Active Member
|
[China]
Address: 708-709 room,G buliding,ZhiGu Technology Park,YinTian Road,Xixiang, Bao'an District, Shenzhen City
Contact name:
Shenzhen Natywish Technology Co., Ltd. |
|
|
GPON OLT switch 10G 8 PON ports + 4 SFP slots + 8 * 10/100/1000M RJ45 electrical ports
----- NTW-G19008C
How to anti ARP spoofing
An open source solution for anti ARP spoofing is ArpON "Arp handler inspectiON". It is a portable ARP handler which detects and blocks all Man In The Middle attacks through ARP poisoning and spoofing attacks with a static ARP inspection (SARPI) and dynamic ARP inspection (DARPI) approach on switched or hubbed LANs with or without DHCP. This requires an agent on every host that is to be protected.
Another method to anti ARP spoofing
Another method to anti ARP spoofing, DHCP snooping, can be used on larger networks, but is limited to DHCP clients, and as such, can be easily circumvented.[clarification needed] The DHCP service on the network device keeps a record of the MAC addresses that are connected to each port, so it can possibly detect if a spoofed ARP has been received. This method is implemented on networking equipment by vendors such as Cisco, ProCurve, Extreme Networks, Dlink and Allied Telesis.
A simple anti ARP spoofing method
A simple anti ARP spoofing method that only works for simple ARP spoofing attacks is the use of static IP-MAC mappings. However, this only prevents simple attacks and does not scale on a large network, since the mapping has to be set for each pair of machines resulting in (n*n) ARP caches that have to be configured.
Product Overview
NTW-G19008C series is a cassette OLT switching device designed by NATYWISH , provides 8 downlink GPON ports , 8 uplink GE optical ports,8*10/100/1000M electrical ports with an expansion slot: 2*10G SFP+ slots ports. 1U height, easy to install and save space.
NTW-G19008C adopts advanced technology in the industry, splitting ratio up to 1:128, supports different types of ONU hybrid networking which minimizes network operator’s investment. It has powerful ethernet service and QoS guarantee, supports SLA and DBA.
Product Advantage
1. GPON: NTW-G19008C series complies with ITU.T G.984.x and YD/T 1475-2006 standard.
2. System capacity: single PON port can support the access of 128 terminals, the overall unit can supports 1024 ONU terminals.
3.Uplink port: support many different types of metropolitan area network interface combination, according to network situation , select 1G or 10M port.
4. Device size: 1U, occupies little space in the computer room,less power consumption, reduces business operating cost.
5. High reliability guarantee, support dual power supply.
Product Feature
1. Provide a high density PON port, overall unit can support 1024 ONU terminals, capacity is larger than regular cassette OLT, every PON port supports splitting ratio 1:128, PON optical transceiver is hot plug design,can select 4 10G ports, support 65km transmission distance.
2. Support PON optical fiber redundancy protection,automatic link road protection switching in the case of optical fiber failure.
3. PON business capabilities support dynamic bandwidth allocation DBA algorithm, dynamic bandwidth allocation scheme (DBA) enables all users to share 2.5Gbps bandwidth more reasonably,achieving reliable quality of service.
4. Support ethernet function, provide effective isolation guarantee mechanism, VLAN isolation, port protection,MAC address binding,IP address binding, port speed limit, queuing technique, flow control technology etc provide technical guarantee for the development of multi service integration .
5. Perfect security protection mechanism, use hardware packet forwarding can detect and filter the characteristic packets effectively, MAC address that supports ARP attacks, automatic protection and automatic user blocking capabilities, prevent protocol messages from attacking. Support all kinds of anti DDoS, CPU over-current protection, VRRP and other equipment protection function, revent illegal or abnormal traffic from entering the network, against multiple viruses attack. Ensure the safety of equipment management.
6. Completely support 2 layer business function, achieve flexible QinQ and QoS function. ACL supports L2 to L7 , deep into the IP message header and 80 bytes message of packet filtering. Provide high quality QoS service quality guarantee for multi service operation.
7.Highly centralized operation management and maintenance, for business, provide a unified network transmission and interconnection protocol, address management, domain name management, security management, user access management. OAM function includes configuration, alarm, performance monitoring, fault isolation and security management etc.
