Allot NetEnforcer AC-2500 Series Installation instructions

NetEnforcer
AC-2500 Series
Policy Based Bandwidth Management
Hardware Guide
P/N D360002 R2

Important Notice
AC-2500 Series Hardware Guide
iii
Important Notice
Allot Communications Ltd. ("Allot") is not a party to the purchase agreement under which NetEnforcer was purchased, and
will not be liable for any damages of any kind whatsoever caused to the end users using this manual, regardless of the form of
action, whether in contract, tort (including negligence), strict liability or otherwise.
SPECIFICATIONS AND INFORMATION CONTAINED IN THIS MANUAL ARE FURNISHED FOR
INFORMATIONAL USE ONLY, AND ARE SUBJECT TO CHANGE AT ANY TIME WITHOUT NOTICE, AND
SHOULD NOT BE CONSTRUED AS A COMMITMENT BY ALLOT OR ANY OF ITS SUBSIDIARIES. ALLOT
ASSUMES NO RESPONSIBILITY OR LIABILITY FOR ANY ERRORS OR INACCURACIES THAT MAY APPEAR IN
THIS MANUAL, INCLUDING THE PRODUCTS AND SOFTWARE DESCRIBED IN IT.
Please read the End User License Agreement and Warranty Certificate provided with this product before using the product.
Please note that using the products indicates that you accept the terms of the End User License Agreement and Warranty
Certificate.
WITHOUT DEROGATING IN ANY WAY FROM THE AFORESAID, ALLOT WILL NOT BE LIABLE FOR ANY
SPECIAL, EXEMPLARY, INDIRECT, INCIDENTAL OR CONSEQUENTIAL DAMAGES OF ANY KIND,
REGARDLESS OF THE FORM OF ACTION WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE),
STRICT LIABILITY OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, LOSS OF REVENUE OR
ANTICIPATED PROFITS, OR LOST BUSINESS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Copyright
Copyright © 1997-2007 Allot Communications. All rights reserved. No part of this document may be reproduced,
photocopied, stored on a retrieval system, transmitted, or translated into any other language without a written permission and
specific authorization from Allot Communications Ltd.
Trademarks
Products and corporate names appearing in this manual may or may not be registered trademarks or copyrights of their
respective companies, and are used only for identification or explanation and to the owners' benefit, without intent to infringe.
Allot and the Allot Communications logo are registered trademarks of Allot Communications Ltd.
NOTE: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of
the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment
is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not
installed and used in accordance with the instruction manual, may cause harmful interference to radio communications.
Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be
required to correct the interference at his own expense.
Changes or modifications not expressly approved by Allot Communication Ltd. could void the user's authority to operate the
equipment.

Important Notice
AC-2500 Series Hardware Guide
iv
Printing History
First Edition: October, 2006
Second Edition: September, 2007

NetEnforcer AC-2500 Hardware Guide
v
Table of Contents
Important Notice .......................................................................................................................... iii
Printing History.............................................................................................................................iv
Table of Contents ...........................................................................................................................v
Table of Figures........................................................................................................................... vii
CHAPTER 1: AC-2500 SERIES HARDWARE .........................................................1-1
Unpacking the NetEnforcer....................................................................................................... 1-2
NetEnforcer Front Panel ........................................................................................................... 1-3
AC-2500 Series Front Panels ................................................................................................... 1-4
LCD Panel................................................................................................................................ 1-6
Power Supply Modules............................................................................................................. 1-8
Accessories Area .................................................................................................................... 1-10
Cabling ...................................................................................................................................... 1-12
AC-2500 Series Copper.......................................................................................................... 1-12
AC-2500 Multi Mode (SX) Fiber........................................................................................... 1-13
AC-2500 Series Single Mode (LX5, LX20, ZX) Fiber.......................................................... 1-14
Connectors.............................................................................................................................. 1-15
Bypass Units.............................................................................................................................. 1-16
AC-2520 Bypass Unit............................................................................................................. 1-16
AC-2540 Bypass Unit............................................................................................................. 1-21
Powering Up ............................................................................................................................. 1-23
Connection to AC Power........................................................................................................ 1-23
Connection to DC Power........................................................................................................ 1-24
Grounding............................................................................................................................... 1-25
Powering Up Via LCD Panel ................................................................................................. 1-26
CHAPTER 2: PLACEMENT IN THE NETWORK..................................................2-1
CHAPTER 3: SETTING UP THE NETENFORCER................................................3-1
Configuring Via a Terminal or Telnet...................................................................................... 3-1
Configuring Via the LCD Panel............................................................................................. 3-11

