Click here to load reader
Upload
others
View
1
Download
0
Embed Size (px)
Citation preview
2019
20197
480
1.
2.1
3.
2018-202010
102.0
IT
AIS5
2,2734512731282605855/1711
3
60
2
330
3
2
1
2
1
2
3
4
5
1
31
1.
2.
3.
2
1.
2.
3.
1.1 1.1.1.1
Layer3ACL
2H3C2S7506L310G212layer310G
1.1.1.2
210Glayer22
IP
VLANVLAN
ACL
H3C S7502
1.1.1.3
layer2
VLAN
QoS
48S3600layer2
1.1.1.4
3KVM6KVMPDU20
1.1.1.5
1:10G1000M
21714310G
310G
4
1.1.1.6
1ACLACLACL
2 IP
3IPIPTCPSYN floodSmurfPing of DeathTeardropLandping floodUDP Flood
4URLURLURL
IPSURL
1.1.1.7
99.999%
1
2
1
Checkpoint FacilityRedundancy FacilityRedundancy Protocol
1
IT
2
3
4
5
NGFW4000-UF(TG-5130)8
1.1.1.8
1
2
64840G393SFP
22h3cS75602R2
2
2
64840G122SFP
21H3C7502
3
5
4483
54H3C800
4
2
4481
5
21
L248112
21H3c3600
6
1
7
100
100
8
1
3
6KVM1PDU201
9
1
1714310G
10
1
1.
1
1
2
1
3
1
4
1
5
2
8
6
1
1.2
1.2.1.1
8
14810/100/1000Base-T
264SFPSFP+1G/10G2;840G2
3:
3910KM
44
CLOS
IPS
3
Controlling Bridge,CBPort Extender,PE
N+1N3
7000Mpps
53Tbps
MAC//IP//VLAN
STPRSTPMSTP
IP
RIPOSPFv2IS-ISBGP BFD
VxLAN
VxLAN IPv4/IPv6VxLAN
VRRP
IEEE 802.1ae
QoS/
ACLACLACLVLANACL
DHCP
DHCP Relay AgentDHCP SNOOPINGDHCP OPTION 82
CLITelnetSSHConsole
SNMPv1/v2/v3
RMON
NTP
TFTPFTPHTTP
1.2.1.2
4
164SFPSFP+1G/10G2;8
40G2
2:
1210KM
CLOS
IPS
2
Controlling Bridge,CBPort Extender,PE
N+1N1
3800Mpps
28Tbps
MAC//IP//VLAN
STPRSTPMSTP
IP
RIPOSPFv2IS-ISBGP BFD
VxLAN
VxLAN IPv4/IPv6VxLAN
VRRP
IEEE 802.1ae
QoS/
ACLACLACLVLANACL
DHCP
DHCP Relay AgentDHCP SNOOPINGDHCP OPTION 82
CLITelnetSSHConsole
SNMPv1/v2/v3
RMON
NTP
TFTPFTPHTTP
1.2.1.3
1484SFPSFP+1G/10G110GE40GE
2:
310KM
/
,
250Mpps
500Gbps
MAC//IP//VLAN
STPRSTPMSTP
MAC
64K
IP
RIPOSPFv2IS-ISBGP
VRRP
QoS/
ACLACLACLVLANACL
DHCP
DHCP Relay AgentDHCP SNOOPINGDHCP OPTION 82
Vxlan
VxLANEVPN
10KV
CLITelnetSSHConsole
SNMPv1/v2/v3
RMON
NTP
TFTPFTPHTTP
1.2.1.4
1484SFPSFP+1G/10G110GE40GE
2:
110KM
/
,
250Mpps
500Gbps
MAC//IP//VLAN
STPRSTPMSTP
MAC
64K
IP
RIPOSPFv2IS-ISBGP
VRRP
QoS/
ACLACLACLVLANACL
DHCP
DHCP Relay AgentDHCP SNOOPINGDHCP OPTION 82
Vxlan
VxLANEVPN
10KV
CLITelnetSSHConsole
SNMPv1/v2/v3
RMON
NTP
TFTPFTPHTTP
1.2.1.5
1484SFPSFP+1G/10G
2:
210KM
,
130Mpps
300Gbps
MAC//IP//VLAN
STPRSTPMSTP
IP
RIPOSPFv2
VRRP
QoS/
ACLACLACLVLANACL
DHCP
DHCP Relay AgentDHCP SNOOPINGDHCP OPTION 82
10KV
SDN/OPENFLOW
OPENFLOW 1.3Openflow , Group table, Meter
CLITelnetSSHConsole
SNMPv1/v2/v3
RMON
NTP
TFTPFTPHTTP
1.2.1.6
100
15000
WindowsLinuxMS SQLOracleB/S
