Apcon ACI-3030-T05-1 User manual

A54-3002-050 • Rev B
APCON, Inc. • www.apcon.com • [phone] • 800-624-6808
ACI-3030-T05-1 B YPASS S WITCH
TAP/A GGREGATOR U SER M ANUAL
An all-in-one network monitoring solution
Fail-safe passive TAP in Bypass mode
5 Optical Bypass 1/10G switches
Up to 7 in-line appliance support
Heartbeat monitoring of appliance
Up to 14 monitoring tool ports
Monitor, aggregate and filter traffic
INTELLAFLEX

May 2016
Copyright ©2016 by APCON, Inc.
All rights reserved.
This manual is copyrighted. No part of this manual may be reproduced, transmitted, copied, or translated in any form or by any means,
electronic or mechanical, including photocopying and recording, for any purpose without the express written permission of APCON, Inc.
The hardware and software described in this document is furnished under a license agreement or nondisclosure agreement. The hardware
and software may be used or copied only in accordance with the terms of the agreement. It is against the law to copy the software on any
medium except as specifically allowed in the license or nondisclosure agreement.
APCON, Inc. reserves the right to revise this publication from time to time without obligation of APCON to notify any person or organization of
such revision. APCON has prepared this manual for use by customers as a guide for proper installation, operation and maintenance of
APCON equipment. The drawings, specifications and information contained within this document are the property of APCON, and any
unauthorized use or disclosure of the enclosed information is prohibited.
APCON, INTELLAPATCH, INTELLAPORT, INTELLASCAN, INTELLASTORE, and INTELLATAP are registered trademarks of APCON, Inc.
All other trademarks, registered trademarks, service marks, and trade names are the property of their respective owners.
APCON is an Equal Opportunity Employer—M/F/D/V.
A54-3002-027 • Rev B 2 APCON, Inc.

A54-3002-027 • Rev B 3 APCON, Inc.
Chapter 1: Preface
About this manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
Conventions in the manual. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
APCON software products . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Contact APCON . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .8
Chapter 2: Introduction
Overview of features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Enhanced network visibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .9
All-in-one visibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .10
High Port Density . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Basic operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11
Failback Method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Automatic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Failback method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .16
Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .17
Chapter 3: Specifications
Specifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
Physical interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .19
Electrical specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Front panel connectors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
LED status indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
LEDs for the blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .20
Port LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Chassis supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
Blade/Chassis compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Blades supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
SFP ports and transceivers supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23
Supported SFP+ modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23
Supported SFP+ transceivers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .23
Chapter 4: Install and configure the unit
Unpack the unit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
Safety precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25
Protect sensitive devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Install the blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26
Contents

APCON, Inc. 4 A54-3002-027 • Rev B
Contents Bypass Switch TAP/Aggregator User Manual
WEBXR interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Ports screen . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Port screen icons . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
Blade/Port status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Check cable signal strength . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
Port statistics overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
Set warnings and alarms for ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .31
View bandwidth thresholds for ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
SFP additional details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Vendor details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Transmission media supported . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33
Protocol compliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Diagnostics (port statistics) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Port properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .35
View options for port properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36
Port name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Paired ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .37
Paired port rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38
Activate/remove a trunk port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .39
Port profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
Port rates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .42
Set bandwidth threshold per port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Paired ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43
Network port settings (Network ports) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45
Heartbeat (Appliance ports) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .46
Port locking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49
Chapter 5: Aggregation examples
Creating a bypass aggregation within a segment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .53
Creating a bypass aggregation between two different segments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55
Creating a bypass aggregation that includes a load balanced group . . . . . . . . . . . . . . . . . . . . . . . . . . .57
Failover recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Failover recovery GUI for manual and automatic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .60
Implementing controls for detecting externally inserted heartbeat packets . . . . . . . . . . . . . . . . . . . . .61
Monitor modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
Chapter 6: Maintenance
Installing/Removing a blade. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
Before adding or removing blades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
Install the blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .64
Remove a blade . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .65
View blade status. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .66
Care of fiber optic cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68
Index ..................................................................................................................................................71

