ProfiTap IOTA 1G User manual

IOTA 1G
IOTA 1G+
IOTA 10G
IOTA 10G+
USER MANUAL
IOTA software version: v3.0.0

If you have any questions, visit our Knowledge Base:
https://kb.profitap.com/
You can also contact us through our website:
https://www.profitap.com/contact-us/
Or directly by email:
[email protected]
For the latest documentation and software, visit our Resource Center:
https://resources.profitap.com/
2

TABLE OF CONTENTS
1. Product Overview 5
1.1. Hardware Overview 5
1.2. Specifications 6
1.3. Interfaces & LED Behavior 7
1.3.1. IOTA 1G Interface 7
1.3.2. IOTA 1G LED Behavior 8
1.3.3. IOTA 1G+ Interface 9
1.3.4. IOTA 1G+ LED Behavior 10
1.3.5. IOTA 10G Interface 11
1.3.6. IOTA 10G LED Behavior 12
1.3.7. IOTA 10G+ Interface 13
1.3.8. IOTA 10G+ LED Behavior 14
2. Getting Started 15
2.1. Deploying IOTA 15
2.1.1. IOTA 1G / 1G+ 15
2.1.2. IOTA 10G / 10G+ 16
2.1.3. IOTA Rackmount Models 17
2.2. Powering Up the Device 18
2.3. Accessing IOTA Over the Network 18
2.4. Swapping SSD 19
3. IOTA Configuration 20
3.1. Time Settings 20
3.2. Network Configuration 21
3.3. Access / Internal Firewall 22
3.3.1. Firewall 22
3.3.2. 802.1x Security 22
3.4. ZeroTier 23
3.5. Firmware & License 24
3.5.1. License 24
3.5.2. Firmware 24
3.6. Administration 25
3.6.1. HTTPS Certificate 25
3.6.2. System Control 25
3.7. Logs 26
3.7.1. Logs 26
3.7.2. Remote Syslog 26
3.8. Device Reset 26
3.8.1. Soft Reset 26
3.8.2. Factory Reset 26
4. Capture Guide 27
4.1. Capture Control 27
4.1.1. Traffic Flow Analysis 28
3

4.1.2. Bandwidth Analysis 28
4.1.3. Capture Files Export 28
4.2. Interface Configuration 29
4.2.1. Port Control 29
IOTA 1G / 1G+ 29
IOTA 10G / 10G+ 29
4.2.2. Port Status 30
4.2.3. Capture Features 31
IOTA 1G / 1G+ 31
IOTA 10G / 10G+ 32
4.2.4. Advanced Timestamp 33
4.2.5. SFP 34
4.2.6. Filters 35
4.2.7. Capture Interface Firmware 36
4.3. Autonomous Capture 36
4.4. Data Vault 37
4.4.1. Captured Files 37
4.4.2. Storage Management 38
4.4.3. Capture Export 39
4.4.4. Importing a PCAP-NG File 40
5. Analysis Guide 41
5.1. Dashboard Overview 41
5.2. Traffic Filtering 42
5.3. PCAP File Download 43
Legal 44
Disclaimer 44
Copyright 44
Trademarks 44
4

1. Product Overview
1.1. Hardware Overview
IOTA is a multifunctional passive network probe with integrated traffic capture and analysis capabilities.
Designed as a secure and flexible analysis solution, IOTA is a great asset to get access and visibility into
industrial or enterprise level networks.
Profitap IOTA is used by network administrators and IT analysts to get a fast and clear overview of the
network traffic. This means a comprehensive analysis can be performed quickly, helping engineers get to
the root cause in a matter of clicks.
The device can be deployed as a dedicated probe, or programmed for autonomous analysis, thus reducing
the need of an on-site network expert.
5

