background image

User Guide

EdgeSafe Bypass TAP | P10GxxBPE | 4.22.1

5. Select Cancel to return the Admin Settings panel.

 TACACS Test

This option may be used to verify the authentication of a TACACS user, password and

authorization group. The TACACS Test option will be active only if TACACS authentication
has previously been enabled.

1. Select TACACS Test.

The TACACS Test panel will appear.

2. Select Primary.

3. Enter the Username.

4. Enter the Password.

5. Select Test.

The GUI will display the results of the test, “Authentication Test Successful”. As well as

messages for “authentication:Success”, authorization:Success” and
“authorization:group:abcdef.

 TACACS Ping Test

This option may be used to verify the network connectivity from the unit to the TACACS server.

The TACACS Ping option will be active only if TACACS authentication has been previously enabled.

1. Select TACACS 1 Ping.

The GUI will display the results of the ping, “TACACS 1 Ping Successful”.

 TACACS Secondary Authentication

1. Select Enable Secondary.

The TACACS Secondary panel will be displayed.

2. Enter the IP Address, IPv4 or IPv6.

3. Enter the Secret Word, (optional).

4. Select Save to save updates.

5. Select Cancel to return the Admin Settings panel.

 TACACS Test

This option may be used to verify the authentication of a TACACS user, password and

authorization group. The TACACS Test option will be active only if TACACS authentication
has previously been enabled.

1. Select TACACS Test.

The TACACS Test panel will appear.

Garland Technology  |  716.242.8500  |  www.garlandtechnology.com
Copyright © 2022 Garland Technology, LLC. All rights reserved.

18

Содержание P10GMSBPE

Страница 1: ...User Guide P10GMSBPE P10GSSBPE 12 2022 Release Version 4 22 1...

Страница 2: ...The purchased products services and features are stipulated by the contract made between Garland Technology and the customer All or part of the products services and features described in this docume...

Страница 3: ...13 LED Indications 13 2 System 14 System Info 15 General 15 Admin 15 Users 15 Groups 16 Authentication 16 Local Authentication Disable 17 Local Authentication Enable 17 TACACS Primary Authentication...

Страница 4: ...31 5 Span Packet Inject Mode 32 6 Breakout Mode 33 7 Filter Mode 34 Packet Broker 35 Filter Templates 36 Config Map 37 Ingress 37 Filters 38 Egress 39 Config Map Save 39 Modify a Config Map 39 Config...

Страница 5: ...Heartbeat Settings 55 Taps Settings 55 Packet Broker 59 Filter Templates 60 Config Map 61 Ingress 62 Filters 62 Egress 63 Config Map Save 63 Modify a Config Map 64 Config Map Statistics 64 Delete Conf...

Страница 6: ...the dashboard The P10GXXBPE supports multiple modes of operation Bypass Span Span Packet Inject Breakout Filter Aggregate Filter Tap and Bypass Filter Bypass Mode LED Indications Port 1 L A1 Network P...

Страница 7: ...n Port Link Activity LED BP N A Port 3 L A Span Port Link Activity LED Port 3 H M N A Port 4 L A Span Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A and Port 4 L A LEDs only indicate l...

Страница 8: ...Port Link Activity LED BP N A Port 3 L A Span and Packet Inject Port Link Activity LED Port 3 H M N A Port 4 L A Span and Packet Inject Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A a...

Страница 9: ...Port Link Activity LED BP N A Port 3 L A Breakout Port Link Activity LED Port 3 H M N A Port 4 L A Breakout Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A and Port 4 L A LEDs only ind...

Страница 10: ...Port Link Activity LED BP N A Port 3 L A Filter Port Link Activity LED Port 3 H M N A Port 4 L A Filter Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A and Port 4 L A LEDs only indicat...

Страница 11: ...Port Link Activity LED BP N A Port 3 L A Aggregate Port Link Activity LED Port 3 H M N A Port 4 L A Aggregate Port Link Activity LED Port 4 H M N A The L A1 L A2 Port 3 L A and Port 4 L A LEDs only in...

Страница 12: ...cations Port 1 L A1 Network Port Link Activity LED Port 2 L A2 Network Port Link Activity LED BP N A Port 3 L A Breakout Aggregate Port Link Activity LED Garland Technology 716 242 8500 www garlandtec...

Страница 13: ...Port 4 L A LEDs only indicate link in the GUI Bypass Filter Mode LED Indications Port 1 L A1 Network Port Link Activity LED Port 2 L A2 Network Port Link Activity LED BP Bypass LED Port 3 L A Inline A...

Страница 14: ...n the GUI 2 System The following configuration options may be displayed modified enabled or disabled under the System panel System Info SNMP General Export Configuration Admin Import Configuration Net...

Страница 15: ...s Serial Number MAC Address Software Version 1 Select System Info The System Information panel will be displayed General The following configuration options may be displayed or modified Chassis Name K...

Страница 16: ...me 3 Enter the Password 4 Select the group for the user 5 Select Save to save updates The new user will be displayed on the Admin Settings panel 6 Select Cancel to return to the Admin Settings panel 7...

Страница 17: ...tication may be enabled or disabled independently however at least one option must be enabled The TACACS primary or secondary function supports IPv4 only IPv6 is not supported 1 Select Authentication...

Страница 18: ...connectivity from the unit to the TACACS server The TACACS Ping option will be active only if TACACS authentication has been previously enabled 1 Select TACACS 1 Ping The GUI will display the results...

Страница 19: ...d or disabled independently as well as both enabled or disabled simultaneously If the IPv4 and IPv6 management interfaces are disabled simultaneously access is only allowed via the serial interface An...

Страница 20: ...If the IPv4 management interface has not been enabled the GUI will display a message Disabling IPv4 and IPv6 GUI will disconnect Are you sure 3 Select OK Add SSL Certificate Uploading a custom SSL cer...

Страница 21: ...e will be displayed Saved Settings Changes will cause network connectivity disruption for about 60 seconds 4 Refresh Browser 5 Verify SSL Certificate Loaded true 6 Verify Using Uploaded SSL Certificat...

Страница 22: ...If IPv4 is desired then an IPv4 management interface must be assigned If IPv6 is desired then an IPv6 management interface must be assigned The system allows for an IPv4 and IPv6 management interface...

Страница 23: ...ddress for Syslog If IPv4 is desired then an IPv4 management interface must be assigned If IPv6 is desired then an IPv6 management interface must be assigned The system allows for an IPv4 and IPv6 man...

Страница 24: ...yed 2 Select Edit Configuration 3 Select Enable SNMP Config 4 Enter the desired Access Port number or use the default 161 5 Enter the desired Trap Port number or use the default 162 6 Enter the IPv4 o...

Страница 25: ...le 1 Select Import Configuration The Import Configuration panel will be displayed 2 Select Choose File 3 Select the desired exportCfg json file 4 Select Open 5 Select Upload The unit will automaticall...

Страница 26: ...y the system The network ports are typically connected to network devices such as a server or router The inline appliance ports are typically connected to an inline appliance or tool to monitor the ne...

Страница 27: ...configuration options may be displayed modified enabled or disabled under the Bypass Taps panel Bypass Taps Panel Tap Settings Bypass Tap Name Heartbeat Settings Garland Technology 716 242 8500 www g...

Страница 28: ...TAP P10GxxBPE 4 22 1 1 Select Bypass Taps on the Dashboard Menu bar The Bypass Taps panel will be displayed Garland Technology 716 242 8500 www garlandtechnology com Copyright 2022 Garland Technology...

Страница 29: ...t configuration 2 Enter the No Of Lost HB Packets Default is 10 This is the number of heartbeats that must be lost on the inline appliance ports before any tap will switch to bypass 3 Enter the Heartb...

Страница 30: ...he inline appliance port s is resolved link and heartbeats restored the tap will automatically switch back to inline Figure 2 Bypass Mode Inline Figure 3 Bypass Mode Bypass Force Bypass If selected th...

Страница 31: ...the network ports 5 LFP If enabled and link is lost on one of the network ports The TX will be disabled on the other network port The RX for both network ports remain on Figure 6 Bypass Mode LFP 6 Rev...

Страница 32: ...ect Cancel to return the Bypass Taps panel 4 Span Mode In this mode the network port 1 and span ports 2 3 and 4 are defined by the system Port 1 is an ingress only port Ports 2 3 and 4 are egress only...

Страница 33: ...are defined by the system Port 1 is an ingress and egress port The traffic ingressed in port 1 is egressed out ports 2 3 and 4 The traffic ingressed in ports 2 3 and 4 are egressed out port 1 Figure...

Страница 34: ...traffic ingressed in port 1 is egressed out port 3 The traffic ingressed in port 2 is egressed out port 4 Figure 10 Breakout Mode Figure 11 Breakout Mode LFP If link is lost on one of the network port...

Страница 35: ...t broker The traffic that is passed between the ports is determined by the config map s and filter s created Config maps may be created between all four ports as desired Figure 12 Filter Mode Garland...

Страница 36: ...ptions may be displayed modified enabled or disabled under the Packet Broker panel Filter Templates Config Maps Statistics 1 Select Packet Broker on the Dashboard Menu bar Garland Technology 716 242 8...

Страница 37: ...t Broker Configurations panel The Filter Templates panel will be displayed 2 Select Create Template The Create New Filter Template panel will be displayed 3 Enter the template name If no name is enter...

Страница 38: ...be displayed 2 Select Create Config Map The Create Config Map panel will be displayed Any previously created load balancing groups or filter templates will be displayed along with the new options Any...

Страница 39: ...by placing the cursor on the desired filter template A previously created filter template or the new filter template option may be selected Select with the left mouse button Drag the filter template...

Страница 40: ...options have been modified 5 Remove a Filter Template by selecting the Red X Egress 1 Add an egress port by placing the cursor on the desired port Select with the left mouse button Drag the port to th...

Страница 41: ...ayed in the filter match column for each config map The number displayed represents all packets that have passed through the config map 1 Select Refresh to refresh the config map statistics 2 Select C...

Страница 42: ...y needs to be considered when the same ingress port s is used in multiple config maps to send traffic to multiple egress ports In this case the config map with the highest priority will be considered...

Страница 43: ...fig map 2 Select Save to save updates Method 2 1 Select Set The Set Priority panel will be displayed 2 Enter the priority in the Set New Priority panel 3 Select Set to accept the priority value 4 Sele...

Страница 44: ...map in the Enable column The green check will change to a red dash 2 Select Save Enable Config Map 1 Select the red dash for the config map in the Enable column The red dash will change to a green ch...

Страница 45: ...d by the system however there are no default config maps created between network ports 1 and 2 and filter tap ports 3 and 4 The traffic that is passed to the filter ports is determined by the config m...

Страница 46: ...e disabled on the other network port The RX for both network ports remain on Packet Broker The following configuration options may be displayed modified enabled or disabled under the Packet Broker pan...

Страница 47: ...options to filter traffic The options are considered by the system as and options Thus for traffic to pass or be denied it must match all defined options Once a template is created it will appear on t...

Страница 48: ...n MAC Address Destination MAC Mask Ether Type Source IPv4 Address Source IP Mask Destination IPv4 Address Destination IP Mask Source IPv6 Address Source IP Mask IPv6 is not supported for this model De...

Страница 49: ...as follows map map 1 map 2 etc 4 Place the cursor in the Name panel and enter the name 5 Select the Check to apply 6 Select the Description pencil to apply a description optional 7 Place the cursor i...

Страница 50: ...be selected and moved up or down depending on priority preference Figure 23 Filter Figure 24 Filter System Considerations 2 Filter templates may be modified by selecting the green filter icon for the...

Страница 51: ...Figure 25 Egress Port s 2 Remove a port by selecting the Red X Config Map Save 1 Select Save to save the current configuration The Save this configuration May take a few seconds panel will be displaye...

Страница 52: ...ar Counters to clear and refresh the config map statistics 3 Select the View Counts icon to display individual statistics 4 Select Refresh Counts to refresh the statistics 5 Select Clear Counts to cle...

Страница 53: ...nfig maps with ingress port 1 The Traffic_A config map is the highest priority 1 the Traffic_B config map is the next priority 2 and finally the Traffic_C is the next priority 3 The Priority of a conf...

Страница 54: ...or traffic If the config map has a green check then it is enabled If the config map has a red dash then it is disabled Disable Config Map 1 Select the green check for the config map in the Enable colu...

Страница 55: ...pliance port 3 or between network port 2 and inline appliance port 4 The traffic that is passed to the inline appliance ports is determined by the config map s and filter s created Config maps may be...

Страница 56: ...enabled or disabled under the Bypass Taps panel Bypass Taps Panel Tap Settings Bypass Tap Name Heartbeat Settings 1 Select Bypass Taps on the Dashboard Menu bar The Bypass Taps panel will be displaye...

Страница 57: ...fault is 10 This is the number of heartbeats that must be lost on the inline appliance ports before any tap will switch to bypass 3 Enter the Heartbeats per Second Default is 10 This is the number of...

Страница 58: ...and heartbeats restored the tap will automatically switch back to inline Figure 28 Bypass Filter Mode Inline Figure 29 Bypass Filter Mode Bypass Force Bypass If selected the tap will switch the traff...

Страница 59: ...rts remain on Figure 31 Bypass Filter Mode LFP 6 Reverse Bypass If enabled and the inline appliance port s fail loss of link or heartbeats The TX will be disabled on both of the network ports The RX f...

Страница 60: ...d modified enabled or disabled under the Filters panel Filter Templates Config Maps Statistics 1 Select Filters on the Dashboard Menu bar The Filter Configurations panel will be displayed Garland Tech...

Страница 61: ...will be displayed 3 Enter the template name If no name is entered the system will automatically apply a name as follows tmplt tmplt 2 tmplt 3 etc 4 Enter the description optional 5 Select the Template...

Страница 62: ...yed along with the new options Any port shaded gray can be used for a config map any port shaded black may not be used 3 Select the Name pencil icon to apply a name optional If no name is entered the...

Страница 63: ...eviously created filter template or the new filter template option may be selected Select with the left mouse button Drag the filter template to the Filter panel and release The filter template will b...

Страница 64: ...lt iFlt 2 iFlt 3 etc 4 Select Accept once all desired options have been modified 5 Remove a Filter Template by selecting the red X Egress 1 Add an egress port by placing the cursor on the desired port...

Страница 65: ...packets that have passed through the config map 1 Select Refresh to refresh the config map statistics 2 Select Clear Counters to clear and refresh the config map statistics 3 Select the View Counts i...

Страница 66: ...ss filter mode the config maps can only be created from port 1 to port 3 or port 2 to port 4 Multiple egress ports is not allowed The config map with the highest priority will be considered first In t...

Страница 67: ...ates Enable Disable Config Map Config maps may be enabled or disabled as desired If a config map is enabled it is in the database and available for traffic If a config map is disabled it is in the dat...

Страница 68: ...e to a green check 2 Select Save 11 Port Info The following configuration options may be displayed or modified under the Port Info panel Port Number Speed Port Description Mode Link SFP Data Set Speed...

Страница 69: ...panel will be displayed 2 Place the cursor in the description field and enter the new description 3 Select Set to save updates 4 Select Cancel to return to the Port Configuration panel Set Speed 1 Mod...

Страница 70: ...ive Packets Transmit Packets Receive Discards Transmit Discards 1 Select Port Statistics on the Port Configuration panel The Port Statistics panel will be displayed 2 Update the statistics by selectin...

Отзывы: