User Guide
EdgeSafe Bypass TAP | P10GxxBPE | 4.22.1
Ingress
47
Filter
48
Egress
49
Config Map Save
Modify a Config Map
Config Map Statistics
50
Delete Config Map
Config Map Priority
51
Method 1
Method 2
Enable/Disable Config Map
52
Disable Config Map
Enable Config Map
10. Bypass Filter Mode
53
Bypass Taps
54
Bypass Tap Name
55
Heartbeat Settings
Taps Settings
Packet Broker
59
Filter Templates
60
Config Map
61
62
Filters
63
64
65
66
11. Port Info
67
Port Configuration
68
Port Description
Set Speed
Mode
Port Statistics
Garland Technology | 716.242.8500 | www.garlandtechnology.comCopyright © 2022 Garland Technology, LLC. All rights reserved.
5
Page 1: ...User Guide P10GMSBPE P10GSSBPE 12 2022 Release Version 4 22 1...
Page 2: ...The purchased products services and features are stipulated by the contract made between Garland Technology and the customer All or part of the products services and features described in this docume...
Page 3: ...13 LED Indications 13 2 System 14 System Info 15 General 15 Admin 15 Users 15 Groups 16 Authentication 16 Local Authentication Disable 17 Local Authentication Enable 17 TACACS Primary Authentication...
Page 4: ...31 5 Span Packet Inject Mode 32 6 Breakout Mode 33 7 Filter Mode 34 Packet Broker 35 Filter Templates 36 Config Map 37 Ingress 37 Filters 38 Egress 39 Config Map Save 39 Modify a Config Map 39 Config...
Page 5: ...Heartbeat Settings 55 Taps Settings 55 Packet Broker 59 Filter Templates 60 Config Map 61 Ingress 62 Filters 62 Egress 63 Config Map Save 63 Modify a Config Map 64 Config Map Statistics 64 Delete Conf...
Page 6: ...the dashboard The P10GXXBPE supports multiple modes of operation Bypass Span Span Packet Inject Breakout Filter Aggregate Filter Tap and Bypass Filter Bypass Mode LED Indications Port 1 L A1 Network P...
Page 7: ...n Port Link Activity LED BP N A Port 3 L A Span Port Link Activity LED Port 3 H M N A Port 4 L A Span Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A and Port 4 L A LEDs only indicate l...
Page 8: ...Port Link Activity LED BP N A Port 3 L A Span and Packet Inject Port Link Activity LED Port 3 H M N A Port 4 L A Span and Packet Inject Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A a...
Page 9: ...Port Link Activity LED BP N A Port 3 L A Breakout Port Link Activity LED Port 3 H M N A Port 4 L A Breakout Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A and Port 4 L A LEDs only ind...
Page 10: ...Port Link Activity LED BP N A Port 3 L A Filter Port Link Activity LED Port 3 H M N A Port 4 L A Filter Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A and Port 4 L A LEDs only indicat...
Page 11: ...Port Link Activity LED BP N A Port 3 L A Aggregate Port Link Activity LED Port 3 H M N A Port 4 L A Aggregate Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A and Port 4 L A LEDs only in...
Page 12: ...cations Port 1 L A1 Network Port Link Activity LED Port 2 L A2 Network Port Link Activity LED BP N A Port 3 L A Breakout Aggregate Port Link Activity LED Garland Technology 716 242 8500 www garlandtec...
Page 13: ...Port 4 L A LEDs only indicate link in the GUI Bypass Filter Mode LED Indications Port 1 L A1 Network Port Link Activity LED Port 2 L A2 Network Port Link Activity LED BP Bypass LED Port 3 L A Inline A...
Page 14: ...n the GUI 2 System The following configuration options may be displayed modified enabled or disabled under the System panel System Info SNMP General Export Configuration Admin Import Configuration Net...
Page 15: ...s Serial Number MAC Address Software Version 1 Select System Info The System Information panel will be displayed General The following configuration options may be displayed or modified Chassis Name K...
Page 16: ...me 3 Enter the Password 4 Select the group for the user 5 Select Save to save updates The new user will be displayed on the Admin Settings panel 6 Select Cancel to return to the Admin Settings panel 7...
Page 17: ...tication may be enabled or disabled independently however at least one option must be enabled The TACACS primary or secondary function supports IPv4 only IPv6 is not supported 1 Select Authentication...
Page 18: ...connectivity from the unit to the TACACS server The TACACS Ping option will be active only if TACACS authentication has been previously enabled 1 Select TACACS 1 Ping The GUI will display the results...
Page 19: ...d or disabled independently as well as both enabled or disabled simultaneously If the IPv4 and IPv6 management interfaces are disabled simultaneously access is only allowed via the serial interface An...
Page 20: ...If the IPv4 management interface has not been enabled the GUI will display a message Disabling IPv4 and IPv6 GUI will disconnect Are you sure 3 Select OK Add SSL Certificate Uploading a custom SSL cer...
Page 21: ...e will be displayed Saved Settings Changes will cause network connectivity disruption for about 60 seconds 4 Refresh Browser 5 Verify SSL Certificate Loaded true 6 Verify Using Uploaded SSL Certificat...
Page 22: ...If IPv4 is desired then an IPv4 management interface must be assigned If IPv6 is desired then an IPv6 management interface must be assigned The system allows for an IPv4 and IPv6 management interface...
Page 23: ...ddress for Syslog If IPv4 is desired then an IPv4 management interface must be assigned If IPv6 is desired then an IPv6 management interface must be assigned The system allows for an IPv4 and IPv6 man...
Page 24: ...yed 2 Select Edit Configuration 3 Select Enable SNMP Config 4 Enter the desired Access Port number or use the default 161 5 Enter the desired Trap Port number or use the default 162 6 Enter the IPv4 o...
Page 25: ...le 1 Select Import Configuration The Import Configuration panel will be displayed 2 Select Choose File 3 Select the desired exportCfg json file 4 Select Open 5 Select Upload The unit will automaticall...
Page 26: ...y the system The network ports are typically connected to network devices such as a server or router The inline appliance ports are typically connected to an inline appliance or tool to monitor the ne...
Page 27: ...configuration options may be displayed modified enabled or disabled under the Bypass Taps panel Bypass Taps Panel Tap Settings Bypass Tap Name Heartbeat Settings Garland Technology 716 242 8500 www g...
Page 28: ...TAP P10GxxBPE 4 22 1 1 Select Bypass Taps on the Dashboard Menu bar The Bypass Taps panel will be displayed Garland Technology 716 242 8500 www garlandtechnology com Copyright 2022 Garland Technology...
Page 29: ...t configuration 2 Enter the No Of Lost HB Packets Default is 10 This is the number of heartbeats that must be lost on the inline appliance ports before any tap will switch to bypass 3 Enter the Heartb...
Page 30: ...he inline appliance port s is resolved link and heartbeats restored the tap will automatically switch back to inline Figure 2 Bypass Mode Inline Figure 3 Bypass Mode Bypass Force Bypass If selected th...
Page 31: ...the network ports 5 LFP If enabled and link is lost on one of the network ports The TX will be disabled on the other network port The RX for both network ports remain on Figure 6 Bypass Mode LFP 6 Rev...
Page 32: ...ect Cancel to return the Bypass Taps panel 4 Span Mode In this mode the network port 1 and span ports 2 3 and 4 are defined by the system Port 1 is an ingress only port Ports 2 3 and 4 are egress only...
Page 33: ...are defined by the system Port 1 is an ingress and egress port The traffic ingressed in port 1 is egressed out ports 2 3 and 4 The traffic ingressed in ports 2 3 and 4 are egressed out port 1 Figure...
Page 34: ...traffic ingressed in port 1 is egressed out port 3 The traffic ingressed in port 2 is egressed out port 4 Figure 10 Breakout Mode Figure 11 Breakout Mode LFP If link is lost on one of the network port...
Page 35: ...t broker The traffic that is passed between the ports is determined by the config map s and filter s created Config maps may be created between all four ports as desired Figure 12 Filter Mode Garland...
Page 36: ...ptions may be displayed modified enabled or disabled under the Packet Broker panel Filter Templates Config Maps Statistics 1 Select Packet Broker on the Dashboard Menu bar Garland Technology 716 242 8...
Page 37: ...t Broker Configurations panel The Filter Templates panel will be displayed 2 Select Create Template The Create New Filter Template panel will be displayed 3 Enter the template name If no name is enter...
Page 38: ...be displayed 2 Select Create Config Map The Create Config Map panel will be displayed Any previously created load balancing groups or filter templates will be displayed along with the new options Any...
Page 39: ...by placing the cursor on the desired filter template A previously created filter template or the new filter template option may be selected Select with the left mouse button Drag the filter template...
Page 40: ...options have been modified 5 Remove a Filter Template by selecting the Red X Egress 1 Add an egress port by placing the cursor on the desired port Select with the left mouse button Drag the port to th...
Page 41: ...ayed in the filter match column for each config map The number displayed represents all packets that have passed through the config map 1 Select Refresh to refresh the config map statistics 2 Select C...
Page 42: ...y needs to be considered when the same ingress port s is used in multiple config maps to send traffic to multiple egress ports In this case the config map with the highest priority will be considered...
Page 43: ...fig map 2 Select Save to save updates Method 2 1 Select Set The Set Priority panel will be displayed 2 Enter the priority in the Set New Priority panel 3 Select Set to accept the priority value 4 Sele...
Page 44: ...map in the Enable column The green check will change to a red dash 2 Select Save Enable Config Map 1 Select the red dash for the config map in the Enable column The red dash will change to a green ch...
Page 45: ...d by the system however there are no default config maps created between network ports 1 and 2 and filter tap ports 3 and 4 The traffic that is passed to the filter ports is determined by the config m...
