zzcg.ccgp.gov.cnzzcg.ccgp.gov.cn/.../2017/11/28/1511510134365848-1511…  · web...

Click here to load reader

Upload: duongcong

Post on 31-Jan-2018

325 views

Category:

Documents


0 download

TRANSCRIPT

/2

1

1

26

2

10

3

75

4

1

5

3

6

2

7

3

8

SDN

1

9

2

10

3

11

2

12

30

13

6

14

1

15

POE

10

16

2

17

2

18

1

19

1

20

2

21

1

22

30

23

1

24

1

25

1

26

1

27

1

28

AP

3

29

AP

10

30

AP

26

31

300MAP

31

32

VPN

2

33

1

34

1

35

4K

20

36

4

37

5

2U

22.1GHz820MB

24DDR4 ECC RDIMM/LRDIMM

282.5SAS/SATA/SSD2PCI-E SSDSAS/SATASSD

2IOAT2VMDq

Raid

2GB Cache12Gb RAIDRAID0/1/5/10/50

I/O

8PCI-e 3.0

16MB

1+1

256G DDR4 2400MHzECC RDIMM

4 600GB 10000rpm 2.5 SAS

128GB DDR4 2400MHzECC RDIMM

4 240G 2.5 6Gb/s SSD

32G DDR4 2400MHzECC RDIMM

4300G 2.510K SAS

oem

GB18030-2005

CPULicenseCPU

Hypervisor200M

,x86

HypervisorWeb

HA

BluePrint

16 Gb

IPTABLES

(SPBM)()

1000100001500010103000050000

ISO, /

VMwareCloudVirtual

Web Client

I/OCPU10%

Web

,32

IO4IOPS/200IOPS/

CPULicenseCPU

HAFT

RAID

RPO5

SSDULLtra DIMM SSDNVMe SSD5

x86I/OIBMHPDELLCiscoNECIntelSuperMicroFusion-IO

8PB

SSD320

1984

42

41200W2+23+1240V HVDC220V AC400W BBU

54+1

4

2Intel Xeon E5-2630v4CPU10CPU2.2GHz

128GB DDR4 2133MHz ECC RDIMM16512GB

22.5SASSATASSD123.5SATA/SAS

2800G 2.56Gb/s SSD102.5 900G 10K SAS1150G SATA SSD

SAS 12GbRAID 0/1/10

2GE210GE

2pcie3.0x8

BMCIPMI2.0iKVMVirtual Media

2NAS

163600

16Gbps810Gbps4

SANNAS

DDR4

DDR4512GB

SSD

SSD5.76TB

900GB10000SAS486TB7200SAS26

RAID

RAID 011056RAID2RAID

RAID

IP

QoS

QoS

WindowsSolarisHP-UXIBM-AIXLinuxESXOpenStack Cinder

MIBAPI

IPv6

IPv4/v6IPv4/v6

2NAS

16960

16Gbps810Gbps4

SPC-1 Revision 3.0IOPS40

SANNAS

DDR4

DDR4256GB

SSD

SSD2.88TB

900GB10000SAS424TB7200SAS16

RAID

RAID 011056RAID2RAID

RAID

IP

QoS

QoS

WindowsSolarisHP-UXIBM-AIXLinuxESXOpenStack Cinder

MIBAPI

IPv6

IPv4/v6IPv4/v6

2NAS

8

16Gbps410Gbps4

SANNAS

DDR4

DDR480GB

SSD

SSD1.44TB

900GB10000SAS144TB7200SAS13

RAID

RAID 011056RAID2RAID

RAID

IP

QoS

QoS

WindowsSolarisHP-UXIBM-AIXLinuxESXOpenStack Cinder

API

IPv6

IPv4/v6IPv4/v6

SDN

WindowsLinuxMS SQLOracleB/S

Restful API

DHCP

UPS

IP

IP

IPIP

VLANVXLANIPIP

VRF

VRF

IP

DHCPIPIP

Overlay

VXLANVTEPVXLANVXLAN

//

50

AAA

802.1X

PAPCHAPEAP-MD5EAP-PAPEAP-TLSEAP-PEAP-MSCHAPV2EAP-PEAP-MD5EAP-GTCEAP-TTLS

MAC

PCPAD

RADIUS

RADIUSWAPI

LDAP

LDAPLDAPMicrosoft Active DirectoryNovell Directory ServerNetscape iPlanetSUN ONE DirectoryOpenLDAPLDAPLDAPADAD

