Director xStream Pro - Site de François Janssens

over IP (VoIP) to be directed to particular monitoring tools. ... makes it easy to validate filters and to capture rare or low-bandwidth events. .... for information about proper termination requirements to avoid damage to the circuitry of the GPS input. ...... spreadsheet program such as Excel by using the comma as a field delimiter.
11MB taille 26 téléchargements 86 vues
User Guide Network Controller Switch

Doc. 800-0163-001 Rev D PUBDIRXPU 4/11

PLEASE READ THESE LEGAL NOTICES CAREFULLY. By using a Net Optics Director xStream Pro device you agree to the terms and conditions of usage set forth by Net Optics, Inc. No licenses, express or implied, are granted with respect to any of the technology described in this manual. Net Optics retains all intellectual property rights associated with the technology described in this manual. This manual is intended to assist with installing Net Optics products into your network. Trademarks and Copyrights © 2011 by Net Optics, Inc. Net Optics is a registered trademark of Net Optics, Inc. Director xStream Pro is a trademark of Net Optics, Inc. Additional company and product names may be trademarks or registered trademarks of the individual companies and are respectfully acknowledged. Additional Information Net Optics, Inc. reserves the right to make changes in specifications and other information contained in this document without prior notice. Every effort has been made to ensure that the information in this document is accurate.

Director xStream Pro

Contents Chapter 1 Introduction............................................................................................... 1 Key Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 About this Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 Rear Panel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6 Monitoring Links Inline . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Chapter 2 Installing Director xStream Pro................................................................ 8 Plan the Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 Installation in a Restricted Access Location in Finland and Norway. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Unpack and Inspect the Director xStream Pro device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Install SFP+ and SFP transceiver modules. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Rack Mount the Director xStream Pro Device. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 Connect Power to Director xStream Pro. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Warnings and Symbols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Connect Span Ports to Director xStream Pro. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Connect Director xStream Pro to the Network with Inline Taps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 Connect Monitoring Tools to Director xStream Pro. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Connect the Management and ProPush Ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Use the Console Port to Set the Device's IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Connect to the Director xStream Pro Management GUI and Log In. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Configure a Matrix Switch connection in Director xStream Pro. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 Updating the Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 Connecting An External 1 PPS Source (GPS) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21 Check the Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

Chapter 3 Configuring and Interconnecting Ports................................................... 23 Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 Examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Aggregation Example. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Regeneration Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 Dynamic Load Balancing Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

Chapter 4 Creating Charts and Reports................................................................... 30 Current, Statistics, and Cumulative Reports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Current Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Director xStream Pro

Statistics Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Cumulative Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Built-In Performance Counters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Frame Size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Protocol Breakdown. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 TCP Events. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

Plots—Visualization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 CSV File Export. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Chapter 5 Creating Filters and Using DPI................................................................ 38 Complex Filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Expand / Collapse. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 Filter Activate / Deactivate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Filter Name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Filter Type. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Drop, Pass, and Balance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Snapshot Packet Capture Trigger. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Filter Input Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Entering Values: CIDR masks, port ranges. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Entering Values: Payload Patterns . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Complex Filter Examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

Snapshot Packet Capture. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 Simple IP Address Filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Chapter 6 Administering Users Accounts................................................................ 45 Adding, Deleting, and Modifying Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Chapter 7 Configuring Network Settings................................................................. 46 Appendix A Director xStream Pro Specifications...................................................... 48 Appendix B Ethernet Packet Formats........................................................................ 50 IPv4 – UDP – RTP Packet. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 IPv4 – TCP Packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 IPv6 – TCP Packet . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

Director xStream Pro

Chapter 1 Introduction Net Optics Director xStream Pro is a key component for building a comprehensive, consolidated 10 Gigabit monitoring infrastructure for both network management and security. It extends the range of visibility for data monitoring across converged data, video, and digital voice networks, while eliminating monitoring port contention and minimizing the number of tools needed to optimally manage the network. It lets you keep up with increasing traffic speeds and volumes by replicating tools and using Director xStream Pro's dynamic load balancers to spread the traffic load across the tools. Its versatile deep packet inspection (DPI), packet capture, and traffic visualization tools provide an unprecedented ability to monitor your network traffic and zero in on traffic of interest. A single Director xStream Pro device enables you to tap into multiple 10G and 1G network links and direct copies of their traffic to multiple monitoring ports. It includes aggregation and regeneration functions so the link-to-monitorport mapping can be one-to-one, one-to-many, many-to-one, or many-to-many. In addition, it provides filtering: Each monitor port can be programmed to receive only traffic meeting user-defined filter criteria based on protocol, source and destination addresses, and other parameters. This filtering capability enables specific types of traffic such as voice over IP (VoIP) to be directed to particular monitoring tools. Port Aggregator

