I-Mylinking™ Network Tap Bypass Switch ML-BYPASS-100
2*Bypass plus 1*Monitor Modular Design, 10/40/100GE Links, Max 640Gbps
Uhlolojikelele
I-Mylinking™ Network Tap Bypass Switch iyacwaningwa futhi yathuthukiswa ukuze isetshenziselwe ukuthunyelwa okuvumelana nezimo kwezinhlobo ezihlukahlukene zemishini yokuphepha esemgqeni kuyilapho inikeza ukwethembeka okuphezulu kwenethiwekhi.
Ngokusebenzisa i-Mylinking™ Smart Bypass Switch Tap:
- Abasebenzisi bangafaka/bakhiphe amathuluzi okuvikeleka kalula futhi ngeke kuthinte futhi kuphazamise inethiwekhi yamanje;
- I-Mylinking™ Network Tap Bypass Shintshela ngomsebenzi wokuthola impilo ehlakaniphile uye ekuqapheni ngesikhathi sangempela isimo esivamile sokusebenza samadivayisi okuphepha asemgqeni. Uma amadivaysi okuphepha asemgqeni esebenza ngokuhlukile, umsebenzi wokuvikela uzozidlula ngokuzenzakalelayo ukuze kugcinwe ukuxhumana kwenethiwekhi okuvamile;
- Ubuchwepheshe obukhethekile bokuvikela ithrafikhi bungasetshenziswa ukufaka imishini ethile yokuphepha yokuhlanza ithrafikhi, ubuchwepheshe bokubethela obususelwa kumishini yokucwaninga. Yenza ngokuphumelelayo ukuvikelwa kokufinyelela okusemgqeni kohlobo oluthile lwethrafikhi, wehlise ingcindezi yokubamba ukugeleza kwedivayisi esemgqeni;
- Ubuchwepheshe bokuvikela i-Traffic Balanced Load bungasetshenziselwa ukuthunyelwa okuyiqoqo kwamadivayisi okuphepha avikelekile asemgqeni ukuze kuhlangatshezwane nokuvikeleka okusemgqeni ezindaweni ezinomkhawulokudonsa ophezulu.
I-Network Tap Bypass Shintsha Izici Ezithuthukile Nobuchwepheshe
I-Mylinking™ “SpecFlow” Protection Mode kanye ne-“FullLink” Protection Mode
I-Mylinking™ Fast Bypass Switching Protection
I-Mylinking™ “LinkSafeSwitch”
I-Mylinking™ “WebService” I-Dynamic Strategy Forwarding/Idaba
Ukutholwa komlayezo we-Mylinking™ Intelligent Heartbeat
Imilayezo ye-Mylinking™ Echaza Ukushaya Kwenhliziyo(Amaphakethe Okushaya Kwenhliziyo)
I-Mylinking™ Multi-link Load Balancing
I-Mylinking™ Intelligent Traffic Distribution
I-Mylinking™ Dynamic Load Balancing
I-Mylinking™ Remote Management Technology(HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Isici)
I-Network Tap Bypass Switch Optional Configuration Guide
BYPASS ModuleIsikhala Semodyuli Yembobo yokuvikela:
Lesi sikhala singafakwa kumojuli yembobo yokuvikela ye-BYPASS enenombolo ehlukile yesivinini/yembobo. Ngokushintsha izinhlobo ezahlukene zamamojula, ingakwazi ukusekela ukuvikelwa kwe-BYPASS kwezidingo eziningi zezixhumanisi ze-10G/40G/100G.
QAPHELA ImojuliI-Port Module Slot;
Lesi sikhala singafakwa imojuli ye-MONITOR enezivinini/izimbobo ezihlukene. Ingakwazi ukusekela izixhumanisi eziningi ze-10G/40G/100G zokusetshenziswa kwedivayisi yokuqapha elandelanayo ngokushintsha amamojula ahlukene.
Imithetho Yokukhetha Imojuli
Ngokusekelwe kuzixhumanisi ezihlukene ezisetshenzisiwe kanye nezidingo zokuqapha zokuphakelwa kwemishini, ungakhetha kalula ukucushwa kwamamojula ahlukene ukuze uhlangabezane nesicelo sakho sangempela sendawo; sicela ulandele le mithetho elandelayo ngesikhathi sokukhetha imojuli yakho:
1. Izingxenye ze-chassis ziyisibopho futhi kufanele ukhethe izingxenye ze-chassis ngaphambi kokukhetha noma yimaphi amanye amamojula. Ngesikhathi esifanayo, sicela ukhethe izindlela ezihlukene zokuphakelwa kwamandla (AC/DC) ngokwezidingo zakho.
2. Lonke idivayisi isekela izikhala zemojuli ye-BYPASS ezingafika kwezi-2 kanye ne-slot yemojuli ye-MONITOR engu-1; awukwazi ukukhetha ngaphezu kwenani lezikhala ozozilungiselela. Ngokusekelwe ekuhlanganisweni kwenombolo yezikhala kanye nemodeli yemojuli, idivayisi ingasekela ukuvikelwa kwezixhumanisi ezine ze-10GE; noma ingakwazi ukusekela izixhumanisi ezine ze-40GE; noma ingakwazi ukusekela isixhumanisi esisodwa se-100GE.
3. Imodeli yemojuli "BYP-MOD-L1CG" ingafakwa kuphela ku-SLOT1 ukuze isebenze kahle.
4. Uhlobo lwemojula "BYP-MOD-XXX" lungafakwa kuphela ku-slot yemojuli ye-BYPASS; uhlobo lwemojuli "MON-MOD-XXX" lungafakwa kuphela kumojuli ye-MONITOR slot ukuze isebenze okuvamile.
Imodeli Yomkhiqizo | Amapharamitha omsebenzi |
I-Chassis(Umsingathi) | |
I-ML-BYPASS-M100 | I-rackmount ye-1U ejwayelekile engu-19-intshi; ukusetshenziswa kwamandla okuphezulu 250W; i-modular BYPASS umvikeli ophethe; 2 BYPASS module Slots; I-slot yemojula engu-1 QAPHELA; I-AC ne-DC ngokuzithandela; |
I-BYPASS MODULE | |
I-BYP-MOD-L2XG(LM/SM) | Isekela ukuvikelwa kwe-serial ye-2-way 10GE, i-interface ye-4 * 10GE, isixhumi se-LC; i-transceiver optical eyakhelwe ngaphakathi; isixhumanisi esibonakalayo esisodwa/imodi eningi yokuzikhethela, isekela i-10GBASE-SR/ LR; |
I-BYP-MOD-L2QXG(LM/SM) | Isekela ukuvikelwa kwe-serial ye-2-way 40GE, i-interface ye-4 * 40GE, isixhumi se-LC; i-transceiver optical eyakhelwe ngaphakathi; isixhumanisi se-optical single/multimode ozikhethela sona, sisekela i-40GBASE-SR4/ LR4; |
I-BYP-MOD-L1CG (LM/SM) | Isekela ukuvikelwa kwe-serial kwesiteshi esingu-1 se-100GE, isikhombimsebenzisi esingu-2 * 100GE, isixhumi se-LC; i-transceiver optical eyakhelwe ngaphakathi; isixhumanisi sokubona i-multimode eyodwa ngokuzikhethela, isekela i-100GBASE-SR4/LR4; |
QAPHELA MODULE | |
I-MON-MOD-L16XG | I-16 * 10GE SFP + module yokuqapha imbobo; ayikho imojula ye-transceiver ebonakalayo; |
I-MON-MOD-L8XG | I-8*10GE SFP+ imojuli yembobo yokuqapha; ayikho imojula ye-transceiver ebonakalayo; |
I-MON-MOD-L2CG | I-2 * 100GE QSFP28 module yokuqapha imbobo; ayikho imojula ye-transceiver ebonakalayo; |
I-MON-MOD-L8QXG | 8* 40GE QSFP+ module yokuqapha port; ayikho imojula ye-transceiver ebonakalayo; |
I-Network TAP Bypass Switch Specifications
Indlela Yomkhiqizo | I-ML-BYPASS-M100 I-Inline Network Tap Bypass Switch | |
Uhlobo lwesixhumi esibonakalayo | Isixhumi esibonakalayo se-MGT | 1*10/100/1000BASE-T Isixhumi esibonakalayo sokuphathwa kwe-Adaptive; Sekela ukuphathwa kwe-HTTP/IP okukude |
I-Module Slot | 2 * BYPASS module slot; 1 * MONITOR module slot; | |
Izixhumanisi ezisekela ubukhulu | Ukusekelwa kwedivayisi okuphezulu kwezixhumanisi ezingu-4*10GE noma izixhumanisi ezingu-4*40GE noma izixhumanisi ezingu-1*100GE | |
Ukuqapha | Idivayisi isekela amachweba okuqapha aphezulu angu-16*10GE noma amachweba okuqapha angu-8*40GE noma amachweba okuqapha angu-2*100GE; | |
Umsebenzi | Ikhono eligcwele lokucubungula i-duplex | 640Gbps |
Ngokusekelwe ku-IP/protocol/port ama-tuples amahlanu akhethekile wokuvikela ukugeleza kwethrafikhi | Isekelwe | |
Ukuvikelwa kwe-Cascade okusekelwe kuthrafikhi egcwele | Isekelwe | |
Ukulinganisa imithwalo eminingi | Isekelwe | |
Umsebenzi wokuthola ukushaya kwenhliziyo ngokwezifiso | Isekelwe | |
Sekela ukuzimela kwephakheji ye-Ethernet | Isekelwe | |
UKUSHINTSHWA KWE-BYPASS | Isekelwe | |
I-BYPASS Shintsha ngaphandle kwe-flash | Isekelwe | |
I-CONSOLE MGT | Isekelwe | |
IP/WEB MGT | Isekelwe | |
I-SNMP V1/V2C MGT | Isekelwe | |
I-TELNET/SSH MGT | Isekelwe | |
Iphrothokholi ye-SYSLOG | Isekelwe | |
Ukugunyazwa komsebenzisi | Ngokusekelwe ekugunyazweni kwephasiwedi/AAA/TACACS+ | |
Ezogesi | I-voltage yokuhlinzeka elinganiselwe | AC-220V/DC-48V【Ongakukhetha】 |
Isilinganiso samandla obuningi | 50HZ | |
Okokufaka okulinganiselwe okwamanje | I-AC-3A / DC-10A | |
Amandla Alinganiselwe | 100W | |
Imvelo | Izinga Lokushisa Lokusebenza | 0-50℃ |
Izinga lokushisa lesitoreji | -20-70℃ | |
Umswakama osebenzayo | 10% -95%, Akukho ukufingqa | |
Ukucushwa komsebenzisi | Ukucushwa kwekhonsoli | RS232 interface,115200,8,N,1 |
Ingaphandle kwe-MGT ye-band interface | 1*10/100/1000M Ethernet interface | |
Ukugunyazwa kwephasiwedi | Isekelwe | |
I-Chassis Height | Isikhala se-Chassis (U) | 1U 19 intshi, 485mm*44.5mm*350mm |
I-Network TAP Bypass Switch Application(njengokulandelayo)
5.1 Ingozi Yezisetshenziswa Zokuvikeleka Ezixhumene Nelayini (IPS/FW)
Okulandelayo i-IPS ejwayelekile (I-Intrusion Prevention System), imodi yokukhipha ye-FW (Firewall), i-IPS/FW isetshenziswa njengemishini yenethiwekhi esemgqeni (njengamarutha, amaswishi, njll.) phakathi kwethrafikhi ngokusebenzisa amasheke okuphepha, ngokusho inqubomgomo yokuphepha ehambisanayo yokunquma ukukhululwa noma ukuvimba ithrafikhi ehambisanayo, ukuze kuzuzwe umphumela wokuvikela ukuvikela.
Ngasikhathi sinye, singakwazi ukubona i-IPS(Intrusion Prevention System)/FW(Firewall) njengokusatshalaliswa okungaphakathi kwemishini, evamise ukuthunyelwa endaweni ebalulekile yenethiwekhi yebhizinisi ukuze kusetshenziswe ukuphepha okungaphakathi komugqa, ukuthembeka kwemishini yayo exhunyiwe kuthinta ngqo. ukutholakala kwenethiwekhi yebhizinisi jikelele. Uma idivayisi yokuphepha esemgqeni igcwele ngokweqile, ukuphahlazeka, izibuyekezo zesofthiwe, izibuyekezo zenqubomgomo, njll., konke ukutholakala kwenethiwekhi yebhizinisi kuzothinteka kakhulu. Kuleli qophelo, thina kuphela ngokusikwa kwenethiwekhi, i-bypass jumper ebonakalayo ingenza inethiwekhi ukuthi ibuyiselwe, kodwa ithinta kakhulu ukwethembeka kwenethiwekhi. I-IPS(Intrusion Prevention System)/FW(Firewall) namanye amadivaysi asemgqeni ngakolunye uhlangothi athuthukisa ukuthunyelwa kokuphepha kwenethiwekhi yebhizinisi, ngakolunye uhlangothi futhi kunciphisa ukuthembeka kwamanethiwekhi ebhizinisi, okwandisa ubungozi benethiwekhi ayitholakali.
