Allot SG-9100, Hardware Manual

Page 1: ...Service Gateway SG 9100 Hardware Guide ...

Page 2: ......

Page 3: ...F REVENUE OR ANTICIPATED PROFITS OR LOST BUSINESS EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES Copyright Copyright 1997 2017 Allot Communications All rights reserved No part of this document may be reproduced photocopied stored on a retrieval system transmitted or translated into any other language without a written permission and specific authorization from Allot Communications Ltd Trademar...

Page 4: ...e table below Document updates are released in electronic form from time to time and the most up to date version of this document will always be found on Allot s online Knowledge Base To check for more recent versions login to the support area www allot com support html and from the knowledgebase tab enter the title of this document into the search field Doc Release Document Build Date Summary of ...

Page 5: ... Bypass Unit 3 2 HD 16 Fiber Bypass Unit 3 3 External Bypass Control Cabling 3 5 CHAPTER 4 POWER CONNECTIVITY PLANNING 4 1 Power Source Requirements 4 1 Electrical GroundingRequirements 4 2 Cable and Cord Specifications 4 2 AC Power Cord Specifications 4 2 CHAPTER 5 PREPARATION AND INSTALLATION 5 1 Unpacking the SG 9100 5 1 Mounting the SG 9100 5 2 Space and Airflow Requirements 5 2 Rack Mounting ...

Page 6: ...SM 6 6 CHAPTER 7 TECHNICAL INFORMATION 7 1 Technical Specifications 7 1 Safety Certifications 7 2 Environmental Certifications 7 2 Laser Safety Requirements 7 3 Laser Classification 7 3 Laser Information 7 3 Laser Safety Statutory Warning 7 3 Training for Laser Safety 7 3 Laser Device Operating Precautions 7 3 ...

Page 7: ... 2 4 Fiber Cable Release Tool 2 4 Figure 2 6 SG 9100 AC Power Feed 2 5 Figure 3 1 HD 8 Fiber Bypass Unit 3 2 Figure 3 2 HD 16 Fiber Bypass Unit 3 3 Figure 3 3 Allot USB Bypass Cable 3 5 Figure 4 1 IEC 320 C13 to C14 Power Cord 4 2 Figure 6 1 Active Redundancy Links 6 3 Figure 6 2 SG 9100 Interfaces 6 3 Figure 6 3 System Information 6 7 Figure 6 4 TSM Settings 6 7 Figure 6 5 TSM System Status Scree...

Page 8: ......

Page 9: ... based Allot Service Gateway enabling you to roll out Security as a Service as well as other revenue generating services rapidly and cost effectively while you lower your total cost of ownership and accelerate ROI Powerful and cost efficient service delivery platform Real time Layer 7 application visibility policy enforcement and charging Real time visibility of encrypted traffic Supporting turnke...

Page 10: ...power connections to the SG 9100 are from the rear of the device so there must be adequate space behind the unit for safe access at all times Packing List Verify that the following items are included with the SG 9100 SG 9100 System Pair of AC power IEC 320 C13 C14 cables One or Two Bypass units Multi Mode Single Mode or Copper and appropriate cables to connect to the SG 9100 Up to 12 SFP SFP Optic...

Page 11: ... 8P Bypass 8 x 9 125 SM fiber optic cross cable Allot P N C411029 included Full Duplex LC to Full Duplex LC Connectors 16P Bypass 16 x 9 125 SM fiber optic cross cable Allot P N C411029 included Full Duplex LC to Full Duplex LC Connectors 8P Bypass 8 x CABLE STR CAT6 2x RJ45 1M Allot PN C411019 included Dual RJ45 Connectors Service Gateway s Bypass Connector to Bypass Unit USB Bypass Cable Allot P...

Page 12: ...te SG TRNSCV 1G SX A SG TRNSCV 1G LX5 A 1G Copper 10 100 1000 SG TRNSCV 1G COP A NOTE 1G Copper interfaces may only use the 8 Port Bypass Unit if available limiting the number of ports which may be used on the SG 9100 Connectors The SG 9100 s 8 port and 16 port Fiber Bypass Units use Multi Mode fiber MM or Single Mode fiber SM dual LC Connectors The 24 port Fiber Bypass unit uses MTP Fiber connect...