VLAN

VLAN

MACIP

DHCPHTTPMAC

IPMAC

3000

RogueRogue AP

RadiusMAC

SSID

FFTduty cycle,,

AP

PoEPoEAP

GIS

APSSIDPoE

WLANAP

SessionAPTopNAPFat APFat APAPAPAPAPRadioRadioRadioRadioRogue APRogue

ACAP

APPoE

AP

50

390Gbps

290Mpps

3GB

2U

10/100/1000Base-T96 1G/10G SFP+10LC2

IP

10km

VLAN

1MACVLAN

2VLAN(VLAN ID)4094

3802.1PDSCP/TOSQoS

4Egress Car

1IPv4RIP V1/V2OSPFBGPIS-IS;

2IPv6RIPngOSPFv3BGP4+IS-IS V6

3IPv4IPv6

4IPv66to4ISATAP

802.1xMAC

IP+MAC+PORT

DHCP SnoopingDHCP

SNMP V1/V2/V3RMONSSHV2

2.5Tbps

1080Mpps

2U

2

4840GE6, 300(SFP+,LC)10

,300(SFP,LC)10

USB

RIP v1/2OSPFBGPRIPngOSPF V3IS-IS V6BGP+ FOR IPV6IPV6VRRP

VLAN

/MAC/VLAN

VLAN4094

QINQQINQ

VXLAN /

OpenFlow+NetconfVXLAN

SDN/OPENFLOW

netconf pythonOPENFLOW 1.3

Openflow

SDN controller

FCoE/FC

NPV Fip Snooping

FCF

VSAN

8Kbit/s

QOS

802.1pDSCP

8

PIM-DMPIM-SMIGMPIGMP SnoopingMLDMLD SnoopingIPV6 PIM-DMIPV6 PIM-SM IPv6

SNMP V1/V2/V3SSHv2WEB

sFlow

IP+MAC+PORT

DHCP SnoopingDHCP

MACARPARP

2.5Tbps

1400Mpps

2U

MAC280K

24SFP+24SFP+LC

9640GE8

USB

4

RIP v1/2OSPFBGPRIPngOSPF V3IS-IS V6BGP+ FOR IPV6IPV6VRRP

VLAN

/MAC/VLAN

VLAN4094

QINQQINQ

VXLAN /

OpenFlow+NetconfVXLAN

SDN/OPENFLOW

netconf pythonOPENFLOW 1.3

Openflow

SDN controller

QOS

8Kbit/s

802.1pDSCP

8

SNMP V1/V2/V3SSHv2WEB

sFlow

IP+MAC+PORT

DHCP SnoopingDHCP

MACARPARP

590Gbps250Mpps

48GE4SFP+ 3LC

SFP+1240G

IP

10km

VLAN

VLANVLAN

MACVLAN

VLAN(VLAN ID)4094

VXLAN

VXLAN

VXLAN

OpenFlow+NetconfVxLAN

SDN/OPENFLOW

OpenFlow 1.3

EQUAL

QOS

8

802.1PDSCP/TOSQoS

IPv4RIP V1/V2OSPFBGP

IPv6RIPngOSPFv3BGP4+

IPv4IPv6

IPv66to4ISATAP

ACL

ACl6K

IPv6 ACL

ACL

AC

802.1xMAC

IP+MAC+PORT

DHCP SnoopingDHCP

2416GB24

24*16GbSFP

248Gb,8

8*8GbSFP

POE

598Gbps210Mpps

1244

2

12

40G

IP

10km

VLAN

VLANVLAN

MACVLAN

VLAN(VLAN ID)4094

VXLAN

OpenFlow+NetconfVxLAN

SDN/OPENFLOW

OpenFlow 1.3

EQUAL

RIP V1/V2OSPFBGP

ACL

ACl6K

IPv6 ACL

ACL

AC

POE

POEPOE+POEPOE700W

802.1xMAC

IP+MAC+PORT

DHCP SnoopingDHCP

AMP+2U

SFP+8300SFP+8

SFP4SFP4

10/100/1000M Base-TX4

41HA11

30Gbps

12Gbps

40028

URLVPNapp

1

2

32;

