 2 * BYPASS imodyuli slot; 1 * MONITOR imodyuli slot; | |
| Amakhonkco axhasa ubuninzi | Ukuxhaswa kwesixhobo ubuninzi be-4 * 10GE amakhonkco okanye i-4 * 40GE amakhonkco okanye i-1 * 100GE amakhonkco | |
| Ukubeka iliso | Isixhobo sixhasa ubuninzi be-16 * 10GE izibuko zokubeka iliso okanye i-8 * 40GE izibuko zokubeka esweni okanye i-2 * 100GE izibuko zokubeka iliso; | |
| Umsebenzi | Isakhono sokusetyenzwa kwe-duplex epheleleyo | 640Gbps |
| Ngokusekwe kwi-IP/iprothokholi/kwizibuko ezintlanu ezikhethekileyo zokukhusela i-traffic cascade | Ixhasiwe | |
| Ukhuseleko lweCascade olusekwe kwitrafikhi epheleleyo | Ixhasiwe | |
| Ukulinganisa umthwalo omninzi | Ixhasiwe | |
| Umsebenzi wokubona ukubetha kwentliziyo | Ixhasiwe | |
| Inkxaso Ethernet package ukuzimela | Ixhasiwe | |
| UKUTSHINTSHA NGENXA YOKUBHALA | Ixhasiwe | |
| I-BYPASS Tshintsha ngaphandle kwesibane | Ixhasiwe | |
| I-CONSOLE MGT | Ixhasiwe | |
| IP/WEBHU MGT | Ixhasiwe | |
| SNMP V1/V2C MGT | Ixhasiwe | |
| TELNET/SSH MGT | Ixhasiwe | |
| SYSLOG protocol | Ixhasiwe | |
| Ugunyaziso lomsebenzisi | Ngokusekwe kugunyaziso lwegama lokugqitha/AAA/TACACS+ | |
| Umbane | Ixabiso lombane wonikezelo | AC-220V/DC-48V【Ngokuzikhethela】 |
| Ilinganiswe ngamaza ombane | 50HZ | |
| Ireyithiwe igalelo langoku | AC-3A / DC-10A | |
| Rated Power | 100W | |
| Okusingqongileyo | Ubushushu bokusebenza | 0－50℃ |
| Ubushushu bokugcina | -20-70℃ | |
| Ukufuma okusebenzayo | 10% -95%, Akukho condensation | |
| Ubumbeko lomsebenzisi | Uqwalaselo lweConsole | RS232 interface,115200,8,N,1 |
| Ngaphandle kojongano lweMGT yebhendi | 1 * 10/100/1000M Ethernet interface | |
| Ugunyaziso lwegama lokugqithisa | Ixhasiwe | |
| Ukuphakama kweChassis | Indawo yeChassis (U) | 1U 19 intshi, 485mm * 44.5mm * 350mm |
INethiwekhi ye-TAP yokuBypass kwiSicelo soTshintsho (njengokulandelayo)
5.1 UMngcipheko weZixhobo zoKhuseleko ze-Inline (IPS / FW)
Oku kulandelayo yi-IPS eqhelekileyo (i-Intrusion Prevention System), i-FW (Firewall) imodi yokuthunyelwa, i-IPS / FW isetyenziswe njengezixhobo zenethiwekhi ezingaphakathi (njengama-routers, utshintsho, njl.)
Kwangaxeshanye, sinokujonga i-IPS(I-Intrusion Prevention System) / FW (Firewall) njengokuthunyelwa kwe-inline kwesixhobo, esihlala sibekwe kwindawo ephambili yenethiwekhi yeshishini ukuphumeza ukhuseleko olungaphakathi, ukuthembeka kwezixhobo zayo eziqhagamshelweyo kuchaphazela ngqo ukufumaneka kwenethiwekhi yeshishini ngokubanzi. Nje ukuba izixhobo zokhuseleko ezingaphakathi zigcwele kakhulu, ukuphazamiseka, uhlaziyo lwesoftware, uhlaziyo lomgaqo-nkqubo, njl.njl., konke ukufumaneka kwenethiwekhi yeshishini kuya kuchaphazeleka kakhulu. Kweli nqanaba, thina kuphela ngokusikwa kwenethiwekhi, ijumpi yokudlula ngokwasemzimbeni inokwenza inethiwekhi ibuyiselwe, kodwa ichaphazela kakhulu ukuthembeka kwenethiwekhi. IPS (Inkqubo yoThintelo lokuNgena) / FW (Firewall) kunye nezinye izixhobo ezingaphakathi kwicala elinye ziphucula ukuthunyelwa kokhuseleko lwenethiwekhi yeshishini, kwelinye icala kunciphisa ukuthembeka kothungelwano lwamashishini, ukwandisa umngcipheko wenethiwekhi ayifumaneki.
