background image

Laser compliance

All lasers are certified in the U.S. to conform to the requirements of DHHS 21 CFR Subchapter J for class
1 laser products. Outside the U.S., they are certified to be in compliance with IEC 60825 as a class 1 laser
product. Consult the label on each part for laser certification numbers and approval information.

Product recycling and disposal

This unit must be recycled or discarded according to applicable local and national regulations. IBM
encourages owners of information technology (IT) equipment to responsibly recycle their equipment
when it is no longer needed. IBM offers a variety of product return programs and services in several
countries to assist equipment owners in recycling their IT products. Information on IBM ISS product
recycling offerings can be found on IBM's Internet site at http:// www.ibm.com/ibm/environment/
products/prp.shtml.

Esta unidad debe reciclarse o desecharse de acuerdo con lo establecido en la normativa nacional o local
aplicable. IBM recomienda a los propietarios de equipos de tecnología de la información (TI) que reciclen
responsablemente sus equipos cuando éstos ya no les sean útiles. IBM dispone de una serie de programas
y servicios de devolución de productos en varios países, a fin de ayudar a los propietarios de equipos a
reciclar sus productos de TI. Se puede encontrar información sobre las ofertas de reciclado de productos
de IBM en el sitio web de IBM http:// www.ibm.com/ibm/environment/products/prp.shtml.

Notice

: This mark applies only to countries within the European Union (EU) and Norway.

Appliances are labeled in accordance with European Directive 2002/96/EC concerning waste electrical
and electronic equipment (WEEE). The Directive determines the framework for the return and recycling
of used appliances as applicable through the European Union. This label is applied to various products to
indicate that the product is not to be thrown away, but rather reclaimed upon end of life per this
Directive.

In accordance with the European WEEE Directive, electrical and electronic equipment (EEE) is to be
collected separately and to be reused, recycled, or recovered at end of life. Users of EEE with the WEEE
marking per Annex IV of the WEEE Directive, as shown above, must not dispose of end of life EEE as
unsorted municipal waste, but use the collection framework available to customers for the return,
recycling, and recovery of WEEE. Customer participation is important to minimize any potential effects of
EEE on the environment and human health due to the potential presence of hazardous substances in EEE.
For proper collection and treatment, contact your local IBM representative.

Safety, environmental, and electronic emissions notices

xi

Содержание 10G Network Active Bypass

Страница 1: ...IBM Security 10G Network Active Bypass User Guide V ersion 3 4...

Страница 2: ...yright statement Copyright IBM Corporation 2011 2014 U S Government Users Restricted Rights Use duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp Publication Date April 2...

Страница 3: ...ve Bypass unit on your network 11 Logging in to the management interface 12 Bypass settings 13 HA Service 16 Bond service 16 Link SFP 17 Management port settings 17 System logging 18 Email notificatio...

Страница 4: ...iv 10G Network Active Bypass V3 4 User Guide...

Страница 5: ...tion statement regulation notice This product is not intended to be connected directly or indirectly by any means whatsoever to interfaces of public telecommunications networks Copyright IBM Corp 2011...

Страница 6: ...vi 10G Network Active Bypass V3 4 User Guide...

Страница 7: ...n conditions To avoid these hazards ensure that your system electrical requirements do not exceed branch circuit protection requirements Refer to the information that is provided with your device or t...

Страница 8: ...t signal cables v Never turn on any equipment when there is evidence of fire water or structural damage v Disconnect the attached power cords telecommunications systems networks and modems before you...

Страница 9: ...n To provide the correct power connection to a rack refer to the rating labels located on the equipment in the rack to determine the total power requirement of the supply circuit v For sliding drawers...

Страница 10: ...roduct you must first become familiar with the related safety information in the booklet You should also refer to the booklet any time you do not clearly understand any safety information in the US En...

Страница 11: ...a los propietarios de equipos a reciclar sus productos de TI Se puede encontrar informaci n sobre las ofertas de reciclado de productos de IBM en el sitio web de IBM http www ibm com ibm environment p...