1.2. Specifications
IOTA 1G
IOTA 1G+
IOTA 10G
IOTA 10G+
Capture Interface
2 x RJ45 Ethernet
10/100/1000M
2 x RJ45 Ethernet
10/100/1000M
2 x SFP+ Ethernet
1/10G
2 x SFP+ Ethernet
1/10G
In-Line Mode
Yes
Yes
Yes
Yes
Dual SPAN Inputs Mode
Yes
Yes
Yes
Yes
In-Line Latency
1G: 380 ± 8 ns
100M: 720 ± 24 ns
10M: 7600 ± 25 ns
1G: 380 ± 8 ns
100M: 720 ± 24 ns
10M: 7600 ± 25 ns
500 ns
500 ns
In-Line Jitter
20 ns
20 ns
20 ns
20 ns
Fail-Safe
Yes
Yes
No
No
Supported Capture Speed*
10M / 100M / 1G
10M / 100M / 1G
1G / 10G
1G / 10G
Capture Performance*
3.2 Gbps / 3.2 Mpps
3.2 Gbps / 3.2 Mpps
3.2 Gbps / 5 Mpps
3.2 Gbps / 5 Mpps
Packet Processor (slicing,
filtering, timestamping)*
Yes: 2 Gbps / 3.2
Mpps
Yes: 2 Gbps / 3.2
Mpps
Yes: 20 Gbps / 32
Mpps
Yes: 20 Gbps / 32
Mpps
Hardware Timestamping
Yes: 8 ns, NTP
synchronized
Yes: 8 ns, NTP
synchronized
1G: 8 ns, NTP
synchronized
10G: 6.4 ns, NTP
synchronized
1G: 8 ns, NTP
synchronized
10G: 6.4 ns, NTP
synchronized
Internal Storage
1 TB SSD
1 TB or 2 TB
swappable SSD
(NVMe)
1 TB SSD
1 TB or 2 TB
swappable SSD
(NVMe)
Power Inputs (12V Model)
12 VDC
12 VDC, PoE+
(management RJ45)
12 VDC
12 VDC, PoE+
(management RJ45)
Power Inputs (24V Model)
24–48 VDC
24–48 VDC, PoE+
(management RJ45)
24–48 VDC
24–48 VDC, PoE+
(management RJ45)
Power Consumption
12 W
14 W
15 W
25 W
Management Interface
RJ45 Ethernet
10/100/1000M
RJ45 Ethernet
10/100/1000M
RJ45 Ethernet
10/100/1000M
RJ45 Ethernet
10/100/1000M
Management Service
HTTPS (server)
HTTPS (server)
HTTPS (server)
HTTPS (server)
*These relate to the capture interface. Captured traffic analysis performance will depend on the type of traffic, and the
type of analysis performed (see 4.1).
6

1.3. Interfaces & LED Behavior
1.3.1. IOTA 1G Interface
1, 2
RJ45 Ethernet port A and B
3
START/STOP/RESET button
4, 5, 6, 7
Network status and activity LEDs
8
Status LED
9
Capture LED
10
12 VDC power input (12V model)
10
24-48 VDC power input (24V model)
11
RJ45 Management port (PoE+)
12
2 x USB 3.0 port type A
7

1.3.2. IOTA 1G LED Behavior
LED state
Meaning
4and/or 7steady green
The port is linked.
4and/or 7blinking green
The port is linked and has RX/TX activity (traffic is passing through).
5steady green
6off
Capture interface operating at 10 Mbps speed.
5blinking green
6off
Capture interface is initializing.
5off
6steady green
Capture interface operating at 100 Mbps speed.
5off
6blinking green
Capture interface firmware is corrupted.
5+6steady green
Capture interface operating at 1 Gbps speed.
5+6blinking green
The port is linked and has RX/TX activity (traffic is passing through).
5+6alternating blinking
Capture interface cannot find a common speed between the connected
devices.
8blinking orange
9off
Booting
8green
9green
Running
8green
9blinking green
Capturing
8blinking orange and green
9blinking orange and green
Updating
8blinking red
9blinking red
Hardware failure
8blinking orange
9blinking orange
Factory reset
8blinking green
9off
Shutting down
8off
9off
Shutdown completed
8

1.3.3. IOTA 1G+ Interface
1, 2
RJ45 Ethernet port A and B
3
START/STOP/RESET button
4, 5, 6, 7
Network status and activity LEDs
8
Status LED
9
Capture LED
10
12 VDC redundant power inputs (12V model)
11
RJ45 Management port (PoE+)
12
USB 3.0 port type A
13
SMA female connector (PPS in/out)
14
SMA female connector (GPS/GLONASS antenna)
15
Removable SSD
16
Sync LED
9

1.3.4. IOTA 1G+ LED Behavior
LED state
Meaning
4and/or 7steady green
The port is linked.
4and/or 7blinking green
The port is linked and has RX/TX activity (traffic is passing through).
5steady green
6off
Capture interface operating at 10 Mbps speed.
5blinking green
6off
Capture interface is initializing.
5off
6steady green
Capture interface operating at 100 Mbps speed.
5off
6blinking green
Capture interface firmware is corrupted.
5+6steady green
Capture interface operating at 1 Gbps speed.
5+6blinking green
The port is linked and has RX/TX activity (traffic is passing through).
5+6alternating blinking
Capture interface cannot find a common speed between the connected
devices.
8blinking orange
9off
Booting
8green
9green
Running
8green
9blinking green
Capturing
8blinking orange and green
9blinking orange and green
Updating
8blinking red
9blinking red
Hardware failure
8blinking orange
9blinking orange
Factory reset
8blinking green
9off
Shutting down
8off
9off
Shutdown completed
16 on
Internal timestamp synchronized with the configured time system (GPS,
NTP, etc.) with an accuracy of ± 16 ns.
10

1.3.5. IOTA 10G Interface
1, 2
SFP+ port A and B
3
START/STOP/RESET button
4, 5, 6, 7
SFP and network status and activity LEDs
8
Status LED
9
Capture LED
10
12 VDC power input (12V model)
10
24-48 VDC power input (24V model)
11
RJ45 Management port (PoE+)
12
2 x USB 3.0 port type A
11

1.3.6. IOTA 10G LED Behavior
LED state
Meaning
4+5and/or 6+7orange
No SFP module present or detected.
4+5and/or 6+7green slow blink
No link.
4+5and/or 6+7red
Connect additional power.
5and/or 7green
SPAN mode, link up.
5and/or 7green fast blink
SPAN mode, traffic activity.
4+5+6+7green
In-Line mode, link up.
4+5+6+7green fast blink
In-Line mode, traffic activity.
8blinking orange
9off
Booting
8green
9green
Running
8green
9blinking green
Capturing
8blinking orange and green
9blinking orange and green
Updating
8blinking red
9blinking red
Hardware failure
8blinking orange
9blinking orange
Factory reset
8blinking green
9off
Shutting down
8off
9off
Shutdown completed
12

1.3.7. IOTA 10G+ Interface
1, 2
SFP+ port A and B
3
START/STOP/RESET button
4, 5, 6, 7
SFP and network status and activity LEDs
8
Status LED
9
Capture LED
10
12 VDC redundant power inputs (12V model)
11
RJ45 Management port (PoE+)
12
USB 3.0 port type A
13
SMA female connector (PPS in/out)
14
SMA female connector (GPS/GLONASS antenna)
15
Removable SSD
16
Sync LED
13

1.3.8. IOTA 10G+ LED Behavior
LED state
Meaning
4+5and/or 6+7orange
No SFP module present or detected.
4+5and/or 6+7green slow blink
No link.
4+5and/or 6+7red
Connect additional power.
5and/or 7green
SPAN mode, link up.
5and/or 7green fast blink
SPAN mode, traffic activity.
4+5+6+7green
In-Line mode, link up.
4+5+6+7green fast blink
In-Line mode, traffic activity.
8blinking orange
9off
Booting
8green
9green
Running
8green
9blinking green
Capturing
8blinking orange and green
9blinking orange and green
Updating
8blinking red
9blinking red
Hardware failure
8blinking orange
9blinking orange
Factory reset
8blinking green
9off
Shutting down
8off
9off
Shutdown completed
16 on
Internal timestamp synchronized with the configured time system
(GPS, NTP, etc.) with an accuracy of ± 16 ns.
14

2. Getting Started
2.1. Deploying IOTA
2.1.1. IOTA 1G / 1G+
Insert Ethernet cables of the line you want to monitor into the RJ45 ports A and B of the IOTA, using
category 5 UTP cables, rated for Gigabit operations.
Note: When deploying IOTA 1G/1G+ in-line, connect it to the network prior to powering it in order to make
full use of its fail-safe capabilities. This step is critical to verify the availability of the in-line path in case of
failover.
15

2.1.2. IOTA 10G / 10G+
Insert the cables of the line to be monitored in the SFP modules. In the case of LC optical fiber cables,
make sure to match the Tx-Rx / Tx-Rx signal direction at the other end.
Note: Due to the nature of SFP modules requiring power for operation, IOTA 10G/10G+ doesn't include a
bypass feature for fail-safe monitoring. An external TAP can be employed in order to implement fail-safe
monitoring.
16

2.1.3. IOTA Rackmount Models
The rackmount models can be mounted in a standard 19" rack, using the Profitap Rackmount Chassis Kit
(sold separately; reference: ARKB-1U). Secure the chassis to the rack using the provided screws, then
insert the IOTA and secure it to the chassis using the thumbscrews on the front panel of the device.
17

2.2. Powering Up the Device
Connect the 12V/2.5A DC power supply, or the 24–48VDC terminal block, depending on the IOTA model.
IOTA can also be powered via PoE+ over the management port by connecting it to a PoE+ switch. Connect
both power port and PoE+ management port for redundant powering, ensuring continued operation in case
either port were to be disconnected or unable to provide power.
IOTA boots automatically after a power connection is established. Its status can be observed via the activity
LEDs.
Once powered, the in-line failover circuit is disabled, effectively placing the device in-line.
Note: Initial boot may take some time to complete. When both the Status and Capture LEDs are green,
IOTA has completed the boot sequence.
Note: When using an IOTA 10G+ with two 10GBASE-T SFPs, PoE+ alone may not provide enough power
for operation. If that is the case, it is recommended to connect the 12 VDC (12V Model) or 24–48 VDC (24V
Model) power inputs.
2.3. Accessing IOTA Over the Network
To access the IOTA over the network, connect to the HTTPS interface by browsing to the device IP of your
IOTA.
The full URL should be: https://x.x.x.x
DHCP mode is enabled by default. If no IP is assigned to the IOTA, the default fallback IP is 169.254.1.1.
To login, use the following initial credentials:
Default username: admin
Default password: admin
Note: Make sure to change the default credentials as soon as possible.
18

2.4. Swapping SSD
IOTA 1G+ / 10G+
The procedure for swapping the SSD is as follows:
● Power off the device
● Unscrew the front panel drawer
● Remove the drawer
● Remove the SSD
● Install the new SSD in the drawer
● Place the drawer in the device
● Tighten the drawer screw
● Power on the device
Note that it will take several minutes for the system to install on the new SSD (~4–5 minutes depending on
the model of SSD).
The recommended SSD types are Samsung EVO 1 TB and 2 TB (NVMe). They can be ordered directly
from Profitap ([email protected]).
19

3. IOTA Configuration
3.1. Time Settings
The IOTA Settings > Time Settings page allows the configuration of the system date, time, time zone, and
NTP service. The NTP service is enabled by default, and can be disabled or enabled on this page. NTP
servers can be added, modified, or removed. The appropriate time zone should be set manually, whether or
not the NTP service is enabled.
The system time is used by:
● The embedded OS.
● The capture interface, in order to constantly discipline the hardware timestamp counter. Changing
the time may require a restart of the capture interface to take effect.
20