Garland INT40G2-44 User manual

EdgeLens Inline Security
Packet Broker
INT40G2XX44 | 1.19.5

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
User Manual
Introduction 4
Part Numbers 4
Additional Specifications 4
1 Dashboard 5
1.1 System 5
1.2 Bypass Taps 5
1.3 Packet Broker 5
2 System 6
2.1 System Info 7
2.2 General 7
2.3 Admin 7
2.3.1 Groups 8
2.3.2 Users 8
2.3.3 Authentication 9
2.4 Network Settings 10
2.5 Date & Time 11
2.6 Syslog 11
2.7 SNMP 12
2.8 Export Configuration 12
2.9 Import Configuration 13
2.10 Software Upgrade 13
2.11 Reboot 14
3 Bypass Taps 15
3.1 Primary-Secondary Tap 16
3.1.1 Bypass Tap Name 16
3.1.2 Heartbeat Settings 16
3.1.3 Taps Settings 17
4 Packet Broker 20
4.1 Filter Template 21
4.2 Load Balancing Policy 22
4.2.1 Load Balancing Group 22
4.3 Config Maps 23
4.3.1 Config Maps 24
4.3.2 Ingress 24
4.3.3 Filter 25
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 1

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
4.3.4 Egress 25
4.3.5 Config Map Save 26
4.3.6 Modify a Config Map 26
4.3.7 Config Map Statistics 27
4.3.8 Delete Config Map 27
4.3.9 Config Map Priority 28
4.3.9.1 Method 1 28
4.3.9.2 Method 2 28
4.3.10 Enable and Disable Config Map 29
4.3.10.1 Disable Config Map 29
4.3.10.2 Enable Config Map 29
5 Port Info 30
5.1 Port Configuration 31
5.1.1 Port Description 31
5.1.2 Set Speed 31
5.1.3 Mode 31
5.2 Port Statistics 31
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 2

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
Copyright © 2022 Garland Technology, LLC. All rights reserved.
No part of this document may be reproduced in any form or by any means without prior written permission of
GarlandTechnology, LLC.
The Garland Technology trademarks, service marks ("Marks") and other Garland Technology trademarks are the
property of Garland Technology, LLC. PacketMAX Series products of marks are trademarks or registered trademarks
of Garland Technology, LLC. You are not permitted to use these Marks without the prior written consent of Garland
Technology.
All other trademarks and trade names mentioned in this document are the property of their respective holders.
Notice
The purchased products, services and features are stipulated by the contract made between Garland Technology and
the customer. All or part of the products, services, and features described in this document may not be within the
purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information, and
recommendations in this document are provided "AS IS" without warranties, guarantees, or representations of any
kind, either express or implied.
The information in this document is subject to change without notice. Every effort has been made in the preparation
of this document to ensure accuracy of the contents, but all statements, information, and recommendations in this
document do not constitute a warranty of any kind, express or implied.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 3

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
Introduction
Garland’s innovative EdgeLens® is a bypass TAP, network packet broker hybrid, purpose-built
to give you the power of a bypass TAP to manage the availability of inline tools, instrument high
availability (HA) deployments, and tool chaining. As well as network TAP packet visibility for
out-of-band monitoring tools like threat detection, storage, and performance monitoring with
packet broker functionality like traffic aggregation, filtering, and load balancing.
Inline Security Packet Brokers like the EdgeLens "Inline lifecycle management" allows you to
sandbox new tool deployments, manage updates, install patches, perform maintenance or
troubleshooting and validate out-of-band, without impacting the network.
Part Numbers
INT40G2SR44
INT40G2LR44
Additional Specifications
Max. system throughput:
Support for: SFP( SX, LX and TX) and SFP+ (SR, LR, ER)
Operating Temp: 0 to 40° C or 32 to 104° F
Operating Humidity: 5 to 95%
Dimensions: 21.09” L x 1.719” H x 17.32” W
(535.686mm L x 43.6626 mm H x 439.928mm W)
Airflow: 100 IF/m
(2) AC Power Supplies Included
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 4

