21
STT Tên thiết bị, Quy cách thiết bị theo thiết kế kỹ thuật được duyệt JUNIPER HP 1.1 Thiết bị định tuyến MX80 HP A6600 series (HP đề nghị A6602) - Định tuyến mạng WAN - Tối thiểu 10 cổng GE Base-T NA - Hỗ trợ tối thiểu 04x10GE NA - 01 Console Port - 01 Console Port - 01 USB Port - 02 USB Port - Forwarding Rate tối thiểu: 60 Mpps A6602 4,5 Mpps A6604 9 Mpps A6608 18 Mpps A6616 36 Mpps - Nguồn AC, cáp nguồn - Router Chassis base có tối thiểu 02 Slot để mở rộng Line Card 02 Slot - BGP Routes: 1M - OSPF Routes: 1M - IS-IS Routes: 1M - BGP peers tối thiểu 60 - RIP instances tối thiểu 60 - Định tuyến tĩnh tối thiểu

So sánh một số thiết bị Juniper, HP và Fortinet

Embed Size (px)

DESCRIPTION

So sánh một số thiết bị Juniper, HP và Fortinet- Juniper: SRX, MX, EX...

Citation preview

STTTn thit b,Quy cch thit b theo thit k k thut c duytJUNIPERHP

1.1Thit b nh tuynMX80HP A6600 series (HP ngh A6602)

- nh tuyn mng WAN

- Ti thiu 10 cng GE Base-TNA

- H tr ti thiu 04x10GENA

- 01 Console Port- 01 Console Port

- 01 USB Port- 02 USB Port

- Forwarding Rate ti thiu: 60 MppsA6602 4,5 MppsA6604 9 MppsA6608 18 MppsA6616 36 Mpps

- Ngun AC, cp ngun

- Router Chassis base c ti thiu 02 Slot m rng Line Card02 Slot

- BGP Routes: 1M

- OSPF Routes: 1M

- IS-IS Routes: 1M

- BGP peers ti thiu 60

- RIP instances ti thiu 60

- nh tuyn tnh ti thiu 1M

- Source-based routing

- Routing Policy

- Equal-cost multipath (ECMP)

- Reverse Path Forwarding (RPF)

- LDP

- RSVP-TE

- Traffic Engineering

- Layer 3 2547 VPN

- Layer 2 VPN

- Virtual Private LAN Service (VPLS)

- Diffserv-aware Traffic Engineering

- MPLS Detour

- MPLS Fast Reroute Link Protection

- MPLS Fast Reroute Node Protection

- MPLS Point-to-Multipoint (P2MP) Traffic Engineering

- VRRP

- IETF Graceful Restart

- Policing & Shaping

- Class Based Queuing with Prioritization

- WRED

- Queuing based on VLAN/VC/VP/DLCI/Interface/Bundles

- Queuing based on VLAN/VC/VP/DLCI/Interface/Bundles

- H tr cc giao din qun tr WEB, CLI, XML, Script, Telnet, SSH

- SNMPv2 and SNMP v3

Xut xG7

1.2Thit b tng laSRX650FortiNet FortiGate FG-620B

- Nng lc Firewall phi m bo ti thiu 6.4 Gbps 16 Gbps (up to 20 Gbps)Antivirus 350 MbpsIPS 1GbpsIPSec VPN 12 Gbps (upto 15 Gbps)

- Chassis, 2GB Memory, Dual P/S, 1GB Flash- Chassis, 1GB Memory, Dual P/S, 512M Flash

- 16 cng 10/100/1000 Base-T- 20 cng 10/100/1000 Base-T (max 24)

- Cung cp tnh nng IDP

- USB Port: 2- USB Port: 2

- S port Ethernet 10/100/1000 base TX ca thit b cho: 20

- S Slot m rng Line Card: 801 Slot AMC

- C kh nng nng cp Antivirus

- C kh nng nng cp IPS

- C kh nng nng cp Anti-Spam

- C kh nng nng cp WEB-Filtering

- m bo kh nng chy ng thi cc tnh nng trn (IPS, AV, AS, WF)- m bo kh nng chy ng thi cc tnh nng trn (IPS, AV, AS, WF)

- Network attack detection

- DoS and DDoS protection

- TCP reassembly for fragmented packet protection

- Brute force attack mitigation

- SYN cookie protection

- Zone-based IP spoofing

- Malformed packet protection

- BGP routes khi active UTM functions: 512K512K

- OSPF routes khi active UTM functions: 512K512K

- Source-based routing

- Policy-based routing- Policy-based routing

- Equal-cost multipath (ECMP)

- Reverse Path Forwarding (RPF)

- IGMP, IGMP Proxy

- Multicast inside IPsec tunnel

- PIM-SM/SSM

- Active/Active - L3 mode

- Active/Passive - Transparent & L3 mode

- Configuration synchronization

- VRRP

- Session synchronization for firewall and VPN

- Session failover for routing change

- Device failure detection

- Link failure detection

CLI, Console, Web Interface, SNMP v1,v2,v3

- Bo v IDP, IPS, VPN, DoS, DDoS- Bo v IDP, IPS, VPN, DoS, DDoS

Xut xG7

CertificationsICSA Labs: Firewall, IPSec, Antivirus, IPS, Antispyware

2Thit b chuyn mch trung tm (Core Switch)EX8208HP A7500 series (HP ngh A7506)

- m bo kin trc chuyn mch phn tn

- Nng lc chuyn mch backplane ti thiu 1.0 Tbps mi h thngA7506 768 Gbps 488 MppsA7510 1152 Gbps 714 Mpps

- Cung cp ti thiu 16 cng quang 10 GE XFP/SFPA7506Max 52 cng 10GE hoc 288 cng 10/100/1000 hoc 288 cng SFPA7510 Max 84 cng 10GE hoc 480 cng 10/100/1000 hoc 480 cng SFP

EX-SFP-10GE-SRJF290AJD201AJD232A JD233A

EX-SFP-10GE-LRJD200AJD191AJD235AJD236A

- B x l trung tm d phng 1+1 (d phng Supervisor)2 switch fabric slotFabric MIP64@600 MHz I/O Module MIP64@400 MHz

- RAM: 2 GB512 MB + 512 MB (I/O module)

- Flash: 2GB64 MB

- Static, RIP, OSPF, VRRP, Bidirectional Forwarding Detection

- Routing Policy

- H tr Voice VLAN- H tr Voice VLAN

- 802.1Q VLAN

- 802.1D

- 802.3ad Link Aggregation

- 802.1w Rapid Spanning Tree

- 802.1s Multiple Instance Spanning Tree

- VLAN Registration Protocol (GVRP)

- IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)

- IP Multicast & Jumbo Frame support

- IGMP: v1, v2, v3

- IGMP snooping v1/v2/v3

- Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP

- H tr QoS, 8 Queues/Port- H tr QoS, 8 Queues/Port

- Weighted Random Early Drop (WRED) scheduling

- Shaped Deficit Weighted Round Robin (SDWRR) queuing

- Strict priority queuing

- Multi-field classification (L2 L4) for scheduling and rewrite

- Buffer per 10-Gigabit Ethernet port: 512 MBNA

- Buffer per 1-Gigabit Ethernet port: 42 MBNA

- H tr 802.1x port based authentication

- H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP.

- Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL

- CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet.IMC, CLI, Web browser, RS232C, telnet, Ethernet interface MIB

- Local and remote analyzer (mirroring)

- Advanced Insight Solutions (AIS)

- Ngun AC v dy ngun d phng 1+1- Ngun AC v dy ngun d phng 1+1

Xut xH3C S7500EG7

3Chuyn mch gp (Aggregation Switch) (01 cho trung tm thoi)EX3200

4+5Thit b chuyn mch trung gian (Distribution Switch) EX4200HP 7502

- Cung cp ti thiu 04 Uplink quang 10 GE XFP/SFP2 MPU2 I/O SlotMax 16 cng 10GE hoc 96 cng 10/100/1000 hoc 96 cng SFP

- 02 Transceiver 10GE n mode khong cch truyn dn >=2Km- 02 Transceiver 10GE n mode khong cch truyn dn >=2Km

- Cung cp ti thiu 40 x GE SFP - Cung cp ti thiu 40 x GE SFP

- D phng iu khin (Supervisor) 1:1 (chassis hoc virtual)Fabric MIP64@600 MHz I/O Module MIP64@400 MHz

- Tc chuyn gi (Forwarding Rate) ti thiu 120 Mpps143 Mpps

- RAM: 1 GB512 MB + 512 MB (I/O module)

- Flash: 512 MB64 MB

- p ng kh nng m rng ti thiu 160x GE-SFP (20 tng x 8 port/tng = 160)NA

- Ngun AC v dy ngun autosensing 100-120 V / 200-240 V, d phng 1:1- Ngun AC v dy ngun autosensing 100-120 V / 200-240 V, d phng 1:1

- Chuyn mch lp 3: RIP, OSPF, PIM-SM

- Routing Policy

- H tr Voice VLAN- H tr Voice VLAN

- 802.1Q VLAN tagging

- 802.1D

- 802.3ad Link Aggregation

- 802.1w Rapid Spanning Tree

- 802.1s Multiple Instance Spanning Tree

- VLAN Registration Protocol (GVRP)

- IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)

- IP Multicast & Jumbo Frame support

- IGMP: v1, v2, v3

- IGMP snooping v1/v2/v3

- Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP

- H tr QoS, 8 Queues/Port- H tr QoS, 8 Queues/Port

- Weighted Random Early Drop (WRED) scheduling

- Shaped Deficit Weighted Round Robin (SDWRR) queuing

- Strict priority queuing

- H tr 802.1x port based authentication

- H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP.

- Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL

- CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet.

6Thit b chuyn mch u cui (Access Switch)

6.1 + 6.2Thit b chuyn mch u cui 48 cng EthernetEX3200HP E5500-48G (JE090A)

- Yu cu ti thiu 48 cng Ethernet 10/100/1000 Base-T- 44 cng Ethernet 10/100/1000 (fixed port)- 4 cng dual-personality (Ethernet 10/100/1000 hoc SFP)- 2 stacking port 24Gbps mi cng- 1 module slot (max 2 cng 10GE hoc 8 cng GE PoE)

- Chuyn mch Lp 3: OSPF, RIP, PIM-SM

- STP, VLAN tagging, LLDP, ARP

- Ti thiu 04 Uplink 1 GE SFP- Ti thiu 04 Uplink 1 GE SFP

- Tc chuyn mch ti thiu 50 Gbps232 Gbps172,6 Mpps

- RAM: 512MB64 MBBuffer 32 MB

- Flash: 128 MB16 MB

- Routing Policy

- H tr Voice VLAN

- 802.1Q VLAN Tagging

- 802.1D

- 802.3ad Link Aggregation

- 802.1w Rapid Spanning Tree

- 802.1s Multiple Instance Spanning Tree

- VLAN Registration Protocol (GVRP)

- IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)

- IP Multicast & Jumbo Frame support

- IGMP: v1, v2, v3

- IGMP snooping v1/v2/v3

- Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP

- H tr QoS, 8 Queues/Port

- Weighted Random Early Drop (WRED) scheduling

- Shaped Deficit Weighted Round Robin (SDWRR) queuing

- Strict priority queuing

- H tr 802.1x port based authentication

- H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP.

- Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL

- CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet.

- Ngun AC v dy ngun

6.3Thit b chuyn mch u cui 24 cng EthernetEX3200HP E5500-24G (JE088A)

- H tr ti thiu 24 cng Ethernet 10/100/1000 Base-T- 20 cng Ethernet 10/100/1000 (fixed port)- 4 cng dual-personality (Ethernet 10/100/1000 hoc SFP)- 2 stacking port 24Gbps mi cng- 1 module slot (max 2 cng 10GE hoc 8 cng GE PoE)

- Chuyn mch Lp 3: OSPF, RIP, PIM-SM

- H tr STP, VLAN tagging, LLDP, ARP

- Ti thiu 04 Uplink 1 GE SFP- Ti thiu 04 Uplink 1 GE SFP

- Tc chuyn mch ti thiu 28 Gbps184 Gbps136,9 Mpps

- RAM: 512MB64 MB

- Flash: 128 MB16 MBBuffer 32 MB

- Routing Policy

- H tr Voice VLAN- H tr Voice VLAN

- 802.1Q VLAN Tagging

- 802.1D

- 802.3ad Link Aggregation

- 802.1w Rapid Spanning Tree

- 802.1s Multiple Instance Spanning Tree

- VLAN Registration Protocol (GVRP)

- IEEE 802.1AB: Link Layer Discovery Protocol (LLDP)

- IP Multicast & Jumbo Frame support

- IGMP: v1, v2, v3

- IGMP snooping v1/v2/v3

- Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP

- H tr QoS, 8 Queues/Port

- Weighted Random Early Drop (WRED) scheduling

- Shaped Deficit Weighted Round Robin (SDWRR) queuing

- Strict priority queuing

- H tr 802.1x port based authentication

- H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP.

- Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL

- CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet.

- Ngun AC v dy ngun

6.4Transceiver GE SFPEX-SFP-1GE-SXHP X120 1G SFP LC SX Transceiver (JD118B)

- Transceiver quang 1 GE SFP - LC connector, khong cch truyn dn