Network Packet Broker 64x 100G QSFP28 with 2x 25G SFP28 Ports
Network Packet Broker 64x 100G QSFP28 with 2x 25G SFP28 Ports
PX564P-T
- Support 64x100G QSFP28 with 2x25G SFP28 ports;
- Traffic visibility to ensure network security in real-time;
- Support Traffic Aggregation, Filtering, Replication, Load Balancing, Correlation;
- Support Net flow traffic statistics and header output;
- Support Packet deduplication;
- Time stamping, packet slicing, and VLAN tagging;
- MAC modification, GRE termination, SSL encryption, and decryption;
Network Packet Broker 64x 100G QSFP28 with 2x 25G SFP28 Ports, 6.5Tbps Switching Capacity
Network Packet Broker 64x 100G QSFP28 with 2x 25G SFP28 Ports, 6.5Tbps Switching Capacity
The PX564P-T Asterfusion network packet broker offers intelligent visibility and empowers your security with a massive 6.5Tbps switching capacity, 2x 25G SFP28 pots, and 64x 100G QSFP28(or 40G QSFP+) ports. See everything on your network, including encrypted traffic, with advanced filtering and decryption for comprehensive threat detection. This scalable solution (Barefoot Tofino chip) simplifies operations with a central platform, intuitive interface, and multi-tool support. The 1+1 hot-pluggable power supplies and 3+1 hot-pluggable fan system guarantee uninterrupted operation, while the compact 2U height form factor and low power consumption (705W max) ensure efficiency.
Specifications
|
Quality Certifications
Features
Basic feature
Basic matching
- N-tuple rules with mask (IPv4/IPv6 5-tuple, MAC, Ether Type, VLAN tags, VNI, TCP Flag, DSCP, Fragment message, etc.)
- Exact IPv4/IPv6 5-tuple rules
- Based on MAC information rules, source MAC, destination MAC
- Inner 5-tuple rules with mask
- Inner exact 5-tuple rules
- Supports multi-level concurrency strategies, can execute different traffic strategies on the inbound, intermediate, and outbound interfaces of the pipeline, and supports L2/L3/L4/L7 layer combination policy rules
- Signature rules, payload partial match depth 40 bytes
Flow forwarding
- Forwarding by flow classification
- Forwarding by the specified output port
- Load-balancing output by specified output link group
- Supports normal forwarding of error packets
Load balancing
- Load balancing for policies such as IP 5-tuple, source/destination IP, source/destination IP, source IP/source port, destination IP/ destination port, source IP/destination IP/ source port/destination port, source/destination MAC, etc.
- Load balancing based on inner IP 5-tuple hashing in case of tunnel encapsulation.
- Fault-tolerant load balancing protection mechanism, supporting static load balancing, dynamic load balancing, and elastic load balancing mechanisms.
- Load balancing strategy with weights.
- Multi-level load with flexible and configurable hash seeds.
- Load balanced output within a group after traffic replication.
- Supports fragmentation following function, ensuring that the first piece and non-first piece of the same IP packet are output from the same port.
- Load balanced output from the same source and same destination.
Packet preprocessing
- VLAN tag adding, modifying, deleting
- ns timestamp
- Tagging source port
- Packet slicing, you can set the reserved byte length which based on ACL rules
- BPDU packets are forwarded by default, and BPDU packets can also be discarded
- Source/destination MAC address modification
Tunnel preprocessing
- GRE encapsulation (supporting configuration with IP and MAC address)
- Tunnel encapsulation stripping for GTP, GRE, VXLAN, VXLAN, ERSPAN, CFP, IP over IP, SRv6, MPLS, MPLS in UDP, MPLS in GRE, etc.
- GRE termination (Each port can be configured with IP address)
High reliability
- Support interface master and link group master and backup: when the main port fails, the traffic will be automatically switched to the backup port for output, meanwhile, it supports an automatic recovery mechanism.
- Supports interface linkage and link group linkage: when an interface fails, all the interfaces linked to it will be synchronized down, and supports an automatic recovery mechanism.
- Supports the protection mechanism of single link or link group as backup link between devices, and supports an automatic recovery mechanism.
- When networking across data centers, it supports device self-test, device mutual test, link detection between devices, and cross-device link detection.
Port feature
Port reuse
Supporting single fiber receiving/transmitting
User-defined port
User-defined ingress and egress ports
Port buffer
Supporting data burst buffering
Interface health check
Auto link checking and protecting
Port cascade
Supports cascade port
Loopback
Supporting loopback interface
Management feature
Management
Support serial port, Telnet, SSH, SSLv3/TLS access to WEBUI and other ways to log in to the system
Configuration management
Supports configuration and management of network port IP, the configuration of the gateway, modification of IP/MAC/gateway through configuration files, saving configuration files, clearing saved configuration files, import and export configuration files.
Status monitoring and alarm
Supports reading device information, module presence information, system operation status, power supply status, fan status, etc.
Performance monitoring and alarm
Supporting port status and information statistics, query of peak traffic, real-time statistics of packet loss, port traffic threshold setting, etc.
Rule hit statistics
Support rule hit statistics
System Upgrade
Support online one-key upgrade
Logs and clocks
Support local logs, NTP/PTP clock synchronization
WEB management
Support graphical management, multi-user support, decentralized management; support for cluster management.
Third-party tool management
Support Syslog, SNMP, SNMP Trap, RESTAPI, supporting centralized authentication by RADIUS, TACACS+
Connectivity Solutions