A54-3002-027 • Rev B 5 APCON, Inc.
Chapter 1: Preface
This manual describes the APCON
®
ACI-3030-T05-1 Bypass Switch (Bypass TAP). The
Bypass TAP can be installed in any slot of any of the INTELLAFLEX XR chassis.
About this manual
The information in this manual provides instructions on how to install, configure, and
maintain the Bypass TAP.
Chapter 1
Preface Chapter 1
Chapter Description
Chapter 1, Preface Describes book conventions, related software products,
and how to contact APCON.
Chapter 2, Introduction Provides information on features and functionality of the
Bypass Switch.
Chapter 3, Specifications Provides physical and electrical specifications of the
Bypass TAP.
Chapter 4, Install and
configure the unit
Provides an over of the Bypass TAP operation and details
on how to configure various Bypass TAP options.
Chapter 5, Aggregation
examples
Provides examples of several Bypass TAP configurations.
Chapter 6, Maintenance Describes how to install and remove a blade, handle
fiber optic cables, and view blade status.

APCON, Inc. 6 A54-3002-027 • Rev B
Chapter 1 Preface Bypass Switch TAP/Aggregator User Manual
Conventions in the manual
The following table lists conventions for notifications used in this manual:
This manual uses the following text conventions:
Conventions specific to the Bypass Switch are as follows:
Icon Label Description
(None) Note Indicates important or supplemental information
about the product or a feature.
Caution Indicates potentially hazardous situations or unsafe
practices which, if not avoided, may result in minor
or moderate injury or damage to data or hardware.
ESD Caution Indicates situations that may cause damage to
hardware via Electrostatic Discharge (ESD).
Electrical
Grounding
Requires that any static electricity always be
discharged by touching a grounded bare metal
surface or an approved anti-static mat before
picking up an ESD-sensitive electronic component.
Convention Description
>Movement through menu options. For example, a sequence to
view the Ports screen is displayed as “Global View > Ports”.
MonoText
Information displayed on the page.
ItalicText
Variable parameters.
Button A button in WEBXR that is clicked to perform a function.
In WEBXR, click the icon for the soft arrow on a menu bar,
window, dialog box, and so on to display options such as menus,
dialog boxes, or pop-up windows. Alternately, simply right-click on
that area using a mouse.
Using either method, different options or menus may be
displayed depending on the area in which the soft arrow or right-
click is selected. For example, clicking in the open area of a
blade versus the open area of a port displays different menu
options.
Term used Comments
Bypass Switch May be used interchangeably with “switch”, “chassis”,
“hardware”, “blade” or “unit”.
INTELLAFLEX XR series
chassis
May be referred to as XR series for brevity when referring
to INTELLAFLEX XR chassis’ or blades.

A54-3002-027 • Rev B 7 APCON, Inc.
Bypass Switch TAP/Aggregator User Manual Chapter 1 Preface
APCON software products
APCON provides the following software products to access, control, and monitor APCON
switches:
•WEBXR, embedded in an XR switch, that controls a switch remotely from a web browser
over a network or the Internet. For security, Secure Sockets Layer (SSL) can be enabled.
For more information, refer to the WEBXR User Manual.
•CLI, provides an interactive Command Line Interface via SSHv2 and the serial console in
an XR switch. Refer to the CLI Reference Manual for XR Chassis.
•NETVIS, embedded in the switch (but licensed separately), provides a more intuitive way to
connect SPAN or monitor ports to network tools. For more information, refer to the
NETVIS User Manual).
•SNMP provides programmatic access to the switch and is used primarily for SNMP
management applications. (SNMPv3 is included with the software.) For more information,
see the APCON Support Site (https://support.apcon.com).
•TITANXR, purchased separately, is a web-accessible centralized point of control to monitor
switches, notify designated users of alert conditions, analyze network traffic using RMON
statistics, schedule and implement software upgrades in batch mode, and manage user
accounts. Using TITANXR, network traffic running across a KVM hypervisor on a separate
Linux server can be mirrored, filtered, and directed into a unidirectional GRE tunnel
(created by TITANXR) that is terminated on an INTELLASTORE II for analysis. Refer to the
TITANXR User Manual for more information.
•APCON MOBILE APP, available for Android tablets and smart phones, extends TITANXR
management by providing a global view and real-time status of the APCON monitoring
network. This allows technical staff to view and diagnose issues remotely at all times, thus
reducing the time to resolve issues. The user-friendly interface provides network visibility,
system and link status, alarm notifications, and log history.

APCON, Inc. 8 A54-3002-027 • Rev B
Chapter 1 Preface Bypass Switch TAP/Aggregator User Manual
Contact APCON
To request technical assistance:
•On the Web: APCON maintains an active website that contains current information about
the company and sales office locations, new and existing products, sales contacts,
service, documentation, and technical support information.
• APCON main website: https://www.apcon.com
• APCON Support site: https://support.apcon.com
•Telephone:
• If you purchased your product directly from APCON, contact your sales representative.
• APCON, Inc. technical support is available by phone as follows:
• By e-mail:
• Sales representative: [email protected]
• APCON technical support: [email protected]
•Bymail:
APCON, Inc.
Attn: Customer Support
9255 SW Pioneer Court
Wilsonville, OR 97070 USA
1–503–682–4050 8 AM – 5 PM Pacific Time, Monday — Friday
1–503–682–4059 FAX
1–800–571–4793 24×7×365supportforPremiumGlobalService
Members – US Domestic
[phone],
followed by Option 5
24×7×365supportforPremiumGlobalService
Members – International
NOTE
When sending e-mail to technical support, remember to include configuration
information about your current hardware and software.

A54-3002-027 • Rev B 9 APCON, Inc.
Chapter 2: Introduction
This chapter introduces the features of the APCON
®
Bypass Switch TAP/Aggregator
(Bypass TAP). The Bypass TAP may be installed in any slot of an INTELLAFLEX XR chassis’
(ACI-3036-XR, ACI-3072-XR, ACI-3144-XR, or ACI-3288-XR).
Overview of features
The Bypass TAP is a highly flexible network monitoring tool that includes a broad range of
features:
• 5 optical bypass 1/10G switches
• Fail safe passive tap in bypass mode
• Up to 7 in-line appliance ports
• Load balancing supporting redundancy
• Heartbeat monitoring of appliance
• Up to 14 monitoring tool ports
• Monitor, aggregate, and filter traffic
• Central management using TITANXR or the APCON MOBILE APP
•INTELLAFLEX XR chassis from 1RU to 8RU
Enhanced network visibility
The Bypass TAP provides five (5) fail-safe 1/10G optical Bypass TAPs for in-line security
appliances as well as support for load balancing, appliance redundancy, and advanced
network monitoring.
Protecting today’s network requires advanced security systems such as Intrusion
Protection Systems (IPS), Data Loss Prevention (DLP), or efficiency gain like WAN
Chapter 2
Introduction Chapter 2
Overview of features 9
Overview 10

APCON, Inc. 10 A54-3002-027 • Rev B
Chapter 2 Introduction Bypass Switch TAP/Aggregator User Manual
Acceleration appliances, however the complexity and maintenance of these systems can lower
network availability. The Bypass TAP maintains high-network availability, including intelligent
heartbeat, by providing optical bypass when in-line systems crash, degrade in performance,
require security updates, or need maintenance.
The five network taps can connect to up to seven (7) in-line appliance ports and includes
support for load balancing and appliance redundancy. For example, a network tool could load
balanced traffic across three IPS security appliances, and if one system is down, the
Bypass TAP automatically redistributes traffic across the remaining two systems providing IPS
appliance redundancy.
The Bypass TAP provides advanced network monitoring to select and groom traffic of interest
to external monitoring tools, using any of the available 14 ports of copper or optical 1G/10G
Ethernet. Systems can initially be installed as monitor only, then switched in-line when ready,
making it easy to insert or remove in-line security tools.
All-in-one visibility
The Bypass TAP is part of APCON’s premier INTELLAFLEX XR network monitoring family, and is
compatible with all systems from 1RU to 8RU. Enhanced multi-site management with TITANXR
centralized management with WEBXR.
Overview
This section provides a brief overview of the Bypass TAP and how the failback capability
prevents network traffic loss should a device connected to an Appliance port fail or a Link loss
occurs.
Some typical in-line monitoring configurations include Passive or Aggregated TAP
configurations, as shown below:
For some monitoring applications, a network tool can be placed in-line between network
nodes, as shown below.

