Datacom Systems DURAstream DS-1010 User manual

Datacom Systems Inc
Access Your NetworkTM
© 2010 Datacom Systems Inc
541-0130-U-A.00
USERguide
DS-1010 Bypass Switch
May 2010
DURA 10 Gigabit DS-1010
TM
stream

This page intentionally left blank
© 2010 Datacom Systems Inc

Product Description
Datacom Systems Inc. DURAstream™ DS-1010 Bypass Switch is a 10Gbps
intelligent external active bypass that enables plug and play connectivity which
includes an auto heartbeat and requires no additional drivers to be installed on
any connected appliance. The DS-1010 consists of one 10Gbps segment which
can support one network segment and one appliance.

All rights reserved. No parts of this work may be reproduced in any form or by
any means graphic, electronic, or mechanical, including photocopying, recording,
taping, or information storage and retrieval systems without the written
permission of the publisher.
Products that are referred to in this document may be either trademarks and/or
registered trademarks of the respective owners. The publisher and the author
make no claim to these trademarks.
While every precaution has been taken in the preparation of this document, the
publisher and the author assume no responsibility for errors or omissions, or for
damages resulting from the use of information contained in this document or
from the use of programs and source code that may accompany it. In no event
shall the publisher and the author be liable for any loss of profit or any other
commercial damage caused or alleged to have been caused directly or indirectly
by this document.
© 2010 Datacom Systems Inc
Printed: May 2010 in East Syracuse, New York
DURA TM stream

© 2010 Datacom Systems Inc
5
Table of Contents
DURAstream™
Table of Contents
.................................................................................................... 7
Section 1 Terms of Use
........................................................................................ 71 Copyright
........................................................................................ 72 License Agreement
........................................................................................ 73 Trademark Attribution
........................................................................................ 74 Proprietary Notice
........................................................................................ 85 Certifications and Marks
........................................................................................ 96 Safety Notices and Warnings
.................................................................................................... 10
Section 2 Overview
........................................................................................ 111 Shipped Contents
........................................................................................ 112 DURAstream™ Series Benefits and Features
........................................................................................ 123 DS-1010 Series Common Specifications
........................................................................................ 124 DS-1010 Series Specific Specifications
........................................................................................ 135 Technical Brief
.................................................................................................... 14
Section 3 Hardware Interface
........................................................................................ 141 Device Management
........................................................................................ 142 Port LED Interface
........................................................................................ 143 LCD Interface
.................................................................................................... 15
Section 4 Theory of Operation
........................................................................................ 161 Operation Modes
............................................................................................... 17
1 Normal Active Bypass
............................................................................................... 18
2 Normal Active Inline
............................................................................................... 19
3 Manual Active Inline
............................................................................................... 19
4 Manual Active Bypass
............................................................................................... 20
5 Manual Passive Bypass
........................................................................................ 212 Heartbeat (Hb)
........................................................................................ 213 Power Failure Protection
.................................................................................................... 22
Section 5 Initial Configuration
........................................................................................ 221 Command Line Interface (CLI)
............................................................................................... 22
1 Basic Functionality
............................................................................................... 22
2 Basic Command Set
............................................................................................... 23
3 <variable> List for CLI
............................................................................................... 26
4 Command Line Interface Usage
........................................................................................ 272 SERIAL Port Configuration (RJ45)
............................................................................................... 27
1 HyperTerminal
............................................................................................... 27
2 IP Address Configuration