5.2 I-Inline Link Series yoKhuselo lweZixhobo
I-Mylinking™ "Bypass Switch" ibekwe njengomgca phakathi kwezixhobo zenethiwekhi (iirutha, iiswitshi, njl.njl.), kunye nokuhamba kwedatha phakathi kwezixhobo zenethiwekhi akusakhokeleli ngokuthe ngqo kwi-IPS(Intrusion Prevention System) / FW(Firewall), "Bypass Switch" ukuya kwi-IPS / FW, xa i-IPS / FW ngenxa yokugcwala, ukuphazamiseka, uhlaziyo lwesoftware kunye nohlaziyo lwesoftware, ukusilela kohlaziyo, ukusilela kwesoftware. ukufumanisa umyalezo wokubetha kwentliziyo Umsebenzi wokufunyanwa kwangexesha, kwaye ngaloo ndlela utsibe isixhobo esingalunganga, ngaphandle kokuphazamisa isiseko sothungelwano, izixhobo zenethiwekhi ezikhawulezayo eziqhagamshelwe ngokuthe ngqo ukukhusela umnatha wonxibelelwano oluqhelekileyo; xa IPS / FW ukubuyiswa ukusilela, kodwa ngokusebenzisa ezikrelekrele Heartbeat Packets Ukufunyanwa ukubhaqwa kwangethuba umsebenzi, ikhonkco yokuqala ukubuyisela ukhuseleko iitshekhi yokhuseleko womnatha ishishini.
I-Mylinking ™ "I-Bypass Switch" inomsebenzi onamandla wokuqonda ukubetha koMyalezo we-Heartbeat, umsebenzisi unokwenza ngokwezifiso ixesha lokubetha kwentliziyo kunye nenani eliphezulu lokuzama kwakhona, ngomyalezo oqhelekileyo wokubetha kwentliziyo kwi-IPS / FW yovavanyo lwezempilo, njengokuthumela umyalezo wokukhangela ukubetha kwentliziyo kwindawo enyukayo / ezantsi ye-IPS / FW, kwaye emva koko ufumane ukusuka kwi-IPW ephezulu kunye nejaji / i-IPW. ukusebenza ngokuqhelekileyo ngokuthumela kunye nokufumana umyalezo wokubetha kwentliziyo.
5.3 “SpecFlow” Policy Flow Inline Traction Series Protection
Xa isixhobo sothungelwano sokhuseleko sidinga kuphela ukujongana netrafikhi ethile kuthotho lokhuseleko lokhuseleko, ngeMylinking ™ "Inethiwekhi yeTap Bypass Switch" i-traffic per-processing function, ngokusebenzisa isicwangciso sokuhlola i-traffic ukudibanisa isixhobo sokhuseleko " Ixhala "i-traffic ithunyelwa umva ngokuthe ngqo kwikhonkco lothungelwano, kwaye" icandelo letrafikhi elichaphazelekayo "litsalela kwisixhobo sokhuseleko sangaphakathi ukwenza iitshekhi zokhuseleko. Oku akuyi kugcina kuphela ukusetyenziswa okuqhelekileyo komsebenzi wokukhangela ukhuseleko lwesixhobo sokukhusela, kodwa nokunciphisa ukuhamba okungahambi kakuhle kwezixhobo zokukhusela ukujongana noxinzelelo; kwangaxeshanye, i "Network Tap Bypass Switch" inokubona imeko yokusebenza yesixhobo sokhuseleko ngexesha langempela. Isixhobo sokhuseleko sisebenza ngendlela engaqhelekanga sidlula ngokuthe ngqo ukugcwala kwedatha ukunqanda ukuphazamiseka kwenkonzo yenethiwekhi.
I-Mylinking™ Inline Traffic Bypass Tap inokuchonga itrafikhi esekwe kwi-L2-L4 umaleko we-header isazisi, esifana nethegi yeVLAN, umthombo / idilesi ye-MAC yendawo ekuyiwa kuyo, idilesi ye-IP yomthombo, uhlobo lwepakethi ye-IP, i-port ye-protocol port, i-protocol header tag, njalo njalo. Iintlobo ezahlukeneyo zeemeko ezihambelanayo ukudibanisa okuguquguqukayo kunokuchazwa ngokuguquguqukayo ukucacisa iintlobo ezithile zetrafikhi ezinomdla kwisixhobo esithile sokhuseleko kwaye zingasetyenziselwa ngokubanzi ukuthunyelwa kwezixhobo ezikhethekileyo zokuhlola ukhuseleko (RDP, SSH, uphicotho lwedatha yedatha, njl.).
5.4 Umthwalo olungelelanisiweyo woKhuseleko lweCandelo
I-Mylinking™ "I-Network Tap Bypass Switch" imiselwe njengomgca phakathi kwezixhobo zenethiwekhi (iirutha, iiswitshi, njl.njl.). Xa i-IPS enye / i-FW intsebenzo yokucubungula ingonelanga ukujamelana ne-traffic link peak traffic, Umsebenzi wokulinganisa umthwalo we-traffic womkhuseli, "i-bundling" ye-IPS ezininzi / i-FW cluster processing network network network traffic, inokunciphisa ngokufanelekileyo i-IPS / FW yoxinzelelo olulodwa, iphucule intsebenzo yokusebenza ngokubanzi ukuhlangabezana ne-bandwidth ephezulu yeBango lokusingqongileyo.
I-Mylinking™ "I-Network Tap Bypass Switch" inomsebenzi onamandla wokulinganisa umthwalo, ngokwesakhelo se-VLAN tag, ulwazi lwe-MAC, ulwazi lwe-IP, inombolo ye-port, iprotocol kunye nolunye ulwazi kwi-Hash load balancing distribution of traffic ukuqinisekisa ukuba i-IPS / FW nganye ifumene ukuhamba kwedatha yeSession imfezeko.
5.5 Ukhuseleko lweSixhobo esiSetyenziswayo seMilayini eHamba ngokuHamba (Tshintsha uQhagamshelwano lothotho ukuya kuQhagamshelwano oluFanayo)
Kwamanye amakhonkco abalulekileyo (ezifana ne-Intanethi, ikhonkco lokutshintshiselana kwendawo yomncedisi) indawo ihlala ibangelwa kwiimfuno zeempawu zokhuseleko kunye nokuthunyelwa kwezixhobo ezininzi zokuvavanya ukhuseleko kwi-line (ezifana ne-firewall (FW), izixhobo zokuhlaselwa kwe-DDOS, i-WEB Application Firewall (WAF), i-Intrusion Prevention System (IPS), njl. inethiwekhi. Kwaye kwizixhobo zokhuseleko ezikhankanywe ngasentla kwi-intanethi, ukuphuculwa kwezixhobo, ukutshintshwa kwezixhobo kunye neminye imisebenzi, kuya kubangela uthungelwano ixesha elide lokuphazamiseka kwenkonzo kunye neprojekthi enkulu yokusika isenzo ukugqiba ukuphunyezwa ngempumelelo kweeprojekthi ezinjalo.
Ngokuhambisa "i-Network Tap Bypass Switch" ngendlela edibeneyo, imowudi yokuthunyelwa kwezixhobo ezininzi zokhuseleko ezidityaniswe kuchungechunge kwikhonkco elifanayo linokutshintshwa ukusuka "kwimowudi yokudibanisa ngokomzimba" ukuya "kwindlela yokudibanisa ngokomzimba, imo yokudibanisa ingqiqo" Ikhonkco kwikhonkco kwindawo enye yokungaphumeleli ukuphucula ukuthembeka kwekhonkco, ngelixa "imowudi yokudibanisa ngokukhuselekileyo" ukusebenza kwesiphumo.
Ngaphezulu kwesixhobo esinye sokhuseleko ngexesha elinye njengedayagram yokusasazwa okungaphakathi:
Idiagram ye-Mylinking™ ye-TAP ye-Bypass Switch Deployment Diagram:
5.6 Ngokusekelwe kwiQhinga eliDynamic loKhuseleko lokuFumana uKhuseleko lweTraffic Traffic Traffic Strategy
"I-Network Tap Bypass Switch" Enye imeko yesicelo esiphezulu isekwe kwiqhinga eliguquguqukayo le-traffic traction yokhuseleko lwezicelo zokhuseleko, ukusasazwa kwendlela njengoko kubonisiwe ngezantsi:
Thatha "ukhuseleko lohlaselo lwe-Anti-DDoS kunye nobhaqo" izixhobo zokuvavanya ukhuseleko, umzekelo, ngokubekwa kwangaphambili kwe "Network Tap Bypass Switch" kwaye emva koko izixhobo zokhuselo ze-DDOS kwaye emva koko ziqhagamshelwe kwi "Network Tap Bypass Switch", ngokwesiqhelo " Umkhuseli weTraction "kwisixa esigcweleyo se-traffic wire-speed forwarding ngaxeshanye i-flow-speed ye-Bypass Switch" kunye nesixhobo sokukhusela i-IP, i-IP yokuhlasela i-IP kunye nesixhobo sokukhusela i-IP. icandelo lomnatha) emva kohlaselo," isixhobo sokhuseleko sohlaselo lwe-anti-DDOS " siya kuvelisa imigaqo ehambelana nokuhamba kwetrafikhi ekujoliswe kuyo kwaye iyithumele kwi " Network Tap Bypass Switch " ngojongano lonikezelo lomgaqo-nkqubo oguqukayo. I "Network Tap Bypass Switch" inokuhlaziya "i-traffic traction dynamic" emva kokufumana imigaqo-nkqubo eguquguqukayo Umgaqo-nkqubo "kwaye ngoko nangoko" umgaqo wabetha i-traffic server yokuhlaselwa "ukutsalwa" kwi-anti-DDoS ukhuseleko lokuhlaselwa kunye nokufumanisa "izixhobo zokucutshungulwa, ukuba zisebenze emva kokuhamba kohlaselo kwaye emva koko zifakwe kwakhona kwinethiwekhi.
Iskimu sesicelo esisekwe kwi " Network Tap Bypass Switch " kulula ukuyiphumeza kunesitofu sendlela ye BGP yemveli okanye esinye isikimu sokutsalwa kwetrafikhi, kwaye okusingqongileyo kuxhomekeke kancinci kuthungelwano kunye nokuthembeka kuphezulu.
"I-Network Tap Bypass Switch" inezi mpawu zilandelayo ukuxhasa ukhuseleko lokhuseleko lomgaqo-nkqubo oguquguqukayo:
I-1, "I-Network Tap Bypass Switch" ukubonelela ngaphandle kwemithetho esekelwe kwi-WEBSERIVCE interface, ukudibanisa lula kunye nezixhobo zokhuseleko lomntu wesithathu.
I-2, "i-BNetwork Tap Bypass Switch" esekelwe kwi-hardware ecocekileyo ye-ASIC chip ehambisa ukuya kwi-10Gbps yeepakethi ze-wire-speed ngaphandle kokuthintela ukuhanjiswa kokutshintshwa, kunye "nelayibrari yolawulo lwe-traffic traction dynamic" kungakhathaliseki ukuba inani.
I-3, "I-Network Tap Bypass Switch" eyakhelwe-ngaphakathi umsebenzi we-BYPASS wobuchwephesha, nokuba umkhuseli ngokwawo ukusilela, unokudlula ikhonkco le-serial kwangoko, alichaphazeli ikhonkco lokuqala lonxibelelwano oluqhelekileyo.
