UnityOne Modular Fiber/Copper ZPHA Installation Guide Version 2.
Part Number: TECHD-0000000050 Publication Control Number: 021505 UnityOne™ is a registered trademark of TippingPoint Technologies, Inc. TippingPoint, TippingPoint Technologies and the TippingPoint Technologies logo are also registered trademarks of TippingPoint Technologies. This document contains confidential information or trade secrets or both, which are the property of TippingPoint Technologies, Inc.
Table of Contents About This Guide iii Overview Target Audience Organization Conventions Headings Typeface Cross References Messages Related Documentation Customer Support iii iii iv iv iv iv iv v vii viii Prepare the Site 1 Overview Safety Requirements Rack and Clearance Requirements Location Environmental Requirements Power Requirements System Grounding Requirements Cabling Requirements Unpack the UnityOne ZPHA ZPHA Installation ZPHA Hardware Overview ZPHA Installation Cross-over Cable Installation
Table of Contents 2 UnityOne Modular Fiber/Copper ZPHA Installation Guide V 2.
About This Guide Explains who this book is intended for, how the information is organized, where information updates can be found, and how to obtain customer support if you cannot resolve a problem. Overview Welcome to TippingPoint UnityOneTM Modular Fiber/Copper ZPHA Installation Guide. The UnityOne Modular Zero Power High Availability device provides continued network traffic support in case an IPS device loses power.
Organization The UnityOne Modular Fiber/Copper ZPHA Installation Guide is organized as follows: About the Guide Explains who this book is intended for, how the information is organized, where information updates can be found, and how to obtain customer support if you cannot resolve a problem. Prepare the Site Provides instructions for unpacking the Zero Power High Availability device and preparing your network environment.
Messages Messages are special text that are emphasized by font, format, and icons. There are four types of messages in this book: • • • • Warning Caution Note Tip A description of each message type with an example message follows. Warning Warnings tell you how to avoid physical injury to people or equipment. For people, injury includes anything from temporary conditions, such as pain, to irreversible conditions such as death. For equipment, injury means anything requiring repair.
Tip Tips are suggestions about how you can perform a task more easily or more efficiently. Tip: Setting the logging parameter to “off” or “minimal” will improve your system’s processing performance, but it will make debugging very difficult in the event of a system crash. During system integration, you can set logging to “full” to ease debugging. After you have finished testing, set logging to “minimal” to improve performance. vi UnityOne Modular Fiber/Copper ZPHA Installation Guide V 2.
Related Documentation The UnityOne systems have a full set of documentation. These publications are available in electronic format on your installation CDs. For the most recent updates, check the Threat Management Center (TMC) web site at https://tmc.tippingpoint.com.
Table 2 - 1: UnityOne Documents System Administrators UnityOne Local Security Manager User’s Guide UnityOne Documentation CD, https://tmc.tippingpoint.com UnityOne Local Security Manager Online Help available in the LSM application Unity One Command Line Interface Reference UnityOne Documentation CD, https://tmc.tippingpoint.com UnityOne Security Manager System Quick Start Guide hard copy in the shipping materials, UnityOne Documentation CD, https://tmc.tippingpoint.
Table 3: Customer Support Information Information Your ZPHA serial number Location You can fine this number on the shipping invoice that came with your UnityOne system. UnityOne Modular Fiber/Copper ZPHA Installation Guide V 2.
x UnityOne Modular Fiber/Copper ZPHA Installation Guide V 2.
1 Prepare the Site This chapter discusses the requirements necessary to prepare your site for the installation of the UnityOne ZPHA for IPS devices. Overview Before installing the new UnityOne, you need to gather materials and prepare the network and hardware site. To carefully and correctly install the ZPHA component into your UnityOne system, you must read through all preparation instructions and requirements.
Rack and Clearance Requirements Tipping Point recommends that you mount the UnityOne system in a standard 19-or 23-inch rack. The vertical hole spacing on the rack rails must meet standard EIA-310-C requirements, which call for a one inch (2.54 cm) spacing. Location The ZPHA should be located near the IPS device in the rack. The device connects to the IPS through the following: • USB cable for power • Network cables (fiber or copper) to receive and transmit network traffic.
System Grounding Requirements Damage from Electromagnetic Static Discharge (ESD) can occur when electronic components are improperly handled. Its results can be complete or intermittent system failures. Therefore, proper ESD protection is required whenever you handle IPS devices and equipment. It is not necessary to open the UnityOne ZPHA chassis to add or remove any components. Note: When you install the ZPHA, you do not need to modify or open the IPS chassis.
4 STEP 5 Remove the chassis from the box. STEP 6 Remove the segment modules from the box. You should receive a number of fiber or copper modules as ordered including a number of blank faceplates for any remaining segment ports. STEP 7 Open the accessory kit. It contains the cables, documentation, and management software. STEP 8 Inspect all the equipment inside for damage. If you think any equipment might be damaged, contact your freight provider for how to lodge a damage claim.
2 ZPHA Installation Provides information for installing the modular Zero Power High Availability device for your UnityOne IPS system. Overview The Zero Power High Availability (ZPHA) device enables the network traffic to continue to flow if the IPS system has a loss in power. The modular components of the ZPHA enable you to provide support and protection for both fiber and copper connections.
ZPHA Hardware Overview The ZPHA is a chassis with five available segment ports for module fiber and copper components. These segment modules include a set of relays for receiving and sending network traffic from a network system, into the IPS device, and back out to a network system. The network system could be an Ethernet switch, a single workstation, a server, or other network service. The following table lists the chassis components.
The following image displays the front panel of the ZPHA without segment modules. The LED light is located at the right-side of the front panel. Figure 2 - 1: Modular ZPHA Front Panel (without segments) The following image displays the front panel of the ZPHA filled with segment modules. This example displays 2 copper segments, 2 fiber segments, and one blank faceplate segment. You can purchase and install any variety of combinations of copper and fiber segment modules.
The following image displays the Fiber Segment Module. Figure 2 - 3: Fiber Segment Module The following image displays the Copper Segment Module. Figure 2 - 4: Copper Segment Module 8 UnityOne Modular Fiber/Copper ZPHA Installation Guide V 2.
The following image displays the Blank Faceplate Segment Module. Figure 2 - 5: Blank Faceplate Segment Module The following image displays USB ports located on the ZPHA back panel. Figure 2 - 6: USB Ports Back Panel ZPHA Installation When you install the ZPHA, you need the following components: • USB cable — 1 cable for connecting to the IPS to receive power (included with device). The modular ZPHA provides 2 USB ports (1 type A and 1 type B) on the back panel.
Note: Fiber segment modules have a maximum link loss of 1.5db. The IPS connection requires two copper or four fiber network cables for the Seg A and B ports. You also need two copper or four fiber cables for the Net A and B ports for receiving and transferring network traffic in your company’s network system. Note: You will need a full set of cables for every IPS device you connect to a segment of the ZPHA. The ZPHA device can connect five (5) IPS device segments.
Connect Fiber Cables STEP 1 For each IPS segment, connect the fiber network cables from a port in the IPS device to the appropriate ZPHA port. See the following diagram. Figure 2 - 7: ZPHA to IPS Connection Diagram (Fiber) Note: You must connect all cables according to segment. All segment connects for one IPS should be connected to the same segment on the ZPHA. STEP 2 Connect the IPS cables for routing network traffic through the IPS device.
Connect Copper Cables STEP 1 For each IPS segment, connect a copper network cable from a port in the IPS device to the appropriate ZPHA port. See the following diagram. Figure 2 - 8: ZPHA to IPS Connection Diagram (Copper) Note: You must connect all cables according to segment. All segment connects for one IPS should be connected to the same segment on the ZPHA. STEP 2 Connect the IPS cables for routing network traffic through the IPS device.
Connect USB Power STEP 1 Turn on the IPS device. STEP 2 Connect the USB cable from the IPS to the ZPHA, located on the back panels. You can connect to the Type A or B USB port as needed. Figure 2 - 9: USB Connection Note: If you connect two IPS USB cables to the ZPHA device, the ZPHA will continue to function if one of the devices loses power. The ZPHA bypasses the IPS only if all power from the IPS devices interrupts.
Cross-over Cable Installation You may need to use cross-over and straight cables depending on what two devices are being connected to on a segment. You would use cross-over options typically is you are not connecting to an Ethernet switch. Internally, the ZPHA is a straight cable, whether in High Availability (HA) or normal mode. If you need a cross-over to connect to the IPS, then you need a cross-over between the ZPHA and the IPS.
When you have a straight cable coming in, you can use two straight cables. If both connected devices are end devices, you should use two cross-over cables. This is because when the ZPHA closes there must be a crossover between the two connected devices. Without having the two crossover cables on one side both cables between the two connected devices upon failure would be straight through and the connection would not complete.
This configuration places a cross-over connection between the two connected devices upon failure, ensuring the connection remains continuous. Without the cross-over connection between the two devices, it disrupts because the ZPHA is completely passive, only passing signal from pin to pin. See Figure 2 - 12, “ZPHA Cross-over Configuration 3 and Figure 2 - 13, “ZPHA Cross-over Configuration 4. Figure 2 - 12: ZPHA Cross-over Configuration 3 16 UnityOne Modular Fiber/Copper ZPHA Installation Guide V 2.
Figure 2 - 13: ZPHA Cross-over Configuration 4 UnityOne Modular Fiber/Copper ZPHA Installation Guide V 2.
18 UnityOne Modular Fiber/Copper ZPHA Installation Guide V 2.
Index C ventilation 2 ZPHA 5, 9 connection copper 12 fiber 11 USB 13 cross-over cables 14 diagram connection cabling requirements 3 copper segment 8 connect 12 customer support viii E copper 12 fiber 11 USB 13 Electromagnetic Static Discharge 3 environmental requirements 2 ESD 3 F faceplate segment 9 fiber segment 8 connect 11 connection 11 front panel (w/ segments) 7 front panel (w/o segments) 7 G cross-over 1 cross-over 2 cross-over 3 cross-over 4 14 15 16 17 L conventions iv caution v note v t
20 UnityOne Modular Fiber/Copper ZPHA Installation Guide V 2.
