Garland GAA10G20AC User manual

User Guide
GAA10G20AC
02/2023
Release Version: 4.23.1

User Guide
PacketMAX | GAA10G20AC | 4.23.1
Copyright © 2023 Garland Technology, LLC. All rights reserved.
No part of this document may be reproduced in any form or by any means without prior written permission of
Garland Technology, LLC.
The Garland Technology trademarks, service marks ("Marks") and other Garland Technology trademarks are the
property of Garland Technology, LLC. PacketMAX Series products of marks are trademarks or registered
trademarks of Garland Technology, LLC. You are not permitted to use these Marks without the prior written
consent of Garland Technology.
All other trademarks and trade names mentioned in this document are the property of their respective holders.
Notice
The purchased products, services and features are stipulated by the contract made between Garland
Technology and the customer. All or part of the products, services and features described in this document may
not be within the purchase scope or the usage scope. Unless otherwise specified in the contract, all statements,
information, and recommendations in this document are provided "AS IS" without warranties, guarantees or
representations of any kind, either express or implied.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
The information in this document is subject to change without notice. Every effort has been made in the
preparation of this document to ensure accuracy of the contents, but all statements, information, and
recommendations in this document do not constitute the warranty of any kind, express or implied.
Table of Contents
1. Dashboard 5
Dashboard Panel 5
Packet Broker 6
LED Indications 6
2. System 7
System Info 8
General 8
Admin 8
Users 8
Groups 9
Authentication 9
Local Authentication Disable 10
Local Authentication Enable 10
TACACS Primary Authentication 10
TACACS Test 10
TACACS Ping Test 10
TACACS Secondary Authentication 11
TACACS Test 11
TACACS Ping Test 11
Network Settings 11
IPv4 / Disable 12
IPv4 Enable 12
IPv6 Enable 12
IPv6 Disable 13
Add SSL Certificate 13
Disable Using Uploaded SSL Certificate 13
Date & Time 14
Timezone 14
UTC 14
Manually Set Date & Time 14
NTP No Authentication (Symmetric) 14
NTP Authentication (Symmetric) 15
Syslog 15
Syslog Test 16
SNMP 16
SNMP Test 17
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
Export Configuration 17
Import Configuration 17
Software Upgrade 18
Reboot 18
3. Packet Broker 19
Tunnels 20
Encapsulate l2GRE Packets (GRE-TX Only) 20
Decapsulate l2GRE Packets (GRE-RX Only) 22
Filter Template 24
Load Balancing Group 25
Load Balancing Policy 25
Config Map 26
Ingress 27
Filters 27
Egress 28
Egress Filter 29
Config Map Save 30
Modify a Config Map 31
Delete Config Map 32
Config Map Priority 32
Method 1 33
Method 2 33
Enable/Disable Config Map 34
Disable Config Map 34
Enable Config Map 34
4. Port Info 35
Port Configuration 35
Port Description 35
Set Speed 36
Mode 36
Port Statistics 36
VLAN Tag 36
VLAN Strip 37
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
1. Dashboard
This section provides an overview of the basic dashboard architecture, default port assignments and
LED indications. The port assignments and LED indications will change on the dashboard based on
configuration changes. The dashboard provides an exact detail of the unit’s faceplate. However,
some LED indications that are displayed on the faceplate, are not displayed on the dashboard.
The dashboard provides access to the Packet Broker, Port Info and System configuration options
by selecting the desired option in the top menu bar. These options are covered in detail per their
specific sections.
Basic LED Indications
The basic LED indications are consistent regardless of configuration changes. The Ethernet and Serial
interfaces always indicate (GREEN). However, on the faceplate, the Ethernet Interface has LEDs to
indicate link and activity while there are no Serial Interface LEDs.
Dashboard Panel
LED Indications
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
PS2 Power Supply 2 LED
PS1 Power Supply 1 LED
SYS System LED
Ethernet InterfaceUpper Left LED (always illuminated)
Serial Interface Lower Left LED (always illuminated)
Packet Broker
The Packet Broker Section of the Dashboard consists of the following.
