Mylinking™ Network Tap Bypass Switch ML-BYPASS-200

1-Zowunikira mwachidule

Pogwiritsa ntchito Mylinking™ Smart Bypass Switch:

• Ogwiritsa ntchito amatha kuyika/kuchotsa zida zachitetezo mosavuta ndipo sadzakhudza netiweki yomwe ilipo komanso kusokoneza;
• Mylinking™ Network Tap Bypass Switch yokhala ndi ntchito yozindikira thanzi lanzeru kuti iwonetse momwe chipangizo chachitetezo cha serial chikugwira ntchito nthawi yeniyeni, chipangizo chachitetezo cha serial chikagwira ntchito mosiyana, chitetezocho chidzadutsa chokha kuti chipitirize kulumikizana kwabwinobwino kwa netiweki;
• Ukadaulo wosankha woteteza magalimoto ungagwiritsidwe ntchito poyika zida zinazake zotsukira magalimoto, ukadaulo wobisa zinthu kutengera zida zowunikira. Kuchita bwino chitetezo cholowera chamtundu winawake wa magalimoto, kutsitsa kuthamanga kwa kayendedwe ka madzi pa chipangizocho;
• Ukadaulo wa Load Balanced Traffic Protection ungagwiritsidwe ntchito poyika zida zotetezeka za serial pamodzi kuti zikwaniritse kufunikira kwa chitetezo cha serial m'malo okhala ndi bandwidth yayikulu.

Ndi chitukuko cha intaneti mwachangu, chiwopsezo cha chitetezo cha chidziwitso cha netiweki chikukulirakulira, kotero mapulogalamu osiyanasiyana oteteza chitetezo cha chidziwitso akugwiritsidwa ntchito kwambiri. Kaya ndi zida zachikhalidwe zowongolera mwayi (firewall) kapena mtundu watsopano wa njira zodzitetezera zapamwamba monga njira yopewera kulowerera (IPS), nsanja yoyang'anira zoopsa (UTM), njira yotsutsa kukana (Anti-DDoS), Anti-span Gateway, Unified DPI Traffic Identification and Control System, ndi zida zambiri zachitetezo zimayikidwa motsatizana mu ma key nodes a netiweki, kukhazikitsa mfundo yofananira yachitetezo cha data kuti izindikire ndikuthana ndi magalimoto ovomerezeka / osaloledwa. Komabe, nthawi yomweyo, netiweki ya kompyuta idzapangitsa kuchedwa kwakukulu kwa netiweki kapena kusokonezeka kwa netiweki ngati kulephera, kukonza, kukweza, kusintha zida ndi zina zotero pamalo ogwiritsira ntchito netiweki yopangira yodalirika kwambiri, ogwiritsa ntchito sangapirire.

2-Network Tap Bypass Switch Zinthu Zapamwamba ndi Ukadaulo

Njira Yotetezera ya Mylinking™ “SpecFlow” ndi Ukadaulo wa Njira Yotetezera ya “FullLink”
Ukadaulo Woteteza Kusinthasintha kwa Mylinking™ Mwachangu
Ukadaulo wa Mylinking™ “LinkSafeSwitch”
Ukadaulo Wosintha/Kutumiza Nkhani wa Mylinking™ “WebService”
Ukadaulo Wozindikira Mauthenga a Mtima wa Mylinking™ Wanzeru
Ukadaulo wa Mauthenga Omveka Bwino a Mylinking™
Ukadaulo Wolinganiza Mitolo wa Mylinking™ wa Maulalo Ambiri
Ukadaulo Wanzeru Wogawa Magalimoto ku Mylinking™
Ukadaulo Wolinganiza Zinthu Mwamphamvu wa Mylinking™
Ukadaulo Woyang'anira Kutali wa Mylinking™ (HTTP/WEB, TELNET/SSH, “EasyConfig/AdvanceConfig” Characteristic)

Buku Lotsogolera Kusintha kwa Ma Switch a 3-Network Tap Bypass

KULAMBAMalo Otetezera Chipata cha Chitetezo:
Malo awa akhoza kuikidwa mu gawo la chitetezo cha BYPASS ndi nambala yosiyana ya liwiro/doko. Mwa kusintha mitundu yosiyanasiyana ya ma module, amatha kuthandizira chitetezo cha BYPASS cha maulalo angapo a 10G/40G/100G.

MONITORMalo Olowera a Port Module;
Malo awa akhoza kuikidwa mu gawo la doko la MONITOR ndi liwiro/madoko osiyanasiyana. Akhoza kuthandizira kuyika zida zingapo zowunikira za 10G/40G/100G pa intaneti mwa kusintha mitundu yosiyanasiyana.

