router-switch @demoploo - Tumblr Blog

Cisco 3850 SFP Fiber Switch Reviews & Overview

Cisco Catalyst 3850 Series is the next generation of enterprise-class stackable Ethernet access and aggregation layer switches support layer 3, 1000Mbps, 24/48 ports, POE&POE+, and is stackable, which provide full convergence between wired and wireless on a single platform.

What Is a Layer 3 Switch?

A Layer 3 switch is a high-performance device for network routing. Layer 3 switches actually differ very little from routers. A Layer 3 switch can support the same routing products as network routers do. Both inspect incoming packets and make dynamic routing decisions based on the source and destination addresses inside. Both types of boxes share a similar appearance.

Layer 3 switches were conceived as a technology to improve on the performance of routers used in large local area networks(LANs) like corporate intranets. The key difference between Layer 3 switches and routers lies in the hardware technology used to build the unit. The hardware inside a Layer 3 switch merges that of traditional switches and Cisco routers, replaceing some of a router’s software logic with hardware to offer better performance in some situations.

Layer 3 switches offen cost less than traditional routers. Designed for use within local networks, a Layer 3 switch will typically not possess the WAN ports and wide area network features a traditional router will always have.

Cisco Catalyst 3850 SFP Fiber Switches, Highlights

Built on Cisco UADP ASIC, support full programmability for Cisco Enterprise Network Architecture

Support for a wide range of pluggable transceiver modules for longer physical distance and enhanced physical security

Integrated wireless LAN controller functionality in Converged Access mode

Cisco StackWise-480 and Cisco StackPower technologies for resiliency

Native Flexible NetFlow (FnF) on all ports for extensive application visibility

Native Cisco TrustSec support for user segmentation and end user/device/location security

Support for Cisco Unified Access with ISE and Cisco Prime

SDN OpenFlow and OnePK ready with support for Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) in a future software release

Catalyst 3850 SFP Fiber Switches, Primary Features

12 or 24 1G fiber data ports at line rate on every port

Two optional uplink modules with 4 x Gigabit Ethernet or 2 x 10 Gigabit Ethernet ports

Cisco StackWise-480 technology to provide scalability and resiliency with 480 Gbps of stack throughput and full stackability with other Cisco Catalyst 3850 fixed GE access switches

Cisco StackPower technology to provide power stacking among stack members for power redundancy

Dual redundant power supplies (AC and DC) and three modular fans, providing higher redundancy

Software support for IPv4 and IPv6 routing, multicast routing, modular QoS, Flexible NetFlow and advanced security features

Single, consistent Cisco IOS XE Software image with IP Base and IP Services, providing an easy upgrade path for software features

Enhanced limited lifetime warranty (E-LLW) with next business day advance hardware replacement and 90-day access to Cisco Technical Assistance Center

Integrated wireless LAN controller capability with up to 20 Gbps of wireless capacity per switch or stack and up to 50 access points and 2000 wireless clients on each switch or stack

More related topics:

Cisco 3750 to 3850 QoS Conversion Commands

The Difference between 3750 MLS QoS and 3850 MQC QoS

How to Use the Auto-Upgrade Feature on the Cisco Catalyst 3850 Switch

The MA5600 is a GE-based IP broadband access device

Huawei's SmartAX MA5600 product series includes the large-capacity SmartAX MA5600 and medium-capacity SmartAX MA5603. The MA5600 is a GE-based IP broadband access device. Regarded as "the aircraft carrier of the broadband access industry", the MA5600 has powerful bandwidth processing capabilities, decent service functions, and sustainably optimized line features. These capabilities and functions help build optimum broadband networks and strengthen their individual competitiveness.

Features

Large Capacity

The MA5600 supports 64-port ADSL2+ service boards with built-in splitters, which enables a single service subrack to provide services for up to 896 subscribers. A MA5600 cabinet, as a result, can provide services for up to 2,688 subscribers. Even with very little space, operators can still provide services to communities with a high subscriber density. The MA5600 also supports 32-port VDSL2 service boards with built-in splitters and 32-port SHDSL.bis service boards.

Improved Digital Subscriber Line (DSL) Access

The MA5600 supports multiple access technologies including VDSL2, ADSL/ADSL2/ADSL2+, G.SHDSL, and G.SHDSL.bis. In addition, the MA5600 supports four-pair G.SHDSL.bis bonding technology as well as long-distance access in Annex L mode, with a maximum transmission rate of 245 Kbit/s over a distance of 6.5km.

Decent Service Functions

To facilitate service operation, maintenance and expansion, the MA5600 has the following service functions: sound IP routing/forwarding capability, multi-protocol label switching (MPLS), pseudo wire emulation edge-to-edge (PWE3), multiple spanning tree protocol (MSTP), link aggregation control protocol (LACP), Ethernet operation, administration, and maintenance (OAM), simple network management protocol (SNMP) v3, Annex M, and Ethernet access.

Enhanced Network Evolution Performance

By supporting end-to-end solutions for smooth evolution from ATM networks to IP networks, the MA5600 can maximize customer network values. With IPv6, the MA5600 can help customers gain future revenue from today's investments. Also, EPON upstream transmission capabilities allow the MA5600 to provide services on FTTx networks.

Applications & Benefits

A pioneer in the IP access industry, Huawei ranked top in the world's DSL market for product delivery in 2009. Huawei has been leading the global IP broadband access market for the last six years.

Huawei's digital subscriber line access multiplexer (DSLAM) products have competitive service functions and good service priority assurance policies, which increase the network bandwidth usage and meet the quality requirements of different services. The MA5600 also supports multiple service access modes, giving subscribers richer services and helping operators build their individual competitive abilities.

The MA5600 can ensure a minimum bandwidth of 30 Mbit/s for each subscriber and supports 1,000 multicast channels for streaming media, such as video on demand, video conferencing, online gaming, high-speed data transmission, high-definition video services, as well as any combination of these services. Such performance enables Huawei's customers to provide customized services for subscribers, which in turn leads to increased subscriber loyalty.

Huanetwork.com(HongKong Kingwei Network Co., Ltd) is an independent ICT products and solutions provider for operators, internet service providers, telecom sub contractor, corporate customers and ICT companies.

Contact information:

Telephone: +852-30501940(Hong Kong)

Email: [email protected](Sales Inquiries)

Address: 3/F, China Fen Hin Bld., 5 Cheung Yue St., Cheung Sha Wan, KLN., Hong Kong

Website:

http://www.huanetwork.com

Born with core strength—Huawei NE40E—X8 Routers

Huawei NetEngine NE40E Series universal service routers are high-end routers, which is designed for core and trunk networks. The series typically used in campus aggregation network, enterprise core networks, the Internet and enterprise campus, IDC network between.

A comprehensive router NE40E-X8 is especially a high-end router support high density 10 Gbit/s interfaces, usually operate at the coer or edge of IP or MPLS networks just like a swingman, simplifying network structure. It was born with line-rate forwarding capability, a well designed quality of service(QoS) mechanism supporting WRED for example, strong service-processing capability, and exllent expansibility.

Simultaneously advanced operator NE40E-X8 is especially Flexible, high-performance core routers for building Internet Data Centers (IDCs), tiered enterprise networks, and for edge routers between campuses. Multi-Service Edge Router (MSER) functions enable video, voice, and data traffic with unified subscriber services management and Hierarchical Quality of Service (HQoS). Consolidates IP aggregation and MPLS functionality in a single, high-availability router, channeling your internet forward to outstanding line-rate. Large-capacity core and edge routers for converged networks supporting video, voice, and data services, with comprehensive user management and accounting features Excellent choice for mission-critical applications in government, transportation, TV broadcasting, finance, and power utilities implementing Smart Grid technologies.

Networking Requirements On the network shown in Figure above, Router B advertises BGP routes with community attributes to Router A, Router A matches the community attributes against the community list, associatestraffic behaviors with QoS local IDs for the matched routes, and apply a QPPB local policy to the traffic transmitted along the routes. Traffic is sent from Router B to Router C by passing Router A. Router B functions as a BGP route sender, and Router A functions as a BGP route receiver. It is required that source-based QPPB be applied to the incoming traffic.

Huawei NetEngine40E-X8 it is our limited shelf products, we can ship the goods to worldwide in short time.

Contact information: Telephone: +852-30501940(Hong Kong) Email: [email protected](Sales Inquiries) Address: 3/F, China Fen Hin Bld., 5 Cheung Yue St., Cheung Sha Wan, KLN., Hong Kong Website: http://www.huanetwork.com

Huawei AR Series Router License Fault Description And Troubleshooting Procedure

When you set yourHuaweiAR series enterprise routers ,you may have this problem of license failures. Here will describes common causes for a failure to activate licenses and the troubleshooting procedure.

License Fails to Be Activated

Possible Cause

The license file does not exist.

The license file and the system software do not match.

The license file is incorrect.

The device ESN does not match that in the license file.

Troubleshooting Procedure

The message "Error: Invalid file name. The file name extension must be .dat." is displayed.

