TAP Air Network Ming Chen Chi-splitter classical scheme

For example a scene: the deployment of network monitoring border [need to deploy IDS / analysis software in Internet / WAN export]
TAP Air Network Ming Chen Chi-splitter classical scheme

A scene of traditional solutions 1: Port mirroring / SPAN
TAP Air Network Ming Chen Chi-splitter classical scheme
SPAN solutions to the problems of:
- Flow rate can not exceed 50% of the port;
- not required flexibility to choose the link monitoring and analysis, most router SPAN does not function;
- raw data is not guaranteed packet sequence;
- will switch high load loss;
- some failure packet can not be obtained by mirroring;
- can not distinguish between the advancing direction;

A scene of traditional solutions 2: series Hub
TAP Air Network Ming Chen Chi-splitter classical scheme
Hub solutions to the problems of:

  • Generating packet collisions;
  • Add a single point of failure;
  • Network service degradation;
  • Gigabit unable to adapt to the environment;

A scene using TAP Chen Ming-flight network tap solution:
TAP Air Network Ming Chen Chi-splitter classical scheme

Chen Chi-ming advantage TAP Air Network splitter program:
★ link fail-safe processing;
★ order to ensure that the original datagram;
★ supports multiple monitoring devices;
★ preserving the original data (including error packets, bad packets);
★ supports 10 / 100M, 10/100 / 1000M , Optical links of various types;

For example Scene 2: [centralized monitoring multiple links need to be deployed IDS system monitoring or analysis of multiple LAN / WAN link]
TAP Air Network Ming Chen Chi-splitter classical scheme

Scene Two traditional solutions of 1: Port mirroring / SPAN, port mirroring requires manual configuration
TAP Air Network Ming Chen Chi-splitter classical scheme
problems port mirroring / SPAN programs:

  • Flow can not exceed half of the maximum bandwidth of the port;
  • It does not guarantee the order of the original contract;
  • Abandon some bad packets;
  • Switch at a high load loss;
  • Mirroring a lot of traffic confusion at the port;
  • Flow can not distinguish contacts;
  • A limited number of SPAN ports can be configured, can not meet the demand for more equipment;

Traditional solutions Scene II 2: More analysis system using an access 1X1 TAP or SPAN
TAP Air Network Ming Chen Chi-splitter classical scheme
problem of multi-device monitoring program:

  • very expensive;
  • In multiple IDS / network analysis system to synchronize data and alarm brought great difficulties;
  • Difficult to manage;
  • Difficult to deploy and maintain equipment distributed throughout;
  • Inability to concentrate management, can not use the set of IDS / protocol analysis system a plurality of links;

Scene Two of Chen Chi Ming uses TAP Air Network splitter solution:
TAP Air Network Ming Chen Chi-splitter classical scheme

Advantages Ming Chen TAP-flight splitter network scheme:
★ link may be selected for monitoring;
★ holding the original data (including bad packets);
★ ensure transmission packet in the original sequence;
★ safe handling link failure;
★ remote centralized management / automatic switching function;
★ very high cost;

Scene Three: multiple devices need to monitor the same link [adding more and more surveillance equipment, IDS, analysis software, analysis equipment, etc.]
TAP Air Network Ming Chen Chi-splitter classical scheme

The scene of a three-Ming Chen Chi TAP Air Network splitter Solution:
TAP Air Network Ming Chen Chi-splitter classical scheme
The above three scenarios is the operation and maintenance work in the more common, there are different problems you can leave a message or be discussed by four hundred - - - hundred and six hundred and six - - - eight hundred ninety-one communicate.

Guess you like

Origin blog.51cto.com/14723863/2474380