NetEnforcer AC-2500 Hardware Guide
vi
CHAPTER 4: REDUNDANCY.................................................................................... 4-1
Enabling Redundancy ................................................................................................................4-1
Parallel Redundancy ..................................................................................................................4-9
Status Indicators in Parallel Redundancy Mode .....................................................................4-10
Secondary NetEnforcer Activation.........................................................................................4-11
Active Redundancy...................................................................................................................4-13
Failover...................................................................................................................................4-13
Policy Configuration...............................................................................................................4-13
Connecting the NetEnforcer in Active Redundancy...............................................................4-14
Active Redundancy for the AC-2520......................................................................................4-14
Active Redundancy for the AC-2540......................................................................................4-14
Serial Redundancy....................................................................................................................4-15
NetEnforcer Failover...............................................................................................................4-16
Serial Redundancy in Mesh Topologies .................................................................................4-17
CHAPTER 5: HARDWARE SPECIFICATIONS ..................................................... 5-1
Dimensions ...............................................................................................................................5-1
Power Requirements.................................................................................................................5-1
Operating Environment.............................................................................................................5-2
Standards, Compliance and Certifications...............................................................................5-3
CHAPTER 6: FIREWALL PORT REFERENCE..................................................... 6-1
CHAPTER 7: ÉQUIPEMENT DE SÉRIE AC-2500 .................................................7-1
Mises en garde d’ordre général:................................................................................................7-2
Remarques d’ordre général:......................................................................................................7-4
Spécifications matérielles ...........................................................................................................7-5
Dimensions ...............................................................................................................................7-5
Spécifications requises..............................................................................................................7-5

NetEnforcer AC-2500 Hardware Guide vii
Table of Figures
Figure 1-1 – Front Panel: AC-2500 Series................................................................................... 1-3
Figure 1-2 – Front Panel: AC-2520 Copper................................................................................. 1-4
Figure 1-3 – Front Panel: AC-2520 Fiber.................................................................................... 1-4
Figure 1-4 – Front Panel: AC-2540 Fiber.................................................................................... 1-5
Figure 1-5 – NetEnforcer LCD Panel .......................................................................................... 1-6
Figure 1-6 – Dual SC Connector (Multi Mode Fiber)................................................................ 1-15
Figure 1-7 – Dual LC Connector (Single Mode Fiber).............................................................. 1-15
Figure 1-8 – Connecting the NetEnforcer AC-2520 to Double Copper Bypass Unit................ 1-17
Figure 1-9 – Double Fiber Bypass Unit - MultiMode................................................................ 1-18
Figure 1-10 – Double Fiber Bypass Unit – Single Mode........................................................... 1-19
Figure 1-11 – Connecting the NetEnforcer AC-2520 to Double Fiber Bypass Unit – Single Mode
............................................................................................................................................ 1-20
Figure 1-12 – Multi-Port Fiber Bypass Unit.............................................................................. 1-21
Figure 1-13 – Connecting the NetEnforcer AC-2540 to Multi-Port Fiber Bypass Unit ............ 1-22
Figure 3-1 – NetEnforcer Setup Menu......................................................................................... 3-2
Figure 3-2 – Current Configuration (1)........................................................................................ 3-4
Figure 3-3 – Network Configuration............................................................................................ 3-5
Figure 3-4 – Password.................................................................................................................. 3-8
Figure 3-5 – Time Setup............................................................................................................... 3-9
Figure 4-1 – NIC Tab AC-2520 – NetXplorer Configuration...................................................... 4-3

NetEnforcer AC-2500 Hardware Guide
viii
Figure 4-2 – Networking Tab AC-2520 – NetXplorer Configuration..........................................4-4
Figure 4-3 – NIC Tab AC-2540 – NetXplorer Configuration......................................................4-7
Figure 4-4 – Networking Tab AC-2540 – NetXplorer Configuration..........................................4-8
Figure 4-5 – Serial Redundancy – Normal Scenario..................................................................4-15
Figure 4-6 – Serial Redundancy – Failover Scenario.................................................................4-16
Figure 4-7 – Serial Redundancy – Bypass Scenario...................................................................4-17
Figure 4-8 – Serial Redundancy – Mesh Scenario .....................................................................4-18

NetEnforcer AC-2500 Hardware Guide
1-1
Chapter 1: AC-2500 Series Hardware
This chapter describes the NetEnforcer AC-2500 series hardware and the initial
installation and setup of the device. The NetEnforcer is a transparent learning bridge
that is IEEE 802.1-compliant and works with a Bypass Unit to ensure that data
continues flowing should any hardware or software problem occur. While the
NetEnforcer is bypassed, all traffic goes through passive elements only and still allows
the network to function.
The NetEnforcer AC-2500 series offers carrier-grade design with redundant critical
components for fail-safe operation. Redundant hardware components include system’s
fans and dual hot-swappable power supplies. The NetEnforcer AC-2500 series is
designed to meet ETSI standards.
All AC-2500 series units come with an additional Bypass Unit.
CAUTION All AC-2500 Series models only function when the appropriate
Bypass Unit is connected to it. This is to ensure continuous service
in the event of failure.
Several NetEnforcer models are available to support large and small sites and different
data network speeds.
All NetEnforcer AC-2500 series units support 2M connections (4M flows), 4,000 pipes
and 8,000 Virtual Channels. Additional Pipes and Virtual Channels can also be
purchased separately per device. Allot basic management software is included with all
AC-2500 series devices. Allot NetXplorer Centralized Management software can be
purchased for any AC-2500 series device using software version C7.1.0 or later,
replacing the basic management.
The NetEnforcer AC-2520 has two line (four port) connectivity. The device is available
with either AC or DC power supplies and with copper, SX fiber, LX5 fiber, LX20 fiber
or ZX fiber interface connectors. The AC-2520 has a throughput of 4 Gbps (2 Gbps full
duplex).

Chapter 1: AC-2500 Series Hardware
NetEnforcer AC-2500 Hardware Guide
1-2
The NetEnforcer AC-2540 is a carrier grade unit intended for large service providers or
carriers with four line (eight port) connectivity. The unit is available with either AC or
DC power supplies and with copper, SX fiber, LX5 fiber, LX20 fiber or ZX fiber
interface connectors. The AC-2540 has a throughput of 5 Gbps (2.5 Gbps full duplex).
Unpacking the NetEnforcer
Verify that the following items are included with the NetEnforcer:
•NetEnforcer (hardware with pre-installed software)
•NetEnforcer AC-2500 Series Hardware Guide
•Two mains power cables according to National Electrical Code (NEC) with
molded IEC sockets
•One Serial Console Cable
•Two 19" Side Mounting Brackets
•Eight Mounting Bracket Screws
•Backup Cable: D-type High Density Cable
NOTE The maximum Ethernet cable length is generally up to 50 meters.

Chapter 1: AC-2500 Series Hardware
NetEnforcer AC-2500 Hardware Guide 1-3
NetEnforcer Front Panel
The AC-2500 series connects to your network via Link Connection connectors. The
LCD panel, connectors and LED indicators on the front panel, are shown in the
following diagrams.
The front panel of each AC-2500 series unit is separated into four areas as shown
below:
Figure 1-1 – Front Panel: AC-2500 Series
The front panel of NetEnforcer is laid out as follows:
•LCD panel, described on page 1-6.
•The Link Connections area.
•Power Supply Modules, described on page 1-8.
•Accessory area, including the following:
•Management port, described on page 1-10
•Management LEDs, described on page 1-11
•Console Connector
•Backup High Density D-type Connector
•Two power cable connectors

