Datacom Systems VS-1200 Series, User Manual

Page 1: ... 2009 Datacom Systems Inc Datacom Systems Inc Access Your Network TM October 2009 guide VS 1200 Series Data Access Switch 541 0127 U A 01 USER VS 1200 Series Data Access Switch ...

Page 2: ......

Page 3: ... input or output ports Aggregation offers a complete view of the traffic and easily lets security and analysis tools collect all the data they need expanding network visibility The Datacom System VERSAstream VS 1200 Data Access Switch series supports your ability to specifically apply your peripheral network tools to the analysis requirements and adapt with your ever changing network ...

Page 4: ...no claim to these trademarks While every precaution has been taken in the preparation of this document the publisher and the author assume no responsibility for errors or omissions or for damages resulting from the use of information contained in this document or from the use of programs and source code that may accompany it In no event shall the publisher and the author be liable for any loss of ...

Page 5: ... 1200 Series Front Panels 14 2 Front Panel Description 14 Power 14 Any to Any Ports 15 Management Port 15 3 Rear Panel Description 16 Serial DB9 16 Power Switch SFP series 16 Rear Label BT series 16 Rear Labeling SFP series 16 Input Power Section 4 Initial Configuration 17 17 1 Command Line Interface CLI 17 Basic Functionality 18 Password Recovery 18 Basic Commands Read Only Access 18 HELP HE or 1...

Page 6: ...IP Address Configuration 28 IP Address Configuration with HyperTerminal 32 IP Address Configuration with TELNET 36 5 Exercise CLI Setting Ports 40 6 Small Form Factor Plug Module 40 Intallation Prerequisites 40 Safety Guidelines 41 Installing the SFP Module 41 Removing the SFP Module Section 5 Hardware Installation 43 43 1 Power 43 2 Any to Any Connection 44 3 Management Connection Section 6 VS 12...

Page 7: ... technology described and Datacom Systems Inc retains all rights with respect to the technology described herein If applicable you may return the product to the place of purchase for a full refund 1 3 Trademark Attribution Access Your Network DS3 ACTIVEtap DS3switch ETHERNETtap Empowering Network Professionals FDDIswitch FIBERsplitter FIBERswitch FIBERSWITCH system FLOWcontrol GIGABITswitch INSERT...

Page 8: ...e Directive 98 68 EEC requirements to the standards of EN 60950 Safety of Information Technology Equipment The RoHS compliant logo indicates that this electronic product does not exceed the limit requirements of toxic hazardous substances or elements as set forth in Directive 2002 95 EC of the European Parliament and of the Council of 27 January 2003 on the restriction of the use of certain hazard...

Page 9: ...ollect data from the same network segments at the same time eliminating contention for access to the network Also these ports can be configured as more input ports to include more network segments for monitoring Network administrators no longer need a separate tool for each network segment to achieve simultaneous 24x7 monitoring of multiple links nor do they need to switch to a different segment t...

Page 10: ...th one tool know exactly what is happening to data as it moves through your network View all the data from multiple network segments allows you to monitor and analyze traffic from asymmetric routing paths load balanced applications and redundant environments Any to Any ports allow Gigabit devices to simultaneously monitor the same links providing extended security and analysis options while elimin...

Page 11: ...e Temperature 22º to 149 F 30º to 65 C Operating Range Relative Humidity 5 to 90 non condensing Dimensions H x W x D includes RMC 2 rack mount bracket 1 750 x 7 950 x 7 775 inch 4 44 x 20 19 x 19 75 cm Weight 1 5 lbs shipping 6 5 lbs 0 68 kg shipping 2 95 kg Warranty Two 2 years see Warranty section for details 2 5 VS 1200 Series Model Specific Specifications VS 1204BT Any to Any Ports 4 10 100 10...

Page 12: ......

Page 13: ...e 13 2009 Datacom Systems Inc 3 Hardware Front panel images of the VS 1200 series are provided in this section 3 1 VS 1200 Series Front Panels VS 1204BT VS 1204SFP VS 1206SFP VS 1208BT VS 1210BT SFP VS 1210SFP ...

Page 14: ...gle point of failure The power barrel sockets are located on the rear 3 2 2 Any to Any Ports Designated as INPUT or OUTPUT by Superuser for use as input or output ports See Serial and Management Port Command Line Interface Superuser Commands SET PORT MONITOR SE PO MO section for more information Ports 1 to 8 VS 1210BT SFP or VS 1208BT Ports 1 to 4 VS 1204BT are RJ45 connectors used for connection ...

Page 15: ...en data is passed The LED located below and slightly right of center of the SFP connectors indicates the line speed of each port See the Any to Any SFP LED Display Code table for LED display codes 3 2 3 Management Port The MANAGEMENT PORT is an RJ45 socket used for 100 Mbs full duplex connection with a straight through LAN cable via your management LAN to a Remote Management Console which is a sta...

Page 16: ...ed on this rear label 3 3 4 Rear Labeling SFP series Serial Number SN identifier Media Access Control MAC address identifier input power requirements certification compliance identifiers and various other information are provided on this rear label 3 3 5 Input Power Two DC input power sockets are provided on the rear panel The front panel POWER 1 and 2 LEDs are illuminated green respectively SFP s...

Page 17: ... VS 1200 series factory default is off for all Any to Any ports 4 1 1 Basic Functionality Window Size Functionality The CLI window is limited to 24 lines per screen and 80 characters per line If more data than can fit is presented a more prompt is shown on the last line Character Handling Printable character ASCII code 32 126 and non printable noted below Non Printable Character Description enter ...

Page 18: ...long form or the shortcut form are entered after the prompt default at the cursor No auto fill mode is available After the topic heading a brief overview of the command display function is given followed by an example Example command input 4 1 3 1 HELP HE or When this command is entered a list of commands their shortcut inputs and their descriptions will display For the use and application of each...

Page 19: ...ort MAC address Management port IP Address Management port IP Subnet Management port IP Default Gateway Management port IP Port Example SH Date Time 10 09 2007 12 05 31 Product VS 1210BT SFP Serial Number 9326023 Version 5 2 0 0 MAC Address 00 14 E2 0C 0D 0E IP Address 192 168 1 1 IP Subnet 255 255 255 0 IP Default Gateway 0 0 0 0 IP Port 2370 4 1 3 3 SHOW PRODUCT SH PR This displays the name seri...

Page 20: ... Address 192 168 1 50 IP Subnet 255 255 255 0 IP Default Gateway 192 168 1 2 IP Port 2370 4 1 3 6 SHOW GROUPS SH GR This command displays all ports as designated by the administrator Superuser as belonging to the same logical group Specifically groups can be configured as if they were a single logical port enabling a high degree of control during both the initial setup and all subsequent moves or ...

Page 21: ...g status Example SH PO CO 01 Port 1 CFG 1G Full Duplex Current No Link Type Tap 1 2 Group Member TAP Copies to 2 5 6 7 8 9 10 VLAN Tag Stripping OFF 02 Port 2 CFG 1G Full Duplex Current No Link Type Tap 2 1 Group Member TAP Copies to 1 5 6 7 8 9 10 VLAN Tag Stripping OFF Press any key 4 1 3 8 SHOW PORT ROUTING SH PO RO This command displays all port interface routing in a brief matrix summary as s...

Page 22: ...ult password is password Then the Superuser prompt is displayed It looks exactly like the basic prompt except the prompt end has turned from to as shown below SU SU Enter Password 4 1 4 2 SU SET PASSWORD SU SE PA This command is used to change the Superuser access password as shown SU SET PASSWORD SU SE PA Example SU SE PA Warning Modification of the SU password has serious consequences if the pas...

Page 23: ...nnn nnn nnn nnn SET GATEWAY SE GA Default Gateway nnn nnn nnn nn n Example SE IP 172 169 50 134 IP will be updated at end of session SE SU 255 255 0 0 Subnet Mask will be updated at end of session SE GA 172 169 50 1 Default Gateway will be updated at end of session Or the parameters can also be entered jointly i e IP Address Subnet Mask Default Gateway but entry must be in the proper sequence orde...

Page 24: ...lowing 10HALF 10FULL 100HALF 100FULL 1000FULL AUTO Example SE PO SP 4 6 7 8 100HALF Speed set for port s 4 6 7 8 4 1 4 10 SET PORT MONITOR SE PO MO This command sets the data routing by selecting the port output on which the monitoring device is to be located as well as ports input TAPS SPAN to be redirected to that monitor port As part of this command there is a command separator FROM or if the O...

Page 25: ... not used A maximum of 10 groups is allowed Groups as designated by the administrator Superuser belong to the same logical group Specifically groups can be configured as if they were a single logical port enabling a high degree of control during both the initial setup and all subsequent moves or changes as shown SET PORT GROUP SE PO GR group name OFF or CONTAINS port list Example SE PO GR DatacomP...

Page 26: ...minal emulation application and create a connection with settings that fit your needs 4 2 1 HyperTerminal The following example utilizes Microsoft HyperTerminal Any freely available terminal emulator may be utilized but please take note of the specific HyperTerminal setup settings if an alternate terminal emulator is used HyperTerminal terminal emulator enter 9600 bits per second 8 data bits Parit...

Page 27: ... if an alternate terminal emulator is used IMPORTANT For Host Address if initial IP Address HAS NOT BEEN configured use 192 168 1 1 default or if initial IP Address HAS BEEN configured use the Local Area Network address input during initial IP Address configuration HyperTerminal terminal emulator enter TCP IP Winsock Host Address nnn nnn nnn nnn i e 192 168 1 1 or Local Area Network Port Number 23...

Page 28: ...e found in the IP Address Configuration section 4 4 IP Address Configuration All VS 1200 series are shipped with a factory default configuration as follows IP Address 192 168 1 1 Subnet Mask 255 255 255 0 Default Gateway 0 0 0 0 IMPORTANT If you expect to remotely connect to the VS 1200 series you must change the IP Address Subnet Mask and Default Gateway to match your Local Area Network as descri...

Page 29: ...on your PC and connect the DB9 Male pin to the SERIAL port on the unit NOTE For PCs without 9 pin serial ports check with your product representative for available sources of a USB to RS 232 Plug in Adapter Step 3 Open the HyperTerminal application on your PC by selecting START All Programs Accessories Communications HyperTerminal Step 4 Name a new HyperTerminal connection and select OK ...

Page 30: ...then click OK Step 7 You are now connected hit the Enter key twice in succession i e Enter Enter to display the Enter Username prompt All Usernames and passwords are case sensitive Type Administrator default value and press the Enter key At the Enter Password prompt type admin default value and press the Enter key to display the command line prompt At the command line prompt type su and press the ...

Page 31: ...teway Press the Enter key to continue Step 11 SHOW SH by typing sh and press the Enter key to display and affirm that the pending IP Address IP Subnet and IP Default Gateway match the intended Local Area Network input IP Address IP Subnet and IP Default Gateway Step 12 If the pending IP Address is not correct repeat Step 8 if the pending IP Subnet is not correct repeat Step 9 and if the pending IP...

Page 32: ...en network location 4 4 2 IP Address Configuration with TELNET The IP address of the configurable series can be configured via a RJ45 connection with a TELNET application available on most Windows PCs or an open source free software terminal emulator for MS Windows Step 1 Connect the VS 1200 with one of the supplied switching AC adapters and AC line cords into an external power source Either POWER...

Page 33: ...RT Control Panel Network Connections Step 4 Right click the Local Area Connection and from the drop down menu select Properties Highlight Internet Protocol TCP IP and highlight and click the Properties box Check the button Use the following IP Address Use IP Address 192 168 1 5 and Subnet Mask 255 255 255 0 Click OK ...

Page 34: ...cessories Command Prompt Step 6 In the Command Prompt window at the prompt enter TELNET and hit the Enter key To see a list of available Microsoft Telnet Client Commands at the prompt enter and hit the Enter key Supported commands will be displayed Step 7 At the Command Prompt window prompt enter o 192 168 1 1 and hit the Enter key ...

Page 35: ...ble commands at either the or command line prompt type and press the Enter key Step 9 SET IP SE IP by typing se ip xxx xxx xxx xxx corresponding to a valid IP address for your network Press the Enter key to continue Step 10 SET SUBNET SE SU by typing se su xxx xxx xxx xxx corresponding to your network s subnet mask Press the Enter key to continue Step 11 SET GATEWAY SE GA if needed by typing se ga...

Page 36: ...Enter key to save the network address changes which ends the connection session as indicated in a few seconds by the Windows informational message balloon pop up icon Local Area Connection A network cable is unplugged Step 15 Close TELNET Step 16 Disconnect the DRL512 2M R serial cable Step 17 Install the VS 1200 series in your chosen network location 4 5 Exercise CLI Setting Ports PREMISE The con...

Page 37: ... handle both sides of the network conversation at once Port 7 and 8 s Network IDS s network interface cards cannot handle the whole conversation at once and must use two separate NICs for each side of the conversation It can be setup either way to fit your network devices tools requirements CONFIGURATION For the connections to be properly set use the syntax below in the Command Line Interface CLI ...

Page 38: ...o previous settings present go through Ports 1 10 and set them to OFF as shown SET PORT MONITOR 1 OFF SET PORT MONITOR 2 OFF SET PORT MONITOR 3 OFF SET PORT MONITOR 4 OFF SET PORT MONITOR 5 OFF SET PORT MONITOR 6 OFF SET PORT MONITOR 7 OFF SET PORT MONITOR 8 OFF SET PORT MONITOR 9 OFF SET PORT MONITOR 10 OFF Now you can begin setting the Tap and Monitor ports as to which port inputs the data and w...

Page 39: ...ut for Port 2 s input output which is set with this syntax SET PORT MONITOR 8 FROM 2 Port 9 is set as output for Ports 1 and 2 s input output which is set with this syntax SET PORT MONITOR 9 FROM 1 2 Port 10 is set as output for Ports 1 2 3 and 4 s input which is set with this syntax SET PORT MONITOR 10 FROM 1 2 3 4 As a quick check show port routing interface matrix with this syntax SH PO RO Outp...

Page 40: ...elines you should observe before you install an SFP module in your VS 1200 series unit NOTE You can install and remove SFP modules with power on to the system however it is strongly recommended that you do not install or remove the SFP module with fiber or copper cables attached to it Disconnect all cables before removing or installing a SFP module CAUTION Prevent system problems use only Datacom ...

Page 41: ...ompleted Step 3 Attach the appropriate network cable to the LC type or RJ45 type connector on the SFP module For fiber optic SFP modules you can use either simplex or duplex connectors For simplex connectors two cables are required one cable for transmit Rx and a second cable for receive Rx For duplex connectors only one cable that has both Tx and Rx connectors is required 4 6 4 Removing the SFP M...

Page 42: ......

Page 43: ...ilable at both the two rear DC power sockets Either POWER 1 or 2 LED not illuminated when powered indicates a defective power source and immediate investigation as to the cause is required to insure redundant power integrity 1 Step 1 Using the supplied Power Adapters and AC Line Cords plug the VS 1200 series into different circuit external power sources Although only one power supply is required t...

Page 44: ...d line speed of each port See the Any to Any Port LED Display Code table for LED display codes 5 3 Management Connection This section shows the MANAGEMENT port 100 Mbs Full Duplex connection of the typical VS 1200 configurable series hardware installation Step 1 Connect a network cable to the MANAGEMENT port RJ45 socket The MANAGEMENT port RJ45 left LED illuminates green when link has been establi...

Page 45: ...VS 1200 Series Functional Drawing 45 2009 Datacom Systems Inc 6 VS 1200 Series Functional Drawing VS 1210BT BT SFP VS 1210SFP VS 1208BT VS 1206SFP ...

Page 46: ...VS 1200 Data Acccess Switch 46 2009 Datacom Systems Inc VS 1204BT VS 1204SFP ...

Page 47: ...ccess from the users and server to server traffic GOAL This application will use a VS 1210BT SFP as follows 1 TAP access to critical server 2 Aggregate SPAN 3 Provide access for analysis security and recording devices The first goal requires an external tap between the server switch and the critical financial server The tap copies all the data going to the financial server and can t be shutdown li...

Page 48: ...ion open HyperTerminal on your Management PC using the VS 1210BT SFP SERIAL DB9 port Settings are found in the Initial Configuration SERIAL Port Configuration DB9 HyperTerminal section Press twice Enter key and Enter key Enter Username default Administrator and Enter key Enter Password default admin and Enter key Default prompt is the symbol Enter superuser mode type su and Enter key Enter Passwor...

Page 49: ... Port 8 is set as output for Port 3 s input which is set with this syntax SET PORT MONITOR 8 FROM 3 Port 9 is set as output for Port 3 s input which is set with this syntax SET PORT MONITOR 9 FROM 3 Port 10 is set as output for Ports 1 2 and 3 s input which is set with this syntax SET PORT MONITOR 10 FROM 1 2 3 CONCLUSION The VS 1210BT SFP provides the ability to aggregate data streams from TAPs a...

Page 50: ...r bound access from the users and view server to server traffic GOAL This application will use a VS 1210SFP as follows 1 Fiber TAP access to optical networks 2 Aggregate traffic to provide access for analysis security and recording devices The first goal requires an external fiber taps between the optical network devices The tap makes a copy of all the data going to the financial server and can no...

Page 51: ...user prompts For Configuration open TELNET on your Management PC and open a hostname connection with the VS 1210SFP MANAGEMENT RJ45 port Settings are found in the Initial Configuration MANAGEMENT Port Configuration RJ45 TELNET section Enter Username default Administrator and Enter key Enter Password default admin and Enter key Default prompt is the symbol Enter superuser mode type su and Enter key...

Page 52: ... Port 7 is set as output for Port 2 and 4 s input which is set with this syntax SET PORT MONITOR 7 FROM 2 4 Port 8 is set as output for Port 2 and 4 s input which is set with this syntax SET PORT MONITOR 8 FROM 2 4 Port 9 is set as output for Port 1 2 3 and 4 s input which is set with this syntax SET PORT MONITOR 9 FROM 1 2 3 4 Port 10 is set as output for Ports 4 s input which is set with this sy...

Page 53: ...urn it to you freight collect DSI shall have no responsibility for any deficiency resulting from accidents misuse modifications power disturbances including use of a power supply not specified by DSI or various other forms of disaster e g earthquakes floods etc PLEASE DO NOT ATTEMPT TO RETURN ANY ITEM PRIOR TO RECEIVING A RETURN MATERIAL AUTHORIZATION RMA NUMBER FROM DATACOM CUSTOMER SERVICE AT 31...

Page 54: ...Datacom Systems Inc 9 Adler Drive East Syracuse NY 13057 TEL 315 463 9541 FAX 315 463 9557 http www datacomsystems com Datacom Systems Inc Access Your Network TM ...