Tap Span 10Gbps Switch

10Gbps Switch

10Gbps Switch

10Gbps Switch

10Gbps Switch

10 g POWER

1Gbps Switch Analyzer 1

RMON IDS

10Gbps Switch

IDS

Analyzer 2

FTP

10Gbps

DHCP

UDP

Forensic

Forensic

Management HTTP

10Gbps Switch

Figure 1: Director xStream Pro in a typical application

1

Forensic

Forensic

Load Balance Group

Director xStream Pro

100 Percent Traffic Visibility Director xStream Pro sends your monitoring tools 100 percent of the traffic, with no packet drops even at 100 percent port bandwidth utilization. It passes all packets with lengths from 64 to 9600 bytes, as long as they have correct CRC checksums. Packets with CRC errors or framing errors are not passed to the monitoring tools. (Note: It is possible to oversubscribe monitor output ports by aggregating traffic from multiple ports, or by sending traffic from a 10G network input port to a 1G monitoring output port. Packets are, of necessity, dropped if the aggregated traffic exceeds the bandwidth capability of the monitoring port.) Dynamic Load Balancing Four dedicated hardware engines (the "Pro engines") in Director xStream Pro provide true dynamic load balancing, spreading the traffic from any network link, Span port, or aggregated set of inputs to 2 to 16 tools. The Pro engine actively monitors the utilization of each tool and assigns each new flow or packet to the least busy tool, creating an even balance of tool loading. Three flow‑based balancing modes are available for applications where conversations must be kept intact, and a packet‑based round‑robin mode is useful for non-IP traffic. The four Pro engines support four independent dynamic load balancing groups. Dynamic load balancing can be combined with Director xStream Pro's aggregation, filtering, and other features, with up to 10 Gbps throughput per balancing group. Deep Packet Inspection Besides dynamic load balancing, the Pro engines also provide a DPI capability by pattern-matching in the L5‑L7 headers and the packet payload. The Pro engines lets you explore deep into the packet with 16 sets of patterns, where each pattern is one or two strings up to 64 characters long each. The two strings can be hex or ASCII, with configurable case sensitivity and wild cards. The two strings are searched sequentially, and they can be anchored—at a fixed offset—or unanchored—floating from a fixed offset to the end of the packet. The Pro DPI engine examines every bit of every packet at full wire speed up to 10 Gbps on each of the eight ProPortsTM. With this powerful DPI filtering facility, you can search for nested MPLS labels, phone or credit card numbers, and key words or phrases such as “Confidential” or “Do not distribute,” taking your security and trouble-shooting capabilities to a whole new level. Matrix Switching, Aggregation, and Regeneration The Director xStream Pro chassis provides twenty-four SFP+ ports that can be used as network inputs or monitoring outputs. .Network and Span ports can be aggregated and regenerated to output ports in almost any combination. Ports 1-8, in the upper half of the chassis, are ProPorts that support filtering, DPI, and dynamic load balancing. Ports 9-24, in the lower half of the chassis, are standard ports that provide switching, aggregation, and regeneration functions, and they can be outputs of filters, DPI, and load balancing. Ingress and Egress Filtering Director xStream Pro supports Layer 2 through Layer 4 filtering on its eight ProPorts. Filters are bound to the ports so they act as ingress filters on network inputs and egress filters on monitor outputs, giving you full flexibility for creating filter sets. The outputs of ingress filters can be directed to any of the 24 ports, and the inputs of egress filters can come from any of the 24 ports. Each filter can include as many as 16 "OR" terms, such as 16 IP addresses or 16 VLANs. Packet Capture Not only does Director xStream Pro direct traffic to your monitoring tools, but it can also capture packets directly. At any time you want you can capture an eight-second sample of the packets exiting any Layer 2-4 or DPI filter. The packets are stored in pcap files which can be exported for analysis by protocol analyzers such as Wireshark. This facility makes it easy to validate filters and to capture rare or low-bandwidth events.

2

Director xStream Pro

Timestamping For accurate timing and latency analysis, Director xStream Pro appends a microsecond-accurate timestamp to each packet entering any of the eight ProPorts. Multiple chassis can be synchronized to the same clock giving you a virtually unlimited number of timestamp-synchronized ports. The timestamp format is shown in the following figure. Original packet

Timestamped packet

Header

Header

Payload

CRC

Payload

CRC

Timestamp

CRC

12 bytes New CRC Timestamp

Seconds

0.1 microeconds

0

4 bytes

4 bytes

4 bytes

Timestamp examples, showing the 12 timestamp bytes: 00 00 00 01 00 00 00 00 00 00 00 00 = 1 second 00 00 00 00 00 00 00 0a 00 00 00 00 = 1 microsecond 00 00 00 1b 00 96 ff ff 00 00 00 00 = 27. 9895935 seconds

Figure 2: Timestamp format

Note:___________________________________________________________________________________________________ If a packet arrives with a bad CRC and timestamping is off, the packet is dropped. If a packet arrives with a bad CRC and timestamping is on, the timestamp is appended with a new CRC. The new CRC makes the full packet now have a good CRC, so it is passed through to monitoring tools. The original packet's CRC is still available ahead of the timestamp for validation of the packet. The timestamp is a free-running counter. It will drift over time unless an accurate pulse-per-second time source is connected to the GPS input on the rear panel. ________________________________________________________________________________________________________ Modular design Director xStream Pro is modular to provide configuration flexibility. All 24 ports are SFP+ based, and accommodate multimode and singlemode 10-Gigabit SFP+ transceiver modules. The 16 standard ports also accommodate 1-Gigabit SFP modules. 10-Gigabit and 1-Gigabit modules can be used in any mix, and Director xStream Pro will perform the necessary data rate conversions. Easy-to-Use Management GUI Director xStream Pro is configured and managed using a rich graphical user interface (GUI) that runs in a Web browser. (Firefox 3.5 or higher or Internet Explorer 8 or higher are recommended.) This clear and intuitive interface dramatically lowers the bar for learning to use the device, and real-time graphs display second-by-second RMON statistics for at-aglance monitoring of traffic conditions and detection of microburst traffic congestion. A console-based command-line interface (CLI) is also available for initial device set-up such as assigning the management IP address.

3

Director xStream Pro

Dual hot-swap power supplies Director xStream Pro is powered by two redundant power supplies, with either universal AC or -48V DC input. Either supply alone can power the device and the power supplies are hot-swappable, so you do not experience any monitoring down time if you should need to replace a power supply.

Key Features Ease of Use • • • • • • • • • • • • • •

10 Gigabit and 1 Gigabit aggregation, regeneration, matrix switch, and filter functions in a single device Four dynamic load balancing groups Deep packet inspection (DPI) Packet capture to pcap exportable files Microsecond accurate timestamping 19-inch rack frame, 2U high Front-mounted connectors for quick and easy installation LED indicators show Link, Activity, and Error status Modular design for configuration flexibility RMON traffic statistics Rich, easy-to-use graphical user interface (GUI) Text-based command-line interface (CLI) available through RS232 serial port Field-upgradeable software Compatible with all major manufacturers’ monitoring devices, including protocol analyzers, probes, data loss prevention, database activity monitoring, Web application firewall, and intrusion detection and prevention systems

Passive, Secure Technology • • • • •

Passive access at up to 10 Gbps Optimized and tested for 1000Mbps copper and 1 and 10 Gbps fiber networks Redundant power to maximize uptime FCC, CE, VCCI, and C-Tick certified Fully RoHS and WEEE compliant

Unsurpassed Support

• Net Optics offers technical support throughout the lifetime of your purchase. Our technical support team is available from 7:00 to 17:30 Pacific Time, Monday through Friday, 9:00 to 18:30, Monday through Friday at Elexo - France and by e-mail at [email protected] & [email protected]. FAQs are also available here.

About this Guide Please read this entire guide before installing Director xStream Pro. The guide applies to the following part numbers: Chassis Part Number Description DIR-2400XP

Director xStream Pro Main Chassis with 24 SFP+ ports

DIR-2400XP-DC

Director xStream Pro Main Chassis with 24 SFP+ ports, -48VDC

Note: SFP+ or SFP transceiver modules are required for operation and are sold separately.

4

Director xStream Pro

Front Panel The features of the Director xStream Pro front panel are shown in the following diagram. 8 SFP+ ProPorts (10G only, filtering, load balancing, DPI)

10 g POWER

16 SFP+ Standard Ports (10G or 1G)

Power LED

Figure 3: Director xStream Pro Front Panel

ProPorts The eight SFP+ cages in the top half of the front panel are the ProPorts, which support filtering, DPI, dynamic load balancing, and packet capture functions along with switching, aggregation, and regeneration. 10G SFP+ transceiver modules must be inserted in the SFP+ cages to use the ports. The ProPorts do not support 1G SFP modules or 1 Gbps link speeds. Unused ports can remain unpopulated. (SFP+ transceiver modules are not included with Director xStream Pro and must be purchased separately.) All eight ProPorts are logically and electrically equivalent, and can be used as network inputs or monitor outputs. (They cannot support both functions simultaneously.) The ProPorts are numbered 1 through 8 from left to right across the front panel. Standard Ports The 16 SFP+ cages in the bottom half of the front panel are the standard ports, which support switching, aggregation, and regeneration functions. They can also be used as inputs to egress filters attached to monitor output ProPorts, as outputs from ingress filters attached to network input ProPorts, and as dynamic load balancer outputs. 10G SFP+ or 1G SFP transceiver modules must be inserted in the SFP+ cages to use the ports. The standard ports support both 10 Gbps and 1 Gbps link speeds. If 10/100/1000 copper SFP modules are used in standard ports, they operated at 1000 Mbps only. Unused ports can remain unpopulated. (SFP+ and SFP transceiver modules are not included with Director xStream Pro and must be purchased separately.) All 16 standard ports are logically and electrically equivalent, and can be used as network inputs or monitor outputs. (They cannot support both functions simultaneously.) The standard ports are numbered 9 through 24 from left to right across the front panel. Module Present and Link LEDs Each port has a Module Present LED (bottom of the stack of three LEDs) and a Link LED (middle) located to the right of the port. The Module Present LED illuminates when a transceiver module is detected in the SFP+ cage. The link LED illuminates when a link is established (when the transceiver sees light). The third LED (top) to the right of each ProPort flashes when CRC or framing errors occur; on the standard ports, they are unused and never illuminates. Power LED The power LED at the right side of the front panel illuminates green if the device has power from both of its dual redundant power supplies, and red if it is receiving power from only one supply. 5

Director xStream Pro

Rear Panel The features of the Director xStream Pro rear panel are shown in the following figure. The BNC connector labelled GPS at the top left of the rear panel is an input for a "pulse-per-second" clock alignment signal. This signal can be derived from a GPS clock or other source. Multiple chassis can be aligned to the same clock to minimize skew between timestamps; however, timestamps operate on a free-running clock in each chassis, so the offset between chassis must be calibrated by the software processing the timestamps. See "Connecting An External 1 PPS Source (GPS)" on page 21 for information about proper termination requirements to avoid damage to the circuitry of the GPS input. To the right of the GPS connector are two DB9 serial port connectors labelled COM Port A and COM Port B. COM A is the CLI console port used for setting the device IP address and other basic configuration parameters. A DB9 null modem (cross-over) cable must be used for the console connection. COM B is unused. At the bottom left of the rear panel is a stack of two RJ45 connectors. The top connector is the management port, a 10/100/1000 network port for running the Director xStream Pro management GUI. The bottom connector is another 10/100/1000 network port which emits the ProPushTM traffic statistics once per second. For maximum security, you can connect the management port to an isolated management VLAN, while you might want to connect the ProPush port to the Internet so they can be collected by a Net Optics Indigo Pro management appliance located elsewhere on the network. The ground stud near the bottom center of the rear panel should always be connected to a good earth ground. This will usually be the same as the equipment rack ground. At the right side of the rear panel are the dual redundant power supply modules. Director xStream Pro has two models, one with AC power supplies (universal-input 100-240VAC, 47-63Hz) and one with -48V DC power supplies. In both models, the power supply modules are hot-swappable and have integrated cooling fans. Any one power supply module can power the unit independently; dual supplies provide redundancy to maximize uptime. If you power up only a single supply, or if a power supply fails, and audible alarm sounds. You can turn off the sound by pressing the power supply alarm reset button near the right side of the chassis. Power Supply Alarm Reset Button

GPS Console Port COM A

GPS

COM B

0 1 0

Management

1 SERIAL NUMBER

ProPush

ProPush Port

Ground Stud

XXXXXX

AC Models

Management Port

GPS Console Port GPS

COM A

0

Redundant Hot-swappable Power Supplies Power Supply Alarm Reset Button

COM B + -

1 0

For use with -48V Only

+

Management

-

SERIAL NUMBER

ProPush

XXXXXX

1 0

For use with -48V Only

ProPush Port

Ground Stud

DC Models

Management Port Figure 5: Director xStream Pro Rear Panel 6

Redundant Hot-swappable Power Supplies

Director xStream Pro

Monitoring Links Inline To tap a network link inline, use an external network Tap. The Net Optics Fiber Tap HD8 is an ideal companion for Director xStream Pro. Fiber Tap HD8 packages eight full-duplex break-out fiber taps in a full-wide, 1/2-high chassis that does not require any power or cooling. Router

Switch Switch

Firewall

Fiber Tap HD8

2.5 U

10 g POWER

Figure 4: Fiber Tap HD8 provides eight full-duplex breakout inline fiber taps in a half-height chassis

7

Director xStream Pro

Chapter 2 Installing Director xStream Pro This chapter describes how to install and connect Director xStream Pro devices. The procedure for installing Director xStream Pro follows these basic steps: 1. Plan the installation 2. Unpack and inspect the Director xStream Pro device 3. Install the SFP+ and SFP modules 4. Rack mount the Director xStream Pro device 5. Connect power to Director xStream Pro 6. Connect Director xStream Pro to the network with Span ports and inline links 7. Connect monitoring tools to Director xStream Pro 8. Connect the management and ProPush ports 9. Use the console port to set the device's IP address 10. Connect to the Director xStream Pro management GUI and log in 11. Configure a matrix switch connection in Director xStream Pro 12. Connecting an external 1 PPS source (GPS) 13. Check the installation

Plan the Installation Before you begin the installation of your Director xStream Pro device, determine the following: • IP address of the Director xStream Pro device, or a range of IP addresses if you are deploying multiple Director xStream Pro devices • Net Mask and Gateway address for Director xStream Pro • Port assignments, filters, and load balancers for the network and monitor port connections Make sure you have a suitable location to install the Director xStream Pro device. For power redundancy, use two independent power sources.

8

Director xStream Pro

Installation in a Restricted Access Location in Finland and Norway Because of concerns about unreliable earthing in Finland and Norway, this equipment must be installed in a Restricted Access Location (RAL) in these countries. An RAL is defined as an access that can be gained only by trained service personnel who have been instructed about the reasons for the restricted access and any safety precautions that must be taken. In these cases, the use of a tool (such as lock and key) or other means of security is required for access to this equipment.

Unpack and Inspect the Director xStream Pro device Carefully unpack the Director xStream Pro device and all components that are provided. Director xStream Pro is delivered with the following: • • • • • • • • • •

(1) Director xStream Pro device (2) Power cords (2) Cables, 3 Meter, RJ45, CAT 5e 4-Pair (1) DB9 serial cable for connecting the console (1) DB9 null modem (crossover) adapter (1) 50-ohm BNC termination adapter Rails, screws and washers for mounting the device Director xStream Pro Quick Install Guide (1) CD containing the Director xStream Pro User Guide (this document) Extended Warranty if purchased

Check the packing slip against parts received. If any component is missing or damaged, contact Net Optics Customer Service immediately at +1 (408) 737-7777. (Note: SFP+ and SFP modules are ordered and shipped separately.)

Install SFP+ and SFP transceiver modules SFP+ and SFP transceiver modules are shipped separately. Install them as desired in the SFP+ cages in the front of the chassis. Remember that the eight ProPorts support only 10G SFP+ modules, while the 16 standard ports support 10G SFP+ and 1G SFP modules. For each module, remove the temporary plug from the SFP+ cage and insert the module until it clicks into place. Unused ports do not need to be populated with transceiver modules. Director xStream Pro is compatible with direct-attach (twinax) cables to short range interconnections. Direct-attach cables plug directly into SFP+ cages and preclude the need for SFP+ or SFP transceiver modules. Note:___________________________________________________________________________________________________ Net Optics warrants operation only with SFP+ and SFP modules sold by Net Optics. ________________________________________________________________________________________________________

Rack Mount the Director xStream Pro Device Director xStream Pro is designed for mounting in a 19-inch rack, occupying two rack units of height. To mount the Director xStream Pro device:

1. Expand the mounting rails to fit the depth of your rack. 2. Attach the mounting rails to the font and rear pillars of the rack using the supplied screws. The tabs that Director xStream Pro will sit on should be located toward the bottom.

9

Director xStream Pro 3. Slide the Director xStream Pro chassis into the rack so it rests on the rail tabs. 4. Make sure the rack is properly grounded.

Connect Power to Director xStream Pro Supply AC power to Director xStream Pro using the power cords that were included with the unit; for DC power, you must supply your own cables. If you plan to use redundant power, make sure that you connect the power supplies to two separate, independent power sources for maximum protection. Note:___________________________________________________________________________________________________ Each AC or DC power source should be independent of the other in order to have power redundancy. If you do not require power redundancy, the unit can be operated with a single power cord connected to a single AC or DC power source. In this case, either AC or DC power connector on the rear of the unit can be used for the connection. If you power up only a single supply, press the power supply reset button to enable power. If you power up both supplies, you do not need to press the reset button. ________________________________________________________________________________________________________ Use the following procedures to safely connect AC or DC power to the unit. Power Supply Reset Button

Note: Use two independent power sources GPS

COM A

COM B

1 0

Management

1 SERIAL NUMBER

ProPush

XXXXXX

0

AC Models Earth Ground

Figure 6: Connecting redundant AC power supplies

Power Supply Reset Caution:_______________________________________________________________________________________________ Button

Power Source 1

-48VDC Return

+

Use the ACGPS power cords the product. If you use other AC power cords, they should have a wire gauge of COMsupplied A COM with B at least 22 and a 230VAC 5A rating. Be sure to use a three-prong cords and connect them to sockets with good 1 earth grounds. 0 ________________________________________________________________________________________________________ -

For use with -48V Only

+

Management

To connect AC ProPush input power on AC models:

-

SERIAL NUMBER

XXXXXX

1 0

1. Connect the ground stud near the bottom left corner of the rear panel to a good earth ground. Usually this will be the DC Models same as the equipment rack ground. For use with -48V Only

Earth

2. Connect oneGround of the AC power cords to one of the AC power connectors on the rear panel.

Power Source 2 10

-48VDC Return

Power Supply Reset Button

Note: Use two independent power sources GPS

COM A

COM B

1

Director xStream Pro 0 Management

3. Plug the other end of the cord into an AC power source. ProPush XXXXXX

1

SERIAL NUMBER

0

4. Push the "1" side of the module's power switch to activate power. AC Models

The LED above the switch illuminates to indicate that power is active. Earth Ground

5. Repeat Steps 2 to 4 for the other AC power cord, connecting it to the remaining AC power connector on the rear panel and to an independent AC power source.

Power Source 1 GPS

COM A

Power Supply Reset Button

-48VDC Return

COM B + -

1 0

For use with -48V Only

+

Management

-

SERIAL NUMBER

ProPush

XXXXXX

1 0

For use with -48V Only

DC Models Earth Ground

Power Source 2

-48VDC Return

Figure 7: Connecting redundant DC power supplies

Caution:_______________________________________________________________________________________________ DC power cables should have a wire gauge of at least 16 and a 72VDC 4A rating. Always connect the earth grounds first, and keep the earth grounds connected whenever you are working on the device. When disconnecting the device from DC power, remove the earth ground connections last. ________________________________________________________________________________________________________ To connect DC input power on DC models:

1. If you have not already done so, unpack the Director xStream Pro and verify that you have appropriate DC power cables. You also need a Phillips screwdriver to complete the installation. 2. If present, remove the protective covers from the DC power terminal blocks on the rear of the chassis. 3. Connect an earth ground lead to the terminals labeled with the ground symbol ( ), which are the left-most terminals, on both DC power terminal blocks. Use the screwdriver to tighten the connections. Also connect the earth ground to the ground stud near the left side of the rear panel. 4. Connect one of the DC power cables to one of the DC power terminal blocks on the rear panel. Connect the negative (-48VDC) side of the cable to the terminal labeled with the minus symbol (—) and the positive (0V) side of the cable to the terminal labeled with the plus symbol (+). The minus terminal is in the center and the plus terminal is on the right. Use the screwdriver to tighten the connections. 5. Repeat Step 4 for the other DC power cable, connecting it to the remaining DC power terminal block on the rear panel.

11