Viascope ipscan probe 600 User manual

IPScan Probe 600
User’s Guide
Version : 3.5.0.0
ViaScope Int.
Tel. [phone]
http://www.viascope.com
Technical Support: [e-mail]

IPScan Probe 600 User’s Guide
2
Contents
1. INTRODUCTION............................................................................................ 3
1.1. ABOUT IPSCAN .......................................................................................... 4
1.2. IPSCAN PRODUCT FAMILY ........................................................................... 5
1.3. IPSCAN PROBE 600 COMPOSITION AND INSTALLATION .................................. 6
1.3.1. Introduction and Composition ........................................................ 6
1.3.2. Installation......................................................................................... 8
1.3.3. Accessing the Probe Using HyperTerminal ................................... 9
2. GETTING STARTED ................................................................................... 10
2.1. MAIN MENU .............................................................................................. 11
2.2. SYSTEM ................................................................................................... 12
2.2.1. Password ........................................................................................ 12
2.2.2 System Configuration by Ethernet Port ........................................ 13
2.2.2.1. ARP check Interval [Online](min)/[Offline](min)..................... 14
2.2.2.2. Off range Interval (min) ............................................................ 14
2.2.2.3. Automatic Private IP addressing detection ............................ 15
2.2.2.4. Maximum ARP Packet per sec................................................. 15
2.2.2.5. Excess ARP Packet suspension period (sec) ........................ 16
2.2.2.6. DHCP Block Alarm (min).......................................................... 16
2.3. LAN ........................................... 오류!책갈피가 정의되어 있지 않습니다.
2.3.1. Master Port...................................................................................... 18
2.4. RETURN TO DEFAULT ................................................................................ 21
2.5. SAVE ....................................................................................................... 21
2.6. SAVE &APPLY.......................................................................................... 21
2.7. SYSTEM SHUTDOWN ................................................................................. 21
2.8. SYSTEM STATUS ....................................................................................... 22
2.9. OPERATING CONFIG .................................................................................. 23
2.10. TAKE OVER ............................................................................................ 24
2.11. PING TEST.............................................................................................. 26
3. APPENDIX ................................................................................................... 27
3.1. PORT DESCRIPTION .................................................................................. 28
3.2. NETWORK CONFIGURATION ....................................................................... 29
3.2. Q&A........................................................................................................ 31

IPScan Probe 600 User’s Guide
3
1. Introduction
This chapter contains overall information about IPScan and its composition.
1.1. About IPScan 4
1.2. IPScan Product Family 5
1.3. IPScan Probe 600 Composition and Installation
1.3.1. Introduction and Composition
a. Features
b. Probe Specification
c. IPScan Probe 600 Composition
d. Panel Description
1.3.2. Installation
1.3.3. Accessing the Probe using Hyper Terminal
6
6
6
6
7
7
8
9
IP/MAC resource Management and network security solution
www.scope.co.kr

IPScan Probe 600 User’s Guide
4
1.1. About IPScan
IPScan is IP/MAC resource management and Layer 2 network security solution that empowers
IT managers to increase work efficiency and network security. IP based networking
environment offered the easiness to access the network, but at the same time, it became a
management issue for IT manager.
If you are using DHCP server to automatically assign IP, you may not feel the urgency to
manage IP addresses. However, now more and more IT managers are concerned with
security issues under DHCP networking environment. It is becoming a critical issue for all
organization to detect any unknown devices and keep them away from your network.
IPScan has been designed and developed to fulfill the above needs. Proven by over 400
hundred clients around the globe, it will provide various functions to ensure network security and
maximize the work efficiency.
Major features are as follows:
Automatic monitoring and update on IP/MAC activities.
IP duplication detection and resolution.
Add additional user columns to keep track of IP/MAC inventory system.
MAC based network management under DHCP networking environment.
Network host name detection and control.
Unauthorized IP/MAC blocking.
Assign network access time and control the access based on IP/MAC.
Scan specific port number(s) to determine its activeness.
Switch port table query and port control.
Realtime events detection and log them into database.
Detect and block excessive broadcasting packet generator.
ReportViewer to search for database and generate reports.

IPScan Probe 600 User’s Guide
5
1.2. IPScan Product Family
IPScan product family is composed of the followings:
IPScan Server : Communication module that receives data from IPScan Probe and stores in the
database.
IPScan Console : Actual user interface to monitor and manage data.
IPScan Probe : Software embedded probe that is installed in each segment or VLAN
IPScan Probe 50 :
91 10/100 Mbps Ethernet port.
9Supports up to 50 active IP devices.
IPScan Probe 100
91 10/100 Mbps Ethernet port.
9Supports up to 250 active IP devices.
IPScan Probe 100A
91 10/100 Mbps Ethernet port.
9Supports up to 500 active IP device.
IPScan Probe 200
92 10/100 Mbps Ethernet port.
9Supports up to 1,000 active IP device.
IPScan Probe 600
96 10/100 Mbps Ethernet port.
9Supports up to 2,500 active IP devices.
The Basic Network Configuration is down below.
IP Scan Probe
IP Scan Server DB Server IP Scan Console

IPScan Probe 600 User’s Guide
6
1.3. IPScan Probe 600 Composition and Installation
1.3.1. Introduction and Composition
IPScan Probe 600 is installed in multi segment and/or a regional office up to 2,500 active IP
devices. It communicates with IPScan Server in the central location to store data and receive
commands. It is designed to support one 10/100Mbps Ethernet interface and multiple VLAN
environments.
a. Features
9Gathering information of assigned IP ranges.
9Blocking and Unblocking IP/MAC address of assigned IP ranges.
9Built in DHCP Server.
9Offers TCP Port Scan function
9Offers SNMP Switch Port Scan function
b. Probe Specifications
 
 
 
 
 
 
 
 
 
 

IPScan Probe 600 User’s Guide
7
c. IPScan Probe 600 Composition
The package contains the following items.
IPScan Probe 600 1 each
IPScan Probe 600 User’s Guide 1 each
Power cable 1 each
RS232 serial console cable 1 each
RJ45 cable for Ethernet connection 2 each
19 inch rack mount 1 set
d. Panel Description
IPScan Probe 600 Front View
IPScan Probe 600 Rear View
LED : Displays data processing and probe status.
¾Power : lights green when the power is turned on.
¾10/100 : displays orange light when connected 10Mbps and green light when connected to
100Mbps network.
¾Activity : displays green light when the probe is collecting data within the segment.
¾Status: displays green light when the probe is successfully connected with the Server, and
blinks when the probe is disconnected.
Ethernet : use RJ45 Ethernet cable to connect the probe on one end and the other end to the
network.
Console : connect RS232 cable when configuring and managing the probe using the console.
Power Switch : switch on to turn on the probe.
Power : use power cable to input power.
①
②
③
④ ⑤

IPScan Probe 600 User’s Guide
8
1.3.2. Installation
IPScan Probe 600 deployment does not require network reconfiguration or upgrade.
PLEASE KEEP IN MIND THAT ONLY ONE PROBE IS RECOMMENDED WITHIN ONE
BROADCASTING DOMAIN. DO NOT INSTALL MORE THAN ONE PROBE WITHIN A SAME
SEGMENT.
The installation process is as follows:
IPScan Probe 600 supports one 10/100Mbps Ethernet interface.
9Monitoring a single segment: connect the probe to a switch port (upper level switch port).
It is recommended to install at least one probe in each segment for proper monitoring and
management.
9Monitoring more than one segment: connect the probe to 802.1q Trunk port. Consult with
your network administrator for the setting.
Connect to the network using RJ45 Ethernet cable and plug in the power cable.
Turn on the power switch.
Connect one end of RS232 console cable to the probe and the other end to COM port. Access the
probe using HyperTerminal program.
Sample Configuration
 DB Server IP Scan Console
Trunk (802.1q)
Backbone
Switch
IPScan Probe 600


A


IPScan Probe 600 User’s Guide
9
1.3.3. Accessing the Probe Using HyperTerminal
After the installation, you may access IPScan Probe 600 using a standard terminal or
HyperTerminal program provided by Windows based PC.
Step1 Define below values, and select [OK] to connect to IPScan Probe.
Bit per second(B) : 38400
Data bits : 8
Parity : None
Stop bits : 1
Flow control : None
Step2 When you access the probe using HyperTerminal, you will be asked to enter
password. However, the factory default configuration contains no password, so please
proceed to the main menu by pressing ‘Enter’ button.
Step3 The [Main Menu] screen will be shown.
Main Menu
1. System
2. LAN
3. Return to Default
4. Save
5. Save & Apply
6. System Shutdown
7. System Status
8. Operating Config
9. Take Over
10. Ping Test
0. Exit

IPScan Probe 600 User’s Guide
10
2. Getting Started
This chapter describes how the functions of the IPScan Probe 600 are
configured and applied.
2.1. Main Menu
2.2. System
2.2.1. Password
2.2.2. System Configuration by Ethernet Port
2.2.2.1. ARP check Interval [Online](min)/[Offline](min)
2.2.2.2. Off range Interval (min)
2.2.2.3. Automatic Private IP addressing detection
2.2.2.4. Maximum ARP Packet per sec
2.2.2.5. Excess ARP Packet suspension period
2.2.2.6. DHCP Block Alarm
11
12
12
13
14
14
15
15
16
16
2.3. LAN
2.3.1. Master Port
2.4. Return to Default
2.5. Save
2.6. Save &Apply
2.7. System Shutdown
2.8. System Status
2.9. Operating Config
2.10. Take Over
2.11. Ping Test
17
18
21
21
21
21
22
23
24
25
IP/MAC resource Management and network security solution
www.scope.co.kr

IPScan Probe 600 User’s Guide
11
2.1. Main Menu
[Main Menu] contains necessary components to manage and operate IPScan Probe 600. All
menus can be accessed by entering the number located in the left.
Main Menu
1. System
2. LAN
3. Return to Default
4. Save
5. Save & Apply
6. System Shutdown
7. System Status
8. Operating Config
9. Take Over
10. Ping Test
0. Exit
Main Menu Select a number :
N0 Menu Description
1 System Define password, ARP sending intervals and monitoring status.
2 LAN Define IP configuration of the probe and the server as well as gateway
and subnet mask information. (MUST CONFIGURATION).
3 Return to Default Reset the system configuration to the default values.
4 Save Save the changes in the configuration.
5 Save & Apply Save the changes in the configuration and apply them.
6 System Shutdown Restart the probe.
7 System Status Provide overall probe system status.
8 Operating Config IP/MAC blocking methods and SNMP query interval.
9 Take Over IPScan Probe 600 redundancy setting.
10 Ping Test Run ping test to check the network connection status.
0 Exit Exit.

IPScan Probe 600 User’s Guide
12
2.2. System
You can configure the Password and communication interval for each Ethernet Port.
Step1 Select 1. [System] from [Main Menu].
Main Menu Select a number : 1
Step2 System
1. Password
2. Ethernet Port 1
3. Ethernet Port 2
4. Ethernet Port 3
5. Ethernet Port 4
6. Ethernet Port 5
7. Ethernet Port 6
0. Main Menu
The [System] menu is shown. You can configure the values for each Ethernet Port.

2.2.1. Password
Factory released probe contains no password. However, it is highly recommended to assign a
password to prevent misusage. You can assign and modify password by selecting [7] from
[System] menu.
Step1 Select 1. [Password] from [System].
System setting. Select a number : 7
Step2 The password should contain less than 15 characters. It can be a combination of
numbers, alphabets and/or symbols.
Enter a new password : ********
Confirm the password : ********
If you have forgotten the password, please contact your sales representative.

IPScan Probe 600 User’s Guide
13
2.2.2 System Configuration by Ethernet Port
You can define data forwarding and communication intervals between the probe and the server.
Step1 Select 2. [Ethernet Port 1] from [System].
Step2 When the menu is shown, select a number you wish to configure and then press [Enter].
System
1. ARP check interval [Online](min)
2. ARP check interval [Offline](min)
3. Off range Interval(min)
4. Automatic Private IP addressing detection
5. Maximum ARP Packet per sec
6. Excess ARP Packet suspension period(sec)
7. DHCP Block Alarm (min)
0. Main Menu
[5]
[10]
[0]
[Off]
[5000]
[1]
[10]
N0 Menu Description
1 ARP check interval
[Online] (min)
Interval for probe to send out ARP packets to active IP within the
managing segment for the update. The default interval is 5
minutes.
2 ARP check interval
[Offline](min)
Interval for probe to send out ARP packets to offline IP within the
monitoring segment for the update. The default interval is 10
minutes.
3 Off range Interval
(min)
Interval for probe to forward detected off range IP to the server.
The default value is 0. You can define one of three options below.
4 Automatic Private IP
addressing detection
Under DHCP environment, when a host is not assigned with an IP
form DHCP server, Windows automatically assigns a temporal IP.
Define the option to detect such IP by selecting ON or OFF. The
default value is OFF.
5 Maximum ARP Packet
per sec
The maximum number of per second’s ARP packets sent out by
the probe (related to value defined at [7]).
6 Excess ARP Packet
suspension period
(sec)
When the probe exceeds the maximum ARP packet limit (refer to
[5]), it will not generate more than 100 ARP packet within the
defined suspension period. The default value is 1 second.
7 DHCP Block Alarm When the Probe is operated as a DHCP Server, if there is a
unauthorized IP address, the Probe will block it and send the
alarm massage to the Console.
0 Main Menu Move to Main Menu.

IPScan Probe 600 User’s Guide
14
2.2.2.1. ARP check Interval [Online](min)/[Offline](min)
It is to define the intervals for IPScan Probe 600 to send out ARP packets to online or offline IP
within the managing segment for the update.
Step1 For Online IP, select 1, [ARP check Interval [Online](min)] from [Ethernet Port No] menu.
System setting. Select a number : 1
Step2 Define interval from 0 to 0-1440 minutes. Default interval is 5 minutes.
Enter the data forwarding interval between 0-1440 minutes : 5
Step3 For Offline IP, Select 2. [ARP check Interval [Offline](min)] from [Ethernet Port No] menu.
System setting. Select a number : 2
Step4 Define interval from 0 to 0-1440 minutes. Default interval is 10 minutes.
Enter the data forwarding interval between 0-1440 minutes : 10
The above configuration means that the Online IP addresses of managed IP range will be
checked every 5 minutes and Offline IP addresses will be checked every 10 minutes.
2.2.2.2. Off range Interval (min)
It is to define how often the probe should forward off range IP being detected within the
managing segment to the server.
Step1 Select 3. [Off range Interval] from [Ethernet Port No] menu.
System setting. Select a number : 3
Step2 Define interval from 0 to 1440 minutes and press [Enter].
¾-1 : Do not forward detected off range IP event to the server.
¾0 : Send off range IP event only once for the same IP after the probe is connected. If there
are other off range IP events, the probe send it once again.
Enter the Off range send interval between -1~1440 minutes.
If this value is -1, This event will be ignored.
Enter the value : 0

IPScan Probe 600 User’s Guide
15
2.2.2.3. Automatic Private IP addressing detection
If your network is using DHCP server to assign IP address, there are instances that some users
are unable to obtain IP addresses. When a host is unable to obtain an DHCP IP, Microsoft
Windows OS automatically assigns an IP (169.254.X.X.).
You have the option to configure the probe to detect the host as off range IP and send event to
the server or simply ignore it.
Step1 Select 4. [Automatic Private IP addressing detection] from [Ethernet Port No] menu.
Automatic Private IP addressing detection
0. On
1. Off
Step2 If you decide to detect 169.254.x.x IPs as a off range IP, choose ‘0’, otherwise choose ’1’.
2.2.2.4. Maximum ARP Packet per sec
IPScan Probe sends out ARP packet within the managing segment to update the status.
Depending on the network condition, excessive ARP packets can affect the network
performance. This menu is to limit the maximum ARP packets being generated by the probe to
maintain the network performance.
Step1 Select 5. [Maximum ARP Packet per sec] from [Ethernet Port No] menu.
System setting. Select a number : 5
Step2 Define the maximum number of ARP packets per sec from 1 to 9999, and it could be different
depending on the size of a network. The recommended number is 5000.
Enter Maximum ARP Packet per sec
Enter the value : 5000

IPScan Probe 600 User’s Guide
16
2.2.2.5. Excess ARP Packet suspension period (sec)
If the probe exceeds the maximum number defined at [2.2.4. Maximum ARP Packet per sec],
you can suspend and control the ARP packet generation for a brief period to prevent traffic
overflow. The probe will not generate more than 100 ARP packets within the period.
Below default setting will suspend ARP generation for one second if the probe exceeds 5,000
packets per second limit.
Assigning a long suspension period might lead to data loss. Therefore, it is recommended to
assign a short period.
Step1 Secelt 6. [Excess ARP Packet suspension period (sec)] from [Ethernet Port No] menu.
System setting. Select a number : 6
Step2 Define suspension period from 1 to 1440 sec. The default value is 1 sec.
Enter Excess ARP Packet suspension period(sec)
Enter the value : 1
2.2.2.6. DHCP Block Alarm (min)
When the Probe is operated as a DHCP Server, the Probe will block or assign temporary IP
address for unauthorized IP address. However, before the Probe block the IP address, it sends
the alarm massage to the Console. You can define the interval for sending an alarm massage.

Step1 Select 7. [DHCP Block Alarm] from [Ethernet Port No]
System setting. Select a number : 7
Step2 Define interval from 0 to 1440 minutes for sending an alarm massage to the Console.
If you define [-1], the alarm massage will not be sent to the Console, and simply ignored.
Enter the DHCP block alarm time between -1~1440 minutes.
If this value is -1, This event will be ignored.
Enter the value : 10
Note

IPScan Probe 600 User’s Guide
17
2.3. LAN
LAN is a must configuration for IPScan Probe 600 to be connected to the network. .
Step1 Select 2. [LAN] from [Main Menu].
Step2 Below screen will appear. Choose Ethernet Port number you wish to define, and then
define the network configuration.
LAN Ethernet Port 1
0. Ethernet Port 1
1. Ethernet Port 2
2. Ethernet Port 3
3. Ethernet Port 4
4. Ethernet Port 5
5. Ethernet Port 6
0. Main Menu
1. IP
2. Netmask
3. Gateway
4. Master Server IP
5. Secondary Server IP
6. Connection Port
7. VLAN ID
8. Master Port
9. Speed
0. Main Menu
MAC Address
Serial No
[192.168.101.20]
[255.255.255.0]
[192.168.101.1]
[192.168.101.10]
[0.0.0.0]
[30001]
[0]
[0]
[Auto]
[00:03:2e-05:02:77]
[VSxxxxxxxxxxxxxx]
No Menu Description
1 IP
2 Netmask Subnet mask
3 Gateway Gateway address.
4 Master Server IP IP address of the master (primary) IPScan Server.
5 Secondary Server
IP
IP address of secondary IPScan Server. This is necessary if you are using
the server redundancy feature.
If you have configured master and secondary server, the probe will
constantly check for master server’s status. If the master server is
disconnected or failed to respond, the probe will automatically be
connected to the secondary server without data loss. Probe will
check the Server if there is an abnormal situation such as
communication failure between the probe and the server. Thus the
probe will not check the Master server without any situation changes
even if the probe is being connected to the Secondary server.
When the Master Server is recovered, the Secondary Server sends
a induction massage to connect to the Master Server to all probes
within managed range.
6 Connection Port The TCP Port for the communication between IPScan Server and Probe.
If you change the port number, you should change it in the [Server
Configuration] of the IPScan Server Monitor.
7 VLAN ID VLAN ID of the segment where the probe is located at. If VLAN is not
relevant, enter ‘0’. The default value is ‘0’.
8 Master Port Define Ethernet Port to communicate with IPScan Server
** The detailed information is on the next page [2.3.1. Master Port].
Note

IPScan Probe 600 User’s Guide
18
9 Speed Network Ethernet speed. Choose from [Auto], [10M-full], [10M-half],
[100M-full] and [100M-half]. Default value is [Auto].
0 Main Menu Move to Main Menu.
MAC Address The MAC address of the Probe.
Serial No The Serial No of each Ethernet Port. It is needed when you change the
Probe.
2.3.1. Master Port
This is the function to define the Ethernet Port for communication between the IPScan Server
the Probe. IPScan Probe 600 has 6 Ethernet Ports; among them you can choose one
communication Port, and assign other 5 Ports for gathering and monitoring the information.
Even if the Ethernet Port was assigned as a Master Port, it can gather and monitor the
information as well.
a. Using only one Ethernet Port
Assign Ethernet Port 1 as a Master Port, and others are not in use. The Master Port will be a
gathering port as well as a communication port.
[0]: Means the current Ethernet Port
is the Master Port.
[1]: Means the number of Ethernet
Port. Ethernet Port 1 is the Master
Port.
In this case, both [0],[1] are fine.
Ethernet Port 1 is only in use, thus all
the network configuration should be
‘0’, and 7. Master Port value should
be [-1] which means this port is not in
use.
Define the same configuration for the
rest of other Ports.
Ethernet Port 1
1. IP
2. Netmask
3. Gateway
4. Master Server IP
5. Secondary Server IP
6. VLAN ID
7. Master Port
8. Speed
0. Main Menu
MAC Address
[192.168.101.20]
[255.255.255.0]
[192.168.101.1]
[192.168.103.10]
[0.0.0.0]
[0]
[0] or [1]
[Auto]
[00:03:2e-05:02:77]
Ethernet Port 2 or others
1. IP
2. Netmask
3. Gateway
4. Master Server IP
5. Secondary Server IP
6. VLAN ID
7. Master Port
8. Speed
0. Main Menu
MAC Address
[0.0.0.0]
[0.0.0.0]
[0.0.0.0]
[0.0.0.0]
[0.0.0.0]
[0]
[-1]
[Auto]
[00:03:2e-05:02:78]
①

IPScan Probe 600 User’s Guide
19
b. Using Multi Ethernet Ports
Assign Ethernet Port 1 as the Master Port, and other Ports are for gathering information and
send it to the Ethernet Port1 (Master Port).
Define [0] or [1] to assign Ethernet
Port 1 as a Master Port.
Define [1] to assign Ethernet Port 1
as a Master Port, and other network
configuration should be [0] since if
you define the network configuration,
this Port will communicate with the
Server. Thus for gathering and
Monitoring, just define [0].
Ethernet Port 1
1. IP
2. Netmask
3. Gateway
4. Master Server IP
5. Secondary Server IP
6. VLAN ID
7. Master Port
8. Speed
9. Main Menu
MAC Address
[192.168.101.20]
[255.255.255.0]
[192.168.101.1]
[192.168.103.10]
[0.0.0.0]
[0]
[0]
[Auto]
[00:03:2e-05:02:77]
Ethernet Port 2 or others
1. IP
2. Netmask
3. Gateway
4. Master Server IP
5. Secondary Server IP
6. VLAN ID
7. Master Port
8. Speed
0. Main Menu
MAC Address
[0.0.0.0]
[0.0.0.0]
[0.0.0.0]
[0.0.0.0]
[0.0.0.0]
[0]
[1]
[Auto]
[00:03:2e-05:02:78]
①
②

IPScan Probe 600 User’s Guide
20
c. Master Port is only for the communication
Assign Ethernet Port1 as a Master Port. This Master Port is not for the gathering, but just
communicates with the server.
.
Define [-1] for Master Port, which
means the port will not gather the
information
Define [1] for other Ports. Thus the
other Ethernet Ports will gather
information and send it to Master
Port.
d. Each Ethernet Port is the Master Port
You can assign each Ethernet Port as a Master Port which will be the gathering port as well as the
communication port.
Define [0] for each Ethernet Port
which means the current port is
the Master Port.
Ethernet Port 1
1. IP
2. Netmask
3. Gateway
4. Master Server IP
5. Secondary Server IP
6. VLAN ID
7. Master Port
8. Speed
0. Main Menu
MAC Address
[192.168.101.20]
[255.255.255.0]
[192.168.101.1]
[192.168.103.10]
[0.0.0.0]
[0]
[-1]
[Auto]
[00:03:2e-05:02:77]
Ethernet Port 2 or others
1. IP
2. Netmask
3. Gateway
4. Master Server IP
5. Secondary Server IP
6. VLAN ID
7. Master Port
8. Speed
0. Main Menu
MAC Address
[0.0.0.0]
[0.0.0.0]
[0.0.0.0]
[0.0.0.0]
[0.0.0.0]
[0]
[1]
[Auto]
[00:03:2e-05:02:78]
Ethernet Port 1 or others
1. IP
2. Netmask
3. Gateway
4. Master Server IP
5. Secondary Server IP
6. VLAN ID
7. Master Port
8. Speed
0. Main Menu
MAC Address
[192.168.101.20]
[255.255.255.0]
[192.168.101.1]
[192.168.103.10]
[0.0.0.0]
[0]
[0]
[Auto]
[00:03:2e-05:02:77]
①
②