A54-3002-027 •RevB 11 APCON,Inc.
Bypass Switch TAP/Aggregator User Manual Chapter 2 Introduction
When a networking tool is connected in-line, another possible point of failure is added. If the
tool fails, the customer may suffer significant network traffic loss and downtime. Therefore,
the ability to support a failback mode is critical for any device connected in-line.
To address this need, APCON offers the INTELLAFLEX Bypass Switch TAP/Aggregator
(Bypass TAP).
The Bypass TAP combines an in-line fail-safe security resilience solution and intelligent
network monitoring on one blade to protect traffic flow and increase visibility.
The optical 10G network Bypass TAP enables enterprise networks to remain functional and
accessible even in the event of the loss of a security monitoring device.
Businesses can’t afford the possibility of a single point of failure impacting mission-critical
networks. The security and resiliency of tools is vital for avoiding network down time. The
Bypass TAP maintains high network availability by allowing traffic to flow unimpeded when in-
line security tools lose power, have a software failure, degrade in performance, require
security updates, or are off-line for maintenance.
The Bypass TAP provides heartbeat functionality to automatically detect a faulty link and pass
data through the network, bypassing the appliance until it is back on-line. This ensures that in-
line monitoring tools such as Intrusion Prevention Systems (IPS), Firewalls, or Data Loss
Prevention (DLP) are no longer a single point of failure on a network.
High Port Density
With five optical network bypass ports, the Bypass TAP has one of the highest 1RU port
densities. Its four advanced monitoring ports aggregated data streams and filtered output
streams can be routed to security tools to achieve maximum utility and efficiency. The
Bypass TAP can support up to seven in-line security appliances.
The Bypass TAP ships with WEBXR software, featuring convenient, drag-and-drop functionality
for managing connections and organizing diagrams, as well as an enhanced status screen
that displays more detail about the system’s health. A network with multiple Bypass TAPs can
be managed with TITANXR, a centralized management software solution with custom
dashboards, reporting and batch upgrades along with the APCON MOBILE APP.
Basic operation
The following description describes how the Bypass TAP switches from Monitor (Normal) mode
to Bypass mode:

APCON, Inc. 12 A54-3002-027 • Rev B
Chapter 2 Introduction Bypass Switch TAP/Aggregator User Manual
♦Monitor (Normal) mode
The following diagram shows the Bypass TAP operating in Monitor (Normal) mode where
network traffic passes through the blade from both directions to a network tool.
♦Bypass mode
If the connection between the Bypass TAP and the network tool fails, the blade shifts into
Bypass mode and redirects network traffic onto the user network as depicted below.
This switching action to Bypass mode is referred to as failback. It is designed to prevent
network traffic loss.

A54-3002-027 •RevB 13 APCON,Inc.
Bypass Switch TAP/Aggregator User Manual Chapter 2 Introduction
The failback action for the Bypass TAP occurs within 10 seconds of detecting the absence of
heartbeat packets returning from the module or loss of Link.
♦Heartbeat operation
To determine when the Bypass TAP switches into Bypass mode, the blade inserts heartbeat
packets into the network traffic going to the network tool from both directions. These packets
are generated internally and inserted into the data stream.
The blade monitors the returning network traffic from the tool for the heartbeat packets.
If a user-specified number of packets fail to return within a specified interval, the blade
assumes a failover Condition has occurred and switches from Monitor to Bypass mode.
In the above diagram, network traffic entering the blade from Network ports (A1N1 and A1N2)
have heartbeat packets inserted into the data streams. If the user-specified number of
heartbeat packets do not return from either direction in the specified interval, the blade
assumes a failover Condition has occurred and switches from Monitor to Bypass mode, thus
bypassing the network tool.
♦Load-Balanced Group Configuration
In a Load Balanced Group (LBG) configuration, a network outage would result in all of the
traffic bypassing the Bypass TAP, just as occurs in a non-LBG configuration. The advantage in
an LBG configuration is that if a loss of an in-line monitoring tool occurs, traffic destined for
NOTE
When no power is applied to the Bypass TAP, the blade is in Bypass mode.
Therefore, if the blade loses power, it switches to Bypass mode so the user does
not lose network traffic.

