DURAstream 1 Gigabit DS USERguide. July U-A Datacom Systems Inc

Transcription

1 DURAstream 1 Gigabit DS-4000 USERguide July U-A Datacom Systems Inc

2 Product Description Datacom Systems Inc. DURAstream DS-4000 Bypass Switch is a 1Gbps intelligent external active bypass that enables plug and play connectivity which includes an auto heartbeat and requires no additional drivers to be installed on any connected appliance. The DS-4000 consists of four 1Gbps segments which can support four network segments and four appliances.

3 3 DURAstream 2014 Datacom Systems Inc All rights reserved. No parts of this work may be reproduced in any form or by any means graphic, electronic, or mechanical, including photocopying, recording, taping, or information storage and retrieval systems without the written permission of the publisher. Products that are referred to in this document may be either trademarks and/or registered trademarks of the respective owners. The publisher and the author make no claim to these trademarks. While every precaution has been taken in the preparation of this document, the publisher and the author assume no responsibility for errors or omissions, or for damages resulting from the use of information contained in this document or from the use of programs and source code that may accompany it. In no event shall the publisher and the author be liable for any loss of profit or any other commercial damage caused or alleged to have been caused directly or indirectly by this document.

4 4 Table of Contents 1. Terms of Use Copyright License Agreement Trademark Attribution Proprietary Notice Certifications and Marks Safety Notices and Warnings Overview Automatic Failover Heartbeat Mode Passive Mode Reliable and Easy to Use Specifications Shipped Contents DURAstream Series Benefits and Features DS-4000 Series Common Specifications DS-4000 Series Specific Specifications Technical Brief Port LED Interface Copper Fiber Theory of Operation Heartbeat Functionality Heartbeat Modes Internal heartbeat frame loop-back mode Link status heartbeat mode Heartbeat Frame Type Etherframe ICMP IPX TCP-SYN Link Fault Detection DURAstream-4000 Operation Modes Normal Active Bypass Normal Active Inline Manual Active Inline Manual Active Bypass Manual Passive Bypass... 22

5 5 9. DURAstream-4000 Power Fail Protection High Availability TAP Port Mode: Disabled Mode: TX Mode: RX Mode: RX/TX Remote Management Features Serial Terminal Setting IP Address Configuration SSH Setting User Account/Password CLI Command Usage Secure Web Management Connecting to Web Management Login Page Status Bypass Module Management Port Notification SNMP User Account Settings System Settings Firmware Update System Reboot NTP Time Setting Syslog settings TACACS Links High Availability Port Statistics Heartbeat Frame Format Customer Service Internet Warranty Limits of Liability... 48

6 6 1. Terms of Use The following terms and conditions relate to the use of this document. Please note that Datacom Systems Inc. reserves the right, at its entire discretion, to change, modify, add, or remove portions of these Terms of Use at any time. Please read the Terms of Use carefully as your use of this document is subject to the Terms of Use stipulated herein. 1.1 Copyright Copyright 2014 by Datacom Systems, Inc. All rights reserved. Printed in the United States of America. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of Datacom Systems, Inc. To obtain this permission, write to the attention of the Datacom Systems legal department at 9 Adler Drive, East Syracuse, New York , or call License Agreement Notice to All Users: By using Datacom Systems, Inc. products, you agree to the terms set forth. No licenses, express or implied, are granted with respect to the technology described and Datacom Systems, Inc. retains all rights with respect to the technology described herein. If applicable, you may return the product to the place of purchase for a full refund. 1.3 Trademark Attribution Access Your Network, DURAstream, DS3 ACTIVEtap, DS3switch, ETHERNETtap, Empowering Network Professionals, FDDIswitch, FIBERsplitter, FIBERswitch, FIBERSWITCHsystem, FLOWcontrol, GIGABITswitch, INSERTswitch, INSERTunit, LAN switch, MANAgents, MULTINETswitch, NETspan, PERMAlink, PROline, RMON SWITCHINGanalyze, SINGLEstream, UNIVERSALswitch, VERSAstream, and WANswitch are trademarks of Datacom Systems, Inc. 1 ST in Switching Solutions, DATACOMsystems, LAN clipper, MANAgents, and MULTIview are registered trademarks of Datacom Systems, Inc. All other registered and unregistered trademarks are the sole property of their respective owners. All specifications may be changed without notice. 1.4 Proprietary Notice This document contains proprietary information about the DS-4000 family of products and is not to be disclosed or used except as authorized by written contract with Datacom Systems, Inc

