Network Packet Broker 32x 400G QSFP-DD with 2x 25G SFP28 Ports
Network Packet Broker 32x 400G QSFP-DD with 2x 25G SFP28 Ports
PX732Q-T
- Support 32x400G QSFP-DD with 2x25G SFP28 ports, 1RU 1.75inches.
- Traffic visibility to ensure network security in real-time;
- Support Traffic Aggregation, Filtering, Replication, Load Balancing, Correlation;
- Support message truncation, timestamp, message modification, tunnel encapsulation/decapsulation.
- SSL decryption, deduplication, masking, fragmentation reorganization, and out-of-order reorganization.
- Provide network observability and optimize network performance.
Network Packet Broker 32x 400G QSFP-DD with 2x 25G SFP28 Ports, 12.9Tbps Switching Capacity
Network Packet Broker 32x 400G QSFP-DD with 2x 25G SFP28 Ports, 12.9Tbps Switching Capacity
The PX732Q-T Asterfusion network packet broker monitors network traffic in real-time. This packet broker has a 12.9Tbps switching capacity across 32x 400G QSFP-DD ports and 2x 25G SFP28( or 10G SFP+) ports. Powered by the Barefoot Tofino chip, it grants intelligent visibility with aggregation, load balancing, filtering, duplication, and correlation for comprehensive threat detection. This operationally simple solution (centralized platform, intuitive interface, multi-tool support) empowers you to secure, manage, and unlock the true potential of your high-performance network.
Specifications
|
Features
Basic feature
Basic matching
- N-tuple rules with mask (IPv4/IPv6 5-tuple, MAC, Ether Type, VLAN tags, VNI, TCP Flag, DSCP, Fragment message, etc.)
- Exact IPv4/IPv6 5-tuple rules
- Based on MAC information rules, source MAC, destination MAC
- Inner 5-tuple rules with mask
- Inner exact 5-tuple rules
- Supports multi-level concurrency strategies, can execute different traffic strategies on the inbound, intermediate, and outbound interfaces of the pipeline, and supports L2/L3/L4/L7 layer combination policy rules
- Signature rules, payload partial match depth 40 bytes
Flow forwarding
- Forwarding by flow classification
- Forwarding by the specified output port
- Load-balancing output by specified output link group
- Supports normal forwarding of error packets
Load balancing
- Load balancing for policies such as IP 5-tuple, source/destination IP, source/destination IP, source IP/source port, destination IP/ destination port, source IP/destination IP/ source port/destination port, source/destination MAC, etc.
- Load balancing based on inner IP 5-tuple hashing in case of tunnel encapsulation.
- Fault-tolerant load balancing protection mechanism, supporting static load balancing, dynamic load balancing, and elastic load balancing mechanisms.
- Load balancing strategy with weights.
- Multi-level load with flexible and configurable hash seeds.
- Load balanced output within a group after traffic replication.
- Supports fragmentation following function, ensuring that the first piece and non-first piece of the same IP packet are output from the same port.
- Load balanced output from the same source and same destination.
Packet preprocessing
- VLAN tag adding, modifying, deleting
- ns timestamp
- Tagging source port
- Packet slicing, you can set the reserved byte length which based on ACL rules
- BPDU packets are forwarded by default, and BPDU packets can also be discarded
- Source/destination MAC address modification
Tunnel preprocessing
- GRE encapsulation (supporting configuration with IP and MAC address)
- Tunnel encapsulation stripping for GTP, GRE, VXLAN, VXLAN, ERSPAN, CFP, IP over IP, SRv6, MPLS, MPLS in UDP, MPLS in GRE, etc.
- GRE termination (Each port can be configured with IP address)
High reliability
- Support interface master and link group master and backup: when the main port fails, the traffic will be automatically switched to the backup port for output, meanwhile, it supports an automatic recovery mechanism.
- Supports interface linkage and link group linkage: when an interface fails, all the interfaces linked to it will be synchronized down, and supports an automatic recovery mechanism.
- Supports the protection mechanism of single link or link group as backup link between devices, and supports an automatic recovery mechanism.
- When networking across data centers, it supports device self-test, device mutual test, link detection between devices, and cross-device link detection.
Port feature
Port reuse
Supporting single fiber receiving/transmitting
User-defined port
User-defined ingress and egress ports
Port buffer
Supporting data burst buffering
Interface health check
Auto link checking and protecting
Port cascade
Supports cascade port
Loopback
Supporting loopback interface
Management feature
Management
Support serial port, Telnet, SSH, SSLv3/TLS access to WEBUI and other ways to log in to the system
Configuration management
Supports configuration and management of network port IP, the configuration of the gateway, modification of IP/MAC/gateway through configuration files, saving configuration files, clearing saved configuration files, import and export configuration files.
Status monitoring and alarm
Supports reading device information, module presence information, system operation status, power supply status, fan status, etc.
Performance monitoring and alarm
Supporting port status and information statistics, query of peak traffic, real-time statistics of packet loss, port traffic threshold setting, etc.
Rule hit statistics
Support rule hit statistics
System Upgrade
Support online one-key upgrade
Logs and clocks
Support local logs, NTP/PTP clock synchronization
WEB management
Support graphical management, multi-user support, decentralized management; support for cluster management.
Third-party tool management
Support Syslog, SNMP, SNMP Trap, RESTAPI, supporting centralized authentication by RADIUS, TACACS+
Connectivity Solutions