APCON, Inc. 14 A54-3002-027 • Rev B
Chapter 2 Introduction Bypass Switch TAP/Aggregator User Manual
that tool would be spread across the remaining Bypass TAP ports. The result would be no loss
in traffic. Recovery in this event would be automatic. As soon as the tool is replaced the
network would heal itself.
In an individual LBG port is lost, the blade automatically handles redistribution of traffic to the
remaining LBG ports and notifies the controller of the loss.
If all LBG ports are lost, the blade notifies the controller of the loss and the connection
switches to Bypass mode.
In either event, WEBXR and/or TITANXR sends an alert notifying of the loss. If the
APCON MOBILE APP is configured, the alert is also sent to those users who have been
configured to receive alerts.
Failback Method
This release of the Bypass TAP supports two methods of failback recovery:
•Manual
•Automatic
Manual
The blade can switch from Monitor (Normal) mode to Bypass mode using any one of the
following conditions:
• The internally generated heartbeat packets have not returned within the specified
interval.
• The externally generated heartbeat packets have not arrived within the specified
interval.
• There has been a loss of link.
Thus, network traffic enters the N1 port and departs through the N2 port, bypassing the
Appliance ports, as shown in the following illustration.

A54-3002-027 •RevB 15 APCON,Inc.
Bypass Switch TAP/Aggregator User Manual Chapter 2 Introduction
Automatic
When the blade has determined that the configured heartbeat packets have not returned
within the specified Internal interval, or the conditions in an External filter have been met, or
there has been a loss of link, the blade switches from Monitor (Normal) mode to Bypass
mode.
If the condition that caused the port to switch to Bypass mode corrects itself, within the
specified Failback Window, the port automatically switches back to Monitor (Normal) mode.
Failback occurs within 10 seconds of detecting the absence of the required heartbeat packets
returning from the appliance, or if the blade loses power (refer to Heartbeat (Appliance
ports) on page 46).
When a failover condition occurs, the blade switches the corresponding Network ports (N1
and N2) into Bypass mode, and the following changes occur:
1. A double-ended arrow is displayed across N1 and N2 ports, indicating the Network ports
are now in Bypass mode.
2. The radio button for Port Mode is set to Bypass in the GUI.

APCON, Inc. 16 A54-3002-027 • Rev B
Chapter 2 Introduction Bypass Switch TAP/Aggregator User Manual
3. The Heartbeat Enable switch remains On and the blade continues to attempt to send
heartbeat packets to the appliance.
4. The heartbeat icons on the Appliance ports display red, denoting that the blade is not
receiving heartbeat packets from the appliance.
If the blade is receiving the required heartbeat packets, the heartbeat icon displays blue.
However, the blade remains in bypass mode until manually set to Monitor.
5. The WEBXR System screen displays a red overlay over only the affected ports on the
Bypass TAP.
6. The List Alarms tab lists:
• Port failback to Bypass mode
• Port heartbeat lost
7. These alerts are sent to the TITANXR server and the APCON MOBILE APP.
Failback method
The Bypass TAP supports both manual and automatic Failback Method.
When set to Manual the user must:
• set the Port Mode for the corresponding Network ports to Monitor (Normal)
and
• set the Monitor Enable switch is set to On (assuming the user did not set it to Off).
When set to Automatic the user must, when configuring the Failback Method:
• set the Port Mode for the corresponding Network ports to Monitor (Normal)
and
• specify the Failback Window period.

A54-3002-027 •RevB 17 APCON,Inc.
Bypass Switch TAP/Aggregator User Manual Chapter 2 Introduction
Alarms
The following summarizes additional discussion concerning alarms:
• If a pair of Network ports are set to Monitor (Normal) mode or the blade loses power, then
the paired ports are placed in alarm mode.
• If a pair of Network ports are set to Monitor (Normal) mode and the ports go into Bypass
mode (for a reason other than the being set manually to Bypass mode), then the paired
ports are placed in alarm mode.
• If a pair of Network ports are set to Monitor (Normal) mode, and power to the blade is
recycled, all Network paired ports are placed in Bypass mode (default). The paired ports
that were in Monitor (Normal) mode are switched to Bypass mode and placed in alarm
mode.
• If the paired Network ports that are in alarm mode are set to Monitor (Normal) mode and
heartbeats are sent and received properly, the alarms for those ports are cleared.

APCON, Inc. 18 A54-3002-027 • Rev B
Chapter 2 Introduction Bypass Switch TAP/Aggregator User Manual

A54-3002-027 • Rev B 19 APCON, Inc.
Chapter 3: Specifications
This chapter provides the specifications relevant to the Bypass TAP.
Specifications
This section describes the specifications for the ACI-3030-T05-1 Bypass TAP.
Physical interface
The physical specifications for the Bypass TAP are as follows.
Chapter 3
Specifications Chapter 3
Specification Description
Dimensions 25” W x 17.2” D x 1.75” H
(63.5cm W x 43.7cm D x 4.5cm H) 2 RU
Weight 21 lbs (9.5 kg) with no transceivers installed
Operating Environment
temperature
32°F to 113°F (0°C to 45°C)
Storage temperature -40°F to 158°F (-400°C to 70°C)
Operating relative
humidity
10% to 80% (non-condensing)
Storage relative humidity 0% to 95% (non-condensing)
Network interfaces 5 pair x 1/10G optical bypass ports
Bypass mode: passive optical tap
Through mode: in-line appliance
User 14 x 1/10G Ethernet (SFP/SFP+)
Enable up to 7 in-line appliances
Enable up to 14 Appliance ports
SFP/SFP+ 1000BASE-T/SX/LX, 10GBASE-SR/LR using either
both Multi-mode and Single-mode fibers
Heartbeat Monitors appliance health
Bypass when Heartbeat fails
Select interval of 100 to 5000ms in 100ms
increments
Select Missed Heartbeat packet threshold

APCON, Inc. 20 A54-3002-027 • Rev B
Chapter 3 Specifications Bypass Switch TAP/Aggregator User Manual
Electrical specifications
The Bypass TAP operates with the following electrical specifications:
Front panel connectors
Following is a description of the connectors on the front panel of the Bypass TAP.
LED status indicators
This section describes the LED status indicators on the physical interface that display the
operational status of components in the Bypass TAP.
LEDs for the blade
The behavior of the LEDs for Power and Status displayed on the right side of the physical
Bypass TAP is as follows
Management Easy-to-use WEBXR GUI plus CLI
2 LAN management ports (back of chassis)
1 CLI management port (back of chassis)
HTTPS and SSH for secure access
TACACS+, RADIUS, and LDAP authentication
INTELLAFLEX XR Features
(user ports)
Aggregation, Filtering, Load Balancing, Trunking,
Any-to-Any and Multi-cast, Multi Stage Filtering, and
Port Tagging
Compliance CE Mark and ROHS compliant
Safety UL 60950, EN60950, CSA C22.2 60950
EMC EN 55022, EN61000, FCC part 15, ICES 003
Specification Description (continued)
Specification Description
Power 170 Watts with no transceivers installed
200 Watts with all transceiver installed
Thermal load 680 BTU with all transceivers installed
Electrical pulse for timing Pulse-Per-Second (PPS IN and PPS OUT)
Panel status LEDs Blade Power and Status, Port link, and TX/RX
activity
LEDs Description
Power LED
•On Power is ON.
•Off Power is OFF.