01-10-2013, 15:39
|
#2
|
|
Ветеран
Реєстрація: Mar 2008
Повідомлення: 2,029
|
Полноценный 24 портовый, гигабитный L3 коммутатор.
Отличное решение на ядро. Справляется со своими задачами на ура.
Характеристики
 Характеристики
Quality of Service (QoS)
Layer 4 prioritization — enables prioritization based on TCP/UDP port numbers
Traffic prioritization (IEEE 802.1p) — allows real-time traffic classification into eight priority levels mapped to eight queues
Class of Service (CoS) — sets the IEEE 802.1p priority tag based on IP address, IP Type of Service (ToS), Layer 3 protocol, TCP/UDP port number, source port, and DiffServ
Rate limiting — sets per-port ingress enforced maximums and per-port, per-queue guaranteed minimums
Bandwidth shaping —
Rate limiting — provides per-port, ingress-based enforced bandwidth maximums
Guaranteed minimums — provides per-port, per-queue egress-based guaranteed bandwidth minimums
Broadcast control — allows limitation of broadcast traffic rate to cut down on unwanted network broadcast traffic
Back to top
Management
Remote configuration and management — is available through a secure Web browser or a command-line interface (CLI)
Manager and operator privilege levels — enable read-only (operator) and read/write (manager) access on CLI and Web browser management interfaces
Management VLAN — segments traffic to and from management interfaces, including CLI/telnet, a Web browser interface, and SNMP
RADIUS accounting support — separates RADIUS accounting server support per SSID; provides detailed session, usage, and billing information for each client activity
Multiple configuration files — can be stored to the flash image
Dual flash images — provide independent primary and secondary operating system files for backup while upgrading
Secure Web GUI — provides a secure, easy-to-use graphical interface for configuring the module via HTTPS
Command-line interface (CLI) — provides a secure, easy-to-use command-line interface for configuring the module via SSH or a switch console; provides direct real-time session visibility
SNMPv1, v2c, and v3 — facilitate centralized discovery, monitoring, and secure management of networking devices
Port mirroring — enables traffic on a port to be simultaneously sent to a network analyzer for monitoring
3Com-heritage Comware Operating System — CLI and Web user interface in common with HP 4XXX and 55XX series switches
Back to top
Connectivity
Auto-MDIX — automatically adjusts for straight-through or crossover cables on all 10/100 and 10/100/1000 ports
Dual-personality functionality — includes four 10/100/1000 ports or SFP slots for optional fiber connectivity such as Gigabit-SX, -LX, and -LH, or 100-FX
IEEE 802.3af Power over Ethernet (PoE) — provides up to 15.4 W per port to IEEE 802.3af-compliant PoE-powered devices such as IP phones, wireless access points, and security cameras
Optional 10 GbE ports — through the use of optional modules, additional 10 GbE connections are available for uplinks or high-bandwidth server connections; flexibly supports XFP, SFP+, or CX4 local connections
Back to top
Manageability
RMON (remote monitoring) — provides advanced monitoring and reporting capabilities for statistics, history, alarms, and events
Dual flash images — provides independent primary and secondary operating system files for backup while upgrading
Full-featured console — provides complete control of the switch with a familiar command-line interface (CLI)
Web interface — allows configuration of the switch from any Web browser on the network
Multiple configuration files — allow multiple configuration files to be stored to a flash image
Software updates — free downloads from the Web
sFlow (RFC 3176) — wire-speed traffic accounting and monitoring
Virtual stacking capability — single IP address management for a virtual stack of up to 255 Comware-based 3Com legacy devices, including HP 4XXX and 55XX series switches
Back to top
Layer 2 switching
VLAN support and tagging — support IEEE 802.1Q with 4,094 simultaneous VLAN IDs
GARP VLAN Registration Protocol — allows automatic learning and dynamic assignment of VLANs
IP multicast snooping and data-driven IGMP — automatically prevents flooding of IP multicast traffic
Jumbo packet support — supports up to 9220-byte frame size to improve the performance of large data transfers
IEEE 802.1ad QinQ — increases the scalability of an Ethernet network by providing a hierarchical structure; connects multiple LANs on a high-speed campus or metro network
Back to top
Layer 3 routing
Static IP routing — provides manually configured routing; includes ECMP capability
Routing Information Protocol (RIP) — provides RIPv1 and RIPv2 routing
Back to top
Security
Access control lists (ACLs) — provide IP Layer 3 filtering based on source/destination IP address/subnet and source/destination TCP/UDP port number
RADIUS/TACACS+ — eases switch management security administration by using a password authentication server
Secure Shell — encrypts all transmitted data for secure remote CLI access over IP networks
Secure Web management with HTTPS and SSL — encrypts all HTTP traffic, allowing secure access to the browser-based management GUI in the switch
IEEE 802.1X and RADIUS network logins — control port-based access for authentication and accountability
Port security — allows access only to specified MAC addresses, which can be learned or specified by the administrator
MAC address lockout — prevents particular configured MAC addresses from connecting to the network
Secure FTP — allows secure file transfer to and from the switch; protects against unwanted file downloads or unauthorized copying of a switch configuration file
Switch management logon security — can require either RADIUS or TACACS+ authentication for secure switch CLI logon
Secure management access — securely encrypts all access methods (CLI, GUI, or MIB) through SSHv2, SSL, and/or SNMPv3
Custom banner — displays security policy when users log in to the switch
Automatic VLAN assignment — automatically assigns users to the appropriate VLAN based on their identity and location and the time of day
Management password — provides security so that only authorized access to the Web browser interface is allowed
|
|
|
Лінійний вигляд