Page 13: ...included with the SG 9100 SG 9100 System The SG 9100 is provided with the Allot Service Gateway software pre installed Pair of AC power IEC 320 C13 C14 cables One or Two Bypass units Multi Mode Single Mode or Copper and appropriate cables to connect to the SG 9100 Up to 12 SFP SFP Optical Transceivers either SR LR SX or LX5 Fiber or Copper transceivers NOTE All Transceivers MUST be provided by All...

Page 14: ...lid green Power is On Off Power is Off Off No network activity Front Panel Connectors There are no connectors on the front panel of the SG 9100 NOTE Since the SG 9100 has only 2 USB ports on the read of the server these ports are designated for bypass unit connectivity only They cannot be used for anything else such as keyboard mouse even if there is no bypass unit being connected to any of the po...

Page 15: ...opper network or steering interfaces On all ports the TX connection is on the left and the RX connection is on the right In the NetXplorer SG 9100 ports are labeled L1 through L12 Transceivers for multiple interface types may not be installed on the same card but a mixture of cards using 1G Fiber transceivers 10G Fiber transceivers and 1G Copper transceivers may be installed in the same SG 9100 Fo...

Page 16: ...be connected first followed by L3 L2 and finally L1 M1 M2 are two RJ 45 connectors 1G Copper which may be used for system monitoring and maintenance M2 acts as a redundant port for M1 Rear USB Ports should only be used to connect the SG 9100 to the Bypass unit ONLY TSM Port is used to connect the TSM system to the Network For more information see Accessing the SG 9100 via the TSM on page 6 6 CAUTI...

Page 17: ...n The Power Supply is connected to the AC Power Source Off The Power Supply is disconnected from the AC Power Source Power Output DC LED Solid Green The SG 9100 is On or the Power Supply is working Normally Blinking Green The Power Supply is on Redundancy Mode Off The SG 9100 is Off or the Power Supply is malfunctioning Fault LED Solid Amber The Power Supply has failed Off The Power Supply is work...

Page 18: ......

Page 19: ...nks 16 ports and an HD 8 Fiber Bypass Unit supports up to 4 links 8 ports In terms of Management all Bypass units are connected to the SG 9100 via a single USB cable NOTE If you have mix of Single Mode and Multi Mode optical interfaces in a single SG 9100 system then you will need to split them into groups and connect them to appropriate Bypass according to interface type i e all Single Mode ports...

Page 20: ...HD 8 Bypass Unit is a passive optical device with no need for external power connection It is powered by the SG 9100 as long as it is Active It will move automatically to bypass mode when SG 9100 is powered off or by being forced to bypass mode as protective action is taken There is no way to have a single link go into bypass independently When moving to Bypass mode all links are switched into Byp...

Page 21: ...tional units are required NOTE A single SG 9100 will only require 6 links In addition the HD 16 Fiber Bypass Unit includes two D type 9 pin connectors DB 9 for connection to the SG 9100 via special DB 9 USB cables available from Allot The HD 16 Fiber Bypass Unit is a passive optical device with no need for external power connection It is powered by the SG 9100 as long as it is Active It will move ...

Page 22: ...ink and External is on the right In addition please note that the in each Duplex LC connector on the Bypass unit s front panel the Tx connector is the left LC connector and the Rx is the right LC connector System Ports 1 16 connect to the SG 9100 Be sure to insert the Internal and External connectors into the correct ports on the Bypass Unit Internal is on the left of each link and External is on ...

Page 23: ...ypass Units are connected to the SG 9100 by a Single USB Unit Cable 1 1 connected to the Primary port on the Bypass Unit and one of the two USB ports on the rear of the SG 9100 WARNING To avoid damage use ONLY the cable provided with the Bypass Unit for connection to the SG 9100 Figure 3 3 Allot USB Bypass Cable ...

Page 24: ......

Page 25: ...ge to the equipment do not overload the AC supply branch circuit that provides power to the rack Consult the electrical authority having jurisdiction over wiring and installation requirements of your facility CAUTION Protect the server from power fluctuations and temporary interruptions with a regulating uninterruptible power supply This device protects the hardware from damage caused by power sur...

