ASA5505流量控制
- 格式:pdf
- 大小:346.65 KB
- 文档页数:11
Register your product and get support at5505 series /TVsupport用户手册24PFS550532PHS550543PFS5505内容1 获得支持 31.1 识别和注册电视31.2 电视帮助和用户手册31.3 在线帮助和用户手册31.4 客户服务/维修32 软件 42.1 更新软件42.2 软件版本43 快速指南 53.1 遥控器53.2 红外传感器63.3 操纵器 - 本地控制(如果可用)64 设置 84.1 阅读安全说明84.2 电视摆放84.3 打开电视95 连接 115.1 连接指南115.2 天线(4503、5503、4304、4354、4504、5304系列电视)115.3 天线(5505、5525、5535 系列电视)115.4 卫星(如果可用)115.5 视频设备125.6 音频设备 155.7 电脑165.8 带智能卡的 CAM - CI+185.9 USB 设备185.10 有线网络 - Freeview(仅英国型号配备网络端口)196 切换来源 216.1 来源列表216.2 重命名设备217 频道 227.1 关于频道和频道切换227.2 安装频道227.3 频道列表267.4 选择频道筛选条件277.5 收藏频道278 电视指南 298.1 您需要执行的操作298.2 使用电视指南299 录制和暂停电视(不适用于土耳其型号) 31 9.1 您需要执行的操作319.2 录制319.3 暂停电视3210 视频、照片和音乐 3310.1 来自 USB 连接3310.2 照片3310.3 视频3310.4 音乐3411 打开电视设置菜单 3511.1 主菜单概述3511.2 实用工具菜单3511.3 快速设置和所有设置3511.4 所有设置3512 环境 4112.1 欧洲能源标签4112.2 产品卡4112.3 使用终止4213 规格 4313.1 功率4313.2 接收4313.3 显示屏分辨率4313.4 显示屏输入分辨率4413.5 声音4413.6 多媒体4413.7 连接4414 故障检修 4714.1 使用提示4714.2 打开4714.3 遥控器4714.4 频道4714.5 图片4714.6 声音4814.7 HDMI4814.8 USB4815 安全与保养 4915.1 安全4915.2 屏幕保养5015.3 使用条款5016 版权 5116.1 HDMI5116.2 Dolby Audio5116.3 DTS 2.0 + Digital Out ™5116.4 其他商标5117 开放源 5217.1 开源软件5217.2 开源许可证52索引 551获得支持1.1识别和注册电视识别电视 - 电视型号和序列号客户服务人员可能会要求您提供电视产品型号和序列号。
Cisco ASA 5500 系列 SSL/IPsec VPN 版为任意位置提供安全、灵活的远程网络访问除公司管理的桌面外,当今的远程访问VPN 部署还必须安全、容易地将公司网络访问扩展到其它用户、设备和端点。
利用Cisco ASA 5500 系列 SSL/IPsec 版,各机构能够安全地向多种用户提供网络访问,包括移动端点和固定端点、远程办公室、合同商和业务合作伙伴。
Cisco ASA 5500 系列 SSL/IPsec VPN 版支持多种部署和应用环境,能够通过业内最全面的安全套接字层(SSL )和IP Security (IPsec )虚拟专网(VPN )特性、性能和可扩展性,为各机构提供最高的价值。
另外,利用Cisco ASA 5500 系列 SSL/IPsec VPN 版,各机构还能够将经过市场验证的多种防火墙、入侵防御(IPS )和Anti-X 技术有机地结合到同一个平台上。
为各机构提供业内领先的远程访问技术由于Cisco ASA 5500 系列 SSL/IPsec VPN 版支持完全网络访问,具有能够有控制地访问某些基于Web 的应用和网络资源,因而能提供所有VPN 部署都需要的灵活性(见图1)。
Cisco SSL VPN 解决方案易于部署和使用,并提供客户端方式和无客户端方式。
它不但能根据用户或端点提供精细的访问控制,还具有能够保持机密信息完整性的极高的端点安全性,因而能满足不同的用户组和端点访问企业时提出的不同要求。
图1针对任意部署方案的可定制SSL VPN 和IPsec 服务供应合作伙伴需要对某些外部网资源和应用执行“锁定”访问无客户端SSL VPN基于客户端的SSL 或IPsec VPN公司管理的笔记本电脑远程访问用户需要无障碍的、易于操作的访问公司网络资源公共互联网Cisco ASA 5500系列无客户端SSL VPN基于客户端的SSL 或IPsec VPN公共终端远程用户需要从公共机器访问电子邮件和Web 应用家庭员工加班者和移动员工需要对公司资源和应用执行相当于局域网的一致完全网络访问北京北京市东城区东长安街1号东方广场东方经贸城东一办公楼19〜21层邮编:100738电话:(8610)85155000传真:(8610)85181881上海上海市淮海中路222号力宝广场32〜33层邮编:200021电话:(8621)23024000传真:(8621)23024450成都成都市顺城大街308号冠城广场23层邮编:610017电话:(8628)86961000传真:(8628)86528999广州广州市天河区林和西路161号中泰国际广场A 塔34层邮编:510620电话:(8620)85193000传真:(8620)85193008如需了解思科公司的更多信息,请浏览/cn思科系统(中国)网络技术有限公司版权所有。