Page 46: ...e disabled on the other network port The RX for both network ports remain on Packet Broker The following configuration options may be displayed modified enabled or disabled under the Packet Broker pan...
Page 47: ...options to filter traffic The options are considered by the system as and options Thus for traffic to pass or be denied it must match all defined options Once a template is created it will appear on t...
Page 48: ...n MAC Address Destination MAC Mask Ether Type Source IPv4 Address Source IP Mask Destination IPv4 Address Destination IP Mask Source IPv6 Address Source IP Mask IPv6 is not supported for this model De...
Page 49: ...as follows map map 1 map 2 etc 4 Place the cursor in the Name panel and enter the name 5 Select the Check to apply 6 Select the Description pencil to apply a description optional 7 Place the cursor i...
Page 50: ...be selected and moved up or down depending on priority preference Figure 23 Filter Figure 24 Filter System Considerations 2 Filter templates may be modified by selecting the green filter icon for the...
Page 51: ...Figure 25 Egress Port s 2 Remove a port by selecting the Red X Config Map Save 1 Select Save to save the current configuration The Save this configuration May take a few seconds panel will be displaye...
Page 52: ...ar Counters to clear and refresh the config map statistics 3 Select the View Counts icon to display individual statistics 4 Select Refresh Counts to refresh the statistics 5 Select Clear Counts to cle...
Page 53: ...nfig maps with ingress port 1 The Traffic_A config map is the highest priority 1 the Traffic_B config map is the next priority 2 and finally the Traffic_C is the next priority 3 The Priority of a conf...
Page 54: ...or traffic If the config map has a green check then it is enabled If the config map has a red dash then it is disabled Disable Config Map 1 Select the green check for the config map in the Enable colu...
Page 55: ...pliance port 3 or between network port 2 and inline appliance port 4 The traffic that is passed to the inline appliance ports is determined by the config map s and filter s created Config maps may be...
Page 56: ...enabled or disabled under the Bypass Taps panel Bypass Taps Panel Tap Settings Bypass Tap Name Heartbeat Settings 1 Select Bypass Taps on the Dashboard Menu bar The Bypass Taps panel will be displaye...
Page 57: ...fault is 10 This is the number of heartbeats that must be lost on the inline appliance ports before any tap will switch to bypass 3 Enter the Heartbeats per Second Default is 10 This is the number of...
Page 58: ...and heartbeats restored the tap will automatically switch back to inline Figure 28 Bypass Filter Mode Inline Figure 29 Bypass Filter Mode Bypass Force Bypass If selected the tap will switch the traff...
Page 59: ...rts remain on Figure 31 Bypass Filter Mode LFP 6 Reverse Bypass If enabled and the inline appliance port s fail loss of link or heartbeats The TX will be disabled on both of the network ports The RX f...
Page 60: ...d modified enabled or disabled under the Filters panel Filter Templates Config Maps Statistics 1 Select Filters on the Dashboard Menu bar The Filter Configurations panel will be displayed Garland Tech...
Page 61: ...will be displayed 3 Enter the template name If no name is entered the system will automatically apply a name as follows tmplt tmplt 2 tmplt 3 etc 4 Enter the description optional 5 Select the Template...
Page 62: ...yed along with the new options Any port shaded gray can be used for a config map any port shaded black may not be used 3 Select the Name pencil icon to apply a name optional If no name is entered the...
Page 63: ...eviously created filter template or the new filter template option may be selected Select with the left mouse button Drag the filter template to the Filter panel and release The filter template will b...
Page 64: ...lt iFlt 2 iFlt 3 etc 4 Select Accept once all desired options have been modified 5 Remove a Filter Template by selecting the red X Egress 1 Add an egress port by placing the cursor on the desired port...
Page 65: ...packets that have passed through the config map 1 Select Refresh to refresh the config map statistics 2 Select Clear Counters to clear and refresh the config map statistics 3 Select the View Counts i...
Page 66: ...ss filter mode the config maps can only be created from port 1 to port 3 or port 2 to port 4 Multiple egress ports is not allowed The config map with the highest priority will be considered first In t...
Page 67: ...ates Enable Disable Config Map Config maps may be enabled or disabled as desired If a config map is enabled it is in the database and available for traffic If a config map is disabled it is in the dat...
Page 68: ...e to a green check 2 Select Save 11 Port Info The following configuration options may be displayed or modified under the Port Info panel Port Number Speed Port Description Mode Link SFP Data Set Speed...
Page 69: ...panel will be displayed 2 Place the cursor in the description field and enter the new description 3 Select Set to save updates 4 Select Cancel to return to the Port Configuration panel Set Speed 1 Mod...
Page 70: ...ive Packets Transmit Packets Receive Discards Transmit Discards 1 Select Port Statistics on the Port Configuration panel The Port Statistics panel will be displayed 2 Update the statistics by selectin...