5.2 I-Inline Link Series Ukuvikelwa Kwezisetshenziswa
I-Mylinking™ " I-Bypass Switch " isetshenziswe njengokusemgqeni phakathi kwamadivayisi enethiwekhi (amarutha, amaswishi, njll.), futhi ukugeleza kwedatha phakathi kwamadivayisi enethiwekhi akusaholeli ngokuqondile ku-IPS(Intrusion Prevention System) / FW(Firewall), " Bypass Switch " kuya ku-IPS / FW, lapho i-IPS / FW ngenxa yokugcwala, ukuphahlazeka, izibuyekezo zesofthiwe, ukubuyekezwa kwenqubomgomo nezinye izimo zokwehluleka, "I-Bypass Switch" ngokuhlakanipha ukutholwa komlayezo wokushaya kwenhliziyo Umsebenzi wokutholwa ngesikhathi, futhi ngaleyo ndlela weqe idivayisi enephutha, ngaphandle kokuphazamisa isisekelo senethiwekhi, imishini yenethiwekhi esheshayo exhunywe ngokuqondile ukuvikela inethiwekhi evamile yokuxhumana; lapho i-IPS / FW alulame ukwehluleka, kodwa futhi ngokusebenzisa ezihlakaniphile Heartbeat Packets Ukutholwa kokutholwa ngesikhathi umsebenzi, isixhumanisi sokuqala ukubuyisela ukuphepha amasheke ezokuphepha kwenethiwekhi yebhizinisi.
I-Mylinking™ "Bypass Switch" inomsebenzi onamandla ohlakaniphile wokutholwa komlayezo we-Heartbeat, umsebenzisi angakwazi ukwenza ngokwezifiso isikhawu sokushaya kwenhliziyo kanye nenani eliphakeme lokuzama futhi, ngomlayezo ongokwezifiso wokushaya kwenhliziyo ku-IPS / FW wokuhlolwa kwezempilo, njengokuthumela umlayezo wokuhlola ukushaya kwenhliziyo. ethekwini elikhuphuka nomfula / elingezansi lomfula le-IPS / FW, bese uthola ethekwini elikhuphukayo / elingezansi lomfula le-IPS / FW, bese wahlulela ukuthi i-IPS / FW ukusebenza ngokujwayelekile ngokuthumela nokwamukela umlayezo wokushaya kwenhliziyo.
5.3 “SpecFlow” Policy Flow Inline Traction Series Protection
Uma idivayisi yenethiwekhi yezokuphepha idinga kuphela ukubhekana nethrafikhi ethile ekuvikelweni kochungechunge, ngokusebenzisa umsebenzi we-Mylinking™ "Network Tap Bypass Switch" wokucubungula ngakunye, ngesu lokuhlola ithrafikhi ukuze kuxhunywe idivayisi yezokuphepha " Okhathazekile "i-traffic ithunyelwa emuva ngqo kusixhumanisi senethiwekhi, futhi" isigaba sethrafikhi esithintekayo "sidonsela kudivayisi yokuphepha esemgqeni ukuze wenze ukuhlola kokuphepha. Lokhu ngeke nje kugcine ukusetshenziswa okuvamile komsebenzi wokuthola ukuphepha kwedivayisi yokuphepha, kodwa futhi kunciphise ukugeleza okungasebenzi kahle kwemishini yokuphepha ukubhekana nokucindezela; ngesikhathi esifanayo, "I-Network Tap Bypass Switch" ingathola isimo sokusebenza sedivayisi yokuphepha ngesikhathi sangempela. Idivayisi yokuphepha isebenza ngendlela engavamile idlula ithrafikhi yedatha ngokuqondile ukuze igweme ukuphazamiseka kwesevisi yenethiwekhi.
I-Mylinking™ Inline Traffic Bypass Tap ingakwazi ukuhlonza ithrafikhi ngokusekelwe kusihlonzi sesihloko sesendlalelo se-L2-L4, esifana nethegi ye-VLAN, ikheli le-MAC lomthombo, ikheli le-IP lomthombo, uhlobo lwephakethe le-IP, imbobo yephrothokholi yesendlalelo sezokuthutha, umaka wokhiye wesihloko sephrothokholi, kanye njalo njalo. Izinhlobonhlobo zezimo ezifanayo inhlanganisela evumelana nezimo zingachazwa ngendlela eguquguqukayo ukuze kuchazwe izinhlobo ezithile zethrafikhi ezithakaselwayo kudivayisi ethile yokuvikela futhi zingasetshenziswa kabanzi ukuze kusetshenziswe imishini yokuhlola ukuphepha okukhethekile (i-RDP, i-SSH, ukuhlolwa kwesizindalwazi, njll.) .
5.4 Layisha ibhalansi yochungechunge lokuvikela
I-Mylinking™ "Network Tap Bypass Switch" isetshenziswa njenge-inline phakathi kwamadivayisi enethiwekhi (amarutha, amaswishi, njll.). Lapho ukusebenza kokucubungula okukodwa kwe-IPS/FW kunganele ukubhekana nokugcwala okuphezulu kwesixhumanisi senethiwekhi, Umsebenzi wokulinganisa umthwalo wethrafikhi womvikeli, "ukuhlanganisa" kwe-IPS / FW cluster processing network network traffic eminingi, kunganciphisa ngempumelelo i-IPS/FW eyodwa. ukucindezela kokucubungula, thuthukisa ukusebenza kokucubungula kukonke ukuze kuhlangatshezwane nomkhawulokudonsa ophezulu wesimangalo sendawo yokuphakela.
I-Mylinking™ "Network Tap Bypass Switch" inomsebenzi onamandla wokulinganisa umthwalo, ngokuya ngethegi ye-VLAN yohlaka, imininingwane ye-MAC, imininingwane ye-IP, inombolo yechweba, iphrothokholi kanye nolunye ulwazi lokusatshalaliswa kokulinganisa komthwalo we-Hash ukuze kuqinisekiswe ukuthi i-IPS / FW ngayinye. ithole ukugeleza kwedatha Ubuqotho beseshini.
5.5 I-Multi-series Inline Equipment Flow Traction Protection (Shintsha Uxhumano Lwe-Serial lube Ukuxhumana Okufanayo)
Kwezinye izixhumanisi ezibalulekile (njengezitolo ze-inthanethi, isixhumanisi sokushintshana kwendawo yeseva) indawo ivamise ukuba ngenxa yezidingo zezici zokuphepha kanye nokuthunyelwa kwemishini eminingi yokuhlola ukuphepha okusemgqeni (njenge-firewall(FW), okokusebenza kokuhlasela kwe-DDOS, I-WEB Application Firewall(WAF), I-Intrusion Prevention System(IPS), njll.), okokusebenza kokuthola ukuphepha okuningi ngesikhathi esisodwa ochungechungeni kusixhumanisi ukukhulisa isixhumanisi sephuzu elilodwa lokwehluleka, ukunciphisa ukuthembeka kukonke kwe inethiwekhi. Futhi kulokhu okushiwo ngenhla kwemishini yokuvikela ukuthunyelwa ku-inthanethi, ukuthuthukiswa kwemishini, ukushintshwa kwemishini nokunye ukusebenza, kuzobangela inethiwekhi ukuphazamiseka kwesevisi isikhathi eside kanye nesenzo esikhulu sokusika iphrojekthi ukuze kuqedelwe ukuqaliswa ngempumelelo kwamaphrojekthi anjalo.
Ngokusebenzisa "I-Network Tap Bypass Switch" ngendlela ebumbene, imodi yokuphakelwa yamadivayisi amaningi okuvikela axhunywe ochungechungeni kusixhumanisi esifanayo ingashintshwa isuke kokuthi "imodi yokuhlanganisa ngokomzimba" iye kokuthi "ukuhlangana ngokomzimba, imodi yokuhlanganisa okunengqondo" isixhumanisi sephuzu elilodwa lokwehluleka ukuthuthukisa ukuthembeka kwesixhumanisi, kuyilapho "iswishi yokudlula" ekugelezeni kwesixhumanisi ekudonseni kokufunwa, ukufeza ukugeleza okufanayo ngemodi yokuphepha yoqobo. ukucubungula umphumela.
Idivayisi yokuvikela engaphezu kweyodwa ngesikhathi esifanayo njengomdwebo wokuphakelwa okukulayini:
I-Mylinking™ Network TAP Bypass Switch Deployment Diagram:
5.6 Ngokusekelwe Kusu Elinamandla Lokuvikelwa Kokuthola Ukuvikeleka Kokuhamba Kwethrafikhi
"I-Network Tap Bypass Switch" Esinye isimo esithuthukisiwe sohlelo lokusebenza sisekelwe isu eliguquguqukayo lezinhlelo zokusebenza zokuvikela ukutholakala kokuphepha kokudonsa kwethrafikhi, ukusetshenziswa kwendlela njengoba kuboniswe ngezansi:
Thatha "Ukuvikeleka kokuhlasela nokutholwa kwe-Anti-DDoS" okokusebenza kokuhlola kokuphepha, isibonelo, ngokusetshenziswa kwe-"Network Tap Bypass Switch" kanye nezinto zokuvikela ezimelene ne-DDOS bese uxhumeke "Ekushintsheni Kwenethiwekhi Tap Bypass", " Kumvikeli we-traction "ejwayelekile" enanini eligcwele lokudlulisa isivinini se-traffic wire-speed ngesikhathi esifanayo isibuko esigelezayo esiphumayo "kudivayisi yokuvikela ukuhlasela kwe-DDOS", uma kutholwa iseva ye-IP (noma i-IP ingxenye yenethiwekhi) ngemva kokuhlasela," idivayisi yokuvikela ukuhlasela kwe-DDOS " izokhiqiza imithetho eqondiwe yokumatanisa ukugeleza kwethrafikhi futhi iyithumele kokuthi "I-Network Tap Bypass Switch" ngohlelo olusebenzayo lokulethwa kwenqubomgomo. I-"Network Tap Bypass Switch" ingabuyekeza "i-traffic traction dynamic" ngemva kokuthola imithetho eguquguqukayo yenqubomgomo Iqoqo Lomthetho "futhi ngokushesha" umthetho ushaye ithrafikhi yeseva yokuhlasela "ukudonsela" ekuvikelweni kokuhlasela kwe-anti-DDoS nokutholwa "kokusebenza ukuze kucutshungulwe, ukuze isebenze kahle ngemva kokugeleza kokuhlasela bese iphinda ijovwe kunethiwekhi.
Uhlelo lohlelo lokusebenza olususelwe "ku-Network Tap Bypass Switch" kulula ukulusebenzisa kunomjovo womzila we-BGP ovamile noma esinye isikimu sokudonsa kwethrafikhi, futhi indawo ezungezile ayincikile kunethiwekhi futhi ukwethembeka kuphezulu.
"I-Network Tap Bypass Switch" inezici ezilandelayo zokusekela ukuvikeleka kokutholwa kwenqubomgomo enamandla:
1, "I-Network Tap Bypass Switch" ukuze unikeze ngaphandle kwemithetho esekelwe kusixhumi esibonakalayo se-WEBSERIVCE, ukuhlanganiswa okulula namadivayisi okuphepha enkampani yangaphandle.
2, " I-BNetwork Tap Bypass Switch " esekelwe ku-hardware ehlanzekile ye-ASIC chip edlulisela phambili amaphakethe esivinini sentambo angu-10Gbps ngaphandle kokuvimbela ukudluliselwa kweswishi, kanye "nelabhulali yomthetho oshukumisayo wethrafikhi" kungakhathaliseki inombolo.
3, "I-Network Tap Bypass Switch" umsebenzi owakhelwe ngaphakathi we-BYPASS wobungcweti, noma ngabe isivikeli ngokwaso singaphumeleli, singaphinda sidlule isixhumanisi sokuqala se-serial ngokushesha, asithinti isixhumanisi sokuqala sokuxhumana okuvamile.