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
1 Dashboard
The Dashboard of the INT40G2XX44 is divided into 3 sections: System, Bypass Taps, and Packet Broker
1.1 System
The System section consists of the following. These indications are consistent regardless of the tap
mode and packet broker configuration.
PS2 Power Supply 2 LED
PS1 Power Supply 1 LED
SYS System LED
Ethernet Interface Upper Left LED
Serial Interface Lower Left LED
1.2 Bypass Taps
The Bypass Taps of the Dashboard consists of the following.
Tap 1 Tap 2
Port 1 (Network) Port 3 (Network)
Port 2 (Network) Port 4 (Network)
Port 37 (Primary Inline Appliance) Port 41 (Primary Inline Appliance)
Port 38 (Primary Inline Appliance) Port 42 (Primary Inline Appliance)
Port 39 (Secondary Inline Appliance) Port 43 (Secondary Inline Appliance)
Port 40 (Secondary Inline Appliance) Port 44 (Secondary Inline Appliance)
L/A1 – L/A2 Tap 1 Network Port Link/Activity LED
BP Tap 1 Bypass LED
L/A3 – L/A4 Tap 2 Network Port Link/Activity LED
BP Tap 2 Bypass LED
1.3 Packet Broker
The Packet Broker of the Dashboard consists of the following.
Port 5 thru 35 (odd) Up Arrows Link/Activity LED
Port 6 thru 36 (even) Down Arrows Link/Activity LED
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 5

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2 System
The following configuration options may be displayed, modified, enabled, or disabled under the System
panel.
System Info SNMP
General Export Configuration
Admin Import Configuration
Network Settings Software Upgrade
Date & Time Reboot
Syslog
1. Select System on the Dashboard Menu bar.
The System panel will be displayed. The system configuration options will be displayed on the left side of
the panel.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 6

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.1 System Info
The System Information panel displays the following.
Chassis Name
Chassis Model
Chassis Serial Number
MAC Address
Software Version
2.2 General
The following configuration options may be displayed or modified.
Chassis Name
Key Press Timeout
1. Select General.
The panel will display the current configuration.
2. Select Edit Configuration.
3. Enable, disable or modify the desired options.
4. Select Save to save updates.
5. Select Cancel to return to the General System Settings panel.
2.3 Admin
The following configuration options may be displayed, modified, enabled, or disabled.
Groups
Users
Local Authentication
TACACS Authentication
1. Select Admin.
The panel will display the current configuration.
The default user is “admin/gtadmin1”. The “admin” user privileges are defined by the default group
“admin”. Changes to the default user “admin” and group “admin” are allowed. However, the “admin”
user or group “admin” may not be deleted.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 7

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.3.1 Groups
The group defines the authorization for a user or group of users. A group may be used for local or
TACACS authorization. In Use “true” means that there is at least one local user assigned to the group. If a
group is used by TACACS, the In Use will indicate “false”.
1. Select Groups + to create a new group.
The Create New Group panel will be displayed.
2. Enter the Group Name.
3. Select the privileges for the new group.
4. Select Save to save updates.
5. Select Cancel to return to the Admin Settings panel.
The new group will be displayed on the Admin Settings panel.
6. Edit the group privileges by selecting the pencil.
7. Deleted the group by selecting the Red X. If a group has at least one local user assigned it cannot be
deleted.
2.3.2 Users
Users displayed on the Admin Settings panel are for local authentication only.
1. Select Users + to create a new user.
The Create New User panel will be displayed.
2. Enter the Username.
3. Enter the Password.
4. Select the group the user will be assigned.
5. Select Save to save updates.
6. Select Cancel to return to the Admin Settings panel.
The new local user will be displayed on the Admin Settings panel.
7. Edit the username, password, or assigned group by selecting the pencil.
8. Delete the local user by selecting the Red X.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 8

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.3.3 Authentication
Authentication allows for two options, Local or TACACS. Local or TACACS Authentication may be
enabled or disabled independently and at least one option must be enabled.
1. Select Authentication Settings.
The Authentication Settings panel will be displayed. Local Authentication is enabled by default.
2. Select TACACS Authentication to enable.
3. Enter the TACACS Server IP Address.
4. Enter the TACACS Server Secret Word, optional.
5. Select Save to save updates.
6. Select Cancel to return the Admin Settings panel.
7. TACACS Test
This option may be used to verify the authentication of a TACACS user and password. The
TACACS Test option will be active only if TACACS Authentication has been enabled.
The TACACS Test panel will appear.
7.1 Enter the Username.
7.2 Enter the Password.
7.3 Select Test.
The GUI will display the results of the authentication of the user and the password entered.
8. TACACS Ping
This option may be used to verify the network connectivity from the unit to the TACACS server.
The TACACS Ping option will be active only if TACACS authentication has been enabled.
The GUI will display the results of the ping test.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 9

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.4 Network Settings
The following configuration options may be displayed, modified, enabled, or disabled. Any change made
to any network, setting option could cause network connectivity disruption for about 60 seconds.
DHCP
IP Address
Mask
Gateway
DNS 1
DNS 2
SSL Certificate Loaded
Using Uploaded SSL Certificate
1. Select Network Settings. The Network Settings panel will be displayed with the current configuration.
2. Select Edit Settings. The Network Settings panel will appear.
3. Enable, disable or modify the desired options.
4. Enable or disable Using Uploaded SSL Certificate.
This option may be enabled if an SSL cert.pem and key.pem files have been uploaded to the unit
using the Add SSL Certificate option on the Network Settings panel.
5. Select Save to save updates.
6. Select Cancel to return the Network Settings panel.
7. Add SSL Certificate.
Uploading a custom SSL certificate involves two files. The cert.pem file and key.pem file.
The unit will consider these files during the upload. If the files do not match or one of the
files are corrupted, the unit will abort the upload. The Result Messages will be displayed
in the GUI. Adding an SSL certificate will cause the GUI to restart. This could take up to
90 seconds. It may be required to refresh or restart the web browser.
8. Select Add SSL Certificate.
The Select Certificate and Select Key File panel will appear.
9. Select Choose File for Select Certificate.
10. Select the desired cert.pem file.
11. Select Open.
12. Select the Choose File for Select Key File.
13. Select the desired key.pem file.
14. Select Open.
15. Select Upload.
16. Select Restart Import to select a different cert.pem or key.pem file.
17. Select Cancel to return to the Network Settings panel
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 10

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.5 Date & Time
The following configuration options may be displayed, modified, enabled, or disabled.
Timezone Time
UTC Date
NTP IP Address
NTP Pool
1. Select Date & Time.
The Date & Time Settings panel will be displayed with the current configuration.
2. Select Edit Settings.
The Date & Time Settings panel will be displayed.
3. Enable, disable or modify the desired options.
4. Select Save to save updates.
5. Select Cancel to return the Date & Time Settings panel.
2.6 Syslog
The following configuration options may be displayed, modified, enabled, or disabled.
Unit ID Syslog Server IP Address
Protocol Protocol Port Number
1. Select Syslog.
The Syslog Configuration panel will be displayed with the current configuration.
2. Select Edit Settings.
3. Enable Syslog Config.
4. Enable, disable or modify the desired options.
5. Select Save to save updates.
6. Select Cancel to return the Syslog Configuration panel.
7. Sys Log Test may be selected to send a test message to the server.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 11

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.7 SNMP
The following configuration options may be displayed, modified, enabled, or disabled.
V2 Read/Write V2 read Only V3 MD5/DES V3 SHA/AES
Access Port Access Port Access Port Access Port
Trap Port Trap Port Trap Port Trap Port
Trap IP AddressTrap IP AddressTrap IP AddressTrap IP Address
Community Password Community Password User User
Auth Password Auth Password
Priv Password Priv Password
1. Select SNMP.
The SNMP Configuration panel will be displayed with the current configuration.
2. Select Edit Configuration.
The SNMP Configuration panel will be displayed.
3. Select Enable SNMP Config.
4. Enable, disable or modify the desired options.
5. Select Save to save updates.
6. Select Cancel to return the Syslog Configuration panel.
7. SNMP Test may be selected to send a test trap to the server.
2.8 Export Configuration
This option creates a configuration file (exportCfg.json) that may be used to recover a unit. The
exportCfg.json file may be renamed if desired. The exportCfg.json file does not contain Usernames,
Passwords, Groups, or Network Settings.
1. Select Export Configuration.
The Export Configuration panel will be displayed.
2. Select Export.
The exportCfg.json file will be downloaded to the default download destination of the browser.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 12

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.9 Import Configuration
This option allows a previously created configuration file (exportCfg.json) to be uploaded to the unit. The
Chassis Model is the only option that is considered and must match, otherwise, the unit will reject the
exportCfg.json file.
1. Select Import Configuration.
The Import Configuration panel will be displayed.
2. Select Choose File.
3. Select the desired exportCfg.json file.
4. Select Open.
5. Select Upload.
The unit will automatically verify the selected exportCfg.json file.
6. Select Configure.
The unit will import and load the exportCfg.json. An “import done” message will be displayed
when complete. A reboot is not required.
2.10 Software Upgrade
This option allows the unit’s firmware to be upgraded. The existing unit configuration will not be affected
and maintained during the upgrade. It may be required to refresh or restart the web browser after the
firmware upgrade is complete.
1. Select Software Upgrade.
The Update Firmware panel will be displayed.
2. Select Choose File.
3. Select the desired firmware file.
4. Select Open.
The new firmware file will be displayed.
5. Select Upload.
The unit will validate the firmware file.
The unit will install the firmware file.
The unit will reboot.
6. After the upgrade is complete. The GUI will refresh to the Login panel.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 13

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2.11 Reboot
This option allows the unit to be rebooted. The traffic will be affected for up to 3 minutes.
1. Select Reboot.
The Reboot Device panel will be displayed.
2. Select Reboot.
The unit will present an “Are you sure?” message.
3. Select OK.
A “rebooting” message will be displayed.
A “Session timed out. Go to Login screen” message will be displayed.
4. Select Go.
The Login panel will be displayed.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 14

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
3 Bypass Taps
The following configuration options may be displayed, modified, enabled or disabled under the Bypass
Taps panel.
Bypass Taps Panel Heartbeat Settings
Bypass Tap Name Tap Settings
1. Select Bypass Taps on the Dashboard Menu bar.
The Bypass Taps panel displays the following.
Tap 1 Name Tap 2 Name
Tap 1 Current Status Tap 2 Current Status
Tap 1 Current Active Inline Appliance Tap 2 Current Active Inline Appliance
No. Of Lost HB Packets for Tap 1 and Tap 2
Heartbeats per Second for Tap 1 and Tap 2
Tap 1 and Tap 2 Current Coupled
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 15

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
3.1 Primary-Secondary Tap
The network, primary inline appliance and secondary inline appliance ports are defined by the system for
each tap. The network ports are typically connected to network devices such as a server or router. The
primary inline appliance ports are typically connected to a primary inline appliance or tool to monitor the
network traffic. The secondary inline appliance ports are typically connected to a secondary inline
appliance or tool to monitor the network traffic. The network traffic is sent to the primary inline appliance
or the secondary inline appliance. Heartbeat packets are transmitted bidirectionally from the primary inline
appliance ports on the tap through the primary inline appliance or tool to monitor the health of the device.
Likewise, heartbeat packets are transmitted bidirectionally from the secondary inline appliance ports on
the tap through the secondary inline appliance or tool to monitor the health of the device.
Figure 1 Primary-Secondary Tap
3.1.1 Bypass Tap Name
1. Select the Pencil icon for the desired tap.
The Tap Name panel will be displayed.
2. Enter the name.
3. Remove the name by placing the cursor in the name panel, backspace or delete the current name.
4. Select the Check to save updates.
5. Select Cancel to return the Bypass Taps panel.
3.1.2 Heartbeat Settings
The following configuration options may be displayed or modified.
No. Of Lost HB Packets
Heartbeats per Second
1. Select Settings on the Bypass Taps panel.
The Configure Heartbeat Settings panel will be displayed with the current configuration.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 16

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
2. Enter the No. Of Lost HB Packets. Default is 10.
This is the number of heartbeats that must be lost on the inline appliance ports before any
tap will switch to bypass.
3. Enter the Heartbeats per Second. Default is 10.
This is the number of heartbeats per second applied to the inline appliance ports for all taps.
4. Select Save to save updates.
5. Select Cancel to return the Bypass Taps panel.
3.1.3 Taps Settings
The following configuration options may be displayed, modified, enabled, or disabled.
Tap Mode Reverse Bypass
Fail Mode Revertive
LFP Coupled
1. Edit the Tap Settings, by placing the cursor on any tap and double-press the left mouse button.
The Tap panel will be displayed.
2. Select Edit Tap Settings.
The Configure Inline Appliance panel will be displayed.
3. Select the Tap Mode.
Active Allows the tap to automatically switch from inline to bypass if an issue occurs
with the primary inline appliance port(s) and secondary inline appliance port(s),
loss of link or heartbeats. The default switching action from inline to bypass
is defined by the system as, from the primary inline appliance, to the secondary
inline appliance, to bypass. The default switching action from bypass to inline
is defined by the system as, from bypass, to the secondary inline appliance.
Switching from the secondary inline appliance to the primary inline appliance
may be accomplished via two methods. Select the Switch to Primary option
or enable Revertive. If revertive is enabled, then the system will switch from
bypass to the primary inline appliance if it is recovered first.
Figure 2 Primary-Secondary Tap (Primary Inline) Figure 3 Primary-Secondary Tap (Secondary Inline)
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 17

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
Force Bypass If selected, the tap will switch the traffic between the network ports with no
regard for the primary inline appliance or the secondary inline appliance port(s),
link or heartbeats. Typically used during maintenance activities.
Figure 4 Primary-Secondary Tap (Bypass) Figure 5 Primary-Secondary Tap (Force Bypass)
4. Select the Fail Mode.
Open If selected and power is lost to the unit. The traffic will switch between the
network ports.
Closed If selected and power is lost to the unit. The traffic will go down.
5. LFP If enabled and link is lost on one of the network ports. The TX will be disabled on
the other network port. The RX for both network ports remain on.
Figure 6 Primary-Secondary Tap (LFP)
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 18

Packet Broker
EdgeLens Inline Security Packet Broker | INT40G2XR44 | 1.19.5
6. Reverse Bypass If enabled and the primary inline appliance and the secondary inline appliance
port(s) fail, loss of link or heartbeats. The TX will be disabled on both of the
network ports. The RX for both network ports remain on.
Figure 7 Primary-Secondary Tap (Reverse Bypass)
7. Revertive If enabled and the primary inline appliance port(s) fail, loss of link or
heartbeats, the system will switch to the secondary inline appliance.
When the issue with the primary inline appliance is resolved, has link and
heartbeats. The traffic will automatically revert back to the primary inline
appliance. This option also affects the switching from bypass to inline. If
disabled, the system is designed to switch from bypass to the secondary inline
appliance. If the primary inline appliance restores first, has link and heartbeats, a
manual switch to the primary inline appliance is required. If enabled and the
primary inline appliance restores first, the system will switch from bypass to the
primary inline appliance.
8. Taps Coupled If enabled all switching functionality supported by Tap 1 and Tap 2 are coupled
together. Taps coupled will couple the revertive option for both Taps. If taps
coupled is enabled or disabled the other tap options can not be selected until the
accept and save are selected. Then the other tap options will become active.
9. Select Accept to save updates. Save must additionally be selected on the Tap panel.
10. Select Cancel to return the Tap panel.
11. Select Back to Primary to manually switch the traffic from the secondary inline appliance to the
primary inline appliance. This function is independent for each tap unless they are coupled. Then
selecting Back to Primary on either tap, will cause both taps to switch.
12. Select Save to save updates.
13. Select Cancel to return the Bypass Taps panel.
Garland Technology | 716.242.8500 | garlandtechnology.com/support
Copyright © 2022 Garland Technology, LLC. All rights reserved. 19