Malamulo Osankha Ma Module
Kutengera ndi maulalo osiyanasiyana ogwiritsidwa ntchito ndi zofunikira zowunikira zida zoyendetsera, mutha kusankha mosavuta ma module osiyanasiyana kuti akwaniritse zosowa zanu zenizeni; chonde tsatirani malamulo awa posankha:
1. Zigawo za chassis ndizofunikira ndipo muyenera kusankha zigawo za chassis musanasankhe ma module ena aliwonse. Nthawi yomweyo, chonde sankhani njira zosiyanasiyana zamagetsi (AC/DC) malinga ndi zosowa zanu.
2. Makina onse amathandizira mpaka mipata iwiri ya BYPASS module ndi malo amodzi a MONITOR module; simungasankhe mipata yoposa kuchuluka kwa mipata yoti muyike. Kutengera kuphatikiza kwa chiwerengero cha mipata ndi chitsanzo cha module, chipangizochi chimatha kuthandiza mpaka chitetezo cha ulalo wa 10GE; kapena chimatha kuthandiza mpaka maulalo anayi a 40GE; kapena chimatha kuthandiza mpaka ulalo umodzi wa 100GE.
3. Chitsanzo cha module "BYP-MOD-L1CG" chingaikidwe mu SLOT1 kuti chigwire ntchito bwino.
4. Mtundu wa module "BYP-MOD-XXX" ukhoza kuyikidwa mu kagawo ka module ka BYPASS; mtundu wa module "MON-MOD-XXX" ukhoza kuyikidwa mu kagawo ka module ka MONITOR kuti ugwire ntchito bwino.

Mafotokozedwe a Switch ya 4-Network TAP Bypass

Kugwiritsa Ntchito 5-Network TAP Bypass Switch (monga motsatira)

Zotsatirazi ndi njira yodziwika bwino ya IPS (Intrusion Prevention System), njira yotumizira FW (Firewall), IPS / FW imayikidwa motsatizana ku zida za netiweki (ma router, ma switch, ndi zina zotero) pakati pa magalimoto kudzera mu kukhazikitsa macheke achitetezo, malinga ndi mfundo zofananira zachitetezo kuti adziwe kutulutsa kapena kuletsa magalimoto ofananira, kuti akwaniritse zotsatira za chitetezo.

Nthawi yomweyo, tikhoza kuona IPS / FW ngati njira yolumikizira zida, zomwe nthawi zambiri zimayikidwa pamalo ofunikira a netiweki ya bizinesi kuti zigwiritse ntchito chitetezo cha serial, kudalirika kwa zida zake zolumikizidwa kumakhudza mwachindunji kupezeka kwa netiweki yonse ya bizinesi. Zipangizo za serial zikadzaza kwambiri, kugwa, zosintha mapulogalamu, zosintha mfundo, ndi zina zotero, kupezeka kwa netiweki yonse ya bizinesi kudzakhudzidwa kwambiri. Pakadali pano, kudzera mu netiweki yodulidwa yokha, jumper yodutsa thupi imatha kubwezeretsanso netiweki, zomwe zimakhudza kwambiri kudalirika kwa netiweki. IPS / FW ndi zida zina za serial kumbali imodzi zimathandizira kufalikira kwa chitetezo cha netiweki ya bizinesi, kumbali inanso zimachepetsanso kudalirika kwa netiweki yamakampani, zomwe zimawonjezera chiopsezo cha netiweki kusakhalapo.

5.2 Chitetezo cha Zida Zolumikizirana Paintaneti

Mylinking™ "Bypass Switch" imayikidwa motsatizana pakati pa zida za netiweki (ma rauta, ma switch, ndi zina zotero), ndipo kuyenda kwa deta pakati pa zida za netiweki sikumatsogolera mwachindunji ku IPS / FW, "Bypass Switch" kupita ku IPS / FW, pamene IPS / FW chifukwa cha kuchuluka kwa zinthu, kuwonongeka, zosintha za mapulogalamu, zosintha za mfundo ndi zina zomwe zalephera, "Bypass Switch" kudzera mu kuzindikira kwa uthenga wamtima wanzeru Ntchito yopezera uthenga wamtima wanzeru, motero kudumpha chipangizo cholakwika, popanda kusokoneza maziko a netiweki, zida zamaneti zachangu zolumikizidwa mwachindunji kuti ziteteze netiweki yolumikizirana yachizolowezi; pamene IPS / FW ikulephera kuchira, komanso kudzera mu mapaketi anzeru amtima wamtima. Kuzindikira kuzindikira kwanthawi yake kwa ntchitoyo, ulalo woyambirira wobwezeretsa chitetezo cha macheke achitetezo cha netiweki yamakampani.

Mylinking™ "Bypass Switch" ili ndi ntchito yanzeru yozindikira uthenga wa kugunda kwa mtima, wogwiritsa ntchito amatha kusintha nthawi ya kugunda kwa mtima ndi kuchuluka kwa mayeso obwerezabwereza, kudzera mu uthenga wokhazikika wa kugunda kwa mtima pa IPS / FW kuti ayesere thanzi, monga kutumiza uthenga wofufuza kugunda kwa mtima ku doko la pamwamba / pansi la IPS / FW, kenako kulandira kuchokera ku doko la pamwamba / pansi la IPS / FW, ndikuweruza ngati IPS / FW ikugwira ntchito bwino potumiza ndikulandira uthenga wa kugunda kwa mtima.

5.3 Chitetezo cha Ndondomeko ya "SpecFlow" Yoyenda Panjira Yoyenda Pamodzi

Pamene chipangizo cha netiweki yachitetezo chimangofunika kuthana ndi chitetezo cha magalimoto enaake, kudzera mu ntchito ya Mylinking™ "Bypass Switch" yowunikira magalimoto pa ntchito iliyonse, kudzera mu njira yowunikira magalimoto kuti mulumikize chipangizo chachitetezo "Concerned" magalimoto amatumizidwa mwachindunji ku ulalo wa netiweki, ndipo gawo la "traffic" lomwe likukhudzidwa ndi chipangizo chachitetezo limakhala lolowera ku chipangizo chachitetezo chomwe chili pamzere kuti chichite macheke achitetezo. Izi sizingosunga kugwiritsa ntchito bwino ntchito yozindikira chitetezo cha chipangizo chachitetezo, komanso kuchepetsa kuyenda kosagwira ntchito kwa zida zachitetezo kuti zithane ndi kuthamanga; nthawi yomweyo, "Bypass Switch" imatha kuzindikira momwe chipangizo chachitetezo chikugwira ntchito nthawi yeniyeni. Chipangizo chachitetezo chimagwira ntchito molakwika modutsa kuchuluka kwa deta mwachindunji kuti chipewe kusokoneza ntchito ya netiweki.

Mylinking™ Traffic Bypass Protector imatha kuzindikira kuchuluka kwa magalimoto kutengera chizindikiro cha mutu wa L2-L4, monga chizindikiro cha VLAN, adilesi ya MAC yochokera/yopita, adilesi ya IP yochokera, mtundu wa paketi ya IP, doko la protocol yamtundu wa transport, chizindikiro cha key header ya protocol, ndi zina zotero. Mitundu yosiyanasiyana yofananira kuphatikiza kosinthasintha kumatha kufotokozedwa mosavuta kuti kufotokoze mitundu yeniyeni ya magalimoto yomwe ili yofunikira pa chipangizo china chachitetezo ndipo ingagwiritsidwe ntchito kwambiri poyika zida zapadera zowunikira chitetezo (RDP, SSH, database auditing, ndi zina zotero).

5.4 Chitetezo cha Mndandanda Woyenera Kunyamula

Mylinking™ "Bypass Switch" imayikidwa motsatizana pakati pa zida za netiweki (ma router, ma switch, ndi zina zotero). Ngati magwiridwe antchito amodzi a IPS / FW processing processing sangakwanire kuthana ndi kuchuluka kwa magalimoto olumikizidwa ndi netiweki, ntchito yowongolera kuchuluka kwa magalimoto yoteteza, "kulumikizana" kwa magalimoto ambiri olumikizidwa ndi netiweki yolumikizira magulu a IPS / FW, imatha kuchepetsa kuthamanga kwa processing imodzi ya IPS / FW, ndikuwonjezera magwiridwe antchito onse ogwirira ntchito kuti akwaniritse kuchuluka kwa bandwidth komwe kulipo.

Mylinking™ "Bypass Switch" ili ndi ntchito yamphamvu yolinganiza katundu, malinga ndi chilembo cha VLAN cha chimango, zambiri za MAC, zambiri za IP, nambala ya doko, protocol ndi zina zambiri pa kugawa kwa Hash load balance kwa magalimoto kuti zitsimikizire kuti IPS / FW iliyonse yalandira umphumphu wa Session ya data flow.

5.5 Chitetezo cha Kuyenda kwa Zida Zozungulira Mzere wa Zigawo Zambiri (Sinthani Kulumikizana kwa Seri kupita ku Kulumikizana Kofanana)
Mu maulalo ena ofunikira (monga malo olumikizira intaneti, ulalo wosinthira dera la seva), malo nthawi zambiri amakhala chifukwa cha zosowa za zida zachitetezo komanso kuyika zida zambiri zoyesera chitetezo (monga firewall, zida zotsutsana ndi DDOS, firewall ya WEB application, Zida zopewera kulowerera, ndi zina zotero), zida zambiri zodziwira chitetezo nthawi imodzi motsatizana pamzere womwe uli pa ulalo kuti ziwonjezere ulalo wa mfundo imodzi yolephera, kuchepetsa kudalirika konse kwa netiweki. Ndipo mu kuyika zida zachitetezo zomwe zatchulidwa pamwambapa pa intaneti, kukweza zida, kusintha zida ndi ntchito zina, zidzapangitsa netiweki kusokonekera kwa ntchito kwa nthawi yayitali komanso kuchepetsedwa kwakukulu kwa ntchito kuti mapulojekiti otere akwaniritsidwe bwino.

Mwa kugwiritsa ntchito "Bypass Switch" mwanjira yogwirizana, njira yotumizira zida zambiri zachitetezo zolumikizidwa motsatizana pa ulalo womwewo ingasinthidwe kuchoka pa "physical concatenation mode" kupita ku "physical concatenation, logical concatenation mode". Ulalo womwe uli pa ulalo wa mfundo imodzi yolephera kukonza kudalirika kwa ulalo, pomwe "bypass switch" yomwe ili pa ulalo ikuyenda pakufunika, kuti ikwaniritse njira yomweyo ndi njira yoyambirira yogwiritsira ntchito bwino.

Zipangizo zachitetezo zoposa chimodzi nthawi imodzi mu chithunzi cha kukhazikitsidwa kwa mndandanda:

Chithunzi cha Mylinking™ Network TAP Bypass Switch Deployment Deployment:

5.6 Kutengera Njira Yosinthika Yotetezera Kuzindikira Chitetezo cha Magalimoto
"Bypass Switch" Njira ina yotsogola yogwiritsira ntchito imachokera pa njira yosinthika yopezera chitetezo cha magalimoto, momwe njirayo imagwiritsidwira ntchito monga momwe tawonetsera pansipa:

Tengani zida zoyesera chitetezo za "Anti-DDoS attack protection and detection", mwachitsanzo, kudzera mu kuyika kwa "Bypass Switch" kenako zida zoteteza za anti-DDOS kenako zolumikizidwa ku "Bypass Switch", mu "Traction protector" yachizolowezi mpaka kuchuluka konse kwa liwiro la waya wa magalimoto panthawi yomweyo yotulutsa galasi loyenda kupita ku "anti-DDOS attack protection device", ikapezeka pa seva IP (kapena gawo la netiweki ya IP) pambuyo pa kuukira, chipangizo choteteza kuukira cha anti-DDOS "chipanga malamulo ofanana ndi kuyenda kwa magalimoto omwe akufunidwa ndikutumiza ku "Bypass Switch" kudzera mu mawonekedwe olumikizira mfundo zosinthika. "Bypass Switch" ikhoza kusintha "traffic traction dynamic" mutalandira malamulo osinthika a mfundo. Lamulo "ndipo nthawi yomweyo" lamulo limagunda zida zoteteza kuukira kwa seva ya attack traffic "traction to the" anti-DDoS attack protection and detection "zothandizira kukonza, kuti zigwire ntchito pambuyo pa kuukira kenako ndikubwezeretsanso mu netiweki.

Ndondomeko yogwiritsira ntchito pogwiritsa ntchito "Bypass Switch" ndi yosavuta kugwiritsa ntchito kuposa njira yachikhalidwe ya BGP yolowetsa njira kapena njira ina yolumikizira magalimoto, ndipo chilengedwe sichidalira kwambiri netiweki ndipo kudalirika kwake kumakhala kwakukulu.

"Bypass Switch" ili ndi makhalidwe awa othandizira chitetezo champhamvu chozindikira chitetezo:
1, "Bypass Switch" kuti ipereke kunja kwa malamulo kutengera mawonekedwe a WEBSERIVCE, kuphatikiza kosavuta ndi zida zachitetezo za chipani chachitatu.
2, "Bypass Switch" kutengera chipangizo cholumikizira cha ASIC chomwe chimatumiza ma 10Gbps pakiti ya liwiro la waya popanda kuletsa kutumiza ma switch, ndi "laibulale ya malamulo oyendetsera magalimoto" mosasamala kanthu za nambala.
3, "Bypass Switch" ntchito yomangidwa mkati mwaukadaulo wa BYPASS, ngakhale chitetezocho chikalephera, chingathenso kudutsa ulalo woyambirira nthawi yomweyo, sichikhudza ulalo woyambirira wa kulumikizana kwabwinobwino.