This message indicates that the file name extension of the license file to be activated is incorrect. The license file name extension must be .dat. Activate a correct license file.

The message "Error: The specified file does not exist or is illegal." is displayed.

Ensure that the license file exists or a correct file name is entered.

The message "Info: File has been activated before!" is displayed.

The license file has been activated before. Apply for or purchase a new license.

The message "Info: License File expired." is displayed.

The license file has expired. Apply for or purchase a new license.

The message "Info: License file validation failed." is displayed.

The license file has failed the validation. Apply for or purchase a new license.

The message "Info: License File with ESN or Version mismatch cannot be activated repetitively." is displayed.

The ESN has been activated before or version mismatch has occurred. Apply for or purchase a new license.

The message "No product features present in LK." is displayed.

The license file mismatches the product information. Apply for or purchase a new license.

If the fault cannot be rectified, collect error information and contact the Huawei technical support personnel.

ETU License Fails to Be Activated

Possible Cause

ETU license is not enabled globally.

The function controlled by the license is not enabled.

Resource items are not activated or the number of activated resource items is not large enough.

Troubleshooting Procedure

The message "Error: The ETU license has not been active, please active ETU first." is displayed.

ETU license is not enabled globally. Run the license active accept agreement command in the user view to enable ETU license globally.

The message "Error: The feature does not exist." is displayed.

Currently, the device does not support the control item that you want to activate. Activate control items that are supported by the device.

The message "Error: The base feature has not been activated, please active **** first." is displayed.

**** in this message are the basic items for the required control items. Activate the basic items and then activate required control items.

Huanetwork.com also is a platform for us to learn and share knowledge. You can find the information of the products: FAQ, datasheet, specification and so on, and we has a lot of experience in Huawei FTTx, DSLAM, router, switch, security, WLAN and transport products and solutions. Huanetwork Lab, Pre Sales and After Sales Support Service will give you deep impression.

The more information about installation method or technical support you can consult with our engineer the e-mail address is as below:

[email protected]

More related:

Software and License for Huawei AR G3 Routers

MA5600/MA5603: Configuring the License Function

How to Troubleshoot the Fault When an OLT Fails to Back up Data by FTP

demoploo

What If I Forget the Password for Telnet Login on Huawei Switches?

Methods for forget the password for telnet login on Huawei switches: If you forget the Telnet login password, please log in to the switch through the console port and set a new password for Telnet login. # Take password authentication for VTY0 login as an example. Set the password to Huawei@123. <HUAWEI> system-view [HUAWEI] user-interface vty 0 [HUAWEI-ui-vty0] authentication-mode password [HUAWEI-ui-vty0] set authentication password cipher Huawei@123 [HUAWEI-ui-vty0] user privilege level 15 [HUAWEI-ui-vty0] return <HUAWEI> save # Take AAA authentication for VTY0 login as an example. Set the user name and password to admin123 and Huawei@123, respectively. <HUAWEI> system-view [HUAWEI] user-interface vty 0 [HUAWEI-ui-vty0] authentication-mode aaa [HUAWEI-ui-vty0] quit [HUAWEI] aaa [HUAWEI-aaa] local-user admin123 password irreversible-cipher Huawei@123 [HUAWEI-aaa] local-user admin123 service-type telnet [HUAWEI-aaa] local-user admin123 privilege level 15 [HUAWEI-aaa] return <HUAWEI> save

This methods can be applied for the Huawei switches, also for Huawei S6700, S9300, and S9700 switches.

More related: Huawei switch password recovery How to do If the Root Password of a Device is Lost How to Change the BootROM Password Through BootROM

#Huawei Switches

WS-F6700-DFC3BXL Price, Cisco 4500 6500 7600 Modules WS-F6700-DFC3BXL3Anetwork.com

The network application of the HP MSR 20-1X router

The HP MSR 20-1x is part of the MSR product line which includes MSR20-10，MSR 20-11、MSR 20-12、MSR 20-13 and MSR 20-15. Its target market includes SMB, enterprise branch offices and home offices. Additionally, MSR 20-1x is a business-class router providing high bandwidth access, wireless, VoIP, VPN, QoS, firewall services, etc for customers. It has the capacity to meet the performance, stability, security and management requirements in a range of business scenarios.

Integrated networking solution of large and medium sized enterprises:

MSR 20-1X router small enterprises can adopt comprehensive office business network,using a device to provide integrated communication services including data, video, voice and fax. For a small branch, the MSR 20-1X as the edge access devices and headquartersinterconnection, can realize real-time synchronization of branches and the headquartersoffice, ensure that all aspects of the production efficiency.

