Must know Six kinds in the switchboard is employed are set up safely
The L2-L4 layer is filtered
The present new switchboards can mostly realize various filtration demands by it is regular to be set uping. The rule has two kinds of modes, one is MAC mode, can realize the machine format segregation effectively according to the source MAC or purpose MAC according to the needs of user, another kind is IP mode, can employ port and purpose to employ ports to filter the data package through source IP, purpose IP, agreement, source; The rule to set up must add on corresponding receiving or conveyance port, when the switchboard, this port, receives or transmits the data, according to filtering the rule to filter the package, whether determine to transmit or abandon. In addition, the switchboard passes the hardware ” logic negate AND gate ” Carry on logical calculus in filtering the rule, realize and filter the rule to confirm, do not influence the data to transmit the speed at all.
802.1X, because of carrying oral access control
In order to prevent the access of the LAN of the disabled user, ensure the safety of the network, on the basis of carrying no matter the oral visit control protocol 802.1X is used widely in wired LAN or WLAN. The switchboard products of new generation not only support Local of 802.1X, RADIUS verification mode but also support the access of Dynamic VLAN of 802.1X, namely on the basis of VLAN and 802.1X, where to insert no matter the users who hold some user account are inner in the network, all will surmount based on port VLAN restriction under the original 802.1Q, insert with VLAN that account number appoint this in the group all the time, this function has not merely offered the flexible facility for inner mobile subscriber’s application of resources of network, while ensured the applied safety of network resource; In addition, in the application of 802.1X, if the port has appointed the item Guest VLAN, the access users under this port if authorized fail or without the user account at all, will become the members of group Guest VLAN, can enjoy this corresponding network resource within groups, this kind of function can be that some some applied colonies of network open minimal resources too, and offered a safe most peripheral access for whole network.
Flow control traffic control
The flow control of the switchboard can be prevented because of the data packet of radio, the multicasting data packet and because the flowrate of data package of Improper unicast data of the destination address over causes the abnormal state of the switchboard bandwidth to load, and can improve the whole efficiency of the system and keep the stable operation of the online security.
SNMP v3 and SSH
The safe network management SNMP v3 proposes the brand-new architecture, concentrate SNMP standards of every edition together, and then strengthen the safety of network management. The security model that SNMP v3 proposes is a security model which is based on users, namely USM.USM is based on what users carry on to encrypts and authorizes the news of network management, particularly encrypt and authorize by the name of user userNmae with some agreements and cipher key Authoritative engine identifier EngineID It determines recommend encrypting the agreement CBCDES, authorize the agreement HMAC-MD5-96 and HMAC-SHA-96 to come ,And time limit offer data integrity and origin authorize and data privacy and news time limit serve through authorize, encrypt, thus prevent effectively it is not authorized user’s modification, mask of the administrative information and are eavesdropped.
As for through the long-range network management of Telnet, because Telnet serves a fatal weakness – -It transmits user name and password by way of cleartext, so, it is very easy to be steal the password by the person out of ulterior motives, attacked, but while adopting SSH to carry on the communication, user name and password have been encrypted, the ones that have prevented to the password are eavesdropped effectively, it is convenient for network management personnel to carry on the network management of long run security.
Syslog and Watchdog
Syslog of switchboard can systematic error in the intersection of daily record and function, the expectation information that users such as the system configuration, change of state, state regular reporting, system backout,etc. presume is conveyed to the server of the daily record, network management personnel grasp the operation conditions of the apparatus according to the information, discover the problems early, dispose and presume and arrange and hinder, run ensuring network peace and steadiness in time.
Watchdog is through presuming a time-recorder, if the time interval internal timer that sets for was not restarted, produce, restart order by one inherent CPU, make apparatus restart, function this can make switchboard can intelligence is restarted automatically under the urgent trouble or unexpected situation, ensure the operation of the network.
One pair of map files
Some newest switchboards, still possess one pair of map files. This function staging failure of firmware,etc. in unusual cases of protection device Can still start normally and operate. The filing system is divided into majoy and mirror two parts and pays and keeps, if a filing system is damaged or cut off, another filing system will rewrite it, if two filing systems are both damaged, then the apparatus will remove two filing systems and rewrite in order that acquiescence is set up while dispatching from the factory, guarantee system’s security and start and run.
Tags: mobile subscriber, source ip, control protocol, two kinds, ip agreement, source mac
And then Wan promise era, IT manages three major keywords
Started since the eighties of the 20th century, after going through development in the past 30 years, IT was employed to enter mature period, IT infrastructure entered the revolutionary era surging forward too. With first H3C appearance of one grade of key exchangers S12500 of data centre of new generation based on 100G platform of China, IT employ afford to promise revolutionary character of era by Wan too ” And then ten thousand promises era ” .
With after there last arrival of IT times is Wan,there are that IT the upgrading the pleasant sensations of speeds of products get to encourage on one hand on we, on the other hand even need it in the face of following higher IT management expectancy. Function -oriented the intersection of IT and administrative system how Wan promise change to manage demand, IT of era, tackle, in the past, it is the question that we must consider.
And then Wan promise era, IT manages three major keywords
It want in after there can promise era fast is Wan respond to by various change of user’s needs, promote one’s own value at the same time, ” merge ” Become IT primary goal of managing development.
And then Wan promise the intersection of IT and one distinguishing mark of times, the intersection of IT and enormous leap of infrastructure, behind this kind of leap, it is complicated and thinning day by day that what we should see is application of enterprise layer. Because Wan can it promises IT that eras needs to be one in management hereafter” Merge ” Various infrastructure, through standardizing sum resources of the agreement Virtual ,What adaptive resources are allocated is systematic.
And in order to achieve the goal of merging, IT management needs putting up into a bridge between IT infrastructure and enterprise’s business, make it obtain virtual resources from the ground floor, and carry on calculation and treatment of the corresponding business, release enterprise’s business system and other service systems through SOA interface, meet link, the intersection of resource and allocate and service requirement that intelligence analyzes. This forms ” one the middle IT system ” Concept. A system needs adapting to dynamic IT resources and changing in the middle, it needs to change at the same time to stand, many manufacturers distributed in autonomy of different regions like this are different can coexist effectively when constructing the system, and permeate an organic whole.
Meanwhile,in after Wan last era,IT administrative system, for lasting resultant of forces better, promote IT and manage value, must break away from that kind in the past only by ” management ” It is a concept of the only purpose, develop into the assistant helping enterprises to make the business decision of the business, incorporating BI commercial intellectual technology in an all-round way.
Utilize IT to manage commercial intellectual technology, the system can help enterprises to carry on product quality, state analysis of the customer service, IT service level analysis, can also carry on profitable analysis, performance analysis, cost analysis, credit rating and unusually deal with etc., help enterprises to take measures in time, adjust and manage the business, reduce the business risk, raise enterprise’s income.
So, by ” merge ” It is a purpose, with ” one the middle IT system ” It is a means, with ” commercial intelligence ” New solution of value, Wan promise IT administrative system really needed era after being.
Tags: revolutionary character, mature period, 20th century, administrative system, virtual resources, enormous leap
Snow leopard OS the ten new characteristics of diagram apple
August 25, apple CEO Jobs announces to the external world, the snow leopard Snowleopard of new generation of apple The operating system will be released formally on August 28.
This Tuesday, InfoWorld recommends ten new characteristics in the snow leopard OS to reader:
1,Self-defining search
Fig. 1
This function is promotion of Finder, users can follow the self-defining hunting zone of need, this range can be all magnetic discs, it can be the present roll too, or presume the search way as from back to forward.
Tags: apple ceo, snow leopard, new generation, hunting zone, operating system, magnetic discs
Deputy Secretary-general of International Telecommunications Union: Global 4G standard stratagem ensuring success is 70% that TD is selected
Zhao thick Lin, Deputy Secretary-general of International Telecommunications Union, shows on Wednesday, TD-LTE technology of China is selected global 4G the network standard of new generation Stratagem ensuring success for 70%,estimate there aren’t this year October.
He says while participating in a meeting in Beijing, China did not have market when generalizing to 3G technology TD technology that year, also without experience, in this case have been all selected, the stratagem ensuring success of the global 4G standard is greater if TD-LTE is selected.
“Each side want, advance 4G, only one kinds of technology preferably from the viewpoint of International Telecommunications Union one’s own technology with strength now, but this kind of situation is unlikely at present. ” Zhao Hou Lin claims. He mentions, including WiMax attempts to enter 4G standard, can not push away, but is trying every possible means too, otherwise the market of the following ten years will be very small.
The intersection of communication and standard of China popularize to world while being difficult, but consider as ” allow 4G ” TD-LTE Long Term Evolution of technology But may break back a office. The insider thinks, WiMax standard that TD-LTE-Advanced of China will be probably defeated at last, become the main standard of communication of global 4G.
Tags: term evolution, international telecommunications union, beijing china, new generation, deputy secretary general
Group’s market of the chip will be up to 155 million dollars on 802.15.4 of 2014
Will contribute to promoting and using IEEE products and application of the semiconductor on 802.15.4 to improving increasingly many interest and increasingly many investment of energy conservation of the building Demand.
Over the next five years, chip group’s production will be supported and used for the family, building and automatic large quantities of wireless sensor networks WSN of industrial building on 802.15.4 ,And the advanced person measures the infrastructure. This will contribute to pushing WSN market of chip group to rise to 155 million dollars of 2014 years from 10 million dollars in 2008 on 802.15.4, the annual compound growth rate during this period is up to 87.9%.
Up until now, point-to-point solution and some AMI infrastructure based on ZigBee by having specially are tested as the foundation, the market is increasing steadily on 802.15.4. According to chief analyst Jonathan Collins of ABI research company: “With the increasingly many concern to the wireless sensor network used for automation and administrative system and small-scale house of commercial building, the wireless sensor network is becoming the key factor developed toward intellectual energy conservation. ”
ZigBee just adopts one of the numerous communication protocols of the chip group on 802.15.4, it has already become the house and administrative system of a large number of investment on the market of commercial building, have, adopt the normal event while being a series of already.
Collins says: “Reason to strengthen energy conservation there are a lot of, environmental problem, cut down the cost and win subsidy and reward. Can be generally usable standardization the semiconductor and WSN support to these projects on 802.15.4 will make the demand further strengthened. ”
Will lay the foundation for WSN of new generation in growth on 802.15.4, and the application of building and energy conservation will contribute to the 802.15.4 the demand of the chip group will be transferred to WSN to dispose. In 2008, the market share used for chip group of 802.15.4 of point-to-point and exclusive solution is 65%. This will drop to 54% by 2014. sha sha is compiled
Tags: environmental problem, jonathan collins, compound growth rate, energy conservation
LSI initiates and constructs the world-class network supplier’s community
LSI The company announces it constructs first strategic cooperation that global leading network technique developer’s community plans, devoted to those and accelerate wireless, wired and developer whose basic framework dispose of enterprise’s network to assemble together through joint efforts. Continue LSI, declare the intersection of asymmetry and nuclear framework more after the development blueprint on will it be February 2009, this cooperation is that the company implements a key step in strategy, aim at through for not sewing and integrating and offering the common platform of the assembly of leading software and hardware supplier in the world, shorten OEM construction period and simplify the development notably.
The whole world of telecommunications and the application of enterprise leads Enea Company of supplying of the real-time operating system with trader and assists LSI to construct developer’s community. Before this, what Enea dSPEED software of nuclear media processor LSI has cooperated with and Enea to face series LSI StarPro optimally. The cooperation scale of both sides will be further expanded, what a software solution of nuclear processor serial products is it including facing LSI network.
President and concurrently CEO Per Akerberg of Enea point out: ” LSI the intersection of network and basic framework and how nuclear the intersection of communication and the intersection of processor and leading Company to develop field. Enea software combined with LSI many nuclear technologies, will introduce the high expansibility solution of new generation, improvement performance, lower costs by a wide margin. ”
At present, the software and hardware assembly that telecommunication OEM manufacturers will come from many different suppliers is put together, could establish in this way to make the network service supplier integrate it to the system in the network conveniently. Strategy of LSI aim at, simplify the intersection of software and hardware and cooperation of supplier, make great efforts, advance, optimize, integrate in advance while being a series of, highly expanded development of platform, thus shorten the listing time of the system of new generation notably, and lower costs by a wide margin.
The vice president Charlie Kawwas of the marketing of LSI network assembly Division points out: ” We are establishing an advanced open platform for telecommunication one grade of networks and enterprise layer network. With the promotion of strategic cooperation, OEM manufacturer put out the system with higher speed, will shorten construction period by a wide margin at the same time, reduce the systematic cost. ”
Nuclear framework allows to integrate a plurality of programmable kernels at the single chip how is the asymmetry, and can change the function of the kernel according to application and network environment. The cooperation that LSI announced a few days ago is planned and what development that basic framework will be employed based on nuclear framework similar cooperation action will be promoted with LSI asymmetry, including deep the detection of data packet, flow management, sound / the video is transferred to yard, encrypting, baseband, controlled and the user level is dealt with etc..
