Installation Guide for 10/100BaseT Port Aggregator Tap with Active Response Models PA-CU-AR, PAD-CU-AR Doc. PUBPACUARU Rev.
10/100 Port Aggregator Tap Contents Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Key Features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Unpacking and Inspection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
10/100 Port Aggregator Tap PLEASE READ THESE LEGAL NOTICES CAREFULLY. By using a Net Optics Tap you agree to the terms and conditions of usage set forth by Net Optics, Inc. No licenses, express or implied, are granted with respect to any of the technology described in this manual. Net Optics retains all intellectual property rights associated with the technology described in this manual. This manual is intended to assist with installing Net Optics products into your network.
10/100 Port Aggregator Tap Introduction Net Optics 10/100 Dual Port Aggregator Taps with Active Response provide ultra-efficient access to critical links with the option to inject an active response into the network. This pioneering technology enables any two devices to simultaneously monitor a full-duplex link - using only one NIC per device. Typically, full-duplex monitoring with a network tap requires two NICs (or a dual channel NIC) – one interface for each side of the tapped full-duplex connection.
10/100 Port Aggregator Tap Simple to Deploy Net Optics’ Dual Port Aggregator Tap with Active Response is a simple plugand-play solution addressing the fact that many monitoring systems, including most software based solutions, only offer a single channel NIC, limiting fullduplex visibility. While adding a second NIC can help maintain data integrity and visibility, there is a tradeoff in flexibility and ease-of-use.
10/100 Port Aggregator Tap Key Features Passive, Secure Technology • Supports full-duplex monitoring with a single NIC, increasing monitoring efficiency • Regeneration Tap technology enables two devices to simultaneously monitor all aggregated traffic – using only one NIC per device • One megabyte of memory for each side of the full-duplex link (two megabytes memory, total) prevents data loss during excessive traffic loads • Provides complete full-duplex visibility at 10 or 100 Mbps without data stream int
10/100 Port Aggregator Tap Unpacking and Inspection Carefully unpack the 10/100 Port Aggregator Tap w/Active Response and check for damaged or missing parts. The Tap ships with the following: • • • • • 10/100 Port Aggregator Tap w/Active Response Two power supplies Two network cables One or two monitor cables Installation Guide You may have also ordered a one rack unit panel for mounting three Taps and an extended warranty. Carefully check the packing slip against parts received.
10/100 Port Aggregator Tap DIP Switch Power DC Jacks /. 1 2 3 4 5 6 7 8 Figure 3: Rear Panel LED Indicators • PWR 1/ PWR 2: Main and Redundant Power. If the Tap is deployed with both power supplies, both LEDs will illuminate when the Tap is plugged in. If an LED is off, this indicates that the corresponding power supply is not functioning.
/100 Port Aggregator Tap Application Diagrams: Memory Operation All traffic that passes through the Tap is sent to the monitoring device NIC on a first-in, first-out basis, including traffic that is temporarily stored in memory. (If two packets enter at the same time then one packet is processed while the other is stored briefly in memory, preventing collisions.) When there is a burst of data, traffic in excess of the NIC's capacity is sent to the Tap's memory.
10/100 Port Aggregator Tap State 2: Side A + Side B becomes greater than 100% of the NIC's receive capacity. Example: There is a burst of traffic, so Side A is now at 90 Mbps while Side B remains at 50 Mbps. The NIC's utilization is at 140%, requiring the use of memory to help prevent data loss. Side A Active Response Dual Port Aggregator Tap A ® B 1 2 www.netoptics.com Router Firewall Side B Memory The extra 40 Mbps of traffic is 2 stored in the 1 megabyte buffer for Port A.
10/100 Port Aggregator Tap Cabling Guidelines Use straight-through cable to connect the Tap Ports to a Router or NIC. Use cross-over cable to connect the Tap Ports to Switches and Hubs. The Tap Ports Transmit on Pins 3 & 6 and Receive on Pins 1 & 2. Note:_________________________________________________________________ You must ensure that both Network Ports A and B match speed and duplex settings on your network devices.
10/100 Port Aggregator Tap Connecting to the Monitoring Device(s) 1. Supply power to the Tap using the power supplies included with the unit. Two power supplies are included. The use of the second redundant power supply is optional. Note:_________________________________________________________________ The second power supply is available to support the flow of traffic to the monitoring device, in the event that the first power supply becomes unavailable.
10/100 Port Aggregator Tap DIP Switch Settings Switch Function Description 1 Turns Auto-negotiation ON or OFF. Factory default setting is Auto-negotiation. If turned ON, ports A, B, and C/D automatically negotiate the links. Positions 2 thru 8 are inactive. To manually configure ports A, B, and C/D, turn switch to the OFF position. Positions 2 thru 8 are active.
10/100 Port Aggregator Tap Active Response Tap FAQs Q: What types of active responses are supported? A: With an Active Response Dual Port Aggregator Tap, an administrator can transmit any type of Ethernet packet back into the original link, supporting all common types of active responses generated by intrusion detection systems, and by intrusion prevention systems deployed in passive mode. The most common response types are TCP resets, and firewall rule changes.
10/100 Port Aggregator Tap Active Response Tap FAQs (Continued) Q: How much bandwidth is available on the Active Response Port? A: The average amount of bandwidth for active responses is determined by the average available capacity on the link.
10/100 Port Aggregator Tap Specifications Environment Operating Temperature: 0˚C to 55˚C Storage Temperature: -10˚C to 70˚C Relative Humidity: 10% min, 95% max, non-condensing Power Power Supply Input: 100-240VAC, 0.5A, 47-63Hz Output: 12V, 1.5A Mechanical Dimensions: 1.125” high x 9.125” deep x 4.
10/100 Port Aggregator Tap Limitations on Warranty and Liability Net Optics offers a limited warranty for all its products. IN NO EVENT SHALL NET OPTICS, INC. BE LIABLE FOR ANY DAMAGES INCURRED BY THE USE OF THE PRODUCTS (INCLUDING BOTH HARDWARE AND SOFTWARE) DESCRIBED IN THIS MANUAL, OR BY ANY DEFECT OR INACCURACY IN THIS MANUAL ITSELF.
www.netoptics.com © 2007 by Net Optics, Inc. All Rights Reserved.