Upload
hoang-tuan-viet
View
147
Download
4
Embed Size (px)
DESCRIPTION
So sánh một số thiết bị Juniper, HP và Fortinet- Juniper: SRX, MX, EX...
Citation preview
STTTn thit b,Quy cch thit b theo thit k k thut c duytJUNIPERHP
1.1Thit b nh tuynMX80HP A6600 series (HP ngh A6602)
- nh tuyn mng WAN
- Ti thiu 10 cng GE Base-TNA
- H tr ti thiu 04x10GENA
- 01 Console Port- 01 Console Port
- 01 USB Port- 02 USB Port
- Forwarding Rate ti thiu: 60 MppsA6602 4,5 MppsA6604 9 MppsA6608 18 MppsA6616 36 Mpps
- Ngun AC, cp ngun
- Router Chassis base c ti thiu 02 Slot m rng Line Card02 Slot
- BGP Routes: 1M
- OSPF Routes: 1M
- IS-IS Routes: 1M
- BGP peers ti thiu 60
- RIP instances ti thiu 60
- nh tuyn tnh ti thiu 1M
- Source-based routing
- Routing Policy
- Equal-cost multipath (ECMP)
- Reverse Path Forwarding (RPF)
- LDP
- RSVP-TE
- Traffic Engineering
- Layer 3 2547 VPN
- Layer 2 VPN
- Virtual Private LAN Service (VPLS)
- Diffserv-aware Traffic Engineering
- MPLS Detour
- MPLS Fast Reroute Link Protection
- MPLS Fast Reroute Node Protection
- MPLS Point-to-Multipoint (P2MP) Traffic Engineering
- VRRP
- IETF Graceful Restart
- Policing & Shaping
- Class Based Queuing with Prioritization
- WRED
- Queuing based on VLAN/VC/VP/DLCI/Interface/Bundles
- Queuing based on VLAN/VC/VP/DLCI/Interface/Bundles
- H tr cc giao din qun tr WEB, CLI, XML, Script, Telnet, SSH
- SNMPv2 and SNMP v3
Xut xG7
1.2Thit b tng laSRX650FortiNet FortiGate FG-620B
- Nng lc Firewall phi m bo ti thiu 6.4 Gbps 16 Gbps (up to 20 Gbps)Antivirus 350 MbpsIPS 1GbpsIPSec VPN 12 Gbps (upto 15 Gbps)
- Chassis, 2GB Memory, Dual P/S, 1GB Flash- Chassis, 1GB Memory, Dual P/S, 512M Flash
- 16 cng 10/100/1000 Base-T- 20 cng 10/100/1000 Base-T (max 24)
- Cung cp tnh nng IDP
- USB Port: 2- USB Port: 2
- S port Ethernet 10/100/1000 base TX ca thit b cho: 20
- S Slot m rng Line Card: 801 Slot AMC
- C kh nng nng cp Antivirus
- C kh nng nng cp IPS
- C kh nng nng cp Anti-Spam
- C kh nng nng cp WEB-Filtering
- m bo kh nng chy ng thi cc tnh nng trn (IPS, AV, AS, WF)- m bo kh nng chy ng thi cc tnh nng trn (IPS, AV, AS, WF)
- Network attack detection
- DoS and DDoS protection
- TCP reassembly for fragmented packet protection
- Brute force attack mitigation
- SYN cookie protection
- Zone-based IP spoofing
- Malformed packet protection
- BGP routes khi active UTM functions: 512K512K
- OSPF routes khi active UTM functions: 512K512K
- Source-based routing
- Policy-based routing- Policy-based routing
- Equal-cost multipath (ECMP)
- Reverse Path Forwarding (RPF)
- IGMP, IGMP Proxy
- Multicast inside IPsec tunnel
- PIM-SM/SSM
- Active/Active - L3 mode
- Active/Passive - Transparent & L3 mode
- Configuration synchronization
- VRRP
- Session synchronization for firewall and VPN
- Session failover for routing change
- Device failure detection
- Link failure detection
CLI, Console, Web Interface, SNMP v1,v2,v3
- Bo v IDP, IPS, VPN, DoS, DDoS- Bo v IDP, IPS, VPN, DoS, DDoS
Xut xG7
CertificationsICSA Labs: Firewall, IPSec, Antivirus, IPS, Antispyware
2Thit b chuyn mch trung tm (Core Switch)EX8208HP A7500 series (HP ngh A7506)
- m bo kin trc chuyn mch phn tn
- Nng lc chuyn mch backplane ti thiu 1.0 Tbps mi h thngA7506 768 Gbps 488 MppsA7510 1152 Gbps 714 Mpps
