background image

Table 6. Network segments (continued)

Field

Description

Default

Operation Mode

Specifies the operation mode of the
10G Network Active Bypass unit.

Normal Active Bypass:

If the 10G

Network Active Bypass unit receives
heartbeat signals within the Timeout
period, the switching mode changes
to or remains inline.

If the 10G Network Active Bypass
unit does not receive heartbeat
signals within the Timeout period, it
changes to or remains in bypass
mode.

By default (without a heartbeat), the
10G Network Active Bypass unit
remains in bypass mode.

Normal Active Inline:

If 10G

Network Active Bypass unit receives
heartbeat signals within the Timeout
period, the switching mode remains
or is changed to bypass mode.

If 10G Network Active Bypass unit
does not receive heartbeat signals
within the Timeout period, it will
change to or remain inline.

By default (without a heartbeat), 10G
Network Active Bypass unit remains
inline.

Manual Active Bypass:

The 10G

Network Active Bypass unit is
always in bypass mode.

Manual Active Inline:

The 10G

Network Active Bypass unit is
always inline.

Normal Active Bypass

Operation mode at boot

When set to any value other than
"Auto," the operation mode changes
to the given setting upon rebooting.

Auto

Heartbeat Frame

Heartbeat frame and packet type.
Available options are layer 2
Etherframe, layer 3 ICMP, layer 4
TCP SYN, or IPX.

Heartbeat Ethernet Type

Ethernet type of the heartbeat frame.
Use 0x8137 or 0x8138 when IPX
heartbeats are used.

0x88b5

Heartbeat Source MAC

Source MAC address used for
heartbeat packets when Etherframe,
ICMP, or TCP SYN heartbeat modes
are used.

00:0c:bd:00:00:00

14

10G Network Active Bypass V3.4: User Guide

Содержание 10G Network Active Bypass

Страница 1: ...IBM Security 10G Network Active Bypass User Guide V ersion 3 4...

Страница 2: ...yright statement Copyright IBM Corporation 2011 2014 U S Government Users Restricted Rights Use duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp Publication Date April 2...

Страница 3: ...ve Bypass unit on your network 11 Logging in to the management interface 12 Bypass settings 13 HA Service 16 Bond service 16 Link SFP 17 Management port settings 17 System logging 18 Email notificatio...

Страница 4: ...iv 10G Network Active Bypass V3 4 User Guide...

Страница 5: ...tion statement regulation notice This product is not intended to be connected directly or indirectly by any means whatsoever to interfaces of public telecommunications networks Copyright IBM Corp 2011...

Страница 6: ...vi 10G Network Active Bypass V3 4 User Guide...

Страница 7: ...n conditions To avoid these hazards ensure that your system electrical requirements do not exceed branch circuit protection requirements Refer to the information that is provided with your device or t...

Страница 8: ...t signal cables v Never turn on any equipment when there is evidence of fire water or structural damage v Disconnect the attached power cords telecommunications systems networks and modems before you...

Страница 9: ...n To provide the correct power connection to a rack refer to the rating labels located on the equipment in the rack to determine the total power requirement of the supply circuit v For sliding drawers...

Страница 10: ...roduct you must first become familiar with the related safety information in the booklet You should also refer to the booklet any time you do not clearly understand any safety information in the US En...

Страница 11: ...a los propietarios de equipos a reciclar sus productos de TI Se puede encontrar informaci n sobre las ofertas de reciclado de productos de IBM en el sitio web de IBM http www ibm com ibm environment p...

Страница 12: ...m nickel metal hydride and other battery packs from IBM equipment For information on proper disposal of these batteries contact IBM at 1 800 426 4333 Please have the IBM part number listed on the batt...

Страница 13: ...roducts intended for use with this product will appear in their accompanying manuals Federal Communications Commission FCC Statement Note This equipment has been tested and found to comply with the li...

Страница 14: ...1176 Fax 0049 0 711 785 1283 e mail tjahn de ibm com EC Declaration of Conformity In German Deutschsprachiger EU Hinweis Hinweis f r Ger te der Klasse A EU Richtlinie zur Elektromagnetischen Vertr gl...

Страница 15: ...55022 Klasse A update 2004 12 07 People s Republic of China Class A Compliance Statement This is a Class A product In a domestic environment this product may cause radio interference in which case the...

Страница 16: ...xvi 10G Network Active Bypass V3 4 User Guide...

Страница 17: ...IP network configuration is helpful Supported Network IPS appliance model The 10G Network Active Bypass unit supports the GX7800 Network IPS appliance model Latest product documentation For the latest...

Страница 18: ...roblem to IBM Support in one of the following ways v By using IBM Support Assistant ISA if the Service Request tool is enabled on your product Any data that has been collected can be attached to the s...

Страница 19: ...k IPS appliances Extensive bypass configuration You can configure these bypass options v Heartbeat pattern v Heartbeat interval v Bypass on link loss or power loss v Configuration of the number of lin...

Страница 20: ...2 168 0 111 The default management port Web address is https 192 168 0 111 Extensive command line interface The 10G Network Active Bypass unit includes a command line interface that provides these fea...

Страница 21: ...console interface through the network 4 TAP ports Ports used to passively monitor and mirror network traffic Note The 10G Network Active Bypass unit provides seven functioning TAP ports 1 through 7 T...

Страница 22: ...PS appliance 2 Appliance link activity LED Link and activity status of the connected Network IPS appliance 10G uses orange LED Blinking orange Traffic activity blinks only when receiving traffic not w...