Tags: development blueprint, wide margin, leading network
Intel IDF2011: Insult, move development cycle surmount the Moore law
Reporter Lu YuanYuan’s live report of network world
On April 11, Intel Corporation claims to put out brand-new Intel and insult and move the platform research and develop the coaxiality ” Oak Trail ” before this ,Already readiness OEM of this series of products will have introduced the relevant apparatus successively to the end of the year since May. Companies such as Evolve III, Fujitsu, Lenovo, Motion Computing, Razer and Viliv,etc., because of ” Oak Trail ” The platform has introduced the design which exceeds dull and stereotyped computer and difference that 35 fund innovates, they run in many kinds of operating systems.
In addition, summit of 2011 information technology of Intel IDF held in Beijing Go, Intel will reveal that it is ” Cedar Trail ” to research and develop coaxialities A new generation 32 nanometer Intel insult to last platform. This solution will contribute to driving the new round of fan-free ultrathinly, dispelling the heat one, the ABC of grade of desktopses and integrated machines of Net surfing of low noise, fashion of good performance will design innovation.
Executive vice president and concurrently plateform and apparatus Doug
Tags: kinds of operating systems, vice president, intel idf, move development
One grade of new interfaces of Infor consumer promotes enterprise’s users to experience
The global and leading commercial application software supplier Infor supplying more than 70,000 customers in the world with service claimed to put out one grade of interfaces of revolutionary new consumer a few days ago — Infor Workspace, the users by promoting enterprise’s application system use and experience. Infor Workspace is headquartered in Microsoft SharePoint and key scientific research input, the users offering new generation to user by combining general user interface, context cooperating and commercial intelligence experience. It allows users to visit the business function voluntarily that this kind of user on the basis of the role experiences, and make policy while carrying on in the familiar environment really.
Infor large Chinese Yu QiChang, general manager of district shows: “Though the interface has never been stopped since the commercial application software is put out when being improved, but Infor Workspace is a kind of brand-new scheme. It is that a kind of step-shaped function progresses, reform the user, software and user cooperation way each other completely, business and social tool will not be separated again. Infor Workspace exactly mixes their seamless together with, makes users and the interdynamic of the global colleague as easy as using the application software. We call this socialization of the enterprise, and we believe it not merely will cause the promoting by a wide margin of staff’s satisfaction that such new users experience, will also cause the prominent promotion of the productivity, performance and investment repayment. ”
Through combining the procedure, analysis and enterprise’s application software of the trade, Infor Workspace has offered brand-new consumer’s users of grade to experience, including that simple point log on, familiar with appearance, step the system ‘ Including the inside or cloud disposes the way Seamless navigation,etc..
Infor Workspace is simple and apt to use, easy to understand, aim at letting users study, question, propose and share the experience in a brand-new way.
Infor Workspace offer real-time the intersection of context and commercial intelligence help to realize faster, more accurate decision.
Infor Workspace is that the first set of tools allows the utility program to be intersystem and coexists, and provide the external information for user, including KPI, reminding and directing against the other tools of the key function of the utility program dynamically. These tools include:
Offer position of goods, the mapping tools of the stock, assets and supply chain network visuality.
Offer key currency and time conversion information for the company that is managed in the globalized business environment now.
Because these tools are perception type of the context, so they can come, predict and meet demand and interest of user automatically in the intersection of business and function that particular moment carry out according to role and them of user.
Utilize Infor Workspace, it can monitor by reminding the management tool automatically user about state of task or foundation service level agreement come management services initiative to challenge.
Infor Workspace can already be suitable for Infor ERP LN at present, Infor ERP SyteLine, Infor EAM, Infor FMS SunSystems and Infor Expense Management software, and expected to become the standard interface based on Infor application software of the browser gradually.
Brewster Dairy chief information officer Dale Brittan shows that ” screens the machine format work from a plurality of application systems, have hindered our staff from being absorbed in the ability of the important work greatly, because Infor Workspace can be through unifying all relevant information when single interface and reminding users such as standard procedure to present the unexpected change and relieving oneself according to the working function Take action immediately, so has improved us staff’s productivity greatly. ”
Tags: software supplier, user interface, few days
The mixed matrix of the high standard solves the difficult problem of the video conference
Achieve Damien and release varied series H-Mix to insert the card type mixed matrix of high standard triumphantly a few days ago newly, and the stiff card products because of all kinds of of this serial matrix independently. The high clear mixed matrix type of figure introduced this time includes: H-Mix4, H-Mix8 and H-Mix16, support respectively
The way signal is input on 4/8/16, signal is exported on the way on 4/8/16. The matrix of new generation has solved a great deal of problems in the systematic construction of high clear multimedia meeting, and saved the systematic operating cost, stablizing system, signal is lost small and transmitting the distance far and maintaining the side
Relieve oneself. “The video signal that H-Mix Series series matrix is suitable for many kinds of forms is input, exported and exchanged. ” Create Damien’s products triumphantly newly
Director Xu XiangWei tells reporters, ” make use of this characteristic, H-Mix Series series matrix can follow users’ demand, choose the appropriate video form to input, export the card, thus has avoided using too many video converters, have saved the systematic cost, reduced
Crash rate, lasting video signal and be lasted decay that be caused too much of signal, and realize whether there aren’t picture and chime high-fidelity. ” In addition create Damien, introduce cooperate with H-Mix series the intersection of host computer and use newly while being triumphant, adopt whom stiff card design high to input while being clear independently
Board card, high clear output board card, simulation mark clear output board card, optic fibre high and clearly and output the card, two routes HD-SDI signal inputting and two routes of HD-SDI cycle output board cards.
It is reported, create Damien company and further strengthen cooperation with GDS, AMX, Revolabs, YAMAHA Company triumphantly newly, jointly introduce the favourable set menu of video conference, thereby attract the concern of the regional agent.
Tags: serial matrix, new generation, card simulation, video signal, systematic construction
The mountain specially puts out the power managerial expert Castle 6-20K of new generation
In order to meet user’s supporting and change of other demand characteristics under new period, mountain special the electron ‘ Shenzhen Limited company is introduced the power managerial expert Castle 6-20K of new generation. The power managerial expert of new generation is outside protecting the design idea with original castle serial UPS and making the craft, upgrade original machine function and performance in an all-round way, make it have stronger adaptability and dependability. Meanwhile, through abundant and overall selecting the fittings to be designed, give customer more choices and more individualized consumption to experience.
The special castle serial UPS of mountain sells well on the Chinese market for more than ten years as the core force in the mountain local product product line, its reliable performance and high added value have good reputation in the customer. Of new generation the intersection of power and expert in careful investigate present electric state of user and support changing, having upgraded the castle serial UPS in an all-round way, its performance is more outstanding, mainly display in the following several points:
1. High performance and high dependability
The power managerial expert Castle 6-20K of new generation adopts IGBT to go against becoming device and PWM technology, the volume is light and handy, the noise is low, overload, short out to UPS, the battery voltage is passed low, it has thorough protection functions that UPS temperature is too high. Detect examining and pass protection of temperature, management of charging and discharging of intelligence,etc. through the effective temperature, lengthen the machine life-span, protect the electric security of system. Meanwhile, adopt PFC power factor to correct, power factor> 0.95, possess the cold starting and self-starting function, guarantee the apparatus can be started under any circumstance, the dependability of the great security system.
2. High usability
Usability is to weigh UPS proportion of systematic normal running in unit time, the higher usability is, the greater value the ones that represent and create for customer in unit time are. Specially the power managerial expert Castle 6-20K of new generation adopts the parallel connection of N 1 to be redundant and designs, can connect 3 UPSs in parallel together directly at most on the mountain, offer the redundant scheme of power of high usability, meanwhile, during maintenance, can take the maintenance in year, needn’t cut off system, run, lower maintenance time.
3. Flexibility and expansibility
Adopt the available disposition, reserve time can be from 10 minutes to several hours, using the demand on the basis of the customer, customize totally different power solutions, can connect the battery group of time delay to UPS at the same time, will not interfere with the work of UPS. It is designed, is extended flexibly that it is redundant that the castle power managerial expert of new generation offers the parallel connection of N 1.
4. Advanced communication function
The power managerial expert Castle 6-20K of new generation adopts RS232 communication interface and RS232 communication thread, can be according to employing the need to add communication boards such as SNMP, AS400, CMC card,etc., make UPS realize high intellectuality, match management software of power such as Winpower, can realize the intellectuality of the power protection system is managed. Under the environment of many kinds of computer operating platforms, information and incident record that can send out the trouble and report an emergency and ask for help or increased vigilance to users, and realize that shut down to different servers automatically and completelies.
Tags: protection functions, added value, several points, limited company, chinese market