24-port Gigabit electrical access switch AP-HD5021-24JF4MN

Full gigabit access to local area networks in large enterprise parks, gigabit access to commercial systems such as healthcare, libraries, convention and exhibition centers, and websites, and gigabit access to server clusters

Product characteristics:

Perfect security protection strategy Virtual switching unit and Anpson self-developed SDN controller cooperate to simplify network management and reduce network maintenance costs

Perfect security protection strategy

ARP viruses or attacks are the most common and influential type of attacks in networks. The AP-HD5021 series switches support multiple modes of ARP spoofing prevention functions. Whether the user automatically obtains an address through a DHCP server or uses a fixed IP address, the AP-HD5021 series can record the user's true IP+MAC address, and when the switch port receives the ARP message sent by the host, it compares the ARP message content with the recorded IP+MAC address, and only forwards the ARP message with the true content, Discard fake ARP packets to shield ARP spoofing from the network and protect network users from ARP virus attacks.

Actively defend against various DDoS attacks in the network. Due to the openness of the network, computers are often infected with viruses, or personnel accessing the network attack network devices and servers for various purposes, resulting in the network being unable to function properly. More common examples include ARP flooding attacks that cause gateways to fail to respond to requests, ICMP flooding attacks that cause network equipment CPU loads to be too high to function properly, and DHCP request flooding attacks that cause DHCP server addresses to dry up and users to be unable to obtain IP addresses to access the network normally.

The AP-HD5021 series provides the industry's advanced hardware CPU protection mechanism: a unique CPU Protection Policy (CPP) that performs flow differentiation and priority queue hierarchical processing for data streams sent to the CPU, and implements bandwidth speed limits as needed to fully protect the CPU from illegal traffic, malicious attacks, and resource consumption, ensuring CPU security and fully protecting the security of the switch.

The AP-HD5021 series provides innovative Network Foundation Protection Policy (NFPP) technology, which can limit the number of ARP messages, ICMP request messages, DHCP request messages, and other data packets sent by users to the network, discard messages that exceed the speed limit threshold, and even identify attacks and isolate users with attacks. Thereby protecting the basic network from the impact of network attacks and ensuring network stability.

DHCP snooping is supported, allowing only DHCP responses from trusted ports to prevent spoofing by private DHCP servers; Based on DHCP monitoring, through dynamic monitoring of ARP and checking the user's IP address, illegal messages that do not comply with binding table entries are directly discarded, effectively preventing ARP spoofing and user source IP address spoofing.

Support multiple business features

The hardware supports IPv4/IPv6 dual stack multi-layer wire speed switching, and can plan and design the network according to the needs of IPv6 networks, providing flexible IPv6 network communication solutions.

Support a variety of IPv4 routing protocols, including static routing, RIP, OSPF, etc., to meet the needs of users in different network environments to choose appropriate routing protocols and flexibly establish networks.

Support a wide range of IPv6 routing protocols, including static routing, RIPng, OSPFv3, etc. Whether upgrading an existing network to an IPv6 network or creating a new IPv6 network, you can flexibly choose the appropriate routing protocol to form a network.

Virtual Switching Unit (VSU)

AP-HD5021 series products support VSU (Virtual Switch Unit) technology. The ability to interconnect multiple physical devices and virtualize them into a single logical device, utilizing features such as a single IP address, a single Telnet process, a single command-line interface (CLI), automatic version checking, and automatic configuration for management. For users, it is just managing one device, but it achieves the efficiency and experience brought about by multiple devices.

Simplified management: Administrators can uniformly manage multiple switches without having to connect to each switch for configuration and management.

Simplify network topology: VSU is equivalent to a switch in the network, connected to peripheral devices through aggregation links. There is no two-layer loop, and there is no need to configure the MSTP protocol. Various control protocols operate as a switch.

Millisecond level fault recovery: VSUs and peripherals are connected through aggregated links. If one device or one member link fails, the time to switch to the other member link only takes 50 to 200 milliseconds.

High scalability: When users add new devices to or leave the virtualized network, they can achieve "hot swapping" without affecting the normal operation of other devices.

Protection investment: VSUs and peripherals are connected through aggregated links, providing both redundant links and load balancing, making full use of all network equipment and bandwidth resources. At the same time, a VSU virtual network system can be formed using any form of 10 gigabit port through any data transmission cable. There is no need to configure additional cables and expansion cards, and there are no restrictions on ports and cable types, effectively protecting users' investment.

high reliability

Support spanning tree protocols STP, RSTP, and MSTP, fully ensuring fast convergence, improving fault tolerance, ensuring stable network operation and link load balancing, using network channels rationally, and providing redundant link utilization.

Support Virtual Router Redundancy Protocol (VRRP) to effectively ensure network stability.

Support for the Rapid Link Detection Protocol (RLDP), which can quickly detect the on-off of links and the unidirectionality of optical fiber links, and support the loop detection function under the port to prevent network failures caused by loops formed by devices such as private hubs under the port.

Support for public Ethernet multi ring protection technology (ERPS), a two-layer link redundancy backup protocol designed according to international standards for core Ethernet. Its loop blocking and link recovery are centralized on the master device. Non master devices directly report their link conditions to the master device, without requiring processing by other non master devices. Therefore, loop interruption and recovery times are faster than STP. Based on the above differences, the link recovery capability of ERPS in an ideal environment can reach millisecond level.

When STP is not enabled, a fast uplink protection function can be provided through the Rapid Ethernet Uplink Protection Protocol (REUP). REUP allows users to provide basic link redundancy even when STP is turned off, while providing faster millisecond level fault recovery than STP.

The key parts of the product are coated with three proofing paint to form a protective film to enhance protection and enhance reliability in harsh environments. The equipment supports up to 10KV port lightning protection capabilities, ensuring stable operation in various harsh environments.

Software Defined Network (SDN)

AP-HD5021 series products follow the development of the times and fully support OpenFlow 1.3. They can cooperate with Anpson's self-developed SDN controller to easily achieve large-scale two-layer architecture networking, and support smooth upgrade of the entire network to SDN networks. This greatly simplifies the difficulty of network management while significantly reducing the cost of network maintenance.

Green and energy-saving

The AP-HD5021 series switch supports automatic port energy saving. If the interface status is always down for a period of time, the system automatically stops supplying power to the interface and automatically enters the energy saving mode; At the same time, it supports efficient and energy efficient Ethernet (EEE). If the port is idle for a continuous period of time, the system will set the port to an energy saving mode. When there are messages to be sent and received, the port will be awakened to resume service through a regularly transmitted monitoring code stream, achieving the effect of energy conservation.

The AP-HD5021 series of products simultaneously meet the EU RoHS standards for environmental protection and safety of materials.

Simple and easy network maintenance

The AP-HD5021 series supports features such as SNMP, RMON, Syslog, USB backup logs, and configuration to perform daily network diagnosis and maintenance. At the same time, administrators can adopt diverse management and maintenance methods such as command line interface (CLI), Web network management, and Telnet to facilitate device management.