- Cung cp ti thiu 16 cng quang 10 GE XFP/SFPA7506Max 52 cng 10GE hoc 288 cng 10/100/1000 hoc 288 cng SFPA7510 Max 84 cng 10GE hoc 480 cng 10/100/1000 hoc 480 cng SFP
EX-SFP-10GE-SRJF290AJD201AJD232A JD233A
EX-SFP-10GE-LRJD200AJD191AJD235AJD236A
- B x l trung tm d phng 1+1 (d phng Supervisor)2 switch fabric slotFabric MIP64@600 MHz I/O Module MIP64@400 MHz
- RAM: 2 GB512 MB + 512 MB (I/O module)
- Flash: 2GB64 MB
- Static, RIP, OSPF, VRRP, Bidirectional Forwarding Detection
- Routing Policy
- H tr Voice VLAN- H tr Voice VLAN
- 802.1Q VLAN
- 802.1D
- 802.3ad Link Aggregation
- 802.1w Rapid Spanning Tree
- 802.1s Multiple Instance Spanning Tree
- VLAN Registration Protocol (GVRP)
- IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)
- IP Multicast & Jumbo Frame support
- IGMP: v1, v2, v3
- IGMP snooping v1/v2/v3
- Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP
- H tr QoS, 8 Queues/Port- H tr QoS, 8 Queues/Port
- Weighted Random Early Drop (WRED) scheduling
- Shaped Deficit Weighted Round Robin (SDWRR) queuing
- Strict priority queuing
- Multi-field classification (L2 L4) for scheduling and rewrite
- Buffer per 10-Gigabit Ethernet port: 512 MBNA
- Buffer per 1-Gigabit Ethernet port: 42 MBNA
- H tr 802.1x port based authentication
- H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP.
- Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL
- CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet.IMC, CLI, Web browser, RS232C, telnet, Ethernet interface MIB
- Local and remote analyzer (mirroring)
- Advanced Insight Solutions (AIS)
- Ngun AC v dy ngun d phng 1+1- Ngun AC v dy ngun d phng 1+1
Xut xH3C S7500EG7
3Chuyn mch gp (Aggregation Switch) (01 cho trung tm thoi)EX3200
4+5Thit b chuyn mch trung gian (Distribution Switch) EX4200HP 7502
- Cung cp ti thiu 04 Uplink quang 10 GE XFP/SFP2 MPU2 I/O SlotMax 16 cng 10GE hoc 96 cng 10/100/1000 hoc 96 cng SFP
- 02 Transceiver 10GE n mode khong cch truyn dn >=2Km- 02 Transceiver 10GE n mode khong cch truyn dn >=2Km
- Cung cp ti thiu 40 x GE SFP - Cung cp ti thiu 40 x GE SFP
- D phng iu khin (Supervisor) 1:1 (chassis hoc virtual)Fabric MIP64@600 MHz I/O Module MIP64@400 MHz
- Tc chuyn gi (Forwarding Rate) ti thiu 120 Mpps143 Mpps
- RAM: 1 GB512 MB + 512 MB (I/O module)
- Flash: 512 MB64 MB
- p ng kh nng m rng ti thiu 160x GE-SFP (20 tng x 8 port/tng = 160)NA
- Ngun AC v dy ngun autosensing 100-120 V / 200-240 V, d phng 1:1- Ngun AC v dy ngun autosensing 100-120 V / 200-240 V, d phng 1:1
- Chuyn mch lp 3: RIP, OSPF, PIM-SM
- Routing Policy
- H tr Voice VLAN- H tr Voice VLAN
- 802.1Q VLAN tagging
- 802.1D
- 802.3ad Link Aggregation
- 802.1w Rapid Spanning Tree
- 802.1s Multiple Instance Spanning Tree
- VLAN Registration Protocol (GVRP)
- IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)
- IP Multicast & Jumbo Frame support
- IGMP: v1, v2, v3
- IGMP snooping v1/v2/v3
- Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP
- H tr QoS, 8 Queues/Port- H tr QoS, 8 Queues/Port
- Weighted Random Early Drop (WRED) scheduling
- Shaped Deficit Weighted Round Robin (SDWRR) queuing
- Strict priority queuing
- H tr 802.1x port based authentication
- H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP.
- Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL
- CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet.
6Thit b chuyn mch u cui (Access Switch)
6.1 + 6.2Thit b chuyn mch u cui 48 cng EthernetEX3200HP E5500-48G (JE090A)
- Yu cu ti thiu 48 cng Ethernet 10/100/1000 Base-T- 44 cng Ethernet 10/100/1000 (fixed port)- 4 cng dual-personality (Ethernet 10/100/1000 hoc SFP)- 2 stacking port 24Gbps mi cng- 1 module slot (max 2 cng 10GE hoc 8 cng GE PoE)
- Chuyn mch Lp 3: OSPF, RIP, PIM-SM
- STP, VLAN tagging, LLDP, ARP
- Ti thiu 04 Uplink 1 GE SFP- Ti thiu 04 Uplink 1 GE SFP
- Tc chuyn mch ti thiu 50 Gbps232 Gbps172,6 Mpps
- RAM: 512MB64 MBBuffer 32 MB
- Flash: 128 MB16 MB
- Routing Policy
- H tr Voice VLAN
- 802.1Q VLAN Tagging
- 802.1D
- 802.3ad Link Aggregation
- 802.1w Rapid Spanning Tree
- 802.1s Multiple Instance Spanning Tree
- VLAN Registration Protocol (GVRP)
- IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)
- IP Multicast & Jumbo Frame support
- IGMP: v1, v2, v3
- IGMP snooping v1/v2/v3
- Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP
- H tr QoS, 8 Queues/Port
- Weighted Random Early Drop (WRED) scheduling
- Shaped Deficit Weighted Round Robin (SDWRR) queuing
- Strict priority queuing
- H tr 802.1x port based authentication
- H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP.
- Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL
- CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet.
- Ngun AC v dy ngun
6.3Thit b chuyn mch u cui 24 cng EthernetEX3200HP E5500-24G (JE088A)
- H tr ti thiu 24 cng Ethernet 10/100/1000 Base-T- 20 cng Ethernet 10/100/1000 (fixed port)- 4 cng dual-personality (Ethernet 10/100/1000 hoc SFP)- 2 stacking port 24Gbps mi cng- 1 module slot (max 2 cng 10GE hoc 8 cng GE PoE)
- Chuyn mch Lp 3: OSPF, RIP, PIM-SM
- H tr STP, VLAN tagging, LLDP, ARP
- Ti thiu 04 Uplink 1 GE SFP- Ti thiu 04 Uplink 1 GE SFP
- Tc chuyn mch ti thiu 28 Gbps184 Gbps136,9 Mpps
- RAM: 512MB64 MB
- Flash: 128 MB16 MBBuffer 32 MB
- Routing Policy
- H tr Voice VLAN- H tr Voice VLAN
- 802.1Q VLAN Tagging
- 802.1D
- 802.3ad Link Aggregation
- 802.1w Rapid Spanning Tree
- 802.1s Multiple Instance Spanning Tree
- VLAN Registration Protocol (GVRP)
- IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)
- IP Multicast & Jumbo Frame support
- IGMP: v1, v2, v3
- IGMP snooping v1/v2/v3
- Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP
- H tr QoS, 8 Queues/Port
- Weighted Random Early Drop (WRED) scheduling
- Shaped Deficit Weighted Round Robin (SDWRR) queuing
- Strict priority queuing
- H tr 802.1x port based authentication
- H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP.
- Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL
- CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet.
- Ngun AC v dy ngun
6.4Transceiver GE SFPEX-SFP-1GE-SXHP X120 1G SFP LC SX Transceiver (JD118B)
- Transceiver quang 1 GE SFP - LC connector, khong cch truyn dn