Garland INT40G2-44 User manual

EdgeLens Inline Security
Packet Broker
INT40G2XX44 | 1.19.5

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
User Manual
Introduction 4
Part Numbers 4
Additional Specifications 4
1 Dashboard 5
1.1 System 5
1.2 Bypass Taps 5
1.3 Packet Broker 5
2 System 6
2.1 System Info 7
2.2 General 7
2.3 Admin 7
2.3.1 Groups 8
2.3.2 Users 8
2.3.3 Authentication 9
2.4 Network Settings 10
2.5 Date & Time 11
2.6 Syslog 11
2.7 SNMP 12
2.8 Export Configuration 12
2.9 Import Configuration 13
2.10 Software Upgrade 13
2.11 Reboot 14
3 Bypass Taps 15
3.1 Primary-Secondary Tap 16
3.1.1 Bypass Tap Name 16
3.1.2 Heartbeat Settings 16
3.1.3 Taps Settings 17
4 Packet Broker 20
4.1 Filter Template 21
4.2 Load Balancing Policy 22
4.2.1 Load Balancing Group 22
4.3 Config Maps 23
4.3.1 Config Maps 24
4.3.2 Ingress 24
4.3.3 Filter 25
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 1

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
4.3.4 Egress 25
4.3.5 Config Map Save 26
4.3.6 Modify a Config Map 26
4.3.7 Config Map Statistics 27
4.3.8 Delete Config Map 27
4.3.9 Config Map Priority 28
4.3.9.1 Method 1 28
4.3.9.2 Method 2 28
4.3.10 Enable and Disable Config Map 29
4.3.10.1 Disable Config Map 29
4.3.10.2 Enable Config Map 29
5 Port Info 30
5.1 Port Configuration 31
5.1.1 Port Description 31
5.1.2 Set Speed 31
5.1.3 Mode 31
5.2 Port Statistics 31
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 2

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
Copyright © 2022 Garland Technology, LLC. All rights reserved.
No part of this document may be reproduced in any form or by any means without prior written permission of
GarlandTechnology, LLC.
The Garland Technology trademarks, service marks ("Marks") and other Garland Technology trademarks are the
property of Garland Technology, LLC. PacketMAX Series products of marks are trademarks or registered trademarks
of Garland Technology, LLC. You are not permitted to use these Marks without the prior written consent of Garland
Technology.
All other trademarks and trade names mentioned in this document are the property of their respective holders.
Notice
The purchased products, services and features are stipulated by the contract made between Garland Technology and
the customer. All or part of the products, services, and features described in this document may not be within the
purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and
recommendations in this document are provided "AS IS" without warranties, guarantees, or representations of any
kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the preparation
of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this
document do not constitute a warranty of any kind, express or implied.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 3

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
Introduction
Garland’s innovative EdgeLens® is a bypass TAP, network packet broker hybrid, purpose-built
to give you the power of a bypass TAP to manage the availability of inline tools, instrument high
availability (HA) deployments, and tool chaining. As well as network TAP packet visibility for
out-of-band monitoring tools like threat detection, storage, and performance monitoring with
packet broker functionality like traffic aggregation, filtering, and load balancing.
Inline Security Packet Brokers like the EdgeLens "Inline lifecycle management" allows you to
sandbox new tool deployments, manage updates, install patches, perform maintenance or
troubleshooting and validate out-of-band, without impacting the network.
Part Numbers
INT40G2SR44
INT40G2LR44
Additional Specifications
Max. system throughput:
Support for: SFP( SX, LX and TX) and SFP+ (SR, LR, ER)
Operating Temp: 0 to 40° C or 32 to 104° F
Operating Humidity: 5 to 95%
Dimensions: 21.09” L x 1.719” H x 17.32” W
(535.686mm L x 43.6626 mm H x 439.928mm W)
Airflow: 100 IF/m
(2) AC Power Supplies Included
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 4

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
1 Dashboard
The Dashboard of the INT40G2XX44 is divided into 3 sections: System, Bypass Taps, and Packet Broker
1.1 System
The System section consists of the following. These indications are consistent regardless of the tap
mode and packet broker configuration.
PS2 Power Supply 2 LED
PS1 Power Supply 1 LED
SYS System LED
Ethernet Interface Upper Left LED
Serial Interface Lower Left LED
1.2 Bypass Taps
The Bypass Taps of the Dashboard consists of the following.
Tap 1 Tap 2
Port 1 (Network) Port 3 (Network)
Port 2 (Network) Port 4 (Network)
Port 37 (Primary Inline Appliance) Port 41 (Primary Inline Appliance)
Port 38 (Primary Inline Appliance) Port 42 (Primary Inline Appliance)
Port 39 (Secondary Inline Appliance) Port 43 (Secondary Inline Appliance)
Port 40 (Secondary Inline Appliance) Port 44 (Secondary Inline Appliance)
L/A1 – L/A2 Tap 1 Network Port Link/Activity LED
BP Tap 1 Bypass LED
L/A3 – L/A4 Tap 2 Network Port Link/Activity LED
BP Tap 2 Bypass LED
1.3 Packet Broker
The Packet Broker of the Dashboard consists of the following.
Port 5 thru 35 (odd) Up Arrows Link/Activity LED
Port 6 thru 36 (even) Down Arrows Link/Activity LED
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 5

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2 System
The following configuration options may be displayed, modified, enabled, or disabled under the System
panel.
System Info SNMP
General Export Configuration
Admin Import Configuration
Network Settings Software Upgrade
Date & Time Reboot
Syslog
1. Select System on the Dashboard Menu bar.
The System panel will be displayed. The system configuration options will be displayed on the left side of
the panel.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 6

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.1 System Info
The System Information panel displays the following.
Chassis Name
Chassis Model
Chassis Serial Number
MAC Address
Software Version
2.2 General
The following configuration options may be displayed or modified.
Chassis Name
Key Press Timeout
1. Select General.
The panel will display the current configuration.
2. Select Edit Configuration.
3. Enable, disable or modify the desired options.
4. Select Save to save updates.
5. Select Cancel to return to the General System Settings panel.
2.3 Admin
The following configuration options may be displayed, modified, enabled, or disabled.
Groups
Users
Local Authentication
TACACS Authentication
1. Select Admin.
The panel will display the current configuration.
The default user is “admin/gtadmin1”. The “admin” user privileges are defined by the default group
“admin”. Changes to the default user “admin” and group “admin” are allowed. However, the “admin”
user or group “admin” may not be deleted.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 7

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.3.1 Groups
The group defines the authorization for a user or group of users. A group may be used for local or
TACACS authorization. In Use “true” means that there is at least one local user assigned to the group. If a
group is used by TACACS, the In Use will indicate “false”.
1. Select Groups + to create a new group.
The Create New Group panel will be displayed.
2. Enter the Group Name.
3. Select the privileges for the new group.
4. Select Save to save updates.
5. Select Cancel to return to the Admin Settings panel.
The new group will be displayed on the Admin Settings panel.
6. Edit the group privileges by selecting the pencil.
7. Deleted the group by selecting the Red X. If a group has at least one local user assigned it cannot be
deleted.
2.3.2 Users
Users displayed on the Admin Settings panel are for local authentication only.
1. Select Users + to create a new user.
The Create New User panel will be displayed.
2. Enter the Username.
3. Enter the Password.
4. Select the group the user will be assigned.
5. Select Save to save updates.
6. Select Cancel to return to the Admin Settings panel.
The new local user will be displayed on the Admin Settings panel.
7. Edit the username, password, or assigned group by selecting the pencil.
8. Delete the local user by selecting the Red X.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 8

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.3.3 Authentication
Authentication allows for two options, Local or TACACS. Local or TACACS Authentication may be
enabled or disabled independently and at least one option must be enabled.
1. Select Authentication Settings.
The Authentication Settings panel will be displayed. Local Authentication is enabled by default.
2. Select TACACS Authentication to enable.
3. Enter the TACACS Server IP Address.
4. Enter the TACACS Server Secret Word, optional.
5. Select Save to save updates.
6. Select Cancel to return the Admin Settings panel.
7. TACACS Test
This option may be used to verify the authentication of a TACACS user and password. The
TACACS Test option will be active only if TACACS Authentication has been enabled.
The TACACS Test panel will appear.
7.1 Enter the Username.
7.2 Enter the Password.
7.3 Select Test.
The GUI will display the results of the authentication of the user and the password entered.
8. TACACS Ping
This option may be used to verify the network connectivity from the unit to the TACACS server.
The TACACS Ping option will be active only if TACACS authentication has been enabled.
The GUI will display the results of the ping test.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 9