For example a scene: the deployment of network monitoring border [need to deploy IDS / analysis software in Internet / WAN export]
A scene of traditional solutions 1: Port mirroring / SPAN
SPAN solutions to the problems of:
- Flow rate can not exceed 50% of the port;
- not required flexibility to choose the link monitoring and analysis, most router SPAN does not function;
- raw data is not guaranteed packet sequence;
- will switch high load loss;
- some failure packet can not be obtained by mirroring;
- can not distinguish between the advancing direction;
A scene of traditional solutions 2: series Hub
Hub solutions to the problems of:
- Generating packet collisions;
- Add a single point of failure;
- Network service degradation;
- Gigabit unable to adapt to the environment;
A scene using TAP Chen Ming-flight network tap solution:
Chen Chi-ming advantage TAP Air Network splitter program:
★ link fail-safe processing;
★ order to ensure that the original datagram;
★ supports multiple monitoring devices;
★ preserving the original data (including error packets, bad packets);
★ supports 10 / 100M, 10/100 / 1000M , Optical links of various types;
For example Scene 2: [centralized monitoring multiple links need to be deployed IDS system monitoring or analysis of multiple LAN / WAN link]
Scene Two traditional solutions of 1: Port mirroring / SPAN, port mirroring requires manual configuration
problems port mirroring / SPAN programs:
- Flow can not exceed half of the maximum bandwidth of the port;
- It does not guarantee the order of the original contract;
- Abandon some bad packets;
- Switch at a high load loss;
- Mirroring a lot of traffic confusion at the port;
- Flow can not distinguish contacts;
- A limited number of SPAN ports can be configured, can not meet the demand for more equipment;
Traditional solutions Scene II 2: More analysis system using an access 1X1 TAP or SPAN
problem of multi-device monitoring program:
- very expensive;
- In multiple IDS / network analysis system to synchronize data and alarm brought great difficulties;
- Difficult to manage;
- Difficult to deploy and maintain equipment distributed throughout;
- Inability to concentrate management, can not use the set of IDS / protocol analysis system a plurality of links;
Scene Two of Chen Chi Ming uses TAP Air Network splitter solution:
Advantages Ming Chen TAP-flight splitter network scheme:
★ link may be selected for monitoring;
★ holding the original data (including bad packets);
★ ensure transmission packet in the original sequence;
★ safe handling link failure;
★ remote centralized management / automatic switching function;
★ very high cost;
Scene Three: multiple devices need to monitor the same link [adding more and more surveillance equipment, IDS, analysis software, analysis equipment, etc.]
The scene of a three-Ming Chen Chi TAP Air Network splitter Solution:
The above three scenarios is the operation and maintenance work in the more common, there are different problems you can leave a message or be discussed by four hundred - - - hundred and six hundred and six - - - eight hundred ninety-one communicate.