7 7 1.5 Certifications and Marks For information regarding certifications and marks, please refer to the product info section of our website at Safety Notices and Warnings These explanatory labels are included in this information for the user in accordance with the requirements of IEC WARNING: Class 1 laser and LED product. A class 1 laser is safe under all conditions of normal use. Invisible laser radiation may be emitted from optical port openings when no fiber cable is connected, avoid exposure to laser radiation and do not stare into open optical ports. IMPORTANT: Rack Mount Instructions are included here to call the attention of installation technicians to pertinent safety and warning issues prior to the installation of the product as follows: A. Elevated Operating Ambient If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum ambient temperature specified in the 'DS-4000 Series Common Specifications' section. B. Reduced Air Flow Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised. C. Mechanical Loading Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading. D. Circuit Overloading Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on over-current protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern. E. Reliable Earthing Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit (e.g. use of power strips).

8 9 2. Overview 2.1 Automatic Failover = Constant Link State Deploying in-line monitoring devices such as intrusion prevention systems (IPS) or bridge devices like VPN gateways and firewalls used to mean a potential point of failure on the network. When one of these devices malfunctioned or became overwhelmed with traffic, network outages could occur. This posed serious challenges when deployed on mission critical links. The DURAstream Bypass Switch ensures your network s most important data does not fail even when in-line devices do. Deploying a DURAstream Bypass Switch ensures uptime of critical links regardless of in-line device performance by diverting critical network traffic away from malfunctioning in-line devices until such devices are operating normally. This not only alleviates potential issues with traffic congestion affecting link behavior caused by an IPS, it allows maintenance and upgrades of attached in-line tools without network downtime. The DURAstream G Bypass Switch is an easy-to-manage external active bypass providing failover and TAP capabilities for data monitoring of critical Gigabit network segments. Each bypass switch offers up to four independent interface modules with a variety of media options (copper, fiber, and media conversion). Each of the four network modules operates independently to ensure link protection monitoring of one to four links at any time. Line-rate throughput and real-time data forwarding hardware protects data and allows critical voice and data applications to perform uninterrupted and meet high demands for quality and security. Deployed with an in-line monitoring tool, a DURAstream Bypass Switch creates a comprehensive solution for intrusion prevention. 2.2 Heartbeat Mode The DURAstream G Bypass Switch can monitor the health of in-line appliances by sending and receiving a heartbeat packet. A user programmable heartbeat packet can be injected into the monitoring port link to determine availability of attached monitoring devices or help determine delay due to high traffic volume. Even if a connected in-line tool is powered on, the bypass switch can automatically switch traffic around it until the device returns to normal operation. At that time, traffic is re-routed back to the monitor port.

9 Passive Mode In the event of power loss, the relays within the switch close to create a physical connection, which in turn, creates a passive bypass path to help prevent traffic interruption. Robust Management, Security and Logging manage your switch using a built-in CLI or GUI, including secure web interface over HTTPS. Supports secure shell (SSH), SNMP, notifications, TACACS+ as well as Syslog to enable consolidation of log data from multiple systems into a central repository. 2.4 Reliable and Easy to Use The DURAstream G Bypass Switch is simple to deploy, enables plug-and-play connectivity, and is compatible with all major manufacturer s monitoring systems. Every unit not only comes with dual redundant power supplies to ensure monitoring uptime, the voltage of each power supply is continuously monitored for instances of power decline or outage. In such cases, the unit can initiate a switch to passive bypass mode.

10 11 3. Specifications 3.1 Shipped Contents DS-4000 Series Link Aggregation Taps 1 Model: DS-4000 series Bypass Switch 1 Console Cable (DB9 to RJ45) 1 Management Cable (RJ45 to RJ45) 2 Switching AC Adapters 2 AC Line Cords 3.2 DURAstream Series Benefits and Features Benefits Optimized reliability of critical network links Achieve fail-safe monitoring with in-line monitoring tools such as IPS and DPI Improved network uptime and security Increased application availability Upgrade, maintain, or replace in-line devices without interrupting network operations Datacom Customer Service Support is available via: Phone: (315) Website: Features Passive bypass maintains network integrity after a power loss Active switching of traffic in case of system failure to prevent network interruptions Heartbeat Mode - several user-configurable options to monitor link status and health of inline appliances including bridge devices like firewalls and VPN gateways Flexible deployment options - copper, single mode, multi-mode, and media conversion Dual redundant power supplies ensure monitoring uptime Power fail protection monitors power supplies for power decline or outage and can switch to passive mode Manage device remotely or locally with Web based management (HTTPS) or extensive CLI Management port with SSH connectivity SNMP traps and event notifications on defined events Interfaces with authentication servers such as TACACS+ Syslog support

11 DS-4000 Series Common Specifications Four In-Line Gigabit Network Ports: various, see Specific Specifications section Ethernet Management Port: RJ45 The factory configured IP Address, Subnet Mask and default Gateway are as follows: IP Address: Subnet Mask: Default Gateway: Serial Console Port: RJ45 Tap Port: RJ45 In-Line Insertion Loss (front): less than 0.5dB Power Adapter Input Requirement: VAC 47-63Hz 1.4A MAX Power Adapter Output: 12VDC 5.0A Power Consumption: 60.0W MAX BTU/h: MAX Operating Temperature: 32º to 131 F 0º to 55 C Storage Temperature: -22º to 149 F -30º to 65 C Operating Range Relative Humidity: 5 to 90% non-condensing Dimensions (H x W x D): includes rack mount bracket 1.75 x x inch 4.44 x x cm Weight: 13.5 lbs; shipping: 21.0 lbs 6.12 kg; shipping; 9.53 kg Warranty: One (1) year, see Warranty section for details

12 DS-4000 Series Specific Specifications DS BT/2LX: 2 copper segments and 2 single mode fiber segments active bypass DS BT/2SX-50: 2 copper segments and 2 multi mode fiber (50µ) segments active bypass DS BT/2SX-62: 2 copper segments and 2 multi mode fiber (62.5µ) segments active bypass DS BT/LX/SX-50: 2 copper segments, 1 single mode fiber segment and 1 multi mode fiber (50µ) segment active bypass DS BT/LX/SX-62: 2 copper segments, 1 single mode fiber segment and 1 multi mode fiber (62.5µ) segment active bypass DS LX/2SX-50: 2 multi mode fiber (50µ) segments and 2 single mode fiber segments active bypass DS LX/2SX-62: 2 multi mode fiber (62.5µ) segments and 2 single mode fiber segments active bypass DS BT: 4 copper segments active bypass DS LX/BT: 4 single mode fiber to copper conversion segments active bypass DS SX/BT-50: 4 multi mode fiber (50µ) to copper conversion segments active bypass DS SX/BT-62: 4 multi mode fiber (62.5µ) to copper conversion segments active bypass DS LX: 4 single mode fiber segments active bypass DS SX-50: 4 multi mode fiber (50µ) segments active bypass DS SX-62: 4 multi mode fiber (62.5µ) segments active bypass.

13 Technical Brief DS-4000 is Datacom Systems' 1Gbps intelligent external Active Bypass Switch. The external active bypass enables plug and play connectivity, includes an auto heartbeat and requires no additional drivers to be installed on any connected appliance. DS-4000 consists of 4 segments which can support four network segments and four appliances which provide these features: 4 segment 1 Gb active bypass switch Supports Copper, Fiber Multi Mode, and Fiber Single Mode Comprehensive management tools: Secure Web management Interface (SSL), o SNMP o CLI by serial console o SSH Different Heartbeat Modes that monitor appliance system health without appliance driver, including: Internal Loop-back Heartbeat Frame Mode, and Link Status Mode Notification for appliance status changes Media conversion from Network to appliance Ethernet ports Power Outage Network Bypass Protection Field Programmability over Ethernet or Serial Console Port Syslog support TACACS+ authentication server Connectivity example, DS-4000 can connect up to 4 network segments.

14 15 4. Port LED Interface 1Gigabit N1 and N2 Ports which connect to an ingress network and egress network 1 Gigabit A1 and A2 Ports which connect to a network appliance (I.e., IDS, UTM or Firewall) Link/Active LEDs for 1