Broadcom Symantec PacketShaper PS-S200 User manual

24 Aug 2021
Broadcom, the pulse logo, Connecting everything, Avago Technologies, Avago, the A logo, Symantec, the Symantec logo, the Checkmark logo, Blue Coat, and the Blue Coat
logo are among the trademarks of Broadcom and/or its affiliates in the United States, certain other countries, and/or the EU. Copyright © 2021 Broadcom. All Rights Reserved.
The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. For more information, please visit www.broadcom.com.
Figure 1: PS-S200, PS-S400, PS-S500 Deployments
PacketShaper Quick Start Guide
PS-S200, PS-S400, PS-S500 Appliances

PS-S200, PS-S400, PS-S500
2
PacketShaper
Quick Start Guide
1 — Unpack the Appliance
Unpack the shipping package for the appliance and verify it
includes the following:
2 — Connect Cables
It is recommended that you plug in cables, verify LEDs, and
configure and license the appliance before mounting it in an
equipment rack. Make sure the appliance is on a flat, level
surface when performing the initial configuration. If you would
rather mount the appliance before performing configuration
tasks, skip to Mount the Appliance.
The following procedure describes a typical deployment for
PS-S200, PS-S400, and PS-S500 appliances (as shown in
Figure 1). For information on other deployments, see the
PacketShaper software documentation, available at:
techdocs.broadcom.com
NOTE: Network cables are not included with the appliance.
Make sure to use only straight-through Ethernet cables.
Category 5E cables or better are recommended for
1000Base-T operation. Category 6A cables are
recommended for 10GBase-T operation.
To deploy the appliance and connect cables:
1. Disconnect the Ethernet cable (if there is one) between
the LAN switch and WAN router.
2. Connect the appliance to the LAN switch:
For PS-S200 and PS-S400 appliances, connect an
Ethernet cable to the appliance’s LAN 2:0 port and con-
nect the other end of the cable to the LAN switch.
For PS-S500 appliances, connect an Ethernet cable to
the appliance’s LAN 1:0 port and connect the other end
of the cable to the LAN switch.
The appliance auto-negotiates 10/100/1000 Base-T
speed and duplex settings.
3. Connect the appliance to the WAN router:
For PS-S200 and PS-S400 appliances, connect an
Ethernet cable to the appliance’s LAN 2:1 port and con-
nect the other end of the cable to the WAN router.
For PS-S500 appliances, connect an Ethernet cable to
the appliance’s LAN 1:1 port and connect the other end
of the cable to the WAN router.
4. Connect an Ethernet cable to the appliance’s MGMT 0:0
port and connect the other end of the cable to the man-
agement network switch.
5. Connect the included null-modem cable to the appli-
ance’s DB9 Serial port and connect the other end of the
cable to a serial terminal or workstation with terminal
emulation software. The serial connection is used to per-
form the appliance’s initial configuration.
6. For PS-S500 appliances, attach the lug-equipped end of
the included grounding wire (10 AWG) to both grounding
studs on the appliance, securing it with the star washers
and M5 nuts. Attach the other end of the grounding wire
to a proper earth-ground.
7. Connect the appliance to a power source:
For PS-S200 appliances, connect the included power
cord to the appliance’s power inlet and connect the
other end of the power cord to a power source.
For PS-S400 and PS-S500 appliances, connect the
included power cords to the appliance’s power inlets
and connect the other ends of the power cords to a
power source.
Appliance PS-S200 PS-S400 PS-S500
AC power cords
(number included)
122
Null-modem serial cable √ √
Grounding hardware √
2- and 4-post slide-rail kit optional √ √
2-post fixed rail √
Accessing Appliance
Documentation
√√√
Software License Agreement √√√
Hardware Warranty
Information
√√√

