zzcg.ccgp.gov.cnzzcg.ccgp.gov.cn/.../2017/11/28/1511510134365848-1511… · web...
TRANSCRIPT
/2
1
1
26
2
10
3
75
4
1
5
3
6
2
7
3
8
SDN
1
9
2
10
3
11
2
12
30
13
6
14
1
15
POE
10
16
2
17
2
18
1
19
1
20
2
21
1
22
30
23
1
24
1
25
1
26
1
27
1
28
AP
3
29
AP
10
30
AP
26
31
300MAP
31
32
VPN
2
33
1
34
1
35
4K
20
36
4
37
5
2U
22.1GHz820MB
24DDR4 ECC RDIMM/LRDIMM
282.5SAS/SATA/SSD2PCI-E SSDSAS/SATASSD
2IOAT2VMDq
Raid
2GB Cache12Gb RAIDRAID0/1/5/10/50
I/O
8PCI-e 3.0
16MB
1+1
256G DDR4 2400MHzECC RDIMM
4 600GB 10000rpm 2.5 SAS
128GB DDR4 2400MHzECC RDIMM
4 240G 2.5 6Gb/s SSD
32G DDR4 2400MHzECC RDIMM
4300G 2.510K SAS
oem
GB18030-2005
CPULicenseCPU
Hypervisor200M
,x86
HypervisorWeb
HA
BluePrint
16 Gb
IPTABLES
(SPBM)()
1000100001500010103000050000
ISO, /
VMwareCloudVirtual
Web Client
I/OCPU10%
Web
,32
IO4IOPS/200IOPS/
CPULicenseCPU
HAFT
RAID
RPO5
SSDULLtra DIMM SSDNVMe SSD5
x86I/OIBMHPDELLCiscoNECIntelSuperMicroFusion-IO
8PB
SSD320
1984
42
41200W2+23+1240V HVDC220V AC400W BBU
54+1
4
2Intel Xeon E5-2630v4CPU10CPU2.2GHz
128GB DDR4 2133MHz ECC RDIMM16512GB
22.5SASSATASSD123.5SATA/SAS
2800G 2.56Gb/s SSD102.5 900G 10K SAS1150G SATA SSD
SAS 12GbRAID 0/1/10
2GE210GE
2pcie3.0x8
BMCIPMI2.0iKVMVirtual Media
2NAS
163600
16Gbps810Gbps4
SANNAS
DDR4
DDR4512GB
SSD
SSD5.76TB
900GB10000SAS486TB7200SAS26
RAID
RAID 011056RAID2RAID
RAID
IP
QoS
QoS
WindowsSolarisHP-UXIBM-AIXLinuxESXOpenStack Cinder
MIBAPI
IPv6
IPv4/v6IPv4/v6
2NAS
16960
16Gbps810Gbps4
SPC-1 Revision 3.0IOPS40
SANNAS
DDR4
DDR4256GB
SSD
SSD2.88TB
900GB10000SAS424TB7200SAS16
RAID
RAID 011056RAID2RAID
RAID
IP
QoS
QoS
WindowsSolarisHP-UXIBM-AIXLinuxESXOpenStack Cinder
MIBAPI
IPv6
IPv4/v6IPv4/v6
2NAS
8
16Gbps410Gbps4
SANNAS
DDR4
DDR480GB
SSD
SSD1.44TB
900GB10000SAS144TB7200SAS13
RAID
RAID 011056RAID2RAID
RAID
IP
QoS
QoS
WindowsSolarisHP-UXIBM-AIXLinuxESXOpenStack Cinder
API
IPv6
IPv4/v6IPv4/v6
SDN
WindowsLinuxMS SQLOracleB/S
Restful API
DHCP
UPS
IP
IP
IPIP
VLANVXLANIPIP
VRF
VRF
IP
DHCPIPIP
Overlay
VXLANVTEPVXLANVXLAN
//
50
AAA
802.1X
PAPCHAPEAP-MD5EAP-PAPEAP-TLSEAP-PEAP-MSCHAPV2EAP-PEAP-MD5EAP-GTCEAP-TTLS
MAC
PCPAD
RADIUS
RADIUSWAPI
LDAP
LDAPLDAPMicrosoft Active DirectoryNovell Directory ServerNetscape iPlanetSUN ONE DirectoryOpenLDAPLDAPLDAPADAD
VLAN
VLAN
MACIP
DHCPHTTPMAC
IPMAC
3000
RogueRogue AP
RadiusMAC
SSID
FFTduty cycle,,
AP
PoEPoEAP
GIS