Page 26: ...distributiondevices used in the installation such as branch wiring and receptacles are listed or certified grounding type devices Because of the high ground leakage currents associated with multiple servers connected to the same power source Allot recommends the use of a PDU that is either permanently wired to the building s branch circuit or includes a non detachable cord that is wired to an indu...

Page 27: ...d attachment plug cap length must not exceed 4 5 m 15 ft For a cord set assembly the cords must be protected against physical damage and arranged in appropriate cable ducts Connector Wall outlet end Cords must be terminated in an industrial grounding type male plug designed for use in your region Connector unit end The connectors that plug into the AC receptacle on the unit must be an approved IEC...

Page 28: ......

Page 29: ...packing After the equipment arrives at the installation site carefully inspect each carton for signs of shipping damage If the package is damaged document the damage with photographs and contact the transport carrier immediately Remove all items from the box If any items listed on the purchase order are missing notify Allot customer service immediately Inspect the product for damage If there is da...

Page 30: ... front of the rack Leave a minimum clearance of 76 2 cm 30 in behind the rack Leave a minimum clearance of 121 9 cm 48 in from the back of the rack to the back of another rack or row of racks The SG 9100 draws in cool air through the front door and expel warm air through the rear door Therefore the front and rear rack doors must be adequately ventilated to allow ambient roomair to enter the cabine...

Page 31: ...ulate the rack from the bottom to the top Install the server into the rack Connect the power cord to the rear of the server WARNING To reduce the risk of electric shock fire or damage to the equipment do not plug telephone or telecommunications connectors into RJ 45 connectors AVERTISSEMENT Pour limiter les risques d électrocution d incendie ou de détérioration du matériel évitez de brancher des c...

Page 32: ...nchez le cordon d alimentation dans une prise électrique mise à la terre et facilement accessible à tout moment Débranchez le cordon d alimentation du bloc d alimentation pour déconnecter le matériel de toute source d alimentation Acheminez le cordon d alimentation en dehors des lieux de passage et loin de tout objet pouvant le comprimer ou le pincer Faites particulièrement attention à la fiche à ...

Page 33: ...k connecting to the Router and Switch via the Network ports for each Link 3 Connect the In line platform to the bypass with ethernet cables using the System ports for each Link Connect the Bypass management cable to the Primary port on the Bypass and the USB port on the SG 9100 Keep the In line platform turned off while connecting the cables NOTE When the In line platform is powered on it validate...

Page 34: ...alfunction the network redundancy mechanism for example spanning tree will ensure that traffic is routed or switched via the other link and managed by the second Service Gateway Since both Service Gateways maintain a constant view of the two links there will be no loss of flow s state and other information required for correct shaping and application classification In the Active Redundancy configu...

Page 35: ...ing and classification purposes All other links work in the same way with L1 and L2 on a NIC card passing actual traffic and L3 and L4 duplicating the traffic and so on NOTE If the Service Gateway Active Redundancy mechanism is implemented a bypass unit should not be used This ensures that the network is made aware of any failure and is able to smoothly transfer traffic to the secondary link Figur...

Page 36: ...firm that the Enable Bypass Unit checkbox is not selected Click Save The system will reboot After rebooting you can view the changes from the Configuration tab For more information concerning Service Gateway configuration via NetXplorer see the NetXplorer Operation Guide Via AOS CLI To configure Active Redundancy Log into the Service Gateway and enter the following commands To disable the bypass u...

Page 37: ...sources to have full power redundancy Press the Power On Standby button The Power LED will flash green during the boot up process and then become steady green when the system is ready During the initial boot it is possible to modify the server configuration ROM default settings press the F9 key in the POST screen to enter the UEFI System Utilities screen By default the System Utilities menus are i...

Page 38: ...console connection NOTE Since the SG 9100 has only 2 USB ports on the read of the server these ports are designated for bypass unit connectivity only They cannot be used for anything else such as keyboard mouse even if there is no bypass unit being connected to any of the ports This means that the initial IP configurations will have to be done using the TSM After that everything can be done using ...

