Tn thit b, STT 1.

1 Quy cch thit b theo thit k k thut c duyt Thit b nh tuyn JUNIPER MX80 - nh tuyn mng WAN - Ti thiu 10 cng GE Base-T - H tr ti thiu 04x10GE - 01 Console Port - 01 USB Port NA NA - 01 Console Port - 02 USB Port HP HP A6600 series (HP ngh A6602)

A6602 4,5 Mpps

- Forwarding Rate ti thiu: 60 Mpps A6604 9 Mpps A6608 18 Mpps A6616 36 Mpps

- Ngun AC, cp ngun - Router Chassis base c ti thiu 02 Slot m rng Line Card - BGP Routes: 1M - OSPF Routes: 1M - IS-IS Routes: 1M - BGP peers ti thiu 60 - RIP instances ti thiu 60 - nh tuyn tnh ti thiu 1M - Source-based routing - Routing Policy - Equal-cost multipath (ECMP) - Reverse Path Forwarding (RPF)

02 Slot

- LDP - RSVP-TE - Traffic Engineering - Layer 3 2547 VPN - Layer 2 VPN - Virtual Private LAN Service (VPLS) - Diffserv-aware Traffic Engineering - MPLS Detour - MPLS Fast Reroute Link Protection - MPLS Fast Reroute Node Protection - MPLS Point-to-Multipoint (P2MP) Traffic Engineering - VRRP - IETF Graceful Restart - Policing & Shaping - Class Based Queuing with Prioritization - WRED - Queuing based on VLAN/VC/VP/DLCI/Interface/Bundles - Queuing based on VLAN/VC/VP/DLCI/Interface/Bundles - H tr cc giao din qun tr WEB, CLI, XML, Script, Telnet, SSH - SNMPv2 and SNMP v3 Xut x 1.2 Thit b tng la SRX650 - Nng lc Firewall phi m bo ti thiu 6.4 Gbps G7 FortiNet FortiGate FG-620B 16 Gbps (up to 20 Gbps) Antivirus 350 Mbps

IPS 1Gbps IPSec VPN 12 Gbps (upto 15 Gbps) - Chassis, 2GB Memory, Dual P/S, 1GB Flash - 16 cng 10/100/1000 Base-T - Cung cp tnh nng IDP - USB Port: 2 - S port Ethernet 10/100/1000 base TX ca thit b cho: 20 - S Slot m rng Line Card: 8 - C kh nng nng cp Antivirus - C kh nng nng cp IPS - C kh nng nng cp Anti-Spam - C kh nng nng cp WEB-Filtering - m bo kh nng chy ng thi cc tnh nng trn (IPS, AV, AS, WF) - Network attack detection - DoS and DDoS protection - TCP reassembly for fragmented packet protection - Brute force attack mitigation - SYN cookie protection - Zone-based IP spoofing - Malformed packet protection - BGP routes khi active UTM functions: 512K - OSPF routes khi active UTM functions: 512K - Source-based routing - Chassis, 1GB Memory, Dual P/S, 512M Flash - 20 cng 10/100/1000 Base-T (max 24) - USB Port: 2

01 Slot AMC

- m bo kh nng chy ng thi cc tnh nng trn (IPS, AV, AS, WF)

512K 512K

- Policy-based routing - Equal-cost multipath (ECMP) - Reverse Path Forwarding (RPF) - IGMP, IGMP Proxy - Multicast inside IPsec tunnel - PIM-SM/SSM - Active/Active - L3 mode - Active/Passive - Transparent & L3 mode - Configuration synchronization - VRRP - Session synchronization for firewall and VPN - Session failover for routing change - Device failure detection - Link failure detection CLI, Console, Web Interface, SNMP v1,v2,v3 - Bo v IDP, IPS, VPN, DoS, DDoS Xut x Certifications Thit b chuyn mch trung tm (Core Switch)

- Policy-based routing

- Bo v IDP, IPS, VPN, DoS, DDoS G7 ICSA Labs: Firewall, IPSec, Antivirus, IPS, Antispyware HP A7500 series (HP ngh A7506) A7506 768 Gbps 488 Mpps A7510 1152 Gbps 714 Mpps

EX8208 - m bo kin trc chuyn mch phn tn - Nng lc chuyn mch backplane ti thiu 1.0 Tbps mi h thng

- Cung cp ti thiu 16 cng quang 10 GE XFP/SFP

EX-SFP-10GE-SR

EX-SFP-10GE-LR - B x l trung tm d phng 1+1 (d phng Supervisor)

- RAM: 2 GB - Flash: 2GB - Static, RIP, OSPF, VRRP, Bidirectional Forwarding Detection - Routing Policy - H tr Voice VLAN - H tr Voice VLAN - 802.1Q VLAN - 802.1D - 802.3ad Link Aggregation - 802.1w Rapid Spanning Tree - 802.1s Multiple Instance Spanning Tree - VLAN Registration Protocol (GVRP) - IEEE 802.1AB: Link Layer Discovery

A7506 Max 52 cng 10GE hoc 288 cng 10/100/1000 hoc 288 cng SFP A7510 Max 84 cng 10GE hoc 480 cng 10/100/1000 hoc 480 cng SFP JF290A JD201A JD232A JD233A JD200A JD191A JD235A JD236A 2 switch fabric slot Fabric MIP64@600 MHz I/O Module MIP64@400 MHz 512 MB + 512 MB (I/O module) 64 MB

Protocol (LLDP) - IP Multicast & Jumbo Frame support - IGMP: v1, v2, v3 - IGMP snooping v1/v2/v3 - Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP - H tr QoS, 8 Queues/Port - Weighted Random Early Drop (WRED) scheduling - Shaped Deficit Weighted Round Robin (SDWRR) queuing - Strict priority queuing - Multi-field classification (L2 L4) for scheduling and rewrite - Buffer per 10-Gigabit Ethernet port: 512 MB - Buffer per 1-Gigabit Ethernet port: 42 MB - H tr 802.1x port based authentication - H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP. - Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL - CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet. - Local and remote analyzer (mirroring)

- H tr QoS, 8 Queues/Port

NA NA

IMC, CLI, Web browser, RS232C, telnet, Ethernet interface MIB

- Advanced Insight Solutions (AIS) - Ngun AC v dy ngun d phng 1+1 Xut x Chuyn mch gp (Aggregation Switch) (01 cho trung tm thoi) Thit b chuyn mch trung gian (Distribution Switch)

- Ngun AC v dy ngun d phng 1+1 H3C S7500E G7

EX3200

4+5

EX4200 - Cung cp ti thiu 04 Uplink quang 10 GE XFP/SFP - 02 Transceiver 10GE n mode khong cch truyn dn >=2Km - Cung cp ti thiu 40 x GE SFP - D phng iu khin (Supervisor) 1:1 (chassis hoc virtual) - Tc chuyn gi (Forwarding Rate) ti thiu 120 Mpps - RAM: 1 GB - Flash: 512 MB - p ng kh nng m rng ti thiu 160x GE-SFP (20 tng x 8 port/tng = 160) - Ngun AC v dy ngun autosensing 100-120 V / 200-240 V, d phng 1:1 - Chuyn mch lp 3: RIP, OSPF, PIMSM

HP 7502 2 MPU 2 I/O Slot Max 16 cng 10GE hoc 96 cng 10/100/1000 hoc 96 cng SFP - 02 Transceiver 10GE n mode khong cch truyn dn >=2Km - Cung cp ti thiu 40 x GE SFP Fabric MIP64@600 MHz I/O Module MIP64@400 MHz 143 Mpps 512 MB + 512 MB (I/O module) 64 MB NA - Ngun AC v dy ngun autosensing 100-120 V / 200-240 V, d phng 1:1

- Routing Policy - H tr Voice VLAN - H tr Voice VLAN - 802.1Q VLAN tagging - 802.1D - 802.3ad Link Aggregation - 802.1w Rapid Spanning Tree - 802.1s Multiple Instance Spanning Tree - VLAN Registration Protocol (GVRP) - IEEE 802.1AB: Link Layer Discovery Protocol (LLDP) - IP Multicast & Jumbo Frame support - IGMP: v1, v2, v3 - IGMP snooping v1/v2/v3 - Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP - H tr QoS, 8 Queues/Port - H tr QoS, 8 Queues/Port - Weighted Random Early Drop (WRED) scheduling - Shaped Deficit Weighted Round Robin (SDWRR) queuing - Strict priority queuing - H tr 802.1x port based authentication - H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP. - Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL

- CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet. 6 6.1 + 6.2 Thit b chuyn mch u cui (Access Switch) Thit b chuyn mch u cui 48 cng Ethernet

EX3200

HP E5500-48G (JE090A) - 44 cng Ethernet 10/100/1000 (fixed port) - 4 cng dual-personality (Ethernet 10/100/1000 hoc SFP) - 2 stacking port 24Gbps mi cng - 1 module slot (max 2 cng 10GE hoc 8 cng GE PoE)

- Yu cu ti thiu 48 cng Ethernet 10/100/1000 Base-T - Chuyn mch Lp 3: OSPF, RIP, PIMSM - STP, VLAN tagging, LLDP, ARP - Ti thiu 04 Uplink 1 GE SFP - Tc chuyn mch ti thiu 50 Gbps - RAM: 512MB - Flash: 128 MB - Routing Policy - H tr Voice VLAN - 802.1Q VLAN Tagging - 802.1D - 802.3ad Link Aggregation - 802.1w Rapid Spanning Tree - 802.1s Multiple Instance Spanning Tree

- Ti thiu 04 Uplink 1 GE SFP 232 Gbps 172,6 Mpps 64 MB Buffer 32 MB 16 MB

- VLAN Registration Protocol (GVRP) - IEEE 802.1AB: Link Layer Discovery Protocol (LLDP) - IP Multicast & Jumbo Frame support - IGMP: v1, v2, v3 - IGMP snooping v1/v2/v3 - Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP - H tr QoS, 8 Queues/Port - Weighted Random Early Drop (WRED) scheduling - Shaped Deficit Weighted Round Robin (SDWRR) queuing - Strict priority queuing - H tr 802.1x port based authentication - H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP. - Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL - CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet. - Ngun AC v dy ngun 6.3 Thit b chuyn mch u cui 24 cng Ethernet EX3200 - H tr ti thiu 24 cng Ethernet HP E5500-24G (JE088A) - 20 cng Ethernet 10/100/1000 (fixed port)

10/100/1000 Base-T

- 4 cng dual-personality (Ethernet 10/100/1000 hoc SFP) - 2 stacking port 24Gbps mi cng - 1 module slot (max 2 cng 10GE hoc 8 cng GE PoE)

- Chuyn mch Lp 3: OSPF, RIP, PIMSM - H tr STP, VLAN tagging, LLDP, ARP - Ti thiu 04 Uplink 1 GE SFP - Tc chuyn mch ti thiu 28 Gbps - RAM: 512MB - Flash: 128 MB

- Ti thiu 04 Uplink 1 GE SFP 184 Gbps 136,9 Mpps 64 MB 16 MB Buffer 32 MB

- Routing Policy - H tr Voice VLAN - H tr Voice VLAN - 802.1Q VLAN Tagging - 802.1D - 802.3ad Link Aggregation - 802.1w Rapid Spanning Tree - 802.1s Multiple Instance Spanning Tree - VLAN Registration Protocol (GVRP) - IEEE 802.1AB: Link Layer Discovery Protocol (LLDP) - IP Multicast & Jumbo Frame support - IGMP: v1, v2, v3 - IGMP snooping v1/v2/v3 - Protocol Independent Multicast PIM-SM, PIM-SSM, PIM-DM, MSDP

- H tr QoS, 8 Queues/Port - Weighted Random Early Drop (WRED) scheduling - Shaped Deficit Weighted Round Robin (SDWRR) queuing - Strict priority queuing - H tr 802.1x port based authentication - H tr 802.1x with VLAN assignment, 802.1x dynamic ACL based on RADIUS attributes, 802.1x h tr EAP: MD5, TLS, TTLS, PEAP. - Dynamic ARP Inspection, Port-based ACL, VLAN based ACL, router based ACL - CLI, Console, Web Interface, SNMP v1,v2,v3; C cng management ring 10/100/1000BaseT Ethernet. - Ngun AC v dy ngun 6.4 Transceiver GE SFP EX-SFP-1GE-SX - Transceiver quang 1 GE SFP - LC connector, khong cch truyn dn <= 500 m II 1 1.1 HP X120 1G SFP LC SX Transceiver (JD118B) Transceiver quang, Ethernet 1000Base-SX.

Thit b nh tuyn

J6350 - nh tuyn mng WAN - Ti thiu 10 cng GE Base-T

H3C SR6608 (JC177A) 300 Gbps - Ti thiu 10 cng GE Base-T

- H tr giao din E1 - BGP instances ti thiu 60 - BGP peers ti thiu 60 - RIP instances ti thiu 60 - Source-based routing - Policy-based routing - Equal-cost multipath (ECMP) - Reverse Path Forwarding (RPF) - LDP - RSVP-TE - Traffic Engineering - Layer 3 2547 VPN - Layer 2 VPN - Virtual Private LAN Service (VPLS) - Diffserv-aware Traffic Engineering - MPLS Detour - MPLS Fast Reroute Link Protection - MPLS Fast Reroute Node Protection - MPLS Point-to-Multipoint (P2MP) Traffic Engineering - VRRP - IETF Graceful Restart - Policing & Shaping - Class Based Queuing with Prioritization - WRED - Queuing based on

Module 0231A56W 0231A54L

VLAN/VC/VP/DLCI/Interface/Bundles - Queuing based on VLAN/VC/VP/DLCI/Interface/Bundles - H tr cc giao din qun tr WEB, CLI, XML, Script, Telnet, SSH - SNMPv2 and SNMP v3 - 01 Console Port - 01 USB Port - RAM: 1GB - Ngun AC, d phng 1:1 1.2 Thit b tng la SRX650 - Thit b tng la cho mng Internet - Nng lc Firewall phi m bo 3 Gbps - 01 Console Port - 01 AUX - 02 USB Port Multi-core MIPS @ 1000 MHz, 2 GB DDR2 SDRAM, packet buffer size: 128 MB DDR2 SDRAM, 4 GB DDR2 SDRAM, 256 MB flash, 1 GB flash - Ngun AC, d phng 1:1 FortiNet FortiGate FG-3950B Min 20 Gbps Max 120 Gbps 180 Mbps IPSec VPN Min 8Gbps Max 48Gbps Ips max 12,5Gbps Antivirus 1,5Gbps NA 4 cng GE SFP Accelerated 2 cng GE

- Chassis, 1GB Memory, Dual P/S, 512 MB Flash - 4 cng 10/100/1000 Base-T - Cung cp tnh nng IDP - C kh nng nng cp Antivirus - C kh nng nng cp IPS - C kh nng nng cp Anti-Spam

- C kh nng nng cp WEB-Filtering - m bo kh nng chy ng thi cc tnh nng trn (IPS, AV, AS, WF) - Network attack detection - DoS and DDoS protection - TCP reassembly for fragmented packet protection - Brute force attack mitigation - SYN cookie protection - Zone-based IP spoofing - Malformed packet protection - BGP routes khi active UTM functions: 512K - OSPF routes khi active UTM functions: 512K - Source-based routing - Policy-based routing - Equal-cost multipath (ECMP) - Reverse Path Forwarding (RPF) - IGMP, IGMP Proxy - Multicast inside IPsec tunnel - PIM-SM/SSM - Active/Active - L3 mode - Active/Passive - Transparent & L3 mode - Configuration synchronization - VRRP - Session synchronization for firewall and VPN - Session failover for routing change

- Device failure detection - Link failure detection CLI, Console, Web Interface, SNMP v1,v2,v3 - Bo v IDP, IPS, VPN, DoS, DDoS