* the MSR 50/30 H3C router at the company headquarters, through the Ethernet, DDN(Digital Data Network, digital data network), frame relay, X.25 or SDH network connection of each branch, constitutes the enterprise backbone network; using MSR 20-1X H3C router in the company branches, connecting the remote user by the Ethernet, PSTN/ISDN, providing access service for the home office and mobile office users.

* MSR20-1X routers to provide users with SIP and other mainstream voice communicationprotocol, realize the call / power down for help / dial strategy / fax /E-PHONE various voice service and include type voice interface rich FXS/FXO/VE1/VT1 and other emergency.

* MSR 20-1X router routing and realize the integration design of switching, users canseamlessly with all the characteristics of routers and switches, but also can through theWLAN to access the wireless terminal.

Security service networking application

* the HP MSR 50/30 router in the corporate headquarters, combined with the characteristics of high performance security business, as the enterprise application security service gateway,also can be used as external firewall, ensure the security of the network. At the same time,the exchange module using VLAN isolation and 802.1X function, direct access authenticationof user.

* in the enterprise segment using MSR 20-1X router as a IPSec access, VPN, and MSR 20-1X router through WLAN wireless access terminal equipment.

IPv6 Networking Application:

MSR Series Routers support IPv6 and are compatible with IPv4 network. By adopting thedual-stack technology, MSR Series Routers effectively ensure co-existence of the pure IPv4devices and the pure IPv6 devices in the same network. The following is one of thenetworking diagrams for IPv6 application.

The headquarters network uses HP MSR50 Routers which adopt the IPv6/IPv4 dual-stacktechnology while the branches use the MSR 20-1X Routers. Networking can be conductedwith the IPv4 technology alone or with the IPv6/IPv4 dual-stack technology. For networkcommunications from IPv6 to IPv4, the tunneling technology can also be used, thusimplementing seamless communications between the IPv6 and IPv4 networks.

#HP MSR50 #HP MSR 20

HP CEO said: Microsoft was a partner but now is rival

October 10th news,HP JG237A according to foreign media reports, HP CEO Meg Whitman (MegWhitman) latest Wednesday to the Wall Street analyst introduces HP over the years to reverse the situation. HP turnaround effort is full of drama, however, no growth.

As BusinessInsider points out, we note that in May, when HP results included PC revenuedropped 20% content, Whitman began to let the HP alienating Microsoft Windows.

Whitman did not talk about the Windows equipment at the time of the call, but on Android Tablet Computer and notebook computer of Chromebooks hp. Whitman said, the newstrategy of HP is "multiple operating system, multiple architectures and various shapes of products. We will make consumers need equipment."

It is a dig at Windows 8 and earlier Whitman praised the Microsoft new operating systemwith a 180 degree turn. Whitman in 2012 January said: "we must adhere to the application of Windows 8. I am Windows 8 believers."

Later, HP report PC business once again fell 11% financial report in August. In addition, HPhad to admit that its 2014 fiscal year, total revenue will not be as promised to growth. This is a blow to Whitman's credibility.

Whitman this Wednesday ascribed some growth in Microsoft and Intel hp. She said: "HPtraditional high margin market faces great subversion. Windows and Intel chip devices are facing challenges based on ARM chip equipment. We are seeing competition patternchanges. Intel and Microsoft, the partners are become direct competitors from partners."

Whitman not only say this, and have been doing this, with Microsoft's biggest rival Googlemore closely. This Tuesday, HP and Google has released a new Chromebook notebookcomputer.

Microsoft manufacture their own Surface tablet computer that HP PC partners feel angry,because they compete with Surface. Microsoft also provides $2000000000 in loans to private transactions Dell. Microsoft has just $7000000000 to buy the equipment businessdepartment of nokia.

Intel in the cloud computing HP JE073A and computer security and HP compete in some business. Microsoft and Intel losses are transformed into Google's growth.

#HP JE073A

The network application of the HP S3100V2 series switch

H3C S3100V2 series switch JD320B is H3C company for the construction of high security, highintelligent network requirements and special design of a new generation of Ethernet switch products, based on satisfying the high performance access, provide network management security access strategy and more comprehensive maintenance and easy to use, is ideal forthe secure access layer switch.

The network application 1 : Metropolitan access network scheme

In the metropolitan area network, S3100V2 series Ethernet switches as the access device,through the 100Mbit/s interface to access the user directly, the uplink and the convergence layer (layer three switch is connected with the switch), and through the router connected to the core network, achieve Gigabit to metropolitan area network solution backbone, hundreds of megabytes to desktop.

The network application 2 : multi service bearer network application

The IPTV service requests DSLAM down to the park to enhance the user's access bandwidth, S3100V2 as the DSLAM aggregation switch on the device configuration, flexible QinQ, outer VLAN logo DSLAM or park position, the inner VLAN identifies the user. Unified planning so that we can realize the operators, and meticulous management: VLAN layout is simple, and is not affected by the user side.

Now is a wholly owned subsidiary H3C of HP, they are the original developer of HP 3100 SIEI switches, SI EI is equivalent H3C 3100 to HP 3100 SI EI switch, they have samespecification and same Comware software (developed, so H3C) they have same commandand configuration. H3network.com keeps stock for almost all 3100 SI H3C and EI switches,compare to HP 3100 SI EI price, same switches can help you H3C save 20% to 30%.Besides, with H3network.com big stock, your switches can reach your city in 3 to 5 businessdays. H3network.com can ship to worldwide.

More information about the H3C S3100V2 switch, please view: http://www.h3network.com/3100-si-ei-switch-price_c2

#JD320B

Benefit and function of using the HP swtich

Benefit and function of using the HP swtich, will be shared LAN users into many independentsegment, HP MSR30 reduce the number of competitive bandwidth users, the performance to understand the Internet switch function.

1, parallel communication through support, improve the information throughput switch. Some high-end switches also adopts full duplex technology to further improve the port bandwidth.

2, the virtual network (VirtuaILAN) technology, brings more flexibility for the use and management of switch. The full duplex technology, namely host in sending data packets at the same time, can also receive data packets, ordinary 100M port can be turned into a 200M port, so as to further improve the information throughput.

3, port density can be comparable with the hub, the network system is generally one or several servers, and the vast majority are client ordinary. The client needs to access the server, thus resulting in communication and transaction processing ability of the serverbecome the key to the entire network performance.

4, a large network of traditional users into several groups, each port is connected to a device or connected to a working group, effectively solve the congestion phenomenon. This method is known as the network differential segment (Micro segmentation) technology.

With the Internet switch performance of above, this is a tool of Internet cafes LAN not less than, the switch in order to improve the speed and efficiency of data exchange, increase the bandwidth available for each user, so as to relieve the congestion of network sharing. SomeInternet bar do not use the switch HP MSR50 , you can consider.

#HP MSR50

Fast solution to the HP switch ARP virus

In the HP switch, if it shows the HP JC104A message: Apr 30 07:43:18:753 2000 Longjing ARP/3/DUPIFIP:Duplicate address 192.168.1.1 on interface Vlan-interface101, sourced by 001b-b970-266d <Longjing>dis mac-address 0016-e67c-7c9f. The Mac was found from g1/0/4.

Now, the fast solution as follow:

Enter the interface:

Interface GigabitEthernet1/0/4

Mac-address Blackhole 001b-b970-266d VLAN 101

Then find the machine extraction of network anti-virus, and then cancel the interfaceconstraints JC104A

Interface GigabitEthernet1/0/4

More information about HP(H3C) switch, please view: http://www.h3network.com

Load sharing and link backup of the HP MSR20/30/50 Series Router

Experimental background:

With the continuous expansion of HP MSR900 company size, the network department also apply for thetwo optical fibers, one of which is 10M, and the other one is 20M, the bandwidth asymmetry,request strategy routing at the egress router traffic over the allocation of 2:1, the second two lines each backup, and realizes the transmission network safe and reliable.

Configuration notes:

Since the MSR20/30/50 router does not support user load sharing characteristics based onrouting, can use NQA to automatically detect and static route and strategy through Track linkage to achieve load sharing and backup function.

The configuration steps:

1, equipped with two automatic detection of group, the E0/1 (wan1) and E0/0 (wan2)connection status detection:

NQA agent enable # open the NQA client function (by default in the open state)

NQA entry wan1 1 # create administrator for the wan1/ tag NQA test group 1 and NAQ intotest group view

Type icmp-echo # configured test cases of type ICMP-echo and enter the test type view

Destination IP 1.1.1.2 # configuration testing operation of the destination IP address is thegateway to the E0/1 interface

Next-hop 1.1.1.2 configuration IP packet's next hop IP address

Detection of probe count 3 configuration of a number of NQA test, the default is 1

Probe timeout 1000 configuration NQA detection timeout, the default is 3000ms

Frequency 1000 # testing frequency of 1000ms both test group two consecutive test start time interval is 1s

Reaction 1 checked-element probe-fail threshold-type consecutive 6 action-type trigger-only# establish the linkage of 1, if continuous test failed 6 times the trigger action

Quit

NQA entry wan2 1 # create administrator for the wan2/ tag NQA test group 1 and NAQ intotest group view

Type icmp-echo

Destination IP 2.2.2.2 # configuration testing operation of the destination IP address is thegateway to the E0/0 interface

Next-hop 2.2.2.2 configuration IP packet's next hop IP address

Probe count 3

Probe timeout 1000

Frequency 1000

Reaction 1 checked-element probe-fail threshold-type consecutive 6 action-type trigger-onlyquit

NQA schedule wan1 1 start-time now lifetime forever # start detection group

NQA schedule wan2 1 start-time now lifetime forever # start detection group

Track 1 NQA entry wan1 1 reaction 1 # created in NQA test group specified in the associatedTrack 1 linkage

Track 2 NQA entry wan2 1 reaction 1 # created in NQA test group specified in the associatedTrack 2 linkage

2, the configuration of ACL, 2:1 division of traffic (the premise is the number of users is basically the same, each VLAN, if not according to the actual situation division).

ACL number 3222 # create access control list 3222

Rule 0 permit IP source 192.168.1.0 0.0.0.255

Rule 1 permit IP source 192.168.2.0 0.0.0.255

Rule 1000 deny IP

Quit

ACL number 3333 # create access control list 3333

Rule 0 permit IP source 192.168.3.0 0.0.0.255

Rule 1 permit IP source 192.168.4.0 0.0.0.255

Rule 2 permit IP source 192.168.5.0 0.0.0.255

Rule 3 permit IP source 192.168.6.0 0.0.0.255

Rule 1000 deny IP

Quit

3, the definition of IP unicast routing strategy named Wan, and define two node, then the definition of traffic forwarding rules.

Policy-based-route Wan permit node 1 # defined strategy of Wan, and create a strategy for 1nodes (nodes is small, the higher the priority. When the message satisfies all the if-match clause of the node is allowed by the apply clause node filtering and enforcement of the node,such as message does not satisfy the if-match clause of the node, the message will use thestrategy of the next node matching.)

If-match ACL 3222 # definition matching rules

Apply IP-address next-hop 1.1.1.2 track 1 # specified action, satisfy the matching conditionnext hop to the 1.1.1.2 if the event occurs when the Track state is positive, the configuration is effective, can guide the forwarding; event occurs, Track state is negative or invalid, the configuration is invalid, ignored the configuration items when forwarding.

Quit

Policy-based-route Wan permit node 2

If-match ACL 3333

Apply IP-address next-hop 2.2.2.2 track 2

Quit

In 4, and LAN switches connected port enable policy routing and forwarding:

Interface e0/2

IP policy-based-route Wan

5, configure a default route, when any WAN link fault occurs, the traffic can be forwarded toanother link:

IP route-static 0.0.0.0 0.0.0.0 1.1.1.2 track 1 preference 60 # static routing and tracking group 1 binding

IP route-static 0.0.0.0 0.0.0.0 2.2.2.2 track 2 preference 100 # static routing and trackinggroup 2 binding

Note: Generally speaking, the policy routing priority is higher than common routing, a message according to the routing and forwarding. If no matching strategy routing all the conditions, and in accordance with the general routing and forwarding. But for the configureddefault next hop forwarding, is the first general routing, if not match, then the HP MSR20 strategy ofrouting and forwarding.

#HP MSR20

HP the fifth generation Emulex fiber channel technology, excellent performance

The new Demartek laboratory JG238A evaluation shows, the fifth generation Emulex LightPulse fibre channel (FC) based on the host bus adapter (HBA) storage solution in performance andpower is much better than the solution on the generation of 8Gb based on FC. Demartek labHP StoreFabric SN1000E provided by the Emulex 16Gb FC HBA and use all flashconfiguration of HP 3PAR StoreServ 7450 HP SN6000B 16b FC storage system switcheswere tested, results showed that HP -Emulex solutions for backup / restore, client virtualization, software services, OLTP database and rich media storage intensiveapplications they need excellent throughput, low delay and network storage performance.

Demartek in the data warehouse work load simulation system, Emulex provides the fifth generation of Emulex fiber channel technology based on HP StoreFabric SN1000E 16Gb FCHBA and 8Gb FC generation were tested, including the main test results:

Delay time: HP StoreFabric SN1000E 16Gb lower than 8Gb FC FC HBA delay HBAdecreased more than 50%, improves the production efficiency of data center;

Easier configuration: replace the old 4Gb and 8Gb FC HBA, HP StoreFabric SN1000E 16GbFC HBA can provide a simple and convenient, plug and play performance upgrade;

Faster: the use of HP StoreFabric SN1000E 16Gb FC HBA, finished 6 with actual userdatabase work load time, than using 8Gb FC HBA to shorten 26%.

Double peak throughput: HP StoreFabric SN1000E 16Gb FCHBA's new fifth generationEmulex fiber channel technology based on peak throughput can be provided, compared with 8Gb FC HBA 2 times, can further improve end-user in work load fluctuations or load peakexperience.

Demartek President Dennis Martin said: "our work load test database shows, compared with the previous generation 8Gb HBA, HP StoreFabric SN1000E 16Gb FC HBA to realize thedouble peak throughput, delay is reduced by more than 50%, work load completed 26% faster. We conclude that -- such as speed of fifth generation Emulex fiber channel technology that faster storage network technology is the best choice for use with SSD, more and more enterprise data center in the future will use this technology."

To sum up, testing and evaluation, the fifth generation of Emulex fiber channel technologyEmulex and brocade HP StoreFabric may provides the powerful performance and powerperformance, so as to meet the growing requirement -- such as the deployment of a virtual server, database application, SSD, flash memory environment. Using these solutions canfurther optimize the IT resources, while the more large-scale virtualization deployment andcloud initiatives to achieve JG239A the highest performance

More: http://abing.over-blog.com/

#JG239A

What is the diffrence of the HP JC099A and HP JC103A

Question: What is the diffrence of the HP JC099A and HP JC103A?

Answer: HP 5800-24G-PoE+ (HP JC099A): 24 10/100/1000BASE-T PoE+, 4 10G/1G BASE-X SFP+, 1 Interface Slot, PoE+, AC Power, with Fan, POE Switch

HP 5800-24G-SFP Switch (JC103A): 24 100/1000BASE-X SFP, 4 10G/1G BASE-X SFP+, 1 Interface Slot, 2 Power Slot without Power, with Fan, Non-POE Switch

They all Support 1 Extended Slot.

More information, please view: http://www.h3network.com

Now H3C is a wholly owned subsidiary of HP, they are the original developer of HP 5800 5820 5830 switches, H3C 5800 5820 5830 data center switch is equivalent to HP 5800 5820 5830 data center switch, they have the same specification and same Comware software (H3C developed), so they have same command and configuration. H3network.com keeps stock for many H3C 5800 5820 5830 switches, compare to HP 5800 5820 5830 price, same H3C switches can help you save 10% to 30%, also with H3network.com big stock, your switches may reach your city in 3 to 5 business days. H3network.com can ship to worldwide.

More information, please view: http://www.h3network.com

Security configuration of the cisco routers

1 modify the default password! Huawei Transmission Card

According to the survey, 80% breach of security incidents were caused by weak password.The network has the most extensive default router password list. You can be sure of in some places, someone will know your birthday. SecurityStats.com website maintenance, adetailed list of available / unavailable password, a password and reliability test.

2 IP directed broadcast (IP Directed Broadcast)

Your server is very obedient. Let it do what it can do, and no matter who issued instructions.The Smurf attack is a denial of service attack. In this attack, an attacker using a source address spoofing to network broadcast address to send you a "ICMP echo" request. This requires responded to the broadcast request all hosts. This will at least reduce the performance of your network.

Reference the router information file you, know how to close the IP direct broadcast. For example, "Central (config) #no IP source-route this directive" will IP directed broadcastaddress Cisco router.

3 if possible, shut down the router HTTP settings

As the Cisco technical note briefly explains, identification protocol used by HTTP is equivalent to the entire network to send a non encrypted password. However, unfortunately,the HTTP protocol is not a valid provisions for verification or one-time password password.

Although this is not encrypted passwords for you from a remote location (such as home) to set your router may be very convenient, but, you can do things others can still be. Especially if you are using the default password! If you have remote management router, you mustensure that the use of SNMPv3 and above version of the protocol, because it supports morestrict password.

4 block ICMP Ping request

The main purpose of Ping is currently being used by the host recognition. Therefore, Ping is usually used before the cooperative attack larger reconnaissance activities. By eliminating the response ability of the remote user receives Ping requests, you can easily avoid thescanning activity neglected or defense for those looking for easy targets for "script kiddies"(script kiddies).

5 to prevent the IP source address spoofing

In the Cisco router, we can use the following two methods:

A at the boundary of the network, the implementation of IP source address spoofing filtering

Stop one of the most simple and effective method for IP source address spoofing is by using the inward at the border router access list, limit the packet network in downstream is inallowable address range, is not in the allowed range of data will be deleted. At the same time,in order to trace the attacker, you can use the log record is deleted data.

B, the use of reverse address to send

Use access control lists to do IP restriction in the lower reaches of the entrance, is the IP address based on the downstream section. But in the upstream of the entrance, into the dataIP address range is sometimes difficult to determine. In the scope of the filter can not be determined, a feasible method is the use of reverse address to send (Unicast Reverse PathForwarding).

Reverse address transmission is a new version of the IOS Cisco router properties provide,referred to as uRPF.

The work principle of uRPF is: when a router receives a packet in an interface, it will search for CEF (Cisco Express Forward) list, verify the existence of the receiving interface between the source address in the specified routing, namely reverse lookup path, verify itsauthenticity, if there is no such the path passes the packet to delete.

Compared to the access control list, uRPF has many advantages, such as: spend less CPU resource, can adapt to the dynamic change of router routing table (because the CEF tablewill follow the dynamic routing table and update), so less maintenance, less influence on the performance of router.

URPF is based on the interface configuration, configuration commands are as follows:

IP CEF (config) #

(config-if) IP verify unicast reverse-path #

Note: the implementation of uRPF, CEF must be a global open, and is enabled huawei Metro card in theconfiguration interface.

more: http://huaweih3c.blogspot.com

#huawei Metro card

Load balancing classification of router

Data flow service is what we OSN 1500B often say that the NetFlow, it is a network protocol, it collects IP traffic information as the recording, and then send them to a collector for traffic analysis, is a kind of new technology is gradually perfect.

The main function of NetFlow is that it can provide analysis and capacity planning, trends anddata priority information network for service providers and enterprises. This technique can also be used for IP billing application and service level guarantee based on (SLA) calibration service.

The working principle, NetFlow is: NetFlow recorded first initialized data of IP packets, such as IP protocol type, type of service (ToS), interface identifier, and then, in order to more effective for data matching and counting, NetFlow let the subsequent data transmission, in the same data stream at the same time, the they use their respective services, such as security filtering, QoS strategy, traffic planning. Real time data is stored in the NetFlowcache, by reading the instructions can regain.

Two, on the basis of NetFlow, Cisco, and the NetFlow policy routing (NPR) technology. TheCisco IOS service based technology, offers traffic planning, IP pre classification function,NetFlow provides a mechanism for efficient, high performance for policy routing.

The NPR also supports the CEF system structure, so it can be used in distributed platform.

Three, distributed switch of NetFlow function and NetFlow collector tool can monitor application flow, flow measurement performance with the change of time, can also help to ensure that the capacity planning, according to different application requirements and reasonable allocation of I/O resources to the application, if the performance of the ITadministrator to monitor in the application of flow virtual environment for running, can enabledistributed flow monitoring in the switch.

Four, distributed switch NetFlow on port group layer, single layer or layer enabled uplink port.When in port layer configuration NetFlow, administrators should choose NetFlow covering the label, this will ensure that the port group layer NetFlow is disabled, but also can monitor the flow.

Five, in the process, different parameter control, should according to the relevant informationto install your environment in the collector tool, to configure the collector is arranged in the IPaddress and port, the advanced settings parameters allows you to timeout and sampling rateflow control. In order to change the number of information collection for a flow, you can change the sampling rate.

Six, when you want to see the collector tool, the collector tool is part of a VDS IP address,rather than as individual hosts all traffic information management network IP address, VDSaddress configuration of IP is very useful. Due to the lack of VDS IP address input, the collector tool will provide flow detailed information on each host management network IP address.

Effects of seven, NetFlow function of CPU depends on the number of flows in your environment and flow operation flow rate. If you think that your environment has a lot of traffic,and that CPU resources, you can use the control to provide the NetFlow settings to choose to monitor flow. You can change the sampling rate or choose to monitor internal flow.

In addition, you can selectively enable or disable the port or port NetFlow, as customersstarted virtualization layer application, they will need the right tools to manage theseapplication SLA requirements. VSphere 5 platform NetFlow function can monitor these onelayer application flow, but also for cyber source capacity planning.

Data flow service is what we often say that the NetFlow, it is a network protocol, it collects IP traffic information as the recording, and then send them to a collector OSN 2500 for traffic analysis, is a kind of new technology is gradually perfect.

More information, please view: http://www.huanetwork.com

#OSN 2500

Trending Blogs

Recently Viewed Blogs

router-switch