-----

:
1.

2.
3.
4.
5.
6.
7.
8.
9.
10.
11.
12.
13.
14.
15.
16.
17.
18.
19.

20.
21.
22.

20 () 100/1000Base-X 8 () 10/100/1000Base-T
1000BaseX 100FX10/100/1000Base-T1000Base-SX1000BaseLX 1000Base-ZX1000Base-BX
4 10Gigabit Base-X SFP+
2 6 () 10GE 2 port
40GE 2 port 10GE 2 port
(Switch Fabric) 296 Gbps () 220.2
Mpps()
MAC address Table 98,000 ()
4,096 () Access Control List
1GB 4GB
(hot-swappable) AC

(Modular)(process)
(Process Recovery)
802.3ad Link Aggregation802.1w RSTP802.1s MSTPPVST+ 9,216
Byte Jumbo Frame
128 () load sharing group
2 Link aggregation
IEEE 802.1ab Link Layer Discovery Protocol

4000 () VLAN Port-basedProtocol-basedMAC-basedIEEE

802.1Q IEEE 802.1ad VLAN
Private VLANVLAN Translation VLAN Aggregation VLAN

IPRIPv1/v2OSPF IS-IS BGP

MPLSH-VPLS MPLS Layer 3 VPN
ECMP(Equal Cost Multipath) IPv6 ECMP(Equal Cost Multipath)
IGMP v1/v2/v3PIM snoopingStatic IGMP MVR(Multicast Registration
Protocol) Multicast VLAN Multicast
Multicast
VRRP VRRP v3
IPv6 RIPng Policy Based Routing for
IPv6
IPv6
A. IPv4 IPv6 Dual Stack DNS client
B.

Ping, Traceroute, Telnet, SSH-2

23.
24.

25.
26.
27.
28.
29.

30.
31.
32.

C. ICMPv6 Neighbor Discovery

D. DHCPv6 Relay
E. IPv6 Access Control List
F. 6to4 Tunnel 6in4 Tunnel
IEEE P802.1Qaz DCBX (Data Center Bridging eXchange ) DCB

:
A. Web based
B. 802.1x User based
C. MAC Radius MAC
D. (multiple supplicants)
E. CPU DoS ACL(Access Control List) DoS
F. SSHv2(Server/Client)SFTPSCPv2RADIUS TACACS+
G. DHCP snooping IP MAC
ACL IP IP
IP spoofing
H. Trusted DHCP Server DHCP Server IP
DHCP Server
I. Gratuitous ARP Protection ARP Validation/Inspection
Gateway IP ARP spoofing/poison
Man-in-the-Middle
(Event)
VLANACL QoS
sFlow netflow CPU
IETF IPFIX( Internet Protocol Flow Information Export)

IEEE 802.1ag Layer 2 Ping traceroute

SNMP v1/v2c/v34 RMONSMONPort Mirroring RS-232
Console PortTelnetHTTP/HTTPS (WebUI)TFTP XML

NTP (Network Time Protocol ) server

ULCSAENFCC

:
1. VPN ASIC
NGFW()ATP()UTM(
)
2. (
license)
3. WEB GUI
VPN

4. 4 () 10/100/1000 Gigabit Copper TX ,

4 () Gigabit SFP Interfaces
5. 1 Console 2 Management
6. 120GB()
7. Firewall ( 64 byte ) 8Gbps ()
8. TCP 6,000,000 () TCP Session
20,000 ()
9. Firewall Policies 10,000 .
10. (Static Route) RIP / RIPv2 /
RIPngOSPF / OSPFv3BGP / BGP4+
11. (Geography)DOS
HTTPS

12. IPv4IPv6NAT/PATNAT64NAT46DoSIPv6 DoSSSL/SSH

(Inspection)
13. Firewall LOG
log
14. 10 ().
15. HTTP/SMTP/POP3/IMAP/FTP
2,500Mbps ()( license)
16. VPN VPN SSLIPSecPPTP and
L2TP VPN Performance 7Gbps ()
17. SnifferPacket LoggingSFlowDebug Flow
18. Radius / LDAP / AD server .
19. Policy-Based ,(Anti-Virus/IPS
/Web/Mail filtering)
20. URL/ Web Content Filter
CookiesActiveX Java Applet
21. Email HELO DNS lookup, Black/white list check, Return
email DNS check .
22. IPS Performance 2.8Gbps ()
23. IP TCP/UDP
24. E-mail
25. (Traffic Bandwidth & Prioritization
Management)(Guaranteed bandwidth)
(Maximum bandwidth)
26. Sub-interface Multiple WAN
27. Fail Over HA- Active-Active Active-Passive

28. Console / http / https / snmp / telnet /ssh

29. ICSA FirewallICSA IPS NSS IPSNSS NGFWNSS

FirewallFIPS 140-2 86 ICSA AntivirusVB100 Common Criteria

EAL 4+ (ISO/IEC 15408)
30.

:
1. :
(1)
Enterasys N3
(2) Enterasys N3 Server Farm
Netflow (SIEM) Netsight

2. :
(1) FortiGate
300A
(2) FortiGate 300A VPN
(FortiGate 500) VPN
(3) (SIEM)

:
1. 45
2.