LED Indications
Port 1 L/A1 Link/Activity LED
Port 2 L/A2 Link/Activity LED
BP N/A
Port 3 Left Up Arrow Link LED
Port 4 Left Down Arrow Link LED
Port 5 Left Up Arrow Link LED
Port 6 Left Down Arrow Link LED
Port 7 Left Up Arrow Link LED
Port 8 Left Down Arrow Link LED
Port 9 Left Up Arrow Link LED
Port 10 Left Down Arrow Link LED
Port 11 Left Up Arrow Link LED
Port 12 Left Down Arrow Link LED
* The right up/down arrows for ports 3 through 12 are activity LEDs. These LEDs are N/A in the GUI.
* The L/A1 and L/A2 LEDs only indicate link in the GUI.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
2. System
The following configuration options may be displayed, modified, enabled or disabled under the System
panel.
System Info SNMP
General Export Configuration
Admin Import Configuration
Network Settings Software Upgrade
Date & Time Reboot
Syslog
1. Select System on the Dashboard Menu bar.
The System panel will be displayed. The system configuration options will be displayed
on the left side of the panel.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
System Info
The System Information panel displays the following.
Chassis Name Chassis Model Chassis Serial Number
MAC Address Software Version
1. Select System Info.
The System Information panel will be displayed.
General
The following configuration options may be displayed or modified.
Chassis Name
Key Press Timeout
1. Select General.
The General System Settings panel will be displayed.
2. Select Edit Configuration.
3. Enter the desired Chassis Name.
4. Enter the desired Key Press Timeout.
5. Select Save to save updates.
6. Select Cancel to return to the General System Settings panel.
Admin
The following configuration options may be displayed, modified, enabled or disabled.
Users
Groups
Authentication
Local
TACACS Primary
TACACS Secondary
1. Select Admin.
The Admin Settings panel will displayed.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
Users
The default user is “admin”. Changes to the default user “admin” are allowed. However, the “admin”
user may not be deleted. Users displayed on the Admin Settings panel are for local authentication
only, not used for TACACS.
1. Select Users + to create a new user.
The Create New User panel will be displayed.
2. Enter the Username.
3. Enter the Password.
4. Select the group for the user.
5. Select Save to save updates.
The new user will be displayed on the Admin Settings panel.
6. Select Cancel to return to the Admin Settings panel.
7. Edit the username, password or assigned group by selecting the pencil.
8. Delete the user by selecting the Red X.
Groups
The group defines the authorization for a user or group of users. A group may be used for local
or TACACS authorization. In Use “true” means that there is at least one local user assigned to
the group. If a group is used by TACACS, the In Use will indicate “false”. There are three default
groups, admin, OPER and NOC. All three groups may be modified, however only the OPER and
NOC groups may be deleted.
1. Select Groups + to create a new group.
The Create New Group panel will be displayed.
2. Enter the Group Name.
3. Select the desired privileges.
4. Select Save to save updates.
The new group will be displayed on the Admin Settings panel.
5. Select Cancel to return to the Admin Settings panel.
6. Modify the group privileges by selecting the pencil.
7. Deleted the group by selecting the Red X.
If a group has at least one user assigned it cannot be deleted.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
Authentication
Two authentication options are supported, local or TACACS. TACACS authentication supports two
options, primary and secondary. The TACACS primary and secondary options may be enabled or
disabled independently. Local or TACACS authentication may be enabled or disabled independently,
however, at least one option must be enabled. The TACACS primary or secondary function supports
IPv4 only, IPv6 is not supported.
1. Select Authentication Settings.
The Authentication Settings panel will be displayed. Local authentication is enabled by default.
Local Authentication Disable
1. Deselect Local Authentication.
Local authentication may only be disabled provided that TACACS authentication, primary
or secondary has previously been enabled.
2. Select Save.
Local Authentication Enable
1. Select Local Authentication.
2. Select Save.
TACACS Primary Authentication
1. Select Enable Primary.
The TACACS Primary panel will be displayed.
2. Enter the IP Address, IPv4 or IPv6.
3. Enter the Secret Word, (optional).
4. Select Save to save updates.
5. Select Cancel to return the Admin Settings panel.
TACACS Test
This option may be used to verify the authentication of a TACACS user, password and
authorization group. The TACACS Test option will be active only if TACACS authentication
has previously been enabled.
1. Select TACACS Test.
The TACACS Test panel will appear.
2. Select Primary.
3. Enter the Username.
4. Enter the Password.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
5. Select Test.
The GUI will display the results of the test, “Authentication Test Successful”. As well as
messages for “authentication:Success”, authorization:Success” and
“authorization:group:abcdef.
TACACS Ping Test
This option may be used to verify the network connectivity from the unit to the TACACS server.
The TACACS Ping option will be active only if TACACS authentication has been previously enabled.
1. Select TACACS 1 Ping.
The GUI will display the results of the ping, “TACACS 1 Ping Successful”.
TACACS Secondary Authentication
1. Select Enable Secondary.
The TACACS Secondary panel will be displayed.
2. Enter the IP Address, IPv4 or IPv6.
3. Enter the Secret Word, (optional).
4. Select Save to save updates.
5. Select Cancel to return the Admin Settings panel.
TACACS Test
This option may be used to verify the authentication of a TACACS user, password and
authorization group. The TACACS Test option will be active only if TACACS authentication
has previously been enabled.
1. Select TACACS Test.
The TACACS Test panel will appear.
2. Select Secondary.
3. Enter the Username.
4. Enter the Password.
5. Select Test.
The GUI will display the results of the test, “Authentication Test Successful”. As well as
messages for “authentication:Success”, authorization:Success” and
“authorization:group:abcdef.
TACACS Ping Test
This option may be used to verify the network connectivity from the unit to the TACACS server.
The TACACS Ping option will be active only if TACACS authentication has been previously enabled.
1. Select TACACS 2 Ping.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
The GUI will display the results of the ping, “TACACS 2 Ping Successful”.
Network Settings
Upon the initial turn up via the serial interface the IPv4 address, IPv4 gateway, IPv6 address and IPv6
gateway may have been already established. The IPv4 and IPv6 management interfaces may be
enabled or disabled independently as well as both enabled or disabled simultaneously. If the IPv4
and IPv6 management interfaces are disabled simultaneously, access is only allowed via the serial
interface. Any modifications made to any setting option will cause GUI disruption for about 60 seconds.
Also note that modifying the management interfaces may cause network disruption if prior consideration
and planning have not been performed.
The default system network configurations are as follows:
IPv4 enabled
IPv4 address 10.10.10.200
IPv4 gateway 10.10.10.1
IPv6 is disabled.
Via the GUI, the following options may be displayed, modified, enabled or disabled.
IPv4 Enable/Disable IPv4 Address IPv4 Gateway
IPv6 Enable/Disable IPv6 Address IPv6 Gateway
SSL Certificate Loaded
Using Uploaded SSL Certificate
1. Select Network Settings.
The Network Settings panel will be displayed with the current configuration.
IPv4 / Disable
1. Deselect Enable IPv4.
2. Select Save.
If the IPv6 management interface has not been enabled the GUI will display a
message “Disabling IPv4 and IPv6, GUI will disconnect. Are you sure?
3. Select OK.
IPv4 Enable
1. Select Enable IPv4.
2. Enter the desired Address.
3. Enter the desired Gateway.
4. Select Save.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
IPv6 Enable
1. Select Enable IPv6.
2. Enter the desired Address.
3. Enter the desired Gateway.
4. Select Save.
IPv6 Disable
1. Deselect Enable IPv6.
2. Select Save.
If the IPv4 management interface has not been enabled the GUI will display a
message “Disabling IPv4 and IPv6, GUI will disconnect. Are you sure?
3. Select OK.
Add SSL Certificate
Uploading a custom SSL certificate involves two files. The cert.pem file and key.pem file. The unit will
validate these files during the upload. If the files do not match or one of the files are corrupted the unit will
abort the upload.
1. Select Add SSL Certificate.
The Select Certificate and Select Key File panel will appear.
2. Select Choose File for Select Certificate.
3. Select the desired cert.pem file.
4. Select Open.
5. Select the Choose File for Select Key File.
6. Select the desired key.pem file.
7. Select Open.
8. Select Upload.
The GUI message will be displayed, “Please wait. Browser will refresh after 90 seconds”.
9. Verify SSL Certificate Loaded “true”.
10. Verify Using Uploaded SSL Certificate “true”.
Disable Using Uploaded SSL Certificate
1. Select Edit Settings.
2. Deselect Using Uploaded SSL Certificate.
3. Select Save.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
The GUI message will be displayed,”Saved Settings. Changes will cause network
connectivity disruption for about 60 seconds”.
4. Refresh Browser.
5. Verify SSL Certificate Loaded “true”.
6. Verify Using Uploaded SSL Certificate “false”.
Date & Time
The following configuration options may be displayed, modified, enabled or disabled.
Timezone
UTC
NTP No Authentication (Symmetric)
NTP Authentication (Symmetric)
Time
Date
1. Select Date & Time.
The Date & Time Settings panel will be displayed.
Timezone
1. Select Edit Settings.
2. Select the desired Timezone using the pull down panel.
3. Select Save.
4. Select Cancel to return to the Date & Time Settings panel.
UTC
1. Select Edit Settings.
2. Select the desired UTC using the pull down panel.
3. Select Save.
4. Select Cancel to return to the Date & Time Settings panel.
Manually Set Date & Time
1. Select Edit Settings.
2. Enter the Hours or use the up/down arrows to select.
3. Enter the Minutes or use the up/down arrows to select.
4. Enter the Date, MM/DD/YYYY or use the calendar to select.
5. Select Save.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
6. Select Cancel to return to the Date & Time Settings panel.
NTP No Authentication (Symmetric)
The system supports an IPv4 or IPv6 address for NTP timing. If IPv4 is desired, then an IPv4
management interface must be assigned. If IPv6 is desired, then an IPv6 management interface
must be assigned. The system allows for an IPv4 and IPv6 management interface to be assigned
simultaneously.
1. Select Edit Settings.
2. Select NTP timing.
3. Enter the IPv4 or IPv6 Address.
4. Verify Authenticate, None.
5. Select Save.
The NTP Status will display “syncing”. Eventually the NTP Status will display “Synced”.
This can take several minutes.
6. Select Cancel to return to the Date & Time Settings panel.
NTP Authentication (Symmetric)
The system supports an IPv4 or IPv6 address for NTP timing. If IPv4 is desired, then an IPv4
management interface must be assigned. If IPv6 is desired, then an IPv6 management interface
must be assigned. The system allows for an IPv4 and IPv6 management interface to be assigned
simultaneously.
1. Select Edit Settings.
2. Select NTP timing.
3. Enter the IPv4 or IPv6 Address.
4. Select Authenticate, Symmetric.
5. Select Encryption Type, (MD5, SHA1, SHA224, SHA256, SHA384, SHA512)
6. Enter the Key Number.
7. Enter the Key.
8. Select Save.
The NTP Status will display “syncing”. Eventually the NTP Status will display “Synced”.
This can take several minutes.
9. Select Cancel to return to the Date & Time Settings panel.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
Syslog
The system supports an IPv4 or IPv6 address for Syslog. If IPv4 is desired, then an IPv4
management interface must be assigned. If IPv6 is desired, then an IPv6 management interface
must be assigned. The system allows for an IPv4 and IPv6 management interface to be assigned
simultaneously.
1. Select Syslog.
The Syslog Configuration panel will be displayed.
2. Select Edit Settings.
3. Select Enable Syslog Config.
4. Enable Unit ID, (optional).
5. Enter the Unit ID, (optional).
6. Enter the IPv4 or IPv6 Address.
7. Enter the desired UDP Port Number or use the default, 514.
8. Select Save.
9. Select Cancel to return the Syslog Configuration panel.
Syslog Test
1. Select Syslog Test.
The GUI message will be displayed,”Syslog Test Successful!”.
2. Verify the Syslog Test Message on the Syslog server.
SNMP
The system supports an IPv4 or IPv6 address for SNMP. If IPv4 is desired, then an IPv4
management interface must be assigned. If IPv6 is desired, then an IPv6 management interface
must be assigned. The system allows for an IPv4 and IPv6 management interface to be assigned
simultaneously.
The following SNMP configuration options are supported:
V2 Read/Write
V2 Read Only
V3 Auth Type MD5 / SHA
V3 Priv ProtocolDES / AES
1. Select SNMP.
The SNMP Configuration panel will be displayed.
2. Select Edit Configuration.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
3. Select Enable SNMP Config.
4. Enter the desired Access Port number or use the default, 161.
5. Enter the desired Trap Port number or use the default, 162.
6. Enter the IPv4 or IPv6 Address.
7. Select the desired Protocol, (V2 Read/Write or V2 read Only).
8. Enter the desired V2 Community Password.
9. Select the desired Protocol, (V3).
10. Enter the desired V3 User.
11. Enter the desired V3 Auth Password.
12. Enter the desired V3 Priv password.
13. Select Save.
14. Select Cancel to return the SNMP Configuration panel.
SNMP Test
1. Select SNMP Test.
The GUI message will be displayed,”Test Successful!”.
2. Verify the SNMP Test Message on the MIB Browser.
Export Configuration
This option creates a configuration file (exportCfg.json) that may be used to recover a unit. The
exportCfg.json file may be renamed if desired. The exportCfg.json file does not contain Usernames,
Passwords, Groups or Network Settings.
1. Select Export Configuration.
The Export Configuration panel will be displayed.
2. Select Export.
The exportCfg.json file will be downloaded to the default download destination of the browser.
Import Configuration
This option allows a previously created configuration file (exportCfg.json) to be uploaded to the unit. The
Chassis Model is the only option that is considered and must match, otherwise the unit will reject the
exportCfg.json file.
1. Select Import Configuration.
The Import Configuration panel will be displayed.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
2. Select Choose File.
3. Select the desired exportCfg.json file.
4. Select Open.
5. Select Upload.
The unit will automatically verify the selected exportCfg.json file.
6. Select Configure.
The unit will import and load the exportCfg.json. An “import done” message will be displayed
when complete. A reboot is not required.
Software Upgrade
This option allows the unit’s firmware to be upgraded. An Upgrade Guide is created as part of the
standard documentation for each release. Please refer to the Upgrade Guide for the procedure.
Reboot
This option allows the unit to be rebooted. The traffic will be affected for up to 1 minute.
1. Select Reboot.
The Reboot Device panel will be displayed.
2. Select Reboot.
The unit will present an “Are you sure?” message.
3. Select OK.
The GUI will display a “rebooting” as well as a “Session timed out. Go to Login screen” message.
4. Select Go.
The Login panel will be displayed.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
3. Packet Broker
The following configuration options may be displayed, modified, enabled or disabled under the
Packet Broker panel.
Configuration Maps Load Balance Groups
Tunnels Load Balance Policy
Filter Templates
1. Select Packet Broker on the Dashboard menu bar.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.

User Guide
PacketMAX | GAA10G20AC | 4.23.1
The Packet Broker Configurations panel will be displayed.
Tunnels
The system supports the ability to:
- Encapsulate l2GRE packets
- Decapsulate l2GRE packets
Encapsulate l2GRE Packets (GRE-TX Only)
When a packet is encapsulated with a l2GRE header the new l2GRE header segments are added to the
original packet. The l2GRE header segments consists of Ethernet II, IPv4 and l2GRE as shown below.
Original Packet
l2GRE Encapsulated Packet
1. Select Tunnels.
The Tunnels panel will be displayed.
2. Select Create Tunnel.
The Create Tunnels panel will be displayed.
3. Add an ingress port by placing the cursor on the desired port. Select with the left mouse button. Drag
the port to the Ingress panel and release.
Garland Technology | 716.242.8500 | www.garlandtechnology.com
Copyright © 2023 Garland Technology, LLC. All rights reserved.