Network Tap ML-TAP-2810
1- Overviews
- A full visual control of Data Acquisition device(4*10GE SFP+ plus 24*GE SFP ports)
- A full Data Scheduling Management of nework traffic capture and monitoring device(duplex Rx/Tx processing)
- A full packet pre-processing and re-distribution device(bidirectional bandwidth 64Gbps)
- Supported traffic collection & reception of link data from different network element locations
- Supported traffic collection & reception of link data from different switch routing nodes
- Supported raw packet captured, identified, analyzed, statistically summarized and marked
- Supported packet filtering matches, including policy filtering based on quintuple (source IP address, destination IP address, source port, destination port, and protocol number), packet characteristics, and deep identification of packet content
- Supported raw packet output for monitoring equipment of Data Packet Analysis, Protocol Analysis, Signaling Analysis, Security Analysis, Risk Management and other traffic reqirement.
ML-TAP-2810
2- System Block Diagram
3- Operating Principle
The Network Traffic Tap embedded traffic guidance function, which is mainly coordinated by the built-in TCAM traffic identification policy engine, traffic control guidance engine, port media transceiver module (MAC+PHY), and high-speed backplane switch bus. The port media transceiver module collects the traffic and enters the traffic identification matching engine to perform traffic identification matching. The identification matching engine performs high-speed hardware parallel matching based on the TCAM three-state content addressing memory, which can complete high-speed traffic identification of line speed traffic. After traffic identification, the traffic will enter the high-speed switching bus for traffic forwarding, replication, aggregation, or shunting. The traffic control guide engine can accurately control the traffic output interface of each type of traffic identification frame.
4- Intelligent Traffic Processing Abilities
ASIC Chip Plus TCAM CPU
64Gbps intelligent traffic processing capabilities
10GE Acquisition
10GE 4 ports, Max 4*10GE plus 24*GE ports Rx/Tx duplex processing, up to 64Gbps Traffic Data Transceiver at same time, for network Data Acquisition, simple Pre-processing
Data Replication
Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports
Data Aggregation
Packet replicated from 1 port to multiple N ports, or multiple N ports aggregated, then replicated to multiple M ports
Data Distribution
Classified the incoming metdata accurately and discarded or forwarded different data services to multiple interface outputs according to user’s predefined rules.
Packet Filtering
Supported L2-L7 packet filtering matching, such as SMAC, DMAC, SIP, DIP, Sport, Dport, TTL, SYN, ACK, FIN, Ethernet type field and value, IP protocol number, TOS, etc. also supported flexible combination of up to 2000 filtering rules.
Load Balancing
Supported load balance Hash algorithm and session-based weight sharing algorithm according to L2-L7 layer characteristics to ensure that the port output traffic dynamic of load balancing
UDF Match
Supported the matching of any key field in the first 128 bytes of a packet. Customized the Offset Value and Key Field Length and Content, and determining the traffic output policy according to the user configuration
VLAN Tagged
VLAN Untagged
VLAN Replaced
Supported the matching of any key field in the first 128 bytes of a packet. The user can customize the offset value and key field length and content, and determine the traffic output policy according to the user configuration.
MAC Address Replacement
Supported the replacement of the destination MAC address in the original data packet, which can be implemented according to the user’s configuration
3G/4G Mobile Protocol Identification/Classification
Supported to identify mobile network elements such as (Gb, Gn, IuPS, S1-MME, S1-U, X2-U, S3, S4, S5, S6a, S11, etc. interface). You can implement traffic output policies based on features such as GTPV1-C, GTPV1-U, GTPV2-C, SCTP, and S1-AP based on user configurations.
Ports Healt Detection
Supported real-time detection of the service process health of the back-end monitoring and analysis equipment connected to different output ports. When the service process fails, the faulty device is automatically removed. After the faulty device is recovered, the system automatically returns to the load balancing group to ensure the reliability of multi-port load balancing.
VLAN, MPLS Untagged
Supported the VLAN, MPLS header stripping in the original data packet as output.
Tunneling Protocol Identify
Supported automatically identify various tunneling protocols such as GTP / GRE / PPTP / L2TP / PPPOE. According to the user configuration, the traffic output strategy can be implemented according to the inner or outer layer of the tunnel
Unified Control Platform
Supported Visibility Control Platform Access
1+1 Redundant Power System(RPS)
Supported 1+1 Dual Redundant Power System
5- Network Tap Typical Application Structures
5.1 Network Tap GE to 10GE Data Aggregation Application(as following)
5.2 Network Tap 1/10GE Data Distribution Application(as following)
5.3 Network Tap Hybrid Network Traffic Acquisition Application (as following)
5.4 Network Tap Customazition Traffic Monitoring Application(as following)
6- Specifications
|
Network Tap NPB/TAP Functional Parameters |
||
| Network Interface | GE ports |
24*GE SFP slots |
| 10GE ports |
4*10GE SFP+ slots |
|
| Deployment mode | SPAN monitoring input |
support |
| In-line mode |
support |
|
| Total QTYs interface |
28 |
|
| Traffic replication / aggregation / distribution |
support |
|
| Link QTYs supporting Mirror replication / aggregation |
1 -> N link traffic replication (N <28) N-> 1 link traffic aggregation (N <28) G Group(M-> N Link) traffic replication and aggregation [G * (M + N) <28] |
|
|
Functions |
Distribution based on traffic identification |
support |
| Distribution based on IP / protocol / port Five tuple traffic identification |
support |
|
| Distribution strategy based on protocol header the key labeled traffic identifies |
support |
|
| Strategic distribution based on deep message content identification |
support |
|
| Support Ethernet encapsulation independence |
support |
|
| CONSOLE Network Management |
support |
|
| IP/WEB Network Management |
support |
|
| SNMP V1/V2C Network Management |
support |
|
| TELNET/SSH Network Management |
support |
|
| SYSLOG Protocol |
support |
|
| User authentication function |
Password authentication based on user name |
|
|
Electric(1+1 Redundant Power System-RPS) |
Rated supply voltage |
AC110-240V/DC-48V [Optional] |
| Rated power frequency |
AC-50HZ |
|
| Rated input current |
AC-3A / DC-10A |
|
| Rated power function |
150W(2401: 100W ) |
|
|
Environment |
Operating Temperature |
0－50℃ |
| Storage Temperature |
-20-70℃ |
|
| Operating Humidity |
10%-95%, Non-condensing |
|
|
User Configuration |
Console Configuration |
RS232 Interface, 9600,8,N,1 |
| Password authentication |
support |
|
|
Rack Height |
Rack space (U) |
1U 460mm*45mm*440mm |
7- Order Information
ML-TAP-2401 Network Tap 24*GE SFP ports
ML-TAP-1410 Network Tap 12*GE SFP ports plus 2*10GE SFP+ ports
ML-TAP-2610 Network Tap 24*GE SFP ports plus 2*10GE SFP+ ports
ML-TAP-2810 Network Tap 24*GE SFP ports plus 4*10GE SFP+ ports