Chapter 1: AC-2500 Series Hardware
NetEnforcer AC-2500 Hardware Guide
1-4
AC-2500 Series Front Panels
AC-2520 Front Panels
Figure 1-2 – Front Panel: AC-2520 Copper
Figure 1-3 – Front Panel: AC-2520 Fiber

Chapter 1: AC-2500 Series Hardware
NetEnforcer AC-2500 Hardware Guide 1-5
AC-2540 Front Panels
Figure 1-4 – Front Panel: AC-2540 Fiber
CAUTION CLASS 1 LASER PRODUCT. DANGER!
Invisible laser radiation when opened.
AVOID DIRECT EXPOSURE TO BEAM.

Chapter 1: AC-2500 Series Hardware
NetEnforcer AC-2500 Hardware Guide
1-6
LCD Panel
The NetEnforcer LCD panel provides an indication of traffic usage and enables you to
configure NetEnforcer directly without the need to connect a terminal. You can also
start, reboot and shutdown NetEnforcer from the front panel.
On/Off Enter
Up Arrow
Display Area
Sel ec t
Power Indicator
Active Indicator
Standby Indicator
Left Arrow
Right Arrow
Down Arrow
On/Off Enter
Up Arrow
Display Area
Sel ec t
Power Indicator
Active Indicator
Standby Indicator
Left Arrow
Right Arrow
Down Arrow
Figure 1-5 – NetEnforcer LCD Panel
For a description of how to configure NetEnforcer using the LCD panel, refer to
Configuring Via the LCD Panel, page 3-11.
For a description of the Standby, Active and Power LEDs, refer to Interface Status
Indicators, page 1-8.

Chapter 1: AC-2500 Series Hardware
NetEnforcer AC-2500 Hardware Guide 1-7
Unit Status Indicators
The modes of operation of the Standby, Active and Power LEDs on the LCD panel are
described in the table below.
Indicator Status NetEnforcer Status
Standby On Two NetEnforcers are connected in Parallel Redundancy
mode and this NetEnforcer is the secondary system.
Off This NetEnforcer is the primary system. If you have one
NetEnforcer, this should be the normal state of the LED. If
you have two NetEnforcers configured in Parallel
Redundancy mode, this NetEnforcer is the primary system.
Active On NetEnforcer is in Active mode.
Off NetEnforcer is in Bypass mode, or this is the secondary
NetEnforcer in a Parallel Redundancy configuration and it
is not active. Traffic passes through NetEnforcer with no
Quality of Service or traffic shaping.
Power On NetEnforcer is powered up.
Off NetEnforcer is shut down.
Table 1-1 – Standby/Active/Power LED Conditions

Chapter 1: AC-2500 Series Hardware
NetEnforcer AC-2500 Hardware Guide
1-8
Interface Status Indicators
The modes of operation of the Link (External and Internal) LEDs are described in the
table below.
Link Status Indicators
Ext/Int LED NetEnforcer Status
Green A lit green LED indicates that a link is detected.
Red A blinking red LED indicates that traffic is detected on the
interface.
Off An unlit LED indicates that neither links nor activities were
detected.
Table 1-2 – External/Internal LED Conditions – AC-2540
Power Supply Modules
NetEnforcer includes two hot-swappable power supply modules and a dual line feed for
Redundancy purposes. Each line feed is driving one power supply.
NOTE The AC power supply automatically adapts to voltages between 100 V and
240 V, 50/60 Hz. The DC power supply automatically adapts to voltages
of 48 V or 60 V DC.
This equipment is for use in a restricted access area by qualified
personnel only. To avoid shock, do not perform any servicing other than
those contained in the unpacking instructions.
Should you need to, you can replace one of the power supplies while NetEnforcer is
connected and operating. Replacing a power supply while the unit is operating is
possible since the remaining power supply will take the full load and maintain full
operation.
NOTE To remove a power supply module, undo the two screws in the lower left
and right corners, lift the handle and slide the module out.