1

Şəbəkə avadanlığı (VPN protokolunu dəstəkləyən yönləndirici)

2 ports WAN Gigabit Ethernet (GE) 4-ports LAN GE managed switch Integrated USB 2.0 1 port Maximum WAN Speed 1000Mbps Maximum LAN Speed 1000Mbps Maximum crypto throughput (bit-rate policed) 250 Mbps FLASH memory 2GB RAM 1GB Console port RJ-45 Dynamic failover protocols such as Virtual Router Redundancy Protocol (VRRP, RFC 2338), Hot Standby Router Protocol (HSRP), and Multigroup HSRP (MHSRP) Support Redundant WAN connections for failover protection and load balancing support IPv4 and IPv6 routing; support IP routing protocol including but not limited to Open Shortest Path First version 2 (OSPF-2), Open Shortest Path First version 3 (OSPF-3), Border Gateway Protocol version 4 (BGP-4) and BGP-4 for IPv6 inter--domain routing; support Advanced Encryption Standard (AES) of 128 and 256 bit key lengths IPsec encryption; support at least fifty (50) IPsec tunnels; and support site to site IPsec tunnel and forwarding of all IP traffics including but not limited to OSPF and Dynamic Host Configuration Protocol (DHCP) traffics via a virtual tunnel interface. support reporting mechanism of flow-based network monitoring and accounting information with no degradation of network operation; support traffic classification based on the following, including but not limited to, ingress physical port, source or destination IP, IP protocol type, IP precedence and application port; support congestion management with first-in first-out queuing and strict priority queuing for low latency traffic; support congestion avoidance with random early detection comply with Class I Equipment Safety Standard support 802.1x, MAC filtering, protected port support GetVPN/DMVPN, Easy VPN support QoS mechanisms like WFQ, CBWFQ, LLQ, HQOS, RSVP, DiffServ support flexible Netflow must support hardware-based encryption must support dying gasp must support trustworthy technologies must support tamper-resistant chip featuring nonvolatile secure storage, SUDI, and crypto services including RNG, key store, and crypto engine. must support creating a unique digital signature for a block of code. Signed images may be checked at runtime to verify that software has not been modified. must support using a X.509 SUDI certificate to verify hardware authenticity. Runs only after the secure boot process has completed and software has been verified to be trusted. must support built-in operating system features that protect against malware being injected into running code. IP Base License for Router Routing protocols, ACL, NAT, QoS, BFD, VRF Lite, IP SLA Responder Security License for Router Includes features to secure your network infrastructure: Zone-Based Firewall, IPsec VPN, Dynamic Multipoint VPN (DMVPN), FlexVPN, Group Encrypted Transport (GET) VPN, Secure Sockets Layer (SSL) VPN Latest Internetworking Operating System software must be included

60

ədəd