TCPTCPTCPUDPUDPDNSUDPGRETCPUDP

IPIPIP

IP

URL

86URLURLURL

FloodTCnsSYN Cookie

DHCPDHCPDHCPDHCP

FloodTCnsSYN Cookie

IPIPIP

WEB

WEB

0dayAPT

VPNPKI

Web

URL

WEB

15U

6

8

1WebSSL VPN

2244810/100/1000 M34SPF+20

344

40Tbps15000Mpps

5

20Gbps80012

1212

5

6Gbps80010

1212

1IPv4IPv6BGPRIPv2OSPFISISIPv4BGP4+OSPFv3ISISV6IPv6

2WebMACAAA/RadiusSSHv1.5/SSHv2

3VLANVLAN802.1Q VLAN TrunkVLAN4K

4MPLS VPN MPLS VPN

5

6NATNAT(nat server)NATFullcone NATNAT

11

21(CPU)IPVLANVRF

3256

4URL//

5PingIPUDPICMP SmurfTear Drop

1

2snort

3 //////

4

5//DoS/DDoS

6SQLIDS/IPS

7

TFTPHTTP

BTP2P/IM

FTPTFTP

WEB

SNMP v1/v2/v3

RMON

NTP

2U

61IPCPU

200

700

100

WebIE360MstscSecureCRTXshellXftpWinscpFlashfXP

MACMACsafariitem

FTPFilezillaXftp WinscpFlashfXPFTP

Secure CRTXshellrz/sz

ADAD

RDPSSHTelnet

SSHTelnet

RDPVNCX11

FTPSFTP

web

OracleMSSQLMySQLDB2

C/SB/SIEVsphere clientplsql developer MagicWinmailNavicat

/

Excel/

IP

IP

Excel/

RADIUS LDAP AD

USB KeyCA

RadiusGoogle authenticationFreeOTP

IP/IP//

IPIP

/

WindowsLinux/Unix

/

FTP

txtexcelzip

SSHsz/rzzmodem

FTP/SFTP

RDP

///

bat

/

FTP/SFTP

CPU/

RDPVNCTelnetSSH,0.5

htmlExceltxtwordcsvpdf

NTP

consoleWEB WEB

CPU

WEBIP

WEBsyslogsnmp

2000

6

1.5Gbps10016000/S

4

/

IEweb

Web

RadiusPAPEAP-MD5MD5-CHAP

ADLDAPCA

NAT

CPU

windiowslinuxunix

Bypass

httpsB/SSSHserial

#Intel vPro

OEMOEMLOGO

102

X86

5,000,00075 K CPSSSL TPS 2K Key2000

8GB

2.5Gbps56Gbps

10Gbps212K RPS

SSL4Gbps

4CPU, CPU

500GB

Active-ActiveActive-standby

1TCL

2Web

3N+M

#4

5FTP

1SSL

2

3web

4/(Qos)

5/IPCookie

6//

7TCP

8IPIP

9

1

2TOP URLCPU

4tcpdump

2U1100/1000M Base-Tx2100/1000M Base-Tx

8G

2T

#

20000SQL/

400/

4SQL

140SQL

5

OracleSQL ServerMySQLDB2PostgressybaseinformixcacheDBDMGBaseKingBase

1

2wherewhowhatwhenhowoter

3

#4,

5WeblogictomcatWebsphereJboss

6sshrdp

#7

8

9

10

11

12SQl

1400

2

UpdateDeleteSQL

3

4

5SQLIPsqlSQL

6

1SQL

2IPIPMAC

3IPIP

4sql

5SQLsqlTop sql

6

7

8

9

1011

12

13WORD\ PDF

1SQL

2

3

4SYSLOGSNMP

5

1TAPSPAN

2

B/S

IP

1

2

3WebWeb

4WebWeb

5WebCGIWeb

6POC

7Web

8

9

10

11ID

12webshell

13shell

14

OEM

13U1648TB

264664G

3

43264200

164UNIXWindowsLinuxRAID

2RAID 01565060RAID ,

3RAIDRAIDRAID1,

Web

1

2

3

#1,

2

3

1

2

3

10M/100M/1000M

2

2

2

14Gbps

2120000

3

4420

1

2

3

1

2

3. IP1

4tcpipTCP/UDP*.cscpkt*.cap*.pkt*.rawpk*.dmp

5MACIPDNSEmailFTPHTTPMSNYahooCSVLOG

6IP +TCPARPPOP3SMTPICMPFTPDNSRTPHTTP

7MAC

1ARP

2DOS

3TCP

4HTTPPOP3SMTP

5

1U 2U

64Intel 42.2GHz

8G1TBRAID1Gigabit

150001500

124GB160GB

syslog

Perl

IP

SPF

DDOS

SMTPLDAP

ADSSOLDAPPOPRADIUS

IMAP/POP

#1500500

B/S

,

CheckMarkICSAOPSWAT

100

22000

#linux

#

#

:

