Page 9 of 10
三．
Software function profile
1. Wireless access
Support 54/48/36/24/18/12/9/6M or 11/5.5/2/1-m rate adaptive; Support 64/128/152 a WEP encryption;
Support 802.1 X, WPA, IEEE TKIP, AES encryption and security mechanism etc; Support SSID
broadcasting control and based on the MAC address of access control; Using wireless Roaming
(Roaming) technology, efficient wireless connection;
2. Intelligent NAT (optional, routing mode use)
Support NAPT, NAT and routing mixed use, meet various complex network address planning. Support
NAT static mapping and DMZ host, outward Telnet, provide WWW, FTP service etc; Support NAT Re -
ccna and reverse NAT; Provide NAT ALG function, support FTP, IPSec ESP PPTP, such special
application protocol.
3. Firewall function (optional, routing mode use)
Powerful defense internal/external attack ability, can effectively prevent the ARP deception, port scanning,
DoS/DDoS and other network attacks, prevent shock wave, shock waves, SQL worms etc virus attack,
maximum guarantee network stability and security.
Realized based on source/destination IP address, agreement, port, the source/purpose MAC address of
packet filtering, based on the URL and keyword application layer filter, can according to time filtered. By
using the filtering technology business management function, can not only control user Internet access
and the Internet time, can protect the internal network from foreign attack.
4. User management (optional, routing mode use)
Provide the user personalized management function, realization by the 100 percent of the on-demand
customization. In view of the user's actual demand, each machine internal hosts are can take different
strategy (can be a PC can use limited bandwidth, NAT session number, whether to ban QQ, MSN, P2P,
etc), solve the traditional division management enough flexible problem. This function can not only
greatly strengthen management flexibility, and to a certain extent, reduce administrator's workload.
Support IP/MAC address binding, filter illegal IP or MAC address, also support the IP/MAC address all
binding function, just a key operate, can one-time will all dynamic IP/MAC address to all bound, and can
effectively prevent the LAN host ARP deception attacked suffer.
5. Network monitor (optional, routing mode use)
Offers a variety of monitoring and diagnosis method, the dynamic monitoring network movement situation,
user Internet behavior, help the website operators quickly positioning and eliminate network fault,
especially to real-time found network anomalies and the anomalous host, such as infection virus or attack
mainframe.
Website operators through the real-time monitoring CPU utilization, memory utilization, NAT table, and
other key system resources, can in time found potential of various attacks; Through the real-time view
each interface bandwidth, check each user's upload/download bandwidth and NAT session number, view
the upload/download bandwidth list and NAT session number list, can quickly locate speeds slower, card