PS-S200, PS-S400, PS-S500
3
PacketShaper
Quick Start Guide
3 — Power On the Appliance and
Verify LEDs
To verify the appliance is operational:
1. Confirm the appliance’s power cords are securely
connected to a power source.
2. If the appliance does not automatically power on, press
the rear soft power switch.
NOTE: The state of the appliance’s soft power switch (on
or off) is retained when power is removed. This may ne-
cessitate pressing the power switch when reapplying
power to the appliance.
3. As the appliance boots, verify the following:
The power LED turns amber.
Near the end of the boot cycle, the Power LED alter-
nates between amber and green, indicating an uncon-
figured state.
After the boot cycle has completed, the LCD panel dis-
plays information about the appliance, such as model,
serial number, and IP address, which can be scrolled
through with the Right and Left Arrows.
Following the initial configuration and licensing, the
Power LED turns green.
During operation, the front-panel status LEDs indicate the
following states:
4 — Perform the Initial Configuration
NOTE: To initialize the appliance, you need the following:
appliance IP address, primary DNS server IP address;
default gateway IP address; subnet mask; link settings for
speed and duplex.
To perform the initial configuration for the appliance:
1. Confirm the appliance’s DB9 Serial port is connected to
a serial terminal or workstation with terminal emulation
software.
2. Open a terminal emulation program, such as Microsoft
HyperTerminal®, PuTTY, Tera Term, or ProComm™,
and configure it to use the following settings:
3. Power on the appliance (if it is not already powered on)
and, when prompted, enter the default Username
[touch] and Password [touch], then click Login.
4. When prompted, enter network configuration parame-
ters and then save them to the appliance.
NOTE: After the appliance’s IP address has been config-
ured, you can log in to CLI via remote login with SSH, or
you can use a browser by appending /cli.htm to the appli-
ance’s IP address. For more information, see the Pack-
etGuide, available at: techdocs.broadcom.com
5 — License the Appliance
After it has been initialized, the PacketShaper appliance
must be licensed for full software functionality. If the appli-
ance is connected to the Internet, the license automatically
syncs to the appliance within 24 hours. You can also retrieve
the license immediately with the license update command
in CLI (if the appliance is connected to the Internet).
If the appliance is not connected to the Internet, you can
manually download the license from the Broadcom My
Entitlements page and then upload it to the appliance, after
which the license load command can be used in CLI.
To install the license (with Internet connectivity):
1. Open a terminal emulation program and log in to the
appliance.
LED Color Description
Power
Status
Off Powered off or no power present
Amber Booting
Amber/green
alternating
Not yet initialized
Green Powered on and configured
System
Status
Off Powered off or no power present
Green Normal
Amber System fault or not yet licensed
Amber blinking Critical fault
Baud rate: 9600 bps Data bits: 8
Parity: none Stop bits: 1
Flow control: none

PS-S200, PS-S400, PS-S500
4
PacketShaper
Quick Start Guide
NOTE: Confirm the appliance’s DB9 Serial port is con-
nected to a serial terminal or workstation and that the ter-
minal emulation software is configured as in Perform the
Initial Configuration.
2. When prompted with the Serial Console welcome
screen, to access CLI, press: 1
3. To verify the license, enter: version verbose
If the license has not been installed, you encounter an
Invalid License message.
4. To download and install the license, enter: license
update
5. To reboot the appliance, enter: reset
NOTE: Rebooting the appliance may take several min-
utes or longer, depending on the network. DO NOT un-
plug the power cords during reboot, as this can corrupt
the configuration.
6. After the appliance reboots, to verify the license, open
CLI and enter: version verbose
To manually install the license (without Internet
connectivity):
1. Download the license file from My Entitlements:
Go to support.broadcom.com/security and click My
Entitlements. When prompted, enter the admin User-
name and Password, then click Sign In.
Search for the appliance you want to license by enter-
ing its Serial Number, Site ID, or Email.
Follow the on-screen prompts to generate and down-
load the license file.
2. Upload the license file to the appliance:
Open a browser and enter the appliance’s IP address.
For example, an IP address of 192.168.2.42 would be:
https://192.168.2.42:8082
When prompted, enter the default Username [touch]
and Password [touch], then click Login. The Manage-
ment Console window opens.
Navigate to Advanced UI > Info, then click File
Browser.
In the File Browser window, click Upload to upload the
license to a folder on the appliance (such as 9.256/).
3. Activate the license in CLI,
Open a terminal emulation program and log in to the
appliance.
NOTE: Confirm the appliance’s DB9 Serial port is con-
nected to a serial terminal or workstation and that the ter-
minal emulation software is configured as in Perform the
Initial Configuration.
When prompted with the Serial Console welcome
screen, to access CLI, press: 1
To activate the license, from the CLI prompt, enter:
license load file://localhost/<file path>
| http://<url>
where <file path> is the filename and location on the appli-
ance and <url> is the URL of the license on a web server.
NOTE: Filenames are case sensitive. Make sure to enter
the license filename with the same upper and lower case
characters entered when the file was saved.
4. To reboot the appliance, enter: reset
NOTE: Rebooting the appliance may take several min-
utes or longer, depending on the network. DO NOT un-
plug the power cords during reboot, as this can corrupt
the configuration.
5. To verify the license, from the CLI prompt, enter:
version verbose
6 — Perform a Graceful Shutdown
Before mounting the appliance, log in to CLI and perform a
graceful shutdown of the appliance.
To perform a graceful shutdown:
1. Open a terminal emulation program and log in to the
appliance.
NOTE: Confirm the appliance’s DB9 Serial port is con-
nected to a serial terminal or workstation and that the ter-
minal emulation software is configured as in Perform the
Initial Configuration.
2. When prompted with the Serial Console welcome
screen, to access CLI, press: 1
3. To access privileged commands, enter: enable
4. When prompted, enter the enable Password specified
during the initial configuration.
5. Enter: shutdown
WARNING! Do not power off the appliance with the soft pow-
er switch or by removing the power cables! Abruptly removing
power can result in irreparable data loss. Always use the
shutdown command from CLI to power off the appliance.