Страница 12: ...m nickel metal hydride and other battery packs from IBM equipment For information on proper disposal of these batteries contact IBM at 1 800 426 4333 Please have the IBM part number listed on the batt...

Страница 13: ...roducts intended for use with this product will appear in their accompanying manuals Federal Communications Commission FCC Statement Note This equipment has been tested and found to comply with the li...

Страница 14: ...1176 Fax 0049 0 711 785 1283 e mail tjahn de ibm com EC Declaration of Conformity In German Deutschsprachiger EU Hinweis Hinweis f r Ger te der Klasse A EU Richtlinie zur Elektromagnetischen Vertr gl...

Страница 15: ...55022 Klasse A update 2004 12 07 People s Republic of China Class A Compliance Statement This is a Class A product In a domestic environment this product may cause radio interference in which case the...

Страница 16: ...xvi 10G Network Active Bypass V3 4 User Guide...

Страница 17: ...IP network configuration is helpful Supported Network IPS appliance model The 10G Network Active Bypass unit supports the GX7800 Network IPS appliance model Latest product documentation For the latest...

Страница 18: ...roblem to IBM Support in one of the following ways v By using IBM Support Assistant ISA if the Service Request tool is enabled on your product Any data that has been collected can be attached to the s...

Страница 19: ...k IPS appliances Extensive bypass configuration You can configure these bypass options v Heartbeat pattern v Heartbeat interval v Bypass on link loss or power loss v Configuration of the number of lin...

Страница 20: ...2 168 0 111 The default management port Web address is https 192 168 0 111 Extensive command line interface The 10G Network Active Bypass unit includes a command line interface that provides these fea...

Страница 21: ...console interface through the network 4 TAP ports Ports used to passively monitor and mirror network traffic Note The 10G Network Active Bypass unit provides seven functioning TAP ports 1 through 7 T...

Страница 22: ...PS appliance 2 Appliance link activity LED Link and activity status of the connected Network IPS appliance 10G uses orange LED Blinking orange Traffic activity blinks only when receiving traffic not w...

Страница 23: ...e Bypass unit is placed inline with the Network IPS appliance and is connected to the Network IPS appliance and to the networks Inline mode When the 10G Network Active Bypass unit is in inline mode ne...

Страница 24: ...conds or 10 heartbeat packets per second Port A2 appliance out must receive the same heartbeat packet from the Network IPS appliance Note By default the heartbeat packet is sent every 100 milliseconds...

Страница 25: ...e Bypass unit but the traffic bypasses the appliance ports The 10G Network Active Bypass unit continues to inject heartbeats from the Network IPS appliance into the stream out of the Network IPS appli...

Страница 26: ...ic flows between the network ports but the 10G Network Active Bypass unit does not send heartbeat packets In this mode the 10G Network Active Bypass unit tries to negotiate at the link speed and duple...

Страница 27: ...TX The port mirrors both the receiving traffic and the transmitting traffic to the user defined TAP port Power failure protection You can program the 10G Network Active Bypass unit to open a network...

Страница 28: ...ctive Bypass unit Table 5 Supported transceivers and orderable transceiver kits Form Factor Speed Mode IBM Part Number IBM Orderable PN kit of 2 SFP 1G SX multi mode 51J1701 51J2260 SFP 1G LX single m...

Страница 29: ...nd to two different power sources for added redundancy Tip Use independent AC power sources to maximize power redundancy in the event of AC power loss from a single source 4 Check the Power LEDs on th...

Страница 30: ...web browser 3 Type https 192 168 0 111 The 10G Network Active Bypass unit uses a default IP address of 192 168 0 111 These default values remain in effect until you change them You can use the Managem...

Страница 31: ...of power If a power failure is detected Power Fail Protection Operation is triggered which initiates a switch to bypass mode During this no power state the network ports connect physically to create...

Страница 32: ...ypass unit does not receive heartbeat signals within the Timeout period it will change to or remain inline By default without a heartbeat 10G Network Active Bypass unit remains inline Manual Active By...

Страница 33: ...3 Bidirectional heartbeat When enabled the system sends heartbeat packets on both the A1 and A2 ports of the specified segment instead of just A1 No Link fault detection Generates an SNMP trap if a ne...

Страница 34: ...d Primary Primary segment of the pair where traffic usually flows Secondary Backup segment used if the primary segment fails Bond service Use the Bond Service page to configure a pair of segments in a...

Страница 35: ...0 1 DNS 2 IP address of the secondary domain name system server 0 0 0 0 Link Mode Auto negotiation Allows the 10G Network Active Bypass unit to select the best common mode automatically over the link...

Страница 36: ...r Identification Host name of the syslog server Heartbeat status template Log entry template for heartbeat status change messages Heartbeat Segment segment state hb_state_name OpMode op_mode_name Powe...

Страница 37: ...assword for the outgoing SMTP mail server if applicable Outgoing Server SMTP Security SSL encryption used between the SMTP mail server and mail client Enabled Secured From Sender s Email Address The n...

Страница 38: ...p server public Alias SNMP Alias of trap manager Heartbeat status template Log entry template for heartbeat status change messages bypassInOut bypassTrapModuleId u segment bypassTrapStateBypass s hb_s...

Страница 39: ...tive Bypass unit time with a network time server Disabled NTP server Public domain of a collection of computers that provide time using NTP us pool ntp org Use the Time Zone page to set the time zone...

Страница 40: ...22 10G Network Active Bypass V3 4 User Guide...

Страница 41: ...s unit Management IP IP address for the management port Tip Use the Management Port page if you want to change IP settings for the management port 192 168 0 111 Current temperature Current temperature...

Страница 42: ...Table 18 Backup or restore settings Field Description Save Settings Saves a copy of the current settings on the 10G Network Active Bypass unit in a file named config txt Load Settings Location of a s...

Страница 43: ...Bypass unit and to view a snapshot of traffic activity The information on this page is updated every 10 seconds User account settings Use the Users page to change the user name and password required t...

Страница 44: ...CACS settings Field Description Default TACACS Allows TACACS protocol for access control Disabled Server IP address of the server providing access services 0 0 0 0 Protocol Protocol used for the conne...

Страница 45: ...ge The 10G Network Active Bypass unit sends a notice when one of the two power cables is disconnected If both power cables are disconnected then the 10G Network Active Bypass unit sends a coldboot not...

Страница 46: ...28 10G Network Active Bypass V3 4 User Guide...

Страница 47: ...nd the SSH remote shell emulator Connection type Port on 10G Network Active Bypass unit Cable Serial terminal emulator Console port Console cable SSH remote shell emulator Management port Management c...

Страница 48: ...onfigure Enter configuration mode exit Exit from the CLI show Display system or configuration information statistics Port statistics operations system System action Select the show command and then ty...

Страница 49: ...etection information links Configure link status management if Configure management interface information notification Configure notification setting sfp Configure sfp information statistics Configure...

Страница 50: ...32 10G Network Active Bypass V3 4 User Guide...

Страница 51: ...ectual Property Law IBM Japan Ltd 19 21 Nihonbashi Hakozakicho Chuo ku Tokyo 103 8510 Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are...

Страница 52: ...between us All statements regarding IBM s future direction or intent are subject to change or withdrawal without notice and represent goals and objectives only Trademarks IBM the IBM logo and ibm com...

Страница 53: ...uplex 17 hardware interface 3 I IBM Security support portal xviii technical support xviii troubleshooting xviii inline mode 5 L Link Mode 17 Log Setting page 18 M Manage Settings page 24 management in...

Страница 54: ...36 10G Network Active Bypass V3 4 User Guide...

Страница 55: ......

Страница 56: ...Printed in USA...

Отзывы: