OmniAccess SafeGuard Controller Installation Guide PART NUMBER: 005-0031 REV A1 PUBLISHED: MARCH 2007 ALCATEL-LUCENT 26801 WEST AGOURA ROAD CALABASAS, CA 91301 USA (818) 880-3500 WWW.ALCATEL-LUCENT.
Alcatel-Lucent Proprietary Copyright © 2007 Alcatel-Lucent. All rights reserved. This document may not be reproduced in whole or in part without the expressed written permission Alcatel-Lucent. Alcatel-Lucent ® and the AlcatelLucent logo are registered trademarks of Alcatel-Lucent. All other trademarks are the property of their respective owners.
Contents Preface About This Guide. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Audience. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Conventions Used in This Guide . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Related Publications. . . . . . . . . . . . . . . . . . . . .
Contents Installing Small Form-Factor Pluggable (SFP) Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Connecting Cables . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Initial Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Figures Figure 1: Secure LAN Controller (OAG2400 shown) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Figure 2: OAG2400 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 Figure 3: OAG1000 Front Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Figure 4: SafeGuard Controller Rear Panel—Dual AC Power Supplies . . . . . . .
Figures 6 OmniAccess SafeGuard Controller Installation Guide
Tables Table 1: Text Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 Table 2: Guide Organization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Table 3: Extensibility Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Table 4: System and Port Mode LEDs . . . . . . .
Tables 8 OmniAccess SafeGuard Controller Installation Guide
Preface In this preface: ■ ■ ■ About This Guide Related Publications Guide Organization
Preface About This Guide This guide describes the Alcatel-Lucent SafeGuard Controller™. The guide provides detailed installation instructions and technical specifications for the controller. Audience This guide is intended for experienced network administrators and networking or computer technicians who are responsible for installing the SafeGuard Controller. Conventions Used in This Guide Table 1 lists the text conventions used in this guide.
Preface Related Publications For information about configuring and managing the SafeGuard Controller, refer to the following guides: ■ OmniVista SafeGuard Manager Administration Guide Describes how to manage the OmniAccess SafeGuard Controller using the OmniVista SafeGuard Manager software.
Preface 12 OmniAccess SafeGuard Controller Installation Guide
chapter 1 Overview of the SafeGuard Controller In this chapter: ■ ■ ■ ■ ■ About the SafeGuard Controller Hardware Overview Power Supplies Small Form-Factor Pluggable (SFP) Modules System and Port LEDs
Chapter 1: Overview of the SafeGuard Controller About the SafeGuard Controller The Alcatel-Lucent SafeGuard Controller is the first secure networking controller that enables network managers to see all LAN traffic up to Layer 7 and associates the traffic with users and applications. The SafeGuard Controller enforces access policies and controls malware infection in real time, achieving performance and capabilities previously not possible.
Chapter 1: Overview of the SafeGuard Controller Figure 1 Secure LAN Controller (OAG2400 shown) CST_003 Front-Panel Interfaces The OAG2400 SafeGuard Controller has 24 front-panel ports (Figure 2); the OAG1000 SafeGuard Controller has 10 front-panel ports (Figure 3). Each port has two associated LEDs. One LED indicates link status. You can program the other LED to indicate activity, duplex mode, or speed for the port.
Chapter 1: Overview of the SafeGuard Controller Figure 3 OAG1000 Front Panel Core 1 3 5 7 9 2 4 6 8 10 Edge CST_023 Each SafeGuard Controller model has secured port pairs that act as bridged ports. These ports can be configured to be synchronized, so that when one port in the pair comes up, its paired port comes up. Similarly, when one port in the pair goes down, its paired port goes down.
Chapter 1: Overview of the SafeGuard Controller depending on the speed and duplex settings of the attached interfaces. If a specific speed for the interface is important, we recommend that you specify the speed of the interface using the command line interface (CLI). Auto-negotiation is available on the 10/100/ 1000 ports. Half-duplex operation is supported only at the 10/100 speed.
Chapter 1: Overview of the SafeGuard Controller Power Supplies The SafeGuard Controller is available in either of the following power configurations: ■ Dual AC power supplies ■ One AC power supply and one DC supply input The system is fully functional with one power cord connected; however, to ensure that your system is operational at all times, install both power cords and make sure that both power cords are connected to different circuits.
Chapter 1: Overview of the SafeGuard Controller NOTE: Not all SFP modules support 10/100 operation. To ensure guaranteed operation of the system, obtain all SFP modules from Alcatel-Lucent. System and Port LEDs The front panel of the SafeGuard Controller provides LEDS to indicate operating status of the SafeGuard Controller system and ports (Figure 6). Figure 6 Front-Panel LEDs (OAG2400 Shown) Mode button CST_016 At the left side of the front panel are six LEDs and a push button labeled Mode.
Chapter 1: Overview of the SafeGuard Controller Table 4 describes the meanings of the system and port mode LEDs; Table 5 describes the meanings of the port LEDs. Table 4 System and Port Mode LEDs Label Color Meaning Power1 Green Lights when power supply 1 is on. Power2 Green Lights when power supply 2 is on. Alarm Amber Lights when an alarm condition exists. Speed Green Lights when the upper port LED indicates operating speed: 10, 100, or 1000 Mbps.
chapter 2 Site Preparation and Installation In this chapter: ■ ■ ■ ■ ■ ■ ■ ■ ■ Preparing for Installation Checking the Package Contents Installing the SafeGuard Controller on a Table or Shelf Installing the SafeGuard Controller in a Rack Connecting Power to the SafeGuard Controller Installing Small Form-Factor Pluggable (SFP) Modules Connecting Cables Initial Configuration Troubleshooting
Chapter 2: Site Preparation and Installation Preparing for Installation The Alcatel-Lucent SafeGuard Controller can be installed on a shelf or tabletop or in a standard 19-inch equipment rack. When you plan the installation of the SafeGuard Controller, consider space, weight, power, rack, and environmental requirements. For a rack-mounted SafeGuard Controller, make sure that the rack meets the requirements listed in Rack Requirements on page 23.
Chapter 2: Site Preparation and Installation We recommend that you provide a 10-A fuse on your external DC connection to safeguard against connecting the power source with the incorrect polarity. The SafeGuard Controller does not have a power switch. To be able to disconnect the power cords when needed, make sure that the power connections are easily accessible. Make sure that the AC power input source connection is within 8 feet of the SafeGuard Controller installation location.
Chapter 2: Site Preparation and Installation Grounding Options The recommended grounding method for the SafeGuard Controller is to use the grounding stud immediately to the left of each power input connector. Connect this stud to earth ground (for example, a grounded rack). Recommended Cables Fiber-optic SFP modules require fiber-optic cables with LC connectors.
Chapter 2: Site Preparation and Installation ■ RS-232 (DB-9) configuration cable ■ Mounting accessories, including: — Four rubber feet for installing the SafeGuard Controller on a table — Two brackets for installing the SafeGuard Controller in a rack — Six Phillips screws for attaching the brackets to the SafeGuard Controller ■ Disposable ESD wrist strap ■ SFP modules and cables as determined when the SafeGuard Controller was ordered NOTE: You must provide rack-mounting screws appropriate to your eq
Chapter 2: Site Preparation and Installation Four-Post Rack To install the SafeGuard Controller in a four-post rack, follow these steps: 1 Lift the controller carefully from the packing material, and set it on a level work surface. 2 Using the screws from the mounting accessory kit, attach the rack-mounting brackets, as shown in Figure 7. Figure 7 Attaching the Rack-Mounting Brackets at the Front CST_005 26 3 Slide the controller into the rack, and align the mounting holes.
Chapter 2: Site Preparation and Installation Figure 8 Installing the SafeGuard Controller in a Four-Post Rack CST_006 For instructions on connecting the power cords, see Connecting Power to the SafeGuard Controller on page 29.
Chapter 2: Site Preparation and Installation Two-Post Rack To install the SafeGuard Controller in a two-post rack, follow these steps: 1 Lift the controller carefully from the packing material, and set it on a flat work surface. 2 Using the screws from the mounting accessory kit, attach one rack-mounting bracket to the middle of each side, as shown in Figure 9. Figure 9 Attaching the Rack-Mounting Brackets at the Middle CST_007 3 Slide the controller into the rack, and align the mounting holes.
Chapter 2: Site Preparation and Installation Connecting Power to the SafeGuard Controller This section describes how to connect power to the AC and DC power input connections on the rear panel of the SafeGuard Controller. An AC power cord is provided for each AC power input on the SafeGuard Controller. For the DC power input, you must attach an appropriate three-wire cable to the provided DC connector.
Chapter 2: Site Preparation and Installation DC Power The OAG2400-ACDC and OAG1000-ACDC SafeGuard Controllers provide a DC power input connector that allows you to use a 48-VDC power source as backup for the system. You must provide the appropriate cable for use with the connector. NOTE: We recommend that you provide a 10-A fuse on your external DC connection to safeguard against connecting the power source with the incorrect polarity.
Chapter 2: Site Preparation and Installation To connect the SafeGuard Controller to a DC power source, follow these steps: 1 Turn off the DC power at the source. 2 Connect the DC connector on the cable to the SafeGuard Controller, as shown in Figure 12. Figure 12 Connecting the DC Power Cord Connector retaining screws CST_025 3 Align and tighten the captive retaining screws at the top and bottom of the connector. 4 Connect the other end of the DC power cable to the DC power source.
Chapter 2: Site Preparation and Installation The insertion procedure for copper and fiber SFP modules is the same. To insert an SFP module, follow these steps: 1 Put on the ESD-preventive wrist strap, and attach the leash to a grounded bare metal surface on the SafeGuard Controller or equipment rack. 2 Identify the Tx and Rx marks on the top of the SFP module. 3 Align the module with the SFP module slot, and push it firmly into place until it clicks into place and is completely seated (see Figure 13).
Chapter 2: Site Preparation and Installation Figure 14 Connecting the Ethernet Management Port CST_012 Connect the serial console port using an RS-232 cable with a DB-9 connector, as shown in Figure 15. The default settings for this port are 9600 baud, 8 data bits, 1 stop bit, and no parity or flow control (9600 8-N-1 none). The default settings may be changed either in the boot monitor or during system operation.
Chapter 2: Site Preparation and Installation Initial Configuration To assign IP addresses and perform other initial configuration tasks, refer to the OmniAccess SafeGuard OS Administration Guide. Troubleshooting Table 9 provides suggestions for troubleshooting basic hardware issues that might arise when you install the SafeGuard Controller. The software documentation provides detailed troubleshooting instructions for operating and configuration issues.
appendix A Technical Specifications In this appendix: ■ ■ ■ ■ Physical Specifications Environmental Specifications Connector Pinouts SFP Module Types and Cables
Appendix A: Technical Specifications Physical Specifications Table 10 lists the physical specifications of the SafeGuard Controller. Table 10 Physical Specifications Dimensions Width: 17.3 inches (43.9 cm) Depth: 18.6 inches 47.2 cm Height: 1.7 inches (4.4 cm) Approximate Weight 20.0 pounds (9.1 kg) Environmental Specifications Table 11 lists environmental specifications for the SafeGuard Controller.
Appendix A: Technical Specifications Connector Pinouts This section provides pinout information for the following connectors on the SafeGuard Controller: ■ RJ-45 connectors on copper SFP modules used in the front-panel ports (Table 12) ■ RJ-45 connector on the rear-panel Ethernet management port (Table 13) ■ DB-9 connector on the rear-panel serial console port (Table 14) ■ DC input power connector on the rear panel of ACDC models (Table 15) Table 12 Front-Panel Copper Port Pinouts Pin 10/100BASE-T
Appendix A: Technical Specifications Table 14 RS-232 Serial Management Port Pinouts for Male DB-9 Pin RS-232 Function Source 1 DCD (RSLD) DTE 2 RXD DTE 3 TXD DTE 4 DTR DTE 5 GND - 6 DSR DTE 7 RTS DTE 8 CTS DTE 9 RI DTE Table 15 DC Input Connector Pinouts Pin Description 1 Earth ground 2 GND 3 +48 VDC NOTE: Pin 1 is at the bottom in Figure 16.
Appendix A: Technical Specifications SFP Module Types and Cables The SafeGuard Controller uses the types of SFP modules and cables listed in Table 16.
Appendix A: Technical Specifications 40 OmniAccess SafeGuard Controller Installation Guide
appendix B Safety and Regulatory Compliance In this appendix: ■ ■ ■ Safety Guidelines Agency Safety Approvals Regulatory Compliance and Notices
Appendix B: Safety and Regulatory Compliance Safety Guidelines Review the recommendations in this section before you install the Alcatel-Lucent SafeGuard Controller. General Safety Recommendations The following recommendations will help ensure your safety and prevent damage to the equipment: ■ Always be careful when lifting and moving heavy or awkward objects. The SafeGuard Controller weighs 20 pounds and may require two people to maneuver it when you install it in a rack.
Appendix B: Safety and Regulatory Compliance ■ Lightning can cause electromagnetic surges and can damage your equipment. Even if lightning strikes a nearby power line that feeds your site, a surge in voltage can occur and cause electromagnetic energy. As a precaution during lightning storms, do not connect or disconnect cables. ■ Always make sure that your cables do not exceed recommended lengths or are not exposed to the outside environment.
Appendix B: Safety and Regulatory Compliance immediate failure, or it can show up as a latent failure affecting the reliability of the equipment. To minimize the likelihood of ESD damage to the SafeGuard Controller, follow these guidelines when you are handling the SafeGuard Controller or SFP modules: ■ Always use an antistatic wrist strap or other antistatic device. To use the disposable ESD wrist strap that is provided, put the strap on your wrist, ensuring that it makes good contact with the skin.
Appendix B: Safety and Regulatory Compliance FCC Part 15 Class A This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy.
Appendix B: Safety and Regulatory Compliance 46 OmniAccess SafeGuard Controller Installation Guide
appendix C Customer Assistance and Product Support
Appendix C: Customer Assistance and Product Support Alcatel-Lucent technical support is committed to resolving our customer's technical issues in a timely manner. Customers with inquiries should contact us at: ■ North America Service and Support: 1-800-995-2696 ■ Latin America Service and Support: 1-877-919-9526 ■ European Service and Support: +33-38-855-6929 ■ Asia Pacific Service and Support: +65-6586-1555 ■ Other International: 1-818-878-4507 ■ Email: support@ind.alcatel.
Index Numerics connector pinouts . . . 37–38 10/100 ports . . . 17, 32, 37 connectors, LC . . . 24 10/100/1000 ports . . . 16 console, management . . . 34 48-VDC power source . . . 22, 30 contents of package . . . 24 802.3ab standard . . . 16 cooling space . . . 22 A AC power supplies . . . 17, 18, 22 access point . . . 14 cords, power . . . 18, 24 core ports . . . 16 current, maximum . . . 18, 22 Active Directory . . . 14 D addresses, assigning . . . 34 DC power supplies . . .
Index G malware . . . 14 grounding . . . 24, 43 management console . . . 34 H half-duplex operation . . . 17, 20 hardware description cables . . . 24 environmental requirements . . . 23, 36 front-panel ports . . . 15–17 grounding . . . 24 LEDs . . . 19–20 overview . . . 14 physical specifications . . . 36 rack requirements . . . 23 rear panel . . . 17 management port . . . 17 management ports . . . 17, 32, 37, 38 maximum current . . . 18, 22 meltdown, preventing . . . 14 models of SLC . . .
Index protection mode . . . 20 V R voltage range . . . 18, 22 rack installation . . . 25–28, 42 W rack requirements . . . 23 weight . . . 22, 42 radio frequency interference (RFI) . . . 43 Windows Active Directory . . . 14 RADIUS . . . 14 worms . . . 14 rear panel . . . 17 wrist strap . . . 25, 44 redundant power supplies . . . 18 RS-232 port . . . 17 S safety approvals . . . 44 safety guidelines . . . 42–44 secured port pairs . . . 16 security posture . . . 14 serial console port . . .
Index 52 OmniAccess SafeGuard Controller Installation Guide