© 2010 Datacom Systems Inc
Table of Contents
6
DURAstream™
.................................................................................................... 28
Section 6 MANAGEMENT Port Configuration (RJ45)
........................................................................................ 281 SSH Setting
........................................................................................ 282 User Account
........................................................................................ 283 Password
........................................................................................ 284 SNMP
............................................................................................... 28
1 Support
............................................................................................... 29
2 CLI Setup
........................................................................................ 295 TACACS+ Setup
........................................................................................ 296 NTP Definitions
........................................................................................ 297 SYSLOG Definitions
.................................................................................................... 30
Section 7 Secure Web Management
........................................................................................ 301 Login
........................................................................................ 312 Status
........................................................................................ 313 Bypass Module
........................................................................................ 314 Management Port
........................................................................................ 325 eMail Notifications
........................................................................................ 326 SNMP Settings
........................................................................................ 327 NTP Settings
........................................................................................ 338 Time Settings
........................................................................................ 339 Backup/Restore
........................................................................................ 3310 Firmware Update
........................................................................................ 3311 Log Settings
........................................................................................ 3412 Reboot
........................................................................................ 3413 Users
........................................................................................ 3414 TACACS+
.................................................................................................... 35
Section 8 Appendix 1 Heartbeat frame format
.................................................................................................... 36
Section 9 Appendix 2 Console-Cable Drawing
.................................................................................................... 38
Section 10 Customer Service
........................................................................................ 381 Internet
........................................................................................ 382 Warranty
........................................................................................ 383 Limits of Liability

7
© 2010 Datacom Systems Inc
Terms of Use
DURAstream™
1 Terms of Use
The following terms and conditions relate to the use ofthis document. Please note that DatacomSystems
Inc. reserves the right, at its entire discretion, to change, modify, add, or remove portions ofthese Terms of
Use at any time. Please read the Terms ofUse carefully as your use ofthis document is subject to the Terms
ofUse stipulated herein.
1.1 Copyright
Copyright©2010 by DatacomSystems, Inc. Allrights reserved. Printed in the United States ofAmerica.
No part of this publication may be reproduced, stored in a retrievalsystem, or transmitted, in any formor
by anymeans, electronic, mechanical, photocopying, recording, or otherwise, without the prior written
permission ofDatacomSystems, Inc. To obtain this permission, write to the attention ofthe Datacom
Systems legaldepartment at 9 Adler Drive, East Syracuse, New York 13057-1290, or call315-463-
9541.
1.2 License Agreement
Notice To All Users: Byusing DatacomSystems, Inc. products, you agree to the terms set forth. No
licenses, express or implied, are granted withrespect to the technology described and DatacomSystems,
Inc. retains all rights with respect to the technology described herein. Ifapplicable, you may return the
product to the place ofpurchase for a fullrefund.
1.3 Trademark Attribution
Access Your Network , DURAstream™, DS3 ACTIVEtap , DS3switch , ETHERNETtap ,
Empowering Network Professionals , FDDIswitch , FIBERsplitter , FIBERswitch ,
FIBERSWITCHsystem , FLOWcontrol , GIGABITswitch , INSERTswitch , INSERTunit , LAN
switch , MANAgents , MULTINETswitch , NETspan , PERMAlink , PROline , RMON
SWITCHINGanalyzer , SINGLEstream , UNIVERSALswitch , VERSAstream , and WANswitch
are trademarks of DatacomSystems, Inc. 1ST in Switching Solutions®, DATACOMsystems®, LAN
clipper®, MANAgents®, and MULTIview®are registered trademarks of DatacomSystems, Inc. Allother
registered and unregistered trademarks are the sole propertyof their respective owners. Allspecifications
may be changed without notice.
1.4 Proprietary Notice
This document contains proprietary information about the DS-1010 familyof products and is not to be
disclosed or used except as authorized by writtencontract with DatacomSystems, Inc.
1.4 Certifications and Marks
For information regarding certifications and marks, please refer to the product info section of our
website at http://www.datacomsystems.com

9
© 2010 Datacom Systems Inc
Terms of Use
DURAstream™
1.6 Safety Notices and Warnings
These explanatory labels are included in this information for the user in accordance
with the requirements of IEC 60825.1.
WARNING: Class 1 laserand LED product. A class 1 laseris safe under all
conditions of normal use. Invisible laser radiation may be emitted fromoptical
port openings when no fiber cable is connected, avoidexposure to laser
radiation and do not stare into open optical ports.
IMPORTANT: Rack Mount Instructions are included here to callthe attention ofinstallation technicians to
pertinent safety and warning issues prior to the the installation of the product as follows:
A. Elevated Operating Ambient — Ifinstalled in a closed or multi-unit rack assembly, the operating ambient
temperature of the rack environment may be greater than roomambient. Therefore, consideration should
be given to installing the equipment in an environment compatible with the maximum ambient temperature
(Tma) specified in the 'DS-1010 Series Common Specifications ' section.
B. Reduced Air Flow — Installation ofthe equipment in a rack should be suchthat the amount ofair flow
required for safe operation of the equipment is not compromised.
C. MechanicalLoading — Mounting of the equipment in the rack should be such that a hazardous condition
is not achieved due to uneven mechanicalloading.
D. Circuit Overloading — Consideration should be given to the connection ofthe equipment to the supply
circuit and the effect that overloading ofthe circuits might have on over-current protection and supply
wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this
concern.
E. Reliable Earthing — Reliable earthing ofrack-mounted equipment should be maintained. Particular
attention should be given to supply connections other than direct connections to the branch circuit (e.g.
use ofpower strips).
12

Overview
10
© 2010 Datacom Systems Inc
DURAstream™
2 Overview
Automatic Failover= Constant Link State — Deploying in-line monitoring devices such as intrusion
preventionsystems (IPS) or bridge devices like VPN gateways and firewalls used to mean a potentialpoint
offailure onthe network. When one ofthese devices malfunctioned or became overwhelmed with traffic,
network outages could occur. This posed serious challenges when deployed on mission criticallinks.
The DURAstream™Bypass Switch ensures your network’s most important data does not faileven when
in-line devices do. Deploying a DURAstream™ Bypass Switch ensures uptime ofcriticallinks regardless
ofin-line device performance bydiverting criticalnetwork traffic away frommalfunctioning in-line devices
untilsuch devices are operating normally. This not only alleviates potentialissues with traffic congestion
affecting link behavior caused byan IPS, it allows maintenance and upgrades ofattached in-line tools
without network downtime.
The DURAstream™DS-1010 10G Bypass Switch is an easy-to-manage externalactive bypass providing
failover and TAP capabilities for data monitoring ofcriticalGigabit network segments. Eachbypass switch
offers up to four independent interface modules with a variety ofmedia options (copper, fiber, and media
conversion). Eachofthe four network modules operates independentlyto ensure link protection monitoring
of one to four links at any time.
Line-rate throughput and real-time data forwarding hardware protects data and allows criticalvoice and
data applications to performuninterrupted and meet high demands for qualityand security. Deployed with
an in-line monitoring tool, a DURAstream™Bypass Switch creates a comprehensive solution for intrusion
prevention.
Heartbeat Mode — The DURAstream™DS-1010 10G Bypass Switch can monitor the health ofin-line
appliances by sending and receiving a heartbeat packet. A user programmable heartbeat packet can be
injected into the monitoring port link to determine availabilityofattached monitoring devices or help
determine delay due to high traffic volume. Even ifa connected in-line toolis powered on, the bypass switch
canautomatically switchtraffic around it untilthe device returns to normaloperation. At that time, traffic is
re-routed back to the monitor port.
Passive Mode — Inthe event ofpower loss, the switch closes to create a physicalconnection, whichin
turn, creates a passive bypass path to help prevent traffic interruption. Robust Management, Security and
Logging Manage your switch using built-in CLI or GUI, including secure web interface over HTTPS.
Supports secure shell(SSH), SNMP, e-mailnotifications, TACACS+ as wellas Syslog to enable
consolidationof log data frommultiple systems into a centralrepository.
Reliable and Easy to Use — The DURAstream™DS-1010 10G Bypass Switchis simple to deploy,
enables plug-and-play connectivity, and is compatible with allmajor manufacturer’s monitoring systems.
Every unit not only comes with dualredundant power supplies to ensure monitoring uptime, the voltage of
each power supply is continuously monitored for instances ofpower decline or outage. In such cases, the
unit can initiate a switchto passive bypass mode.

11
© 2010 Datacom Systems Inc
Overview
DURAstream™
2.1 Shipped Contents
DS-1010 Series Link Aggregation Taps
1 — Model:DS-1010 series Bypass Switch
1 — Console Cable (DB9 to RJ45)
1 — Management Cable (RJ45 to RJ45)
2 — Switching AC Adapters
2 — AC Line Cords
2.2 DURAstream™ Series Benefits and Features
Benefits
Optimized reliabilityofcriticalnetwork links
Achieve fail-safe monitoring with in-line monitoring tools such as IPS and DPI
Improved network uptime and security
Increased application availability
Upgrade, maintain, or replace in-line devices without interrupting network operations
DatacomCustomer Service Support is available via:
Phone:[phone]
Fax:(315 ) 463-9557
Website:www.datacomsystems.com
E-mail:[e-mail]
Features
Passive bypass maintains network integrity during power loss
Active switching oftraffic in case ofsystemfailure to prevent network interruptions
Heartbeat Mode - severaluser-configurable options to monitor link status and healthofinline appliances
including bridge devices like firewalls and VPN gateways
Flexible deployment options - single mode and multi-mode
Dualredundant power supplies ensure monitoring uptime
Power failprotection monitors power supplies for power decline or outage and can switch to passive
mode
Manage device remotely or locally with Web based management (HTTPS) or extensive CLI
Management port with SSH connectivity
SNMP traps and e-mailevent notifications on defined events
Interfaces with authentication servers such as TACACS+
Syslog support

Overview
12
© 2010 Datacom Systems Inc
DURAstream™
2.3 DS-1010 Series Common Specifications
One In-Line Gigabit Network Port: various see 'Specific Specifications ' section
Ethernet Management Port: RJ45
The factory configured IP Address, Subnet Mask and default Gateway are as follows:
IP Address: 192.168.0.111
Subnet Mask: 255.255.255.0
default Gateway: 192.168.0.1
Serial Console Port: RJ45
In-Line Insertion Loss (front): — less than0.5dB
Power Adapter Input Requirement: 100 - 240VAC 47 - 63Hz1.4A MAX
Power Adapter Output: 12VDC 5.0A
Power Consumption: 60.0W MAX
BTU/h: 204.6 MAX
Operating Temperature (Tma): 32º to 131° F — 0º to 55° C
Storage Temperature: -22º to 149° F — -30ºto 65° C
Operating Range Relative Humidity: 5 to 90% non-condensing
Dimensions (H x W x D): includes rack mount bracket
1.75 x19.00 x21.00 inch
4.44 x48.26 x53.34 cm
Weight: 13.5 lbs; shipping: 21.0 lbs — 6.12 kg; shipping; 9.53 kg
Warranty: One (1) year - see 'Warranty' sectionfor details.
2.4 DS-1010 Series Specific Specifications
DS-1010LR-10G:
1 single mode fiber segment active bypass
DS-1010SR-10G-50:
1 multi mode fiber (50µ) segment active bypass
DS-1010SR-10G-62:
1 multi mode fiber (62.5µ) segments active bypass
12
38

13
© 2010 Datacom Systems Inc
Overview
DURAstream™
2.5 Technical Brief
DS-1010 is DatacomSystems' 10Gbps intelligent externalActive Bypass Switch. The externalactive
bypass enables plug and playconnectivity, includes anauto heartbeat and requires no additionaldrivers to
be installed on any connected appliance. DS-1010 consists of1 segment whichcan support one network
segment and one appliance which provides these features:
1 segment 10Gb active bypass switch
Supports Fiber MultiMode and Fiber Single Mode
Comprehensive management tools:
Secure Web management Interface (SSL),
oSNMP
oCLI by serialconsole
oSSH
Different Heartbeat Modes that monitor appliance systemhealth without appliance driver, including:
InternalLoop-back Heartbeat Frame Mode, and Link Status Mode
EmailNotification for appliance status changes
Power Outage Network Bypass Protection
Field Programmabilityover Ethernet or SerialConsole Port
Syslog support
TACACS+ authentication server
Figure 1. Connectivity example, DS-1010 can connect to 1 network segment

Hardware Interface
14
© 2010 Datacom Systems Inc
DURAstream™
3 Hardware Interface
Figure 2. Front Panel of DS-1010
3.1 Device Management
LCD display to show systemname and firmware version
Ethernet Management Port
SerialConsole Port via SerialConsole Cable
LED Power Indicators and LED Link Indicators
3.2 Port LED Interface
Figure 3. Front Panel Segment of DS-1010
10Gigabit N1 and N2 Ports which connect to an ingress network and egress network
10Gigabit A1 and A2 Ports which connect to a network appliance (i.e., IDS, UTM or Firewall)
Link/Active LEDs for 10Gigabit Ports — Link status ofthe port. GreenLED ON signifies link is stable.
Blinking LED signifies there is traffic on that port.
Inline LED — ON for Inline state or OFF for Bypass state
Bypass LED — OFF for Inline state or ON for Bypass state
3.3 LCD Interface
The LCD displays the DURAstream™10G firmware version. The < and > keys and up arrow and down
are reserved for future use.

15
© 2010 Datacom Systems Inc
Theory of Operation
DURAstream™
4 Theory of Operation
Modules:
The single mode or multi-mode opticalmodule installed at the factoryin eachBypass Switchhas 4 ports.
The top two ports are used to connect network devices, these are the network ports and the bottomtwo
ports ofthe module direct traffic through the inline appliance, these are the appliance ports. Heartbeat
packets flow between the bottomports to ensure the appliance is working properly. Heartbeat packets are
not passed beyond the bottomports.
An inline appliance is connected on the single module using the following diagram:
Figure 5. DS-1010 Bypass Switching Mode and Active Switching Mode
Ports are designated as Appliance or Network Ports as shownbelow:
Figure 6. Network and Appliance Ports

Theory of Operation
16
© 2010 Datacom Systems Inc
DURAstream™
4.1 Operation Modes
DS-1010 has four Operation Modes with Mode 0 being the default Operation Mode:
Mode 0: Normal Active Bypass
IfDS-1010 receives heartbeat signals within the TIMEOUT time period, the switching mode
remains or is changed to Active Switching Mode. IfDS-1010 does not receive heartbeat signals
within the TIMEOUT time period, it will change to or remain in Bypass Switching Mode. By default
(without any heartbeat), DS-1010 will remain in Bypass Switching mode.
Mode 1: Normal Active Inline
IfDS-1010 receives heartbeat signals within the TIMEOUT time period, the switching mode
remains or is changed to Bypass Switching Mode. IfDS-1010 does not receive heartbeat signals
within the TIMEOUT time period, it will change to or remain in Active Switching Mode. By default
(without any heartbeat), DS-1010 will remain in Active Switching mode.
Mode 2: Manual Active Inline
DS-1010 is always in Active Switching Mode.
Mode 4: Manual Active Bypass
DS-1010 is always in Bypass Switching Mode.
Mode 5: Manual Passive Bypass
DS-1010 is inpassive bypass, where the opticalswitch is close in bypass mode.

17
© 2010 Datacom Systems Inc
Theory of Operation
DURAstream™
4.1.1 Normal Active Bypass
Traffic willflow between the network and appliance ports as shown in the following diagram. Ifheartbeat
signals are not received within the timeout period, traffic willbe routed between N1 and N2. Ports A1 and
A2 willbe bypassed. Heartbeat packets willcontinue to be sent out the Appliance port. This allows the
module to automatically route traffic back through the appliance once it is repaired, or placed back into
service.
Figure 7. Normal Active Bypass
Figure 8. Normal Active Bypass Device Failure

Theory of Operation
18
© 2010 Datacom Systems Inc
DURAstream™
4.1.2 Normal Active Inline
This setting allows traffic to flow betweenN1 and N2 while heartbeats continue to flow betweenA1 and
A2. Loss ofheartbeats willdirect traffic fromN1 to A1 and N2 to A2. This mode maybe used to make
sure the heartbeat is flowing through the appliance, while network traffic is not flowing through the
appliance.
Figure 9. Normal Active Inline
Figure 10. Normal Active Inline Heartbeat is Blocked

19
© 2010 Datacom Systems Inc
Theory of Operation
DURAstream™
4.1.3 Manual Active Inline
Traffic flows fromN1 to A1 and N2 to A2 untilchanged. No heartbeat packets are sent.
Figure 11. Manual Active Inline
4.1.4 Manual Active Bypass
Traffic flows between N1 and N2. No heartbeat packets are sent, and the device willremain inthis mode
untilchanged.
Figure 12. Manual Active Bypass

Theory of Operation
20
© 2010 Datacom Systems Inc
DURAstream™
4.1.5 Manual Passive Bypass
This mode forces connectivity directly between N1 and N2. Ifthe Bypass Switch loses power fromboth of
its redundant power supplies, the mode willautomaticallyoccur, to maintain the network link. Note that
switching to the mode willcause a briefinterruption ofthe network link, which may force routing and link
protocolalgorithms to recalculate and renegotiate. This may cause link downtime.
Figure 13. Manual Passive Bypass

21
© 2010 Datacom Systems Inc
Theory of Operation
DURAstream™
4.2 Heartbeat (Hb)
DS-1010 can monitor the continual health of the appliance by sending and receiving Heartbeat (Hb) pulses.
This functionalityensures the real-time safetyand accuracyofthe data stream. Heartbeat frames are
generally configured to be sent fromDS-1010 on one appliance port and received on the other under a set
time limit defined by a customer configured TIMEOUT value. For more information on TIMEOUT value,
see section '<variable> List for CLI .'
DS-1010 provides various heartbeat modes to correspond with different appliance configurations including:
Heartbeat Mode 1: Internal Heartbeat Frame Loop-back Mode:
In Heartbeat Mode 1, the heartbeat signalis a user programmable Ethernet “Heartbeat Frame”and
is generated by DS-1010 itself. The Heartbeat frames are sent out fromDS-1010 Ethernet Port A1
every 100ms, and DS-1010 Ethernet Port A2 expects to receive the same Heartbeat Frame from
the appliance. Heartbeat Mode 1 for the DS-1010 is designed for network appliance units that act
as a bridge, like IPS or Firewall. The user needs to make sure the Network appliance is properly
configured so that the device willnot filter out the “Heartbeat Frame”.
In heartbeat Mode 1, no driver is needed for Appliance systems.
Heartbeat Mode 3: Link Status Heartbeat Mode:
In Heartbeat Mode 3, the heartbeat signalacts as the link up status indicator ofthe DS-1010
Ethernet Port A1 and A2. Ifany ports ofA1 and A2 lose the link, DS-1010 willshut offheartbeat
transmission and activate bypass mode.
4.3 Power Failure Protection
DS-1010 provides two redundant power supplyinputs to minimize the chance ofpower loss or failure.
In addition, DS-1010 continuously monitors the power supply voltage to detect any instance of power
decline or outage. Ifa power failure is detected, Power FailProtection Operation is triggered, which
initiates a switch to Bypass Switch. During this no power state, the N1 and N2 ports willphysically connect
to create a passive bypass path without any traffic interruption between port N1 and port N2.
23