APSSIDPoE
WLANAP
SessionAPTopNAPFat APFat APAPAPAPAPRadioRadioRadioRadioRogue APRogue
ACAP
APPoE
AP
50
390Gbps
290Mpps
3GB
2U
10/100/1000Base-T96 1G/10G SFP+10LC2
IP
10km
VLAN
1MACVLAN
2VLAN(VLAN ID)4094
3802.1PDSCP/TOSQoS
4Egress Car
1IPv4RIP V1/V2OSPFBGPIS-IS;
2IPv6RIPngOSPFv3BGP4+IS-IS V6
3IPv4IPv6
4IPv66to4ISATAP
802.1xMAC
IP+MAC+PORT
DHCP SnoopingDHCP
SNMP V1/V2/V3RMONSSHV2
2.5Tbps
1080Mpps
2U
2
4840GE6, 300(SFP+,LC)10
,300(SFP,LC)10
USB
RIP v1/2OSPFBGPRIPngOSPF V3IS-IS V6BGP+ FOR IPV6IPV6VRRP
VLAN
/MAC/VLAN
VLAN4094
QINQQINQ
VXLAN /
OpenFlow+NetconfVXLAN
SDN/OPENFLOW
netconf pythonOPENFLOW 1.3
Openflow
SDN controller
FCoE/FC
NPV Fip Snooping
FCF
VSAN
8Kbit/s
QOS
802.1pDSCP
8
PIM-DMPIM-SMIGMPIGMP SnoopingMLDMLD SnoopingIPV6 PIM-DMIPV6 PIM-SM IPv6
SNMP V1/V2/V3SSHv2WEB
sFlow
IP+MAC+PORT
DHCP SnoopingDHCP
MACARPARP
2.5Tbps
1400Mpps
2U
MAC280K
24SFP+24SFP+LC
9640GE8
USB
4
RIP v1/2OSPFBGPRIPngOSPF V3IS-IS V6BGP+ FOR IPV6IPV6VRRP
VLAN
/MAC/VLAN
VLAN4094
QINQQINQ
VXLAN /
OpenFlow+NetconfVXLAN
SDN/OPENFLOW
netconf pythonOPENFLOW 1.3
Openflow
SDN controller
QOS
8Kbit/s
802.1pDSCP
8
SNMP V1/V2/V3SSHv2WEB
sFlow
IP+MAC+PORT
DHCP SnoopingDHCP
MACARPARP
590Gbps250Mpps
48GE4SFP+ 3LC
SFP+1240G
IP
10km
VLAN
VLANVLAN
MACVLAN
VLAN(VLAN ID)4094
VXLAN
VXLAN
VXLAN
OpenFlow+NetconfVxLAN
SDN/OPENFLOW
OpenFlow 1.3
EQUAL
QOS
8
802.1PDSCP/TOSQoS
IPv4RIP V1/V2OSPFBGP
IPv6RIPngOSPFv3BGP4+
IPv4IPv6
IPv66to4ISATAP
ACL
ACl6K
IPv6 ACL
ACL
AC
802.1xMAC
IP+MAC+PORT
DHCP SnoopingDHCP
2416GB24
24*16GbSFP
248Gb,8
8*8GbSFP
POE
598Gbps210Mpps
1244
2
12
40G
IP
10km
VLAN
VLANVLAN
MACVLAN
VLAN(VLAN ID)4094
VXLAN
OpenFlow+NetconfVxLAN
SDN/OPENFLOW
OpenFlow 1.3
EQUAL
RIP V1/V2OSPFBGP
ACL
ACl6K
IPv6 ACL
ACL
AC
POE
POEPOE+POEPOE700W
802.1xMAC
IP+MAC+PORT
DHCP SnoopingDHCP
AMP+2U
SFP+8300SFP+8
SFP4SFP4
10/100/1000M Base-TX4
41HA11
30Gbps
12Gbps
40028
URLVPNapp
1
2
32;
TCPTCPTCPUDPUDPDNSUDPGRETCPUDP
IPIPIP
IP
URL
86URLURLURL
FloodTCnsSYN Cookie
DHCPDHCPDHCPDHCP
FloodTCnsSYN Cookie
IPIPIP
WEB
WEB
0dayAPT
VPNPKI
Web
URL
WEB
15U
6
8
1WebSSL VPN
2244810/100/1000 M34SPF+20
344
40Tbps15000Mpps
5
20Gbps80012
1212
5
6Gbps80010
1212
1IPv4IPv6BGPRIPv2OSPFISISIPv4BGP4+OSPFv3ISISV6IPv6
2WebMACAAA/RadiusSSHv1.5/SSHv2
3VLANVLAN802.1Q VLAN TrunkVLAN4K
4MPLS VPN MPLS VPN
5
6NATNAT(nat server)NATFullcone NATNAT
11
21(CPU)IPVLANVRF
3256
4URL//
5PingIPUDPICMP SmurfTear Drop
1
2snort
3 //////
4
5//DoS/DDoS
6SQLIDS/IPS
7
TFTPHTTP
BTP2P/IM
FTPTFTP
WEB
SNMP v1/v2/v3
RMON
NTP
2U
61IPCPU
200
700
100
WebIE360MstscSecureCRTXshellXftpWinscpFlashfXP
MACMACsafariitem
FTPFilezillaXftp WinscpFlashfXPFTP
Secure CRTXshellrz/sz
ADAD
RDPSSHTelnet
SSHTelnet
RDPVNCX11
FTPSFTP
web
OracleMSSQLMySQLDB2
C/SB/SIEVsphere clientplsql developer MagicWinmailNavicat
/
Excel/
IP
IP
Excel/
RADIUS LDAP AD
USB KeyCA
RadiusGoogle authenticationFreeOTP
IP/IP//
IPIP
/
WindowsLinux/Unix
/
FTP
txtexcelzip
SSHsz/rzzmodem
FTP/SFTP
RDP
///
bat
/
FTP/SFTP
CPU/
RDPVNCTelnetSSH,0.5
htmlExceltxtwordcsvpdf
NTP
consoleWEB WEB
CPU
WEBIP
WEBsyslogsnmp
2000
6
1.5Gbps10016000/S
4
/
IEweb
Web
RadiusPAPEAP-MD5MD5-CHAP
ADLDAPCA
NAT
CPU
windiowslinuxunix
Bypass
httpsB/SSSHserial
#Intel vPro
OEMOEMLOGO
102
X86
5,000,00075 K CPSSSL TPS 2K Key2000
8GB
2.5Gbps56Gbps
10Gbps212K RPS
SSL4Gbps
4CPU, CPU
500GB
Active-ActiveActive-standby
1TCL
2Web
3N+M
#4
5FTP
1SSL
2
3web
4/(Qos)
5/IPCookie
6//
7TCP
8IPIP
9
1
2TOP URLCPU
4tcpdump
2U1100/1000M Base-Tx2100/1000M Base-Tx
8G
2T
#
20000SQL/
400/
4SQL
140SQL
5
OracleSQL ServerMySQLDB2PostgressybaseinformixcacheDBDMGBaseKingBase
1
2wherewhowhatwhenhowoter
3
#4,
5WeblogictomcatWebsphereJboss
6sshrdp
#7
8
9
10
11
12SQl
1400
2
UpdateDeleteSQL
3
4
5SQLIPsqlSQL
6
1SQL
2IPIPMAC
3IPIP
4sql
5SQLsqlTop sql
6
7
8
9
1011
12
13WORD\ PDF
1SQL
2
3
4SYSLOGSNMP
5
1TAPSPAN
2
B/S
IP
1
2
3WebWeb
4WebWeb
5WebCGIWeb
6POC
7Web
8
9
10
11ID
12webshell
13shell
14
OEM
13U1648TB
264664G
3
43264200
164UNIXWindowsLinuxRAID
2RAID 01565060RAID ,
3RAIDRAIDRAID1,
Web
1
2
3
#1,
2
3
1
2
3
10M/100M/1000M
2
2
2
14Gbps
2120000
3
4420
1
2
3
1
2
3. IP1
4tcpipTCP/UDP*.cscpkt*.cap*.pkt*.rawpk*.dmp
5MACIPDNSEmailFTPHTTPMSNYahooCSVLOG
6IP +TCPARPPOP3SMTPICMPFTPDNSRTPHTTP
7MAC
1ARP
2DOS
3TCP
4HTTPPOP3SMTP
5
1U 2U
64Intel 42.2GHz
8G1TBRAID1Gigabit
150001500
124GB160GB
syslog
Perl
IP
SPF
DDOS
SMTPLDAP
ADSSOLDAPPOPRADIUS
IMAP/POP
#1500500
B/S
,
CheckMarkICSAOPSWAT
100
22000
#linux
#
#
:
0day
ziprar7z
#
#
#
#
,P2P
PC
Windows Server 200320082012 Windows xp Windows Server 2003
3LinuxWindows
CPU
IP-MAC
#
#
3GMODEMADSLISDN
URLURL
USBUSB1394PCMIA
#
#U
U
U
UU
U
UU
XP
#Windows XP10
Windows XP
wordexcelppt
IEIE
,,,
,
USB
U
#NGFWVPN
#WindowsWindows XPMAC OS X
802.1XVLANACL
#ACLIPURL
#802.1X
#ADLDAPEmailHTTP
UIPIE
#
ZDNS-T5100
DNS
QPS8
500G
810/100/1000M
HA
web
IPv6DNSSECDNS64IDNsIPv4IPv6
AD
DNS serverfailDDOSAptr
DNS
DNS30QPS
; ; ; ; ; ZONEFILE;
IP
; DNS; DNS64DNSSEC; TFTP;
DNSLOG
SNMPURL
AP
H3C S10510CAPWAP
/AP802.11a/b/g/n/ac/ac wave2
802.11a/n/ac802.11b/g/n
5GHz1733Mbps2.4GHz300Mbps3000Mbps
MU-MIMO
MU-MIMOMU-MIMO6
210/100/1000Mbps(RJ45)
PoE
-10~55
5%~95%
64128WEPWPA802.11iWAPI
AP
AP(SSID)
SSID
AP
1/AP, 802.11ac;
24.0iBeacon
H3C S10510CAPWAP
1802.11a/n/ac802.11b/g/n
802.11ac/n/a:5.725GHz-5.850GHz; 5.15~5.35GHz ()
802.11b/g/n:2.4GHz-2.483GHz(), 2.4GHz/5GHz,
2Bluetooth2.402GHz-2.48GHz
110/100/1000Mbps(RJ45)
5GHz866Mbps2.4GHz300Mbps
PoE
IPv6
IPv4/IPv6NativeIPv6 Portal
TR-069
64128WEPWPA802.11iWAPI
AP
AP(SSID)
802.11e
QoS
SSID/VLANQoS
1
2
3SSIDSSID
iBeaconiBeacon
AP
/AP802.11ac Wave2MU-MIMO
H3C S10510CAPWAP
802.11a/n/ac/ac Wave2802.11b/g/n
LAN410/100/1000Mbps
WAN210/100/1000Mbps
1
USB1
5GHz: 866Mbps
2.4GHz:300Mbps
Poe
TR-069
64128WEPWPA802.11iWAPI
wIPS
SSID
MAC
802.11e
QoS
SSID/VLANQoS
300MAP
/AP802.11ac Wave2MU-MIMO
H3C S10510CAPWAP
802.11a/n/ac/ac Wave2802.11b/g/n
210/100/1000Mbps(RJ45)PoE
12.5W
USB
1USB
5GHz867Mbps2.4GHz400Mbps
802.11a/n/ac : 5.725GHz-5.850GHz ()
802.11b/g/n : 2.4GHz-2.483GHz ()
RJ45
IPv6
IPv4/IPv6NativeIPv6 PortalIPv6 SAVI
TR-069
PORTAL(,)SSIDPortalAPPortalPortalPortalSSID(SSID)LDAP
1
2
3SSIDSSID
VPN
1UX866
120M800
1300
2SSL VPN300
3100
(EMM)App
1SDKAppAndroidiOS
2iOSAndroidApp
3Per AppSDKAPP
(EMM)
1AndroidiOS
2App
3App
4/
5
6EMM
7
8IOS
14EMMEMM
2
3/
#4
5B/SWebCacheWeb
1Local DB LDAPRADIUS//LDAPUSB KEY
2PKICA CACACRL
3EMM5CA
1APPWEBAPP
2APP
3Internet
#
emc cx4-240 DAE
DAE1515600G 15K
coremail
IP
4K
43
4K3840x2160
169
LED
23-80Hz
IPS
8ms
2160p
178
Display Port2
USB3.04
HDMI2
2
100-240VAC50-60Hz
0.5W
i56500 CPU
8GB DDR4
256G SDD
4G
600W
169
44k
DP/Min-DP 4
PCI-E2DIMI4
10/100/1000Mbps
16X DVDRW
720p
Windows710
CPUi57200U
8GB DDR3L 1600
256G SSD
2G
14
169
19201080
LED
4.1
10/100/1000Mbps
MiniDP/HDMI
720p
8
100-240V
Windows 10
1
2
3.
4.
1
2
1
2
3
4
5
#
1
2
3
a.
b.
c.
d.
e.
f.20050
45
a.
b.7*245102
c.
d.
e.
30
130
2
=()100
030
42
ISO 27001 20
02
ISO 20000 IT20
02
ITSS20
02
20.5
02
82
08
1.4
2. #12
3. #11
4.
04
1.20
2. #1250
3. #11100
4.
020
112
02
28
421
04
321
03
321
03
321
03
42-31
04
321
03
1CPU
2
3
3210.5
03
724102220
02
30-2
03