Страница 23: ...e Bypass unit is placed inline with the Network IPS appliance and is connected to the Network IPS appliance and to the networks Inline mode When the 10G Network Active Bypass unit is in inline mode ne...

Страница 24: ...conds or 10 heartbeat packets per second Port A2 appliance out must receive the same heartbeat packet from the Network IPS appliance Note By default the heartbeat packet is sent every 100 milliseconds...

Страница 25: ...e Bypass unit but the traffic bypasses the appliance ports The 10G Network Active Bypass unit continues to inject heartbeats from the Network IPS appliance into the stream out of the Network IPS appli...

Страница 26: ...ic flows between the network ports but the 10G Network Active Bypass unit does not send heartbeat packets In this mode the 10G Network Active Bypass unit tries to negotiate at the link speed and duple...

Страница 27: ...TX The port mirrors both the receiving traffic and the transmitting traffic to the user defined TAP port Power failure protection You can program the 10G Network Active Bypass unit to open a network...

Страница 28: ...ctive Bypass unit Table 5 Supported transceivers and orderable transceiver kits Form Factor Speed Mode IBM Part Number IBM Orderable PN kit of 2 SFP 1G SX multi mode 51J1701 51J2260 SFP 1G LX single m...

Страница 29: ...nd to two different power sources for added redundancy Tip Use independent AC power sources to maximize power redundancy in the event of AC power loss from a single source 4 Check the Power LEDs on th...

Страница 30: ...web browser 3 Type https 192 168 0 111 The 10G Network Active Bypass unit uses a default IP address of 192 168 0 111 These default values remain in effect until you change them You can use the Managem...

Страница 31: ...of power If a power failure is detected Power Fail Protection Operation is triggered which initiates a switch to bypass mode During this no power state the network ports connect physically to create...

Страница 32: ...ypass unit does not receive heartbeat signals within the Timeout period it will change to or remain inline By default without a heartbeat 10G Network Active Bypass unit remains inline Manual Active By...

Страница 33: ...3 Bidirectional heartbeat When enabled the system sends heartbeat packets on both the A1 and A2 ports of the specified segment instead of just A1 No Link fault detection Generates an SNMP trap if a ne...

Страница 34: ...d Primary Primary segment of the pair where traffic usually flows Secondary Backup segment used if the primary segment fails Bond service Use the Bond Service page to configure a pair of segments in a...

Страница 35: ...0 1 DNS 2 IP address of the secondary domain name system server 0 0 0 0 Link Mode Auto negotiation Allows the 10G Network Active Bypass unit to select the best common mode automatically over the link...

Страница 36: ...r Identification Host name of the syslog server Heartbeat status template Log entry template for heartbeat status change messages Heartbeat Segment segment state hb_state_name OpMode op_mode_name Powe...

Страница 37: ...assword for the outgoing SMTP mail server if applicable Outgoing Server SMTP Security SSL encryption used between the SMTP mail server and mail client Enabled Secured From Sender s Email Address The n...

Страница 38: ...p server public Alias SNMP Alias of trap manager Heartbeat status template Log entry template for heartbeat status change messages bypassInOut bypassTrapModuleId u segment bypassTrapStateBypass s hb_s...

Страница 39: ...tive Bypass unit time with a network time server Disabled NTP server Public domain of a collection of computers that provide time using NTP us pool ntp org Use the Time Zone page to set the time zone...

Страница 40: ...22 10G Network Active Bypass V3 4 User Guide...

Страница 41: ...s unit Management IP IP address for the management port Tip Use the Management Port page if you want to change IP settings for the management port 192 168 0 111 Current temperature Current temperature...

Страница 42: ...Table 18 Backup or restore settings Field Description Save Settings Saves a copy of the current settings on the 10G Network Active Bypass unit in a file named config txt Load Settings Location of a s...

Страница 43: ...Bypass unit and to view a snapshot of traffic activity The information on this page is updated every 10 seconds User account settings Use the Users page to change the user name and password required t...

Страница 44: ...CACS settings Field Description Default TACACS Allows TACACS protocol for access control Disabled Server IP address of the server providing access services 0 0 0 0 Protocol Protocol used for the conne...

Страница 45: ...ge The 10G Network Active Bypass unit sends a notice when one of the two power cables is disconnected If both power cables are disconnected then the 10G Network Active Bypass unit sends a coldboot not...

Страница 46: ...28 10G Network Active Bypass V3 4 User Guide...

Страница 47: ...nd the SSH remote shell emulator Connection type Port on 10G Network Active Bypass unit Cable Serial terminal emulator Console port Console cable SSH remote shell emulator Management port Management c...

Страница 48: ...onfigure Enter configuration mode exit Exit from the CLI show Display system or configuration information statistics Port statistics operations system System action Select the show command and then ty...

Страница 49: ...etection information links Configure link status management if Configure management interface information notification Configure notification setting sfp Configure sfp information statistics Configure...

Страница 50: ...32 10G Network Active Bypass V3 4 User Guide...

Страница 51: ...ectual Property Law IBM Japan Ltd 19 21 Nihonbashi Hakozakicho Chuo ku Tokyo 103 8510 Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are...

Страница 52: ...between us All statements regarding IBM s future direction or intent are subject to change or withdrawal without notice and represent goals and objectives only Trademarks IBM the IBM logo and ibm com...

Страница 53: ...uplex 17 hardware interface 3 I IBM Security support portal xviii technical support xviii troubleshooting xviii inline mode 5 L Link Mode 17 Log Setting page 18 M Manage Settings page 24 management in...

Страница 54: ...36 10G Network Active Bypass V3 4 User Guide...

Страница 55: ......

Страница 56: ...Printed in USA...

Отзывы: