Net Optics IBPO-HBSR-XFP User manual

User Guide
10GigaBit iBypass Switch with Heartbeat™
Doc. PUBIBPOHBSRXFPU Rev. 1, 7/07

PLEASE READ THESE LEGAL NOTICES CAREFULLY.
By using a Net Optics iBypass Switch you agree to the terms and conditions of usage set forth by
Net Optics, Inc.
No licenses, express or implied, are granted with respect to any of the technology described in this
manual. Net Optics retains all intellectual property rights associated with the technology described in this
manual. This manual is intended to assist with installing Net Optics products into your network.
Trademarks and Copyrights
© 2007 by Net Optics, Inc. Net Optics® is a registered trademark of Net Optics, Inc. iBypassTM is a
trademark of Net Optics, Inc. Additional company and product names may be trademarks or registered
trademarks of the individual companies and are respectfully acknowledged.
Additional Information
Net Optics, Inc. reserves the right to make changes in specications and other information contained
in this document without prior notice. Every effort has been made to ensure that the information in this
document is accurate.

10 GigaBit iBypass Switch with Heartbeat
v
Contents
Chapter 1
Introduction
AboutthisGuide....................................................1
Features...........................................................1
BypassModes......................................................3
Chapter 2
Installing the iBypass Switch
PlantheInstallation..................................................5
UnpackandInspecttheiBypassSwitch..................................6
Installing the XFP Monitor Port Connectors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
RackMounttheiBypassSwitch........................................6
ConnectPowertotheiBypassSwitch ...................................7
Connect the iBypass Switch Command Line Interface (CLI) . . . . . . . . . . . . . . . . .8
Congure the iBypass Switch with the CLI ...............................9
Connect the iBypass Switch to the Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . .12
Connect the Management Port to the Network. . . . . . . . . . . . . . . . . . . . . . . . . . . .14
Connect a Monitoring Device to the iBypass Switch . . . . . . . . . . . . . . . . . . . . . . .15
Check the iBypass Switch Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
Chapter 3
Front Panel
Display ..........................................................16
UtilizationAlarmLEDs .............................................17
LinkLEDs........................................................17
PowerLEDs......................................................18
ResetButton......................................................18
Chapter 4
iBypass Switch Web Manager
AccessWebManager...............................................19
Check or Change the Heartbeat Packet from Web Manager. . . . . . . . . . . . . . . . . .24

10 GigaBit iBypass Switch with Heartbeat
vi
Chapter 5
System Manager
InstallSystemManager..............................................27
ExploreSystemManager............................................29
CreateaSystemManagerGroup ......................................31
DeleteaSystemManagerGroup ......................................32
AddDevicestoaSystemManagerGroup...............................32
DeleteaniBypassSwitch............................................34
Congure an iBypass Switch from System Manager .......................34
View iBypass Switch Information from System Manager . . . . . . . . . . . . . . . . . . .37
Modify an iBypass Switch Name or Address from System Manager . . . . . . . . . .43
Change a Heartbeat Packet from System Manager. . . . . . . . . . . . . . . . . . . . . . . . .44
Appendix A
Specications and Models
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45
Appendix B
Command Line Interface
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48

10 GigaBit iBypass Switch with Heartbeat
1
Chapter 1
Introduction
Thank you for choosing Net Optics 10 GigaBit iBypass Switch, the most versatile
intelligent Bypass Switch available today. This guide is designed to help answer
your questions and provide an installation reference.
Net Optics iBypass Switch with Heartbeat provides a permanent access port for in-
line network security and monitoring. The iBypass Switch automatically switches
network trafc through added devices, or bypasses devices that are removed. The
intelligent iBypass Switch Heartbeat provides notications to protect network
trafc against both signal and power loss on an attached device.
About this Guide
This guide describes the installation and use of the following models:
Part Number Description
IBPO-HBSR-XFP GigaBit SR iBypass Switch with Heartbeat
IBPO-HBLR-XFP GigaBit LR iBypass Switch with Heartbeat
IBPO-HB50SR-XFP GigaBit SR iBypass Switch with Heartbeat, 50um
Features
Heartbeat Packet
The iBypass Switch monitors the attached device by sending a Heartbeat packet to
the device. If the iBypass Switch does not receive the Heartbeat response, it auto-
matically switches network trafc to bypass the unresponsive device—even if the
device is still receiving power. The iBypass continues to send the Heartbeat, and
will restore trafc ow through the device as soon as the link is restored.
Uninterrupted Trafc
This iBypass Switch supports fail-open monitoring with any 10 GigaBit device
when it shares the same power source as the device. As long as the iBypass Switch
is receiving power, it will divert network trafc to attached monitoring devices.
In this state, all trafc is routed directly to the monitoring device connected to the
iBypass Switch.

10 GigaBit iBypass Switch with Heartbeat
2
When the iBypass Switch loses power, trafc continues to ow through the
network link, but is no longer routed through the iBypass Switch. This allows
network devices to be removed and replaced without network downtime. Once
power is restored to the iBypass Switch, network trafc is seamlessly diverted to
the monitoring device, allowing it to resume its critical functions.
Simply Plug It In
10 GigaBit iBypass Switches use XFP transceivers; the port kit includes the cables
you need to establish a secure network connection point for inline devices, and the
cable to connect monitoring devices. For special applications, you may customize
the Heartbeat Packet rate from the iBypass CLI (Command Line Interface).
Bypass Detect
You can set the Monitor Ports to cycle on and off while the iBypass Switch is in
bypass mode. In Bypass Detect mode, the monitor ports will cycle through ve
seconds off followed by fteen seconds on. The alternating link status can be used
to trigger attached devices to send an alarm to a management system every time
the iBypass Switch turns off the monitor ports. When the iBypass Switch returns
to bypass disabled mode, the monitor ports remain on and the on/off cycle is
discontinued.
Note ____________________________________________________________________
If XFP modules from other vendors are used with the iBypass Switch, Net Optics
cannot warranty the operation of the iBypass Switch with these modules.
__________________________________________________________________________
Passive, Secure Technology
Fail-open monitoring with any 10 GigaBit appliance at speeds of 10 Gbps
Protection against power, link, and application failure
XFP (10 Gigabit Small Form Factor Pluggable) transceivers
Increased reliability on critical network links
High-speed switching with minimal insertion loss
Custom Heartbeat packet option with congurable timeout (Heartbeat) and
Retry
Fully RoHS Compliant
Ease of Use
LED indicators show power, link, bypass and activity status
Front-mounted connectors support easy installation and operation
Optional 19-inch rack frame holds two iBypass Switches
•
•
•
•
•
•
•
•
•
•

10 GigaBit iBypass Switch with Heartbeat
3
Compatible with all major manufacturers’ monitoring devices, including
protocol analyzers, probes, and intrusion detection/prevention systems
Support
Net Optics offers free technical support throughout the lifetime of your purchase.
Our technical support team is available from 8 am to 5 pm Pacic Time, Monday
through Friday at [phone] and via email at [email protected].
FAQs are also available on Net Optics website at www.netoptics.com
Bypass Modes
The Bypass Switch with Heartbeat bypasses attached in-line device when one of
three events occurs:
Power loss to the switch
Link failure
Application failure
Two LEDs on the front of the iBypass Switch indicate whether the switch is
bypassing the connected appliance or not. When the Bypass ON and an indicator
is illuminated, the bypass switch has not received the heartbeat packet as expected
and is in bypass enabled mode. When the bypass OFF indicator is illuminated,
the bypass switch is in bypass disabled mode and is sending trafc through the
attached in-line device.
When the switch is in bypass enabled (ON) mode, the switch circuitry re-directs
network trafc around the in-line appliance. In bypass enabled mode Network
Ports A and B are connected (see below).
Figure 1: Bypass Mode (OFF)
•
•
•
•
Switch
10 GigaBit
1
2
BYPASS
LINK
B
A
1
2 ON
OFF
B
A
1
2
OUT INOUT IN OUT IN OUT IN
RESET
Network
A B 1 2
Monitor
Bypass Mode (ON)
TX RX TX RX TX RX TX RX

10 GigaBit iBypass Switch with Heartbeat
4
When the switch is in bypass disabled (OFF) mode, the switch circuitry sends
network trafc through the in-line appliance. In bypass disabled mode, Network
Port A is connected to Monitor Port 1 and Network Port B is connected to Monitor
Port 2 (see below).
Figure 2: Bypass Mode (ON)
Power Loss Bypass
The iBypass Switch protects link integrity when the attached monitoring device
loses power. To install the iBypass Switch for this type of protection, the switch
should share the same power source as the monitoring appliance. If you are using
redundant power supplies for the bypass switch, make sure that both monitoring
devices are connected to the same power source as the iBypass device.
Heartbeat Bypass
The iBypass Switch with Heartbeat protects against both physical link failure
and application failure on the monitoring device. The bypass switch checks the
path through the montoring device by sending a packet at a predetermined rate
(for example, once every millisecond from Monitor Port 1). The iBypass Switch
validates the path when it receives the packet on the Monitor Port B. If the iBypass
Switch does not receive the packet as expected three times in a row, the bypass
switch will automatically enter bypass enabled (On) mode.You can use the CLI or
remote interfaces to change the number of the Heartbeat packets required (re-try
parameter 1-255) before the iBypass Switch enters bypass enabled mode. The
switch continues to send the bypass packet and will return to bypass disabled mode
when it receives three consecutive packets on Monitor Port 2.
1
2
BYPASS
LINK
B
A
1
2 ON
OFF
B
A
1
2
OUT INOUT IN OUT IN OUT IN
RESET
Network
A B 1 2
Monitor
TX RX TX RX TX RX TX RX
Switch
10 GigaBit

10 GigaBit iBypass Switch with Heartbeat
5
Chapter 2
Installing the 10 GigaBit
iBypass Switch
This chapter describes how to install and connect the iBypass Switch. The
procedure for installing the iBypass Switch follows these basic steps:
Plan the installation
Unpack and inspect the iBypass Switch
Install (XFP) Small Form-Factor Pluggable transceivers
Rack mount the iBypass Switch (optional)
Connect power to the iBypass Switch
Connect the CLI RS232 interface for conguration
Congure the iBypass Switch default values with the CLI
Connect the iBypass Switch to network devices
Connect the Management Port to the network
Connect iBypass Switch Ports to monitoring device(s)
Check the installation
After the iBypass Switch is installed, you can remotely monitor and control the
iBypass Switch from either Web Manager or System Manager.
Plan the Installation
Before you begin the installation of your iBypass Switch, determine the following:
IP address of the iBypass Switch or, if you are deploying multiple iBypass
Switches, a range of IP addresses
Net Mask for the iBypass Switch
IP address of the remote management console, if deployed over a WAN
Gateway to the remote management console, if deployed over a WAN
Also make sure you have a suitable location to install the iBypass Switch. For
power redundancy, use two independent power sources.
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•

10 GigaBit iBypass Switch with Heartbeat
6
Unpack and Inspect the iBypass Switch
Unpack the iBypass Switch, power supplies, and all cables that are provided. Each
iBypass Switch is delivered with the following:
2 Power supplies
2 LC ber cables
1 RJ45 CAT5e cable
1 DB-9 RS232 cable
Quick Installation Guide
CD that contains this manual and System Manager software
You may have also purchased a panel for rack mounting the bypass switch, and an
extended warranty. If any component is missing or damaged, contact Net Optics
Customer Service immediately at [phone].
Installing XFP Monitor Port Transceivers
The XFP transceivers are packaged seperately. You need to remove the temporary
plugs from the iBypass Switch monitor slots and insert the XFP connectors into the
monitor slots, as shown below, until they click into place.
1
2
BYPASS
LINK
B
A
1
2 ON
OFF
B
A
1
2
OUT INOUT IN OUT IN OUT IN
RESET
Network
A B 1 2
Monitor
Switch
10 GigaBit
Figure 3: Insert XFP Connectors in Monitor Slots
Rack Mount the iBypass Switch (optional)
The iBypass Switch is designed for rack mounting in a two-slot, 19-inch panel.
The mounting panel occupies one rack unit.
To rack mount the iBypass Switch:
1. Attach the two-slot panel to your equipment rack using the thumb screws on
the panel.
•
•
•
•
•
•

10 GigaBit iBypass Switch with Heartbeat
7
2. Slide the iBypass Switch into one of the slots and secure the device by
tightening the thumb screws.
3. Make sure that the rack is properly grounded.
Connect Power to the iBypass Switch
For power fault protection, the iBypass Switch has redundant power supplies.
The second power supply is available to support the ow of trafc to the moni-
toring device in the event that the rst power supply becomes unavailable. If the
rst power supply is unavailable, the second power supply provides all power for
the iBypass Switch. Even if no power is available to the passive iBypass Switch,
network trafc ows uninterrupted.
Management
Port
RS232
Figure 4: Connecting dual power supplies
Connect the power supplies to the back of the unit. If you plan to use redundant
power, make sure that you connect the power supplies to two separate, independent
power sources. The unit should now have one or both front panel Power LEDs illu-
minated, depending on whether you used one power cable or two.

10 GigaBit iBypass Switch with Heartbeat
8
Connecting to the CLI Interface
All conguration options, status, and statistics are accessible from the iBypass
Switch Command Line Interface. You will set a new username and password, IP
address for the iBypass Switch, utilization threshold levels for Port A and B, and
the current date and time. Other parameters are optional and dependent on your
installation. To do this conguration, you need to connect an RS232 DB9 cable to
the back of the iBypass Switch and to your computer.
To computer with
terminal emulation software
Management
Port
RS232
Figure 5: RS232 DB-9 connecting to computer
Your computer needs to have terminal emulation software such as HyperTerminal
to access the iBypass Switch CLI via the RS232 cable..
To connect the CLI:
1. Connect a PC with terminal emulation software, such as HyperTerminal, to the
iBypass Switch using the RS232 DB-9 cable supplied with the iBypass Switch.
2. Launch the terminal emulation software and set communication parameters to:
19200 baud
8 data bits
No parity
1 stop bit
 Noowcontrol

10 GigaBit iBypass Switch with Heartbeat
9
3. Power on the iBypass Switch. The Net Optics CLI banner and login prompt
appear in the Terminal Emulation software (see below). The login default is
netoptics.
4. Enter the password. The default password is netoptics.
Congure the iBypass Switch with the CLI
You should be logged into the iBypass CLI using terminal emulation software.
If you are not, see the instructions on the previous page.
The default values for this IBypass Switch are:
Management Port: Enabled
IP Address: 192.168.2.100
Netmask: 255.255.0.0
Threshold Port A: 50%
Threshold Port B: 50%
Threshold Port 1: 50%
Threshold Port 2: 50%
Username: netoptics
Password: netoptics
For security reasons, some parameters can only be set with the CLI. A complete
list of CLI commands is in Appendix B.You will use the CLI now to:
Change the login and password
Assign a new IP address
•
•

10 GigaBit iBypass Switch with Heartbeat
10
Change utilization thresholds
Set the date and time
Display and check the CLI settings
Disable and enable the Management Port
Your terminal emulator should be displaying the Net Optics prompt shown below.
If it does not, follow the directions on the previous page.
NetOptics:
You can change most settings later from one of the remote manager interfaces (for
more information about remote interfaces, see Chapters 4 and 5).
Change the iBypass Switch Username and Password
1. Change the username by entering the following command:
set username <new username>
2. Change the password by entering the following command:
set password <new password>
3. Record the username and password in a secure location.
Assign a New iBypass Switch IP Address
Be sure that you have the correct new IP address for the iBypass Switch before you
change the IP address value from the default 10.60.0.123. To change it:
Enter set ip <new ip address>.
Example: Enter set ip 10.60.10.100 to set the iBypass Switch IP address to
10.60.10.100.
Change Port Utilization Threshold Levels
1. Enter setthresholdporta<new level> to set a percentage of available band-
width for Port A. Exceeding this limit will trigger the alarm.
Example: Enter setthresholdporta30 to set the alarm threshold level for
trafc received on Port A to 30%.
•
•
•
•

10 GigaBit iBypass Switch with Heartbeat
11
2. Enter setthresholdportb<new level> to set a percentage of available band-
width for Port B. (Exceeding this limit will trigger the alarm.)
Example: Enter setthresholdportb30 to set the alarm threshold level for
trafc received on Port B to 30%.
Set the Current Date and Time
Enter set time <mm/dd/yyyy-hh:mm:ss> where mm is month, dd is day of the
month, yyyy is year, hh is hour, mm is minutes of the hour, and ss is seconds.
Time is based on the 24-hour clock.
Display and Check Current Settings
Enter show set.
The CLI displays the current setting, similar to the example below.
Figure 8: Show Set command example
Using the CLI Help Command
1. Enter Help at the NetOptics prompt. The list of help topics is displayed.

10 GigaBit iBypass Switch with Heartbeat
12
Figure 9: iBypass Switch CLI Help Menu
2. To view the syntax for changing the iBypass Switch conguration parameters,
enter helpset.

10 GigaBit iBypass Switch with Heartbeat
13
3. Repeat with the variable of interest to view the syntax for all commands
available from the CLI. For more information about CLI commands, see
Appendix B.
Do not disconnect the DB9 cable yet from the RS232 port. You will use it once more
to turn the iBypass Switch display on and off.
Connect the iBypass Switch to the Network
To connect the iBypass Switch to the network:
1. Connect Network Port A to the appropriate switch, server or router using an LC
type ber cable.
Figure 10: Connect the iBypass Switch to the Network
2. Connect Network Port B to the appropriate switch, server or router using an LC
type ber cable.
To Switch, Server, or Router (DCE)
To Switch, Server, or Router (DTE)
1
2
BYPASS
LINK
B
A
1
2ON
OFF
B
A
1
2
OUT INOUT IN OUT IN OUT IN
RESET
Network
A B 1 2
Monitor
Switch
10 GigaBit

10 GigaBit iBypass Switch with Heartbeat
14
Connect the Management Port to the Network
To use either of the remote interfaces you must connect the Management Port on the
back of the unit to the network.
To connect the Management Port:
1. Connect a CAT5 cable to the Management Port as shown in the following gure.
Figure 11: Connecting the Management Port
2. Connect the other end to a network switch or hub.
Disable, Enable and Check the Management Port
The CLI display command toggles the display on and off. From the terminal
emulation software, do the following:
1. Enter showdisplay to view the current setting. The default value is ON.
2. Enter display. Now look at he front of the iBypass Switch. Access from the
Management Port is blocked and the iBypass Switch front panel does not display
utilization or peak information.
3. Enter display again to restore the display and remote interfaces.
To network switch or hub
Management
Port
RS232