一路由器产品一览(1)Cisco 800 系列集成多业务路由器允许小型机构以宽带速度运行安全并发服务,包括防火墙、VPN 和无线局域网● 无线支持:850 和870 系列上提供了可选IEEE 802.11 b/g● 增强安全特性,包括状态化检测防火墙和硬件辅助加密(830 和870 系列),以及用于V oIP 的QoS 特性● DMZ、拨号备份和带外管理(Cisco 830、850 和870 系列)● 安全设备管理器(SDM)GUI 工具,用于简单和高级配置CISCO871-K9 CISCO871W-G-E-K9 CISCO871-SEC-K9CISCO876-K9 CISCO877-K9 CISCO878-SEC-K9(2)Cisco 1800 系列模块化固定架构——提供多种局域网和广域网选项;Cisco 1841上的网络接口能够现场升级,提供了灵活性,并可支持未来技术● 固定配置路由器型号提供了10/100 以太网、ADSL over ISDN、ADSL over POTS,或配备集成ISDN BRI 的G.SHDSL 广域网接口(1801、1802、1803 和1812)或模拟调制解调器(1811)备份接口● 1800 系列的所有型号都通过IEEE 802.11 a/b/g 提供无线局域网接入功能CISCO1841 CISCO1841-T1 CISCO1802 CISCO1841-SEC/K9CISCO1801 CISCO1801/K9 CISCO1802/K9 CISCO1841-HSEC/K9(3)Cisco 2800 系列经过了优化的集成多业务路由器,能为中小型企业和大型企业分支机构路由安全、线速地供应数据、语音和视频并发服务● 为1 到6 条T1/E1 连接提供出色性能,支持多项服务● 高级安全特性,包括状态化防火墙、IPS、VPN 和NAC● 凭借DES、3DES 和AES 提供内置加密功能● 支持IEEE 802.11 a/b/g WLAN 的无线接入点CISCO2801 CISCO2811 CISCO2821 CISCO2851CISCO2801-SEC/K9 CISCO2801-HSEC/K9 CISCO2811-SEC/K9 CISCO2811-HSEC/K9CISCO2821-SEC/K9 CISCO2821-HSEC/K9 CISCO2851-SEC/K9 CISCO2851-HSEC/K9CISCO2801-V/K9 CISCO2801-CCME/K9 CISCO2811-V/K9 CISCO2811-CCME/K9CISCO2821-V/K9 CISCO2821-CCME/K9 CISCO2851-V/K9 CISCO2851-CCME/K9(4)Cisco 3800 系列集成多业务路由器● 最高的性能和密度,能够以高达T3/E3 的线速运行并发数据、安全、语音和高级服务● 更高的可用性和永续性,具有热插拔功能(OIR);冗余系统和馈线电源选项● 高速广域网接口卡(HWIC)为其他服务留出了网络模块插槽● 增强安全性● 扩展缺省和最大内存容量,ECC(错误纠正代码)DDR SDRAM内存能够检测和纠正SDRAM错误,无需用户介入CISCO3825 CISCO3825-AC-IP CISCO3825-DCCISCO3845 CISCO3845-AC-IP CISCO3845-DCCISCO3825-V/K9 CISCO3825-CCME/K9 CISCO3845-V/K9 CISCO3845-CCME/K9CISCO3825-SEC/K9 CISCO3845-SEC/K9 CISCO3825-HSEC/K9 CISCO3845-HSEC/K9(5)Cisco 7200 系列以小巧机箱提供智能服务、高度模块化特性、高性能、投资保护和可扩展性的优化的OC3/GE 广域网边缘路由器● 模块化的3RU 机箱● 4 或者6 插槽型号,用于端口适配器● 1 个I/O 插槽● 可以选择系统处理器(NPE),速度最高可达1Mpps● 内置千兆以太网连接(NPE-G1 上的3 个端口)(铜缆或光纤)● 广泛的局域网和广域网选项,包括以太网、快速以太网、千兆以太网、令牌环网、串行、ISDN、HSSI、ATM、SONET 分组,以及包括IP-IP 网关和QoS 在内的语音支持。
创新的网络安全架构Hillstone SA-5050采用了先进的多核处理器技术,自主开发的专用安全芯片(ASIC)和内部高达48Gbps 的交换总线,使得Hillstone SA-5050在应用层安全处理的性能上有了质的飞跃,为企业应用安全提供专业的高性能硬件平台。
强大的处理能力Hillstone SA-5050采用多达16核的64位网络专用多核并行处理器,运算能力超过24GOPS ,能够避免传统ASIC 和NP 安全系统会话创建能力和流量控制能力弱的弊病,为VPN 和应用层内容安全功能提供强大的处理能力保障。
强大的抗攻击能力Hillstone SA-5050采用的多核处理器架构和新一代的StoneOS 安全操作系统,能够提供高性能的应用安全处理能力和更强的应用层抗攻击能力。
Hillstone SA-5050每秒能够处理超过20万的TCP 会话请求,超过同类产品5-10倍,具有超强的DDoS 攻击防护能力。
强健的专用实时操作系统Hillstone 自主开发的64位实时并行操作系统StoneOS ,强大的并行处理能力和模块化的结构设计,易于集成和扩展更多的安全功能。
通过对新一代多核处理器的全面优化和安全加固,极大地提高了系统处理效率、稳定性和安全性。
模块化和并行多任务的处理机制,为Hillstone 新一代的网络安全系统提供了极大的可扩展能力,包括支持更多核处理器和集成更多的安全功能。
精密的流量控制依靠高性能的多核处理器及ASIC 专用芯片,Hillstone SA-5050可实现精密的基于用户和应用的流量控制。
在保障系统运行性能的情况下,Hillstone SA-5050可实现精密度为1kbps ,多达2万用户的流量控制。
基于应用的流量控制可识别各种P2P 及IM(即时通讯)协议,配合时间表功能的使用,帮助您灵活掌控带宽分配。
VPNHillstone SA 支持IPSec 和SSL VPN ,在多种拓扑下可以灵活结合,解决您远程互联和远程接入的问题。
网络设备配置要求(1)H3C设备类别型号配置说明交换机S5500-52C-SI(千兆三层交换机)48个10/100/1000 Base-T以太网端口4个复用的1000Base-X千兆SFP端口;交换容量:240Gbps,包转发率:72Mpps;支持IRF LITE堆叠技术支持ARP欺骗防御、IP+MAC+Port绑定功能,支持ACL(访问控制列表)S5500-28C-SI(千兆三层交换机)24个10/100/1000 Base-T以太网端口4个复用的1000Base-X千兆SFP端口;交换容量:190Gbps,包转发率:36Mpps;支持IRF LITE堆叠技术支持ARP欺骗防御、IP+MAC+Port绑定功能,支持ACL(访问控制列表)LS-5120-28P-LI(千兆二层交换机)24个10/100/1000 Base-T以太网端口;4个1000Base-X SFP千兆以太网端口;交换容量:190Gbps,包转发率:42Mpps;支持DHCPSnooping,支持IGMP Snooping支持IP+MAC+Port绑定LS-5120-52P-LI(千兆二层交换机)48个10/100/1000 Base-T以太网端口;4个1000Base-X SFP千兆以太网端口;交换容量:240Gbps,包转发率:78Mpps;支持DHCPSnooping,支持IGMP Snooping支持IP+MAC+Port绑定LS-3600-28P-EI(增强三层交换机)24个10/100Base-T,4个千兆SFP上行口,交直流双路供电,支持OSPF、VRRP;交换容量:32GBit/s 包转发率:9.6MPPS;支持ARP欺骗防御、IP+MAC+Port绑定功能,支持ACL(访问控制列表)LS-3600-28TP-SI(三层交换机)24个10/100Base-T以太网端口,2个1000Base-X SFP千兆以太网端口, 交换容量:32GBit/s 包转发率:9.6MPPS支持ARP欺骗防御、IP+MAC+Port绑定功能,支持ACL(访问控制列表)LS-3100-26TP-EI-H3-A(增强型二层交换机)24个10/100Base-T,2个10/100/1000Base-T与1000Base-X SFP COMBO,交换容量19.2Gbps,包转发6.55Mpps支持ARP欺骗防御、IP+MAC+Port绑定功能,支持ACL(访问控制列表)LS-3100-26TP-SI-H3(二层交换机)24个10/100Base-TX自适应端口;2个10/100/1000BASE-T端口交换容量:19GBit/s包转发率:6.55MPPSLS-3100-8TP-SI-H3(二层8个10/100Base-TX自适应端口;1个10/100/1000BASE-T端口交换容量:19GBit/s包转发率:2.68MPPS交换机)路由及模块MSR20-11256M内存,自带1个百兆电口,1个高速同异步串口(SAE),4个FSW,1个DSIC槽位(只能单独配一个SIC卡或者一个DSIC卡),标准版软件,如需上标准机架,可选配挂耳(2150A026);RISC新一代处理器(333MHz);转发性能160Kpps;RT-SIC-1SAE-H3(1端口增强型同/异步串口接口模块)RT-SIC-1E1-F-H3(1端口非通道化E1-F接口模块)RT-SIC-1GEC-H31端口10M/100M/1000M 电口和光口以太网接口SIC模块RT-SIC-1FEA-H31端口十/百兆以太网电接口模块(RJ45)RT-SIC-1FEF-H31端口100M SFP SIC接口模块(光口需要另配光模块)RT-SIC-4FSW-H34端口10M/100M以太网二层交换模块(RJ45) MSR30-16主机自带2个FE,4个SIC槽位,1个MIM槽位,2个ESM槽位,1个VCPM槽位,2个VPM槽位,256DDR内存, 标准版软件;RISC新一代处理器(400MHz);转发性能240Kpps;LIS-MSR30-STANDARD-H3H3C MSR30系列主机软件费用(标准版)RT-MIM-1E1-F-V2-H31端口非通道化E1接口模块RT-MIM-2E1-F-V2-H32端口非通道化E1接口模块RT-MIM-4E1-F-V2-H4端口非通道化E1接口模块RT-MIM-1FE-V2-H31端口10M/100M以太网电MIM接口模块(RJ45) RT-MIM-2FE-V2-H32端口10M/100M以太网电MIM接口模块(RJ45) NS-MIM-4FE-H34端口10/100BASE-TX 模块(RJ45)防火墙F100-S3个10/100BASE-TX;吞吐量大于200Mbps;每秒新建连接数>5000;支持VPN;3DES+SHA加密速度40M;并发连接数>20万F100-M3个10/100BASE-TX;吞吐量大于300Mbps;每秒新建连接数>9000;支持VPN;3DES+SHA加密速度60M;并发连接数>40万(2)思科网络设备类别参考型号配置说明交换机WS-C3560G-24TS-E(1000M三层)Catalyst 3560 24 10/100/1000T+ 4 SFP + IPS Image24个10/100/1000M电口+4个千兆SFP光口,交换容量:32Gbps,包转发速率:38.7Mpps,支持静态、BGP、OSPF、EIGRP、RIP路由协议WS-C3560-24TS-E(100M三层)Catalyst 3560 24 10/100 + 2 SFP+ IPS (Enhanced) Image24个10/100M电口+2个千兆SFP光口,交换容量:32Gbps,包转发速率:6.6Mpps,支持静态、BGP、OSPF、EIGRP、RIP路由协议WS-C3560-24TS-S(100M三层)Catalyst 3560 24 10/100 + 2 SFP+ IPB (Standard) Image24个10/100M电口+2个千兆SFP光口,交换容量:32Gbps,包转发速率:6.6Mpps,支持静态、RIP路由协议WS-C2960G-24TC-L(1000M二层)Catalyst 2960 24 10/100/1000,4 T/SFP LAN Base Image24个10/100/1000M电口+4个千兆SFP/RJ45复用端口,交换容量:32Gbps,包转发速率:35.7MppsWS-C2918-24TT-C(100M二层)Catalyst 2918 24 10/100 + 21000 BT Chinese LAN Lite Image24个10/100M电口+2个千兆电口,交换容量:16Gbps,包转发速率:6.5Mpps WS-C2960-24TT-L(100M二层)Catalyst 2960 24 10/100 + 21000BT LAN Base Image24个10/100M电口+2个千兆RJ45电口,交换容量:16Gbps,包转发速率:6.5MppsWS-C2918-24TC-C(100M二层)Catalyst 2918 24 10/100 +2T/SFP Chinese LAN Lite Image24个10/100M电口+2个千兆复用端口(电口/SFP光口),交换容量:16Gbps,包转发速率:6.5MppsWS-C2960-8TC-LCatalyst 2960 8 10/100 + 1T/SFP LAN Base Image8个10/100M电口+1个千兆复用端口(电口/SFP光口),交换容量:16Gbps,包转发速率:2.7MppsWS-C2918-24TC-CCatalyst 2918 24 10/100 +2T/SFP Chinese LAN Lite Image24个10/100M电口+2个千兆复用端口(电口/SFP光口),交换容量:16Gbps,包转发速率:6.5Mpps路由器CISCO1841Modular Router w/2xFE, 2 WANslots, 32 FL/128 DR32M Flash,128M Dram,自带2个百兆电口,2个WAN扩展槽位CISCO28012801 w/ACPWR,2FE,4slots(2HWIC),2PVDM,2AIM,IP BASE,64F/128D64M Flash,128M Dram,自带2个百兆电口,2个HWIC槽位,2个PVDM槽位,2个AIM槽位CISCO2901/K9 Cisco 2901 w/2 GE,4 EHWIC,2DSP,256MB CF,512MB DRAM,IPBase256M Flash,512M Dram,自带2个千兆电口,4个HWIC槽位,2个DSP处理器CISCO892C-K9 Cisco 892 GigaE SecRouterChina256M Flash,512M Dram,自带1个千兆电口 8个百兆电口,双WAN链路CISCO851-K9 Ethernet SOHO SecurityRouter自带1个百兆WAN电口 4个百兆LAN口Cisco IOS cisco IOS操作系统cisco IOS操作系统HWIC/VW IC模块HWIC-2A/S2-Port Async/Sync Serial WANInterface Card2端口同/异步串口接口模快VWIC2-1MFT-G7031-Port 2nd Gen Multiflex TrunkVoice/WAN Int. Card - G.7031端口非通道化E1-F接口模块HWIC-1GE-SFPGigE High Speed WIC With OneSFP Slot1端口10M/100M/1000M 电口和光口以太网接口SFP模块HWIC-1FE 1-port 10/100 Routed Port HWIC 1端口10/100M路由路由模块(HWIC) HWIC-4ESWFour port 10/100 Ethernetswitch interface card4端口10/100M以太网交换接口卡(HWIC)VWIC2-1MFT-G7031-Port 2nd Gen Multiflex TrunkVoice/WAN Int. Card - G.7031端口非通道化E1接口模块VWIC2-2MFT-G7032-Port 2nd Gen Multiflex TrunkVoice/WAN Int. Card - G.7032端口非信道化E1模块(HWIC) HWIC-1FE 1-port 10/100 Routed Port HWIC 1端口10/100M路由路由模块(HWIC) HWIC-2FE HWIC two routed port 2端口10/100M路由路由模块(HWIC) HWIC-4ESWFour port 10/100 Ethernetswitch interface card4端口10/100M以太网交换接口卡(HWIC)BNC线CAB-E1-RJ45BNCE1 Cable RJ45 to Dual BNC(Unbalanced)E1专用线缆(RJ45-BNC)防火墙ASA5505-K8ASA 5505 Appliance with SW, 10Users, 8 ports, DES8个10/100M以太电口,吞吐量:150Mbps,每秒新建连接数:4000,支持Ipsec/SSL VPN,3DES/AES加密吞吐量:100Mbps,并发连接数:2.5万ASA5510-K8ASA 5510 Appliance with SW,5FE, DES5个10/100M以太电口,吞吐量:300Mbps,每秒新建连接数:9000,支持Ipsec/SSL VPN,3DES/AES加密吞吐量:170Mbps,并发连接数:13万无线设备WS-C3750G-24WS-S25Catalyst3750G Integrated WLANController for up to 25 APsCisco 24口千兆电口有线无线一体化交换机AIR-AP1131G-E-K9802.11g Integrated Auto AP;Int Antennas; ETSI Cnfg单频胖AP,支持802.11g标准,胖瘦可互转,发射功率:100mW,内置天线AIR-AP1131AG-C-K9802.11a, .11g AP, Int Radios,Ants, China Cnfg双频胖AP,支持802.11a/g标准,胖瘦可互转,发射功率:100mW,内置天线AIR-AP1142N-C-K9802.11a/g/n Fixed Auto AP; IntAnt; C Reg Domain双频胖AP,支持802.11a/g/n标准,胖瘦可互转,发射功率:100mW,内置天线WRT54G Wireless-G Broadband Router 无线宽带路由器(3)天融信防火墙类别产品名称及型号配置参数所代正常机器数防火墙TopVPN6000(TV-6414-VONE)包括三大功能:防火墙和IPSEC VPN、SSLVPN功能;1U主机,配置4个10/100/1000BASE-T接口,1个扩展槽位(每个槽位支持8个电口或光口),最多可以扩展到12个千兆接口;MTBF不少于80000小时,支持访问控制、流量控制、BT下载等功能;防火墙性能,并发连接数不少于160万,最大吞吐量1Gbps,IPSECVPN性能:最大并发隧道数:4000;加密速率(AES-SHA1):300Mbps,SSLVPN性能:最大并发用户数:1600,吞吐率:200M。
实验四 ASA模拟器从内网访问DMZ区服务器配置(ASA模拟器)注意:本实验配置为用模拟器来实现,用来练习防火墙命令的使用,实现的功能和“实验四asa 5505 从内网访问DMZ服务器(真实防火墙)”相同,为了降低操作难度,我们只对ASA防火墙模拟器进行配置,完整的实验请参照“实验四asa 5505 从内网访问DMZ服务器(真实防火墙)”。
一、实验目标在这个实验中朋友你将要完成下列任务:1.用nameif命令给接口命名2.用ip address命令给接口分配IP3.用duplex配置接口的工作模式----双工(半双工)4.配置内部转化地址池(nat)外部转换地址globla二、实验拓扑三、实验过程1. ASA 模拟器基本配置:ciscoasa>ciscoasa> enablePassword:ciscoasa#ciscoasa# configure terminalciscoasa(config)# interface e0/2 *进入e0/2接口的配置模式ciscoasa(config-if)# nameif dmz *把e0/2接口的名称配置为dmzINFO: Security level for "dmz" set to 0 by default.ciscoasa(config-if)# security-level 50 *配置dmz 安全级别为50ciscoasa(config-if)# ip address 11.0.0.1 255.0.0.0 *给e0/2接口配置IP地址ciscoasa(config-if)# duplex auto *设置e0/2接口的工作模式为自动协商ciscoasa(config-if)# no shutdown *打开e0/2接口ciscoasa(config-if)# exit *退出e0/2接口的配置模式ciscoasa(config)#ciscoasa(config)# interface e0/0 *进入e0/0接口的配置模式ciscoasa(config-if)# nameif inside *把e0/0接口的名称配置为insideINFO: Security level for "inside" set to 100 by default.*安全级别取值范围为1~100,数字越大安全级别越高,在默认情况下,inside安全级别为100。
1SPECIFICATIONS Accuracy: For units with full range less than 100 SLM ±1% FS, including linearity over 15 to 25°C (59 to 77°F) and0.7 to 4.2 kg/cm² (10 to 60 psia). Forunits ≥ 100 SLM Full Range: ±1.5% FS,including linearity over 15 to 25°C (59 to 77°F) and 0.7 to 4.2 kg/cm² (10 to 60 psia) from 20 to 100% of range; ±3% FS from 0 to 20% of range.Repeatability: ±0.5% of full scale Temperature Coefficient: 0.15% FS/°C Pressure Coefficient: 0.01% FS per psi (0.07 bar)Maximum Pressure Drop: 50 psid The FMA5400A/5500A Series electronic gas mass flowcontrollers can control the flow of a wide variety of gases from 10 SCCM up to 100 SLM. Utilizing heattransfer through a heated tube, the FMA5400A/5500A measures gas mass flow rate directly, withoutneeding to compensate for variations in gas temperature or pressure (within stated limits). They are available in an economical aluminum/brassconstruction for typical gas flows and a 316 SS construction for applications that require morecorrosion resistance. The FMA5400A Series without integral display is supplied with both an analog 0 to 5 Vdc and 4 to 20 mA output for remote monitoring; the FMA5500A Series features an integral 3¹⁄₂ digit display and an analog output. The display is tiltable over 90 degrees for viewing convenience and is calibrated to read out directly in SCCM or SLM for nitrogen (other gas calibrations available by special order).The FMA5400A/5500A mass flow controllers feature a built-in electromagnetic valve for maintaining a constant flow rate regardless of variations in inlet or outlet pressures. The setpoint is controlled either locally via a potentiometeraccessible through a window in thecase or remotely via an analog0 to 5 Vdc or 4 to 20 mA signal(field selectable).The FMA5400A/5500A Series controllers require 12 to 26 Vdc power @ 800 mA maximum, which can be supplied by the FMA545PW wall plug-in socket power supply. The electronics are reverse-polarity protected and have a resettable fuse. Model number FMA545C (supplied separately) provides a mating 15-pin “D” connector with 2.4 m (8') of shielded cable foraccessing the analog output signals and power input connections. The LCD for the FMA5500A Series is connected to the lower electronics via a modular plug. The LCD can be remotely located by purchasing an FMA18RC remote cable assembly–you must then build your own assembly for panel mounting the LCD.ECONOMICAL GAS MASS FLOW CONTROLLERSFor Clean GasesWith Optional Integral DisplayResponse Time: 5 seconds to within ±2% of set flow rate over 25 to 100% FS Maximum Gas Pressure: 35 kg/cm 2 gage (500 psig); 70 kg/cm 2 gage (1000 psig) for ranges up to 100 SLPM. 1.76 kg/cm (25 psig) optimum Gas and Ambient Temperature: 5 to 50°C (41 to 122°F)Leak Integrity: 1 x 10-7 cc/sec of helium max to outside environment Materials in Fluid Contact: Aluminum Models:Anodized aluminum, 316 SS, brass and FKM O-rings Stainless Steel Models: 316 SS and FKM O-rings Output Signal:Linear 0 to 5 Vdc: 1000 V minimum load4 to 20 mA: 50 to 500 V loop resistance, ±20 mV max noiseTransducer Power: 12 to 15 Vdc power@ 800 mA maximum (sizes 43, 44 and 45 ONL Y)Turndown Ratio: 40:1Shipping Weight: 1.8 kg (4 lb)Compliance:class B; EN50082-1 flow path, no shift in calibration up to +20 degree pitch Gas Relative Humidity: 0 to 70% RH FMA5402A-ST mass flow controller without display, 316 SS body, shown smaller than actual size.FMA5512A, shownsmaller than actual size.U NIST-Traceable CalibrationU Reads and Controls Gas Mass Flow Without Temperature or Pressure CompensationU Available in Economical Aluminum orCorrosion-Resistant 316 SSU Tiltable LCD for Easy ReadingFMA5400A Series4Comes complete with compression fittings, NIST certificate and operator’s manual. Powersupplies sold separately.Flow ranges specified are for nitrogen or air at 20 psig inlet (up to 50 SLM) or 25 psig inlet60 to 100 SLM units) and 0 psig outlet. When used with other gases, a multiplication factor isused to determine the flow rate, and the digital display must be rescaled in the field.To request a custom calibration add the gas abbreviation and inlet pressure/outlet pressure asa suffix to the model number.Calibration are done at ambient temperatures only, 20ºC (70ºF)For oxygen cleaned units, add suffix “-C” to model number for additional cost.Ordering Examples: FMA5410A–ARGON, 50/0 psig, 70°F calls for an AL/BR body flowcontroller without an integral display, calibrated for Argon at 50 psig inlet pressure, 0 psigoutlet pressure, 70°F gas temperature, powered by 12 Vdc.FMA5516A, N2 controller with display, and FMA545PW, power supply.See instruction manual for dimensionsFMA5512A, shown smallerthan actual size.2。
Cisco PIX 500 Series Security AppliancesPIX/ASA 7.x and Later: Bandwidth Management(Rate Limit) Using QoS Policies
Introduction Quality of Service (QoS) is a network feature that allows you to give priority to certain types of Internet traffic. As Internet users upgrade their access points from modems to high-speed broadband connections like DSL and cable, the likelihood increases that at any given time, a single user might be able to absorb most, if not all, of the available bandwidth, thus starving the other users. In order to prevent any one user or site-to-site connection from consuming more than its fair share of bandwidth, QoS provides a policing feature that regulates the maximum bandwidth that any user can use.
QoS refers to the capability of a network to provide better service to selected network traffic over various technologies for the best overall services with limited bandwidth of the underlying technologies.
The primary goal of QoS in the security appliance is to provide rate limiting on selected network traffic for both individual flow or VPN tunnel flow to ensue that all traffic gets its fair share of limited bandwidth. A flow can be defined in a number of ways. In the security appliance, QoS can apply to a combination of source and destination IP addresses, source and destination port number, and the Type of Service (ToS) byte of the IP header.
In order to configure the QoS for Voice over IP (VoIP) traffic on VPN tunnels that terminate on the PIX/ASA Security Appliances, refer to PIX/ASA 7.x: QoS for VoIP Traffic on VPN Tunnels Configuration Example.
Note: QoS is not supported on a subinterface, it is only supported on the main interface itself. The configuration of QoS on an interface itself makes all the subinterfaces affected by the QoS.
Prerequisites
Requirements There are no specific requirements for this document. Components Used The information in this document is based on the PIX Security Appliance that runs version 7.x and later. Note: QoS is supported only on PIX 515 models and later. These models support Cisco PIX Firewall Software Version 7.x. QoS is not supported on PIX 501 and 506 models.
Note: QoS is supported only on Cisco PIX Firewall Software Version 7.x and later. The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, make sure that you understand the potential impact of any command.
Related Products This configuration can also be used with an Adaptive Security Appliance (ASA) that runs version 7.x and later. Conventions Refer to Cisco Technical Tips Conventions for more information on document conventions. QoS Concepts
QoS is a traffic-management strategy that allow you to allocate network resources for both mission-critical and normal data, based on the type of network traffic and the priority you assign to that traffic. In short, QoS ensures unimpeded priority traffic and provides the capability of rate-limiting (policing) default traffic.
For example, video and VoIP are increasingly important for inter-office communication between geographically dispersed sites, using the infrastructure of the Internet as the transport mechanism. Firewalls are key to securing networks because they control access, which includes the inspection of VoIP protocols. QoS is the focal point to provide clear, uninterrupted voice and video communications, while it still provides a basic level of service for all other traffic that passes through the device.
In order for voice and video to traverse IP networks in a secure, reliable, and toll-quality manner, QoS must be
Document ID: 91790 Contents Introduction Prerequisites Requirements Components Used Related Products Conventions QoS Concepts QoS Implementation Identify Traffic for QoS Define a QoS Policy Map Apply Rate Limiting Activate the Service Policy Apply Low Latency Queueing Configure Priority Queuing Size the Priority Queue Reduce Queue Latency Configure QoS Verify QoS Configuration Verify the QoS Service Policy Configuration Verify the QoS Policy Map Configuration Verify the Priority-Queue Configuration for an Interface Verify QoS Statistics Verify QoS Police Statistics Verify QoS Priority Statistics Verify Priority QoS Queue Statistics Clear Service-Policy Statistics Cisco Support Community - Featured Conversations Related Information HOMESUPPORTPRODUCT SUPPORTEND-OF-SALE AND END-OF-LIFE PRODUCTSCISCO PIX 500 SERIES SECURITY APPLIANCESTROUBLESHOOT AND ALERTS