Product Specification
| Model | NTW-G19008C |
| Switching Capacity | 512Gbps |
| Through Put | 100mpps. |
| Service Port | 8*PON ports,8*1.25G SFP slots, 8* electrical ports, 2*10G SFP+ slots. |
| Transmission Distance | 20km |
| Optical Power | +2 ~ +7dBm |
| Redundancy Design | Dual power supply,support dual AC input,dual DC input and AC+DC input |
| Power Supply | AC:input 100～240V 47/63Hz, DC:input-36V～-75V |
| Full load Power Consumption | ≤85W |
| Dimension | 440mm×44mm×380mm |
| Full Weight | ≤3kg |
| Environmental Parameter | Operating temperature:0°C～40°C Storage temperature:-40°C～70°C relative humidity:10%～90%.non-condensing |
Service Characteristic
| Model | NTW-G19008C | |
| Passive optical access | Meet ITU.T G.984.x GPON standard. Meet China Telecom / China Unicom GEPON interoperability standards. Support single fiber 20km transfer distance. Support single fiber passive optical access to 128 terminals. Support 128Bits uplink and downlink three stir encryption function. Support ONU terminal legitimacy certification, illegal ONU registration events reported. Support standard OAM and extended OAM management functions. Support ONU software batch upgrade, regular upgrade, real-time upgrade. Support PON port optical power,accept optical power tested. | |
| 2 layers | MAC | Support MAC Black Hole. Support port MAC Limit. Support 32k MAC address. |
| VLAN | Support 4k VLAN table entry. Support for VLAN based on ports, MAC, protocols, and IP subnets. Support port QinQand flexible QinQ(StackVLAN). Support VLAN Swap and VLAN Remark. Support PVLAN ,achieve port isolate and save public VLAN resource. Support GVRP. | |
| Spanning tree | Support STP/RSTP/MSTP. Support remote loop detection. | |
| port | Support bidirectional bandwidth control. Support static and LACP dynamic converged port aggregation. Support port mirroring image. | |
| Safety | User security | Support Anti-ARP-spoofing. Support Anti-ARP-flooding. Support IP Source Guard to automatically create the IP+MAC+ port +VLAN binding table. Support Port Isolation. Supports MAC address binding to port, port MAC address filtering. Support IEEE 802.1x and AAA/Radius user identity authentication.
|
| Device security | Support the control layer to prevent all kinds of DOS and virus attack the CPU . Support SSHv2 Secure ShGLl. Support SNMP v3 encryption management. Support TGLnet login and password mechanism for Security IP. Support for maintenance user classification protection,prevent unauthorized user access by forcible entry. | |
| Network security | Support every user MAC address ARP traffic detection. Supports ARP message suppression or user blocking for ARP traffic detection. Dynamic ARP tables support one key binding . Support IP address,VLAN ID,MAC address port and other parameter bundling by hand. Support L2-L7 ACL stream filtering of user-defined message header 80 bytes depth. Support port broadcast / multicast message suppression and automatic shutdown of dangerous ports. Support URPF unicast reverse path check to prevent IP address spoofing and attack. Support DHCP, Option82 and PPPoE+ upload user physical location information. Support MD5 ciphertext authentication and the plaintext of OSPF,RIPv2 and BGPv4 message. | |
| Service | ACL | Support standards and extend ACL. Support time range ACL statement. Provide the flow classification and flow definition of IP message header information,includes source / destination MAC address,VLAN,802.1p,ToS, DiffServ ,IP(IPv4/IPv6) address of source and destination,TCP/UDP port number,protocol type etc. L2~L7 deep into IP message header,support 80 bytes of packet filtering. |
| QoS | Limits the speed of the port,the receive and send messages from custom streams,provides regular traffic monitoring for custom streams. Support CAR(Committed Access Rate),Traffic Shapping and Traffic statistics. Supports message mirroring and message redirection for ports or custom streams. Supports priority tags for ports or custom flows,provide the priority remark of 802.1P,DSCP. Support high grade queue scheduling of port and custom stream. Support congestion to prevent mechanism,includes Tail-Drop,WRED etc. | |
| IPv6 | Support SA/DA Classification . Support MLD Snooping. | |
| Multicast | Support IGMPv1/v2/v3 . Support IGMPv1/v2/v3 Snooping. Support IGMP Filter. Support MVR multicast,VLAN register and cross VLAN multicast replication. Support IGMP Fast leave. Support IGMP Proxy. Support PIM-SM/PIM-DM/PIM-SSM. Support PIM-SMv6,PIM-DMv6,PIM-SSMv6. Support MLDv2/MLDv2 Snooping. | |
| Reliability | Loop protection | Support EAPS and GERP ,enhanced ethernet ring network protocol(Link healing time <50ms). Support Loopback-detection,port loopback test. |
| Link protection | Support FlexLink backup,(Link healing time <50ms). Support RSTP/MSTP link healing hardware accekerating ability(Link healing time <1s). Support LACP Dynamic link aggregation (Link healing time <10ms). Support BFD link surveillance. | |
| Device protection | Support VRRP mainframe backup . Support 1+1 power supply hot backup. | |
| Maintenance | Network management | Support TGLnet port real time flow,utilization,receive and send data packet statistics. Support RFC3176 flow analysis,can achieve flow monitoring and statistics of protocol or address. Support LLDP neighbor device discovery protocol. Support 802.3ah Ethernet OAM. Support data logs and 3164 BSD syslog Protocol. Support Ping and Traceroute. |
| Device management | Support CLI,Console port,TGLnet and WEB configuration management. Support SNMPv1/v2/v3. Support RMON (Remote Monitoring)1,2,3,9 ground MIB. Support Support NTP network time protocol. Support GN.LinkⅡ Server Support GN.LinkⅡ Server . Support NGBNView Network Management System. | |
Order Information
| Model |
Description |
| NTW-G19008C | 8*PON ports,8*1.25G SFP optical ports,8 GE electrical ports,2*10G SFP+ports. |
