Name: Niagara 2845/2847 進階型模組式網路流量複製器｜分流器
Brand: 辰亞科技股份有限公司
SKU: NO403

Niagara 2845/2847 進階型模組式網路流量複製器｜分流器

Niagara 2845/2847是一台具備DPI全封包掃描功能的、模組式網路流量複製器｜分流器，可同時使用TAP、Bypass Switch與Network Packet Broker功能模組，以及具備進階封包處理器的Packetron模組，將多樣性的功能集中在一台設備，並100%流量保證不掉包。對封包進階處理包括Packet Slicing、De-Duplication、1:1 Netflow產生器, Layer 7 服務流量辨識與SSL/TLS加解密等。

原廠：Niagara Netowrks

產品說明

N2 Map Niagara 2845與Niagara 2847 是一款多功能的進階型模組式網路流量複製器與分流器，應用範圍涵蓋不同網路架構以及各式應用設備，支援1G/10/40/100G 單/多模Bypass模組連接inline資安設備，以及1G/10G/40G/100G的NPB(Network Packet Broker) 模組。使得inline資安設備除了具備了斷線、當機防護機制外，亦可將多線路低速的網路流量，亦利用Network Packet Broker 模組，將流量匯聚輸出給一或多台較高速的inline資安設備，做流量負載平衡，同時還可將流量額外複製送至其他流量分析設備，可依據不同的需求安裝所需要的功能模組。此外，也可安裝功能強大具備網路流量運算單元的Packetron模組，做更進階的輸出封包處理，如De-duplication、Packet Slicing、Netflow Generator、Data Masking、Layer 7 APP filter、GRE Tunneling、ERSPAN termination，以及支援SSL/TLS加解密功能，是一款功能涵蓋從低階到高階，強大且彈性的網路流量複製器與分流器。N2 模組化網路流量複製器(NPB)產品系列，提供了一個涵蓋網路可視性所有方案的單一多功能平台。

Niagara 2845 / 2847亦具備網路分流器特性，利用Bypass模組與NPB模組組合，連接多台Inline分析工具，同時將來源流量區分出不同工具所需求的流量，分別分流給不同工具分析，例如網頁相關流量給WAF、所有流量給IPS或DDoS，或是先給TLS/SSL工具解密，明碼流量在分流給WAF、IPS、DDoS再回TLS/SSL加密，所有流量再回到網路，以達到Service Chain功能目的。

N2 系列可以安裝各種高密度、高多功能性、處理器加速模組。這種模組化設計支援先進的Fabric Flow技術。支援的功能包括網路分流、旁路、NPB流量複製和封包處理應用服務。

N2系列有1U(Niagara 2845)和2U(Niagara 2847)兩種機箱尺寸，用戶可以依照需求選擇。

支援模組涵蓋了不同層次的網路可視性功能
	InPassive 整合式被動TAP模組：由整合式被動TAP（銅纜或光纖介面）組成。該模組包括整合的被動式分光器，用戶可以在其中指定網絡/監控流量的分配比，以滿足其部署需求。在所有介面上還包括整合的收發器，可將流量傳送到非阻塞交換矩陣背板，以供其他任何模組使用。透過將iPassive模塊與iBroker模塊結合使用，用戶可以根據需要連接任意數量的監控設備。
	InBypass 整合式的旁路模組：包括2個網絡介面和2個設備介面的旁路區段。雙重保護旁路技術在網絡介面上提供了內建的故障安全光學或銅纜中繼器，並在設備端口上提供了用戶可設定的、由設備連接介面產生的Heartbeat信號封包，因此可以自動檢測到設備故障。該模組還包括所有網路介面上的整合式收發器，可將流量傳送到非阻塞交換矩陣背板，以供其他任何模組使用。
	InBroker 整合式網路封包複製模組：由連接到非阻塞交換矩陣背板的輸入/輸出介面所組成。通過連接到背板，於網絡端介面擷取的輸入流量，可以被任何其他模組使用。連接於工具/設備端的輸出介面的監控設備，可以是inline模式或旁接模式的佈署架構方式。

模組式的設計

每1U高度支援四個可熱插拔的模組插槽，每個插槽均指定為單寬插槽，1U高的Niagara 2845，具有1列，共4個插槽，而2U高的Niagara 2847具有2列，共 8個插槽。插槽尺寸和全角托架尺寸。用戶可以根據需要動態熱交換不同的托架寬度模塊，以混合和匹配模塊功能和模塊托架寬度大小。雙寬度模組可以裝入任意兩個相鄰的1寬度插槽位置的空間中。

N2 Series Modular Visibility Nod
Product Name	100G	40G	1/10G	Features
2845	4	16	32	4 slots / 1G – 100G multi-purpose chassis 1U height
2847	8	32	64	8 slots / 1G – 100G multi-purpose chassis 2U height

N2 模組
Product	Description	Front Pannel View
inPassive for 100BaseFX Fiber	inPassive for 100BaseFX Fiber Supports 4 network links. Integrated passive splitters. Integrated transceivers on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inBroker 1000BaseT copper RJ45	8 ports, 4 port pairs. Each pair can be individually configured to function as either a tap, a bypass or a packet broker. Any combination of modes is possible.
inBroker 1000BaseT copper RJ45	24 ports, 12 port pairs. Each pair can be individually configured to function as either a tap, a bypass or a packet broker. Any combination of modes is possible. Module occupies double bay.
inBypass for 1/10Gb Fiber	Supports 2 full bypass segments, each with 2 network ports and 2 appliance ports. Integrated dual rate (1/10Gb) transceivers, on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inPassive for 1/10Gb FiberinBypass for 40Gb or 100Gb Fiber	Supports 1 bypass network link and 2 network ports. Integrated 40Gb or 100Gb transceivers, on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules. Appliance port should be connected by the use of a separate module.
inPassive for 1/10Gb Fiber	Supports 4 network links and integrated passive splitters. Integrated dual rate transceivers, on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inPassive for 100Gb Fiber	Supports 1 network link. Integrated passive splitters. Integrated transceivers on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other module.
inBroker for 1/10Gb	Supports 8 Network I/O ports. Ports are connected to the non-blocking switching fabric backplane for use by any of the other modules.
inBroker for 40Gb	Supports 4 network I/O ports. Ports are connected to the non-blocking switching fabric backplane for use by any of the other modules.
inBroker for 100Gb	Supports 1 network I/O port. Port is connected to the non-blocking switching fabric backplane for use by any of the other modules.
inBypass for 40Gb	Supports 1 bypass network link and 2 network ports. Integrated 40Gb transceivers, on network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inPassive for 40Gb	Supports 2 network links and integrated passive splitters. Integrated transceivers on network ports, ring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inBypass for 100Gb plus 10Gb	Bypass and packer broker combo. Supports 1 100Gb bypass network link (2 network ports). In addition, 8 x 1/10Gb I/O ports. Integrated 100Gb transceivers on network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.

機箱種類

N2 Series Modular Visibility Nod
Product Name	100G	40G	1/10G	Features
2845	4	16	32	4 slots / 1G – 100G multi-purpose chassis 1U height
2847	8	32	64	8 slots / 1G – 100G multi-purpose chassis 2U height

N2 模組

N2 模組
Product	Description	Front Pannel View
inPassive for 100BaseFX Fiber	inPassive for 100BaseFX Fiber Supports 4 network links. Integrated passive splitters. Integrated transceivers on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inBroker 1000BaseT copper RJ45	8 ports, 4 port pairs. Each pair can be individually configured to function as either a tap, a bypass or a packet broker. Any combination of modes is possible.
inBroker 1000BaseT copper RJ45	24 ports, 12 port pairs. Each pair can be individually configured to function as either a tap, a bypass or a packet broker. Any combination of modes is possible. Module occupies double bay.
inBypass for 1/10Gb Fiber	Supports 2 full bypass segments, each with 2 network ports and 2 appliance ports. Integrated dual rate (1/10Gb) transceivers, on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inPassive for 1/10Gb FiberinBypass for 40Gb or 100Gb Fiber	Supports 1 bypass network link and 2 network ports. Integrated 40Gb or 100Gb transceivers, on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules. Appliance port should be connected by the use of a separate module.
inPassive for 1/10Gb Fiber	Supports 4 network links and integrated passive splitters. Integrated dual rate transceivers, on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inPassive for 100Gb Fiber	Supports 1 network link. Integrated passive splitters. Integrated transceivers on all network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other module.
inBroker for 1/10Gb	Supports 8 Network I/O ports. Ports are connected to the non-blocking switching fabric backplane for use by any of the other modules.
inBroker for 40Gb	Supports 4 network I/O ports. Ports are connected to the non-blocking switching fabric backplane for use by any of the other modules.
inBroker for 100Gb	Supports 1 network I/O port. Port is connected to the non-blocking switching fabric backplane for use by any of the other modules.
inBypass for 40Gb	Supports 1 bypass network link and 2 network ports. Integrated 40Gb transceivers, on network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inPassive for 40Gb	Supports 2 network links and integrated passive splitters. Integrated transceivers on network ports, ring traffic to the non-blocking switching fabric backplane for use by any of the other modules.
inBypass for 100Gb plus 10Gb	Bypass and packer broker combo. Supports 1 100Gb bypass network link (2 network ports). In addition, 8 x 1/10Gb I/O ports. Integrated 100Gb transceivers on network ports, bring traffic to the non-blocking switching fabric backplane for use by any of the other modules.