PS-S200, PS-S400, PS-S500
5
PacketShaper
Quick Start Guide
7 — Mount the Appliance
The slide-rail kit included with PS-S400 and PS-S500 appli-
ances (available as an option for PS-S200 appliances) allows
the appliance to be mounted in a 4- or 2-post equipment rack.
The slide-rail kit includes the following parts:
NOTE: Installation of the slide rails requires an M4 nut driver
or adjustable wrench and a #2 Phillips head screwdriver. If
you are working alone, a mechanical lift is also required.
NOTE: The following procedure documents installation for 4-
post equipment racks (as shown in Figure 2). For 2-post instal-
lation, see the S-Series WebGuide, available at:
techdocs.broadcom.com/sseries
Rack Warnings and Precautions
CAUTION! Before mounting the appliance:
Power off the appliance (see Perform a Graceful
Shutdown) and disconnect all cables.
Verify that the weight of the system does not exceed the
rack’s fully populated weight limit. For more information,
refer to the manufacturer’s instructions included with
the rack.
For weight stability, load the rack from the bottom up.
Read the “Rack Mount Warnings” section of the Safety
and Compliance Guide.
Take adequate safety and grounding measures to avoid
creating an electrical shock hazard and to prevent
bodily injury.
The appliance is heavy. A two-person lift or mechanical
aid is recommended to lift the appliance from the carton
and install it in the rack.
Do not place objects on the appliance or use it as a
work surface. Its mounting hardware does not support
additional weight.
Install the Appliance into the Rack
To install the appliance into a 4-post equipment rack:
1. Disassemble the two slide-rail assemblies. Extend the
inner rails while pressing the center release tabs, then
fully remove them (a).
2. Attach the two inner rails to the chassis sides, aligning
the rails with the mounting posts on the chassis, then
slide the rails forward (PS-S200, PS-S400) or rearward
(PS-S500) until they snap into place. Secure each rail
with one (PS-S200, PS-S400) or two (PS-S500) M4x4L
screws (b).
3. For PS-S200 and PS-S400 appliances, attach the two
rack ears to the chassis, aligning them with the raised
screw holes and orienting them with the captive screw
heads toward the front of the appliance. Secure each
rack ear with two M3L4 screws.
4. Install the two outer rails into the 4-post equipment rack ( c ):
Secure the rear brackets to the front brackets with six
M4x4L (PS-S200, PS-S400) or M4x5L (PS-S500)
screws, three per side, placed equidistantly. Do not yet
fully tighten the side-mounting screws.
Item
(2) Front brackets
(2) Inner rails
(2) Rear brackets
(2) Center brackets
(2) Rack ears
(8) M6x13 screws
(8) M6 cage nuts
(10) M4x4L screws
(4) M3L4 screws
PS-S200 (Optional) and PS-S400 Rail Kit
Item
(2) Front brackets
(2) Inner rails
(2) Rear brackets
(4) Middle brackets
(8) M6x13 screws
(8) M6 cage nuts
(10) M4x5L screws
(4) M4x4L screws
PS-S500 Rail Kit

PS-S200, PS-S400, PS-S500
6
PacketShaper
Quick Start Guide
Broadcom reserves the right to make changes without further notice to any products or data herein to improve reliability, function, or design. Information furnished by Broadcom is believed to be accurate and reliable. However, Broadcom does not assume
any liability arising out of the application or use of this information, nor the application or use of any product or circuit described herein, neither does it convey any license under its patent rights nor the rights of others. (2021.08.24, 13:10:25)
Attach the two outer rails to the rack, extending the rails
as necessary to fit the rack. Secure the front and rear
brackets with two M6 rack screws each. Do not yet fully
tighten the rack screws.
Fully tighten the side-mounting screws, three per side,
securing the rear brackets to the front brackets.
Inspect the outer rails, making sure they are installed at
the same level in the rack and free of defects, damage,
and debris. Verify the rails extend and retract smoothly
and stop at the slide-stop.
5. Install the chassis into the 4-post equipment rack (d):
Align the inner rails attached to the appliance with the
outer rails in the rack and slide the appliance half-way
into the rack.
Fully tighten the M6 rack screws securing the outer rails
to the rack.
Press the release tabs on the inner rails and gently
slide the appliance all the way into the rack.
 Tighten the captive thumbscrews on the appliance’s rack
ears to prevent the appliance from sliding out of the rack.
6. Reconnect the cables as documented in Connect Cables
and verify the appliance is functioning as in Power On the
Appliance and Verify LEDs.
See below for support and additional documentation.
Figure 2: PS-S500 Slide-Rail Installation
Symantec Technical Support
For Symantec technical support, case management,
licenses, and product downloads, go to:
support.broadcom.com/security
PacketShaper Software Documentation
Go to techdocs.broadcom.com and type “packet” in
the search field, then click PacketShaper.
Appliance Documentation
S Series WebGuide (Maintenance and Upgrades)
techdocs.broadcom.com/sseries
S200 Series Safety and Compliance Guide
techdocs.broadcom.com/s200
S400 Series Safety and Compliance Guide
techdocs.broadcom.com/s400
S500 Series Safety and Compliance Guide
techdocs.broadcom.com/s500