Widget
IPVxlanLLDP-MEDIRFMDCMDCIRFBridgeNDPCDPMSTPSTPLLDPDISMAN-PINGGIS
IPv6IPv6
TrapIPS
VLANVLANVLANVLANaccesstrunkhybridVLAN
VLANVLANVLANVLAN
/TopNBottomNXY
RESTSOAPSNMP
CMDB
1
2
1.2.1.7
B/S
4100M/1000M
IP>=512
IP
10000
CVECVE Compatible
SymantecTrendMicroMcAfee
IEMSNMozilla FirefoxYahoo MessengerMS OfficeVMwareP2P
(,,)
DNS
DNSDNS
SNMPSMB
TelnetPop3 Ftp Windows SMBSQL ServerMySQLOracleSybase
B
3
BANNERIP
HTMLWORDEXCELPDF
XMLHTTP
WSUS
ISCCC
,--westcoastlabsCheckmark,westcoastlabsCheckmarkCheckmark
1.2.1.8
1
1U(550w)
2
2
3
2*1T4*1T,8GCPU4
4
100500
5
100ip///
1
2
3
HAA
4
web
5
/
6
TOTP
andriodiosAPP
MIX
ADLDAPradiusISO8583
7
8
rdp
windows serverrdpwindows
9
remoteAPP
ALT+TAB
IP
URLURL
10
PIN+
oracleOCI_HOSTService_NameOCI_PORT
11
/
GPGZIP
web
12
:/
13
100%
OCR
2M15
14
sqlserversybaseoracle
sql,
sql/
15
TOP N
16
OEM
GB/T 20945-2013
2000
ISO90012008
17
18
1.2.1.9
1U2U
2*USB1*RJ452*GE14*GE4TB SATA,200
B/SSSLweb
40
1000EPS
SYSLOGSNMPTrapFTPODBCJDBCNetflowAgent
NSFOCUS()Venustech()Topsec()DBAPPSecurit()SANGFOR()Hillstone()360Dptech()ImpervaJuniper()F5Symantec()Deep Security()MaAfee()Fortinet()WindowsLinux/UnixCisco()HUAWEI()H3C()Apachenginx IISWebLogicVmwareKvmXenOpenStackHyper-VFusionSphereOracleMySQLPostgreSQLSQL ServerBind
KV
IP
()
FTP
6
/////
LOGO
IPIP
CPU
1.2.1.10
2U
4T
CPU1x8
32G
*2
RJ45*4
10Gbps
IP
2-7
IP
0Day
IPIP
DPDK6Gbps
HTTPSMTPIMAPPOP3,FTPTFTPTELNETDNSFTPTelnetQQP2P
1 HTTPHTTP
2 SMTPPOP3IMAP
3 DNSDNS
4 FTPTFTP
/IP/
HTTPS
ARPICMPDNSDDOScc
webshell
webSQLcms
IPIP
IP
TCPUDPIPICMP
webDNS
IPURL
ipmac
TOP N
CPU
IPIPURL
SYSLOGFTPKAFKA
WORDPDF
web
FTP
24
3C
1.2.1.11
1
WEB
IPSEC VPN3APT
2
13.5Gbps
3.9Gbps
IPS2.5Gbps
IPSECAES128+SHA1400Mbps
IPSEC VPN3000
340
FW&HTTP15
FW+APP&HTTP10
3
2U
1710/100/1000BASE-T8SFP434combo
4
ISP802.1qQinQ
//
GREIPSEC VPN
LACP11
IP/MAC
IPIP/MACIP/MAC
SNATSNATDNATNATNoNATSticky NATIP IP
MAP66InternetIPv6IPv6IPv6
DNS
DNSDNSDocting DNS Doctoring
5
IPv6
IPv4/IPv6
IPv6IPv6//
IPv6FTP\TFTPURLADSIPS
6
4094
NATIPV6URL
7
RADIUSLDAPTACACS
8
P2PP2Pweb2100
IP/IP///5
/IPMACIPIP
9
URL
Web Web
WEB
10
webSQL4200+,CNNVDCNVD1
DDOS
IPICMPTCPUDPDNSHTTPNTP
HTTP/SMTP/POP3/FTP/IM
22400
URL
URL802500URLWEB
IMHTTP/FTP/SMTP/POP3office50
httpftptelnetsmtppop3FTP/FTP
20
5
PING TRACEROUTE TCP HTTP DNS
11
15
PDFWORDEXCEL
IP URL
FTP TELNETIP
/
ADS//
12
EAL3+
13
14
CMMI5-
15
1.3
3
1.4
60
2
330
3
2
1
2
1
2
3
4
5
1.5
1
313
4.
5.
6.
2
4.
5.
6.
1.
1020%
1040%
351010%
1030%
15