Page 39: ...or and a keyboard mouse via the rear USB ports Turn on the SG 9100 Press F1 as soon as you see the Lenovo logo screen On the following screen select TSM Settings Figure 6 3 System Information On System Configuration screen select TSM Network Settings Figure 6 4 TSM Settings ...

Page 40: ...ce Go to the PC that you will be accessing TSM from remotely and open the Java Control Panel Start Control Panel Java Move to the Security tab Click Edit Site List The Exception Site List appears Click Add and type in the SG 9100 URL as follows http IP OF SG Click OK to add the SG 9100 to the allowed hosts list Open a web browser In the address field type type the IP address or host name of the TS...

Page 41: ... Screen Click on the arrow on the right of the screen to access the menu options if desired Click the Launch button to open the Remote Console opens where you can log in to the Allot CLI for device configuration Figure 6 6 Remote Console Configuring the SG 9100 ...

Page 42: ...rver IP addresses ip type ip mask vlan set IP netmask VLAN ID Examples To set the IP address of the SG 9100 sysadmin host prc go config ips ip SG IP ADDRESS MASK To set the gateway IP sysadmin host prc go config ips g GATEWAY IP ADDRESS To set the DNS server sysadmin host prc go config ips dns DNS IP ADDRESS To set the NTP server sysadmin host prc go config ips ts NTP IP ADDRESS Working with 1G Co...

Page 43: ...g CLI command copperPortsCfg sh c enable Reboot the SG 9100 by entering the following command ac_reboot After the SG 9100 has rebooted configure the 1G Copper ports as auto auto using the following command go config nic nic s label auto auto For example go config nic P1 L1 auto auto ...

Page 44: ...port The management port is selected and configured using the following CLI command go config nic Label Mode Speed FailureAction PortUsage Acceptable Labels are M1 M2 M3 or M4 Acceptable values for Mode are full Acceptable values for Speed are 10000 Acceptable values for Failure Action are none Acceptable values for Port Usage are management For example go config nic M3 full 10000 none management ...

Page 45: ...e Console Enter sysadmin for the login and the sysadmin password default is sysadmin and then press Enter Enter passwd and then press Enter Enter a new password and press Enter The password must be between 5 and 8 characters You can use a combination of upper and lower case letters and numbers Re enter the new password and press Enter TIP You can further protect access to the Service Gateway by li...

Page 46: ......

Page 47: ...wo HD 8 units 8 fiber optic ports 4 links OR HD 16 16 fiber optic ports 8 links HD 8 Bypass Unit External 1U 19 rack mount 2 44kg 5 38lb HD 16 Bypass Unit External 1U 19 rack mount 2 64kg 5 82lb HD 24 Bypass Unit External 1U 19 rack mount 2 86kg 6 3lb POWER Input Dual Hot Plug Redundant 100 240VAC or 48VDC efficiency of up to 94 Energy star 80PLUS 800W Power Supply Units 2 Load Sharing Redundancy ...

Page 48: ...Relative humidity RH 8 to 80 Maximum Altitude Operating relative humidity 8 to 80 Operating altitude 3 048 m Safety Certifications Normative Standards UL 60950 1 2006 A1 2010 A11 2009 A12 2011 A2 2013 EN60950 1 2006 A11 2009 A1 2010 A12 2011 A2 2013 Environmental Certifications Environmental RoHS WEEE compliance China ROHS REACH EU 1907 2006 ...

Page 49: ...ough protective devices generally prevent direct exposure to the beam personnel must strictly observe the applicable safety precautions and in particular must avoid staring into optical connectors either directly or using optical instruments Remember that observing safety precautions is not a matter of personal choice ignoring safety puts all the people within line of sight in danger Training for ...

Page 50: ...ure des ports optiques lorsque aucun câble à fibres optiques n est connecté Évitez de vous y exposer et ne fixez pas les ouvertures Warnung Wenn kein Faserkabel angeschlossen ist können aus der Öffnung der optischen Anschlüsse Laserstrahlen austreten Vermeiden Sie Bestrahlungen und schauen Sie nicht in diese Öffnungen Avvertenza Le aperture delle porte ottiche possono emettere radiazioni laser inv...

Page 51: ...Allot SG 9100 Hardware Guide 7 1 ...