0day

ziprar7z

#

#

#

#

,P2P

PC

Windows Server 200320082012 Windows xp Windows Server 2003

3LinuxWindows

CPU

IP-MAC

#

#

3GMODEMADSLISDN

URLURL

USBUSB1394PCMIA

#

#U

U

U

UU

U

UU

XP

#Windows XP10

Windows XP

wordexcelppt

IEIE

,,,

,

USB

U

#NGFWVPN

#WindowsWindows XPMAC OS X

802.1XVLANACL

#ACLIPURL

#802.1X

#ADLDAPEmailHTTP

UIPIE

#

ZDNS-T5100

DNS

QPS8

500G

810/100/1000M

HA

web

IPv6DNSSECDNS64IDNsIPv4IPv6

AD

DNS serverfailDDOSAptr

DNS

DNS30QPS

; ; ; ; ; ZONEFILE;

IP

; DNS; DNS64DNSSEC; TFTP;

DNSLOG

SNMPURL

AP

H3C S10510CAPWAP

/AP802.11a/b/g/n/ac/ac wave2

802.11a/n/ac802.11b/g/n

5GHz1733Mbps2.4GHz300Mbps3000Mbps

MU-MIMO

MU-MIMOMU-MIMO6

210/100/1000Mbps(RJ45)

PoE

-10~55

5%~95%

64128WEPWPA802.11iWAPI

AP

AP(SSID)

SSID

AP

1/AP, 802.11ac;

24.0iBeacon

H3C S10510CAPWAP

1802.11a/n/ac802.11b/g/n

802.11ac/n/a:5.725GHz-5.850GHz; 5.15~5.35GHz ()

802.11b/g/n:2.4GHz-2.483GHz(), 2.4GHz/5GHz,

2Bluetooth2.402GHz-2.48GHz

110/100/1000Mbps(RJ45)

5GHz866Mbps2.4GHz300Mbps

PoE

IPv6

IPv4/IPv6NativeIPv6 Portal

TR-069

64128WEPWPA802.11iWAPI

AP

AP(SSID)

802.11e

QoS

SSID/VLANQoS

1

2

3SSIDSSID

iBeaconiBeacon

AP

/AP802.11ac Wave2MU-MIMO

H3C S10510CAPWAP

802.11a/n/ac/ac Wave2802.11b/g/n

LAN410/100/1000Mbps

WAN210/100/1000Mbps

1

USB1

5GHz: 866Mbps

2.4GHz:300Mbps

Poe

TR-069

64128WEPWPA802.11iWAPI

wIPS

SSID

MAC

802.11e

QoS

SSID/VLANQoS

300MAP

/AP802.11ac Wave2MU-MIMO

H3C S10510CAPWAP

802.11a/n/ac/ac Wave2802.11b/g/n

210/100/1000Mbps(RJ45)PoE

12.5W

USB

1USB

5GHz867Mbps2.4GHz400Mbps

802.11a/n/ac : 5.725GHz-5.850GHz ()

802.11b/g/n : 2.4GHz-2.483GHz ()

RJ45

IPv6

IPv4/IPv6NativeIPv6 PortalIPv6 SAVI

TR-069

PORTAL(,)SSIDPortalAPPortalPortalPortalSSID(SSID)LDAP

1

2

3SSIDSSID

VPN

1UX866

120M800

1300

2SSL VPN300

3100

(EMM)App

1SDKAppAndroidiOS

2iOSAndroidApp

3Per AppSDKAPP

(EMM)

1AndroidiOS

2App

3App

4/

5

6EMM

7

8IOS

14EMMEMM

2

3/

#4

5B/SWebCacheWeb

1Local DB LDAPRADIUS//LDAPUSB KEY

2PKICA CACACRL

3EMM5CA

1APPWEBAPP

2APP

3Internet

#

emc cx4-240 DAE

DAE1515600G 15K

coremail

IP

4K

43

4K3840x2160

169

LED

23-80Hz

IPS

8ms

2160p

178

Display Port2

USB3.04

HDMI2

2

100-240VAC50-60Hz

0.5W

i56500 CPU

8GB DDR4

256G SDD

4G

600W

169

44k

DP/Min-DP 4

PCI-E2DIMI4

10/100/1000Mbps

16X DVDRW

720p

Windows710

CPUi57200U

8GB DDR3L 1600

256G SSD

2G

14

169

19201080

LED

4.1

10/100/1000Mbps

MiniDP/HDMI

720p

8

100-240V

Windows 10

1

2

3.

4.

1

2

1

2

3

4

5

#

1

2

3

a.

b.

c.

d.

e.

f.20050

45

a.

b.7*245102

c.

d.

e.

30

130

2

=()100

030

42

ISO 27001 20

02

ISO 20000 IT20

02

ITSS20

02

20.5

02

82

08

1.4

2. #12

3. #11

4.

04

1.20

2. #1250

3. #11100

4.

020

112

02

28

421

04

321

03

321

03

321

03

42-31

04

321

03

1CPU

2

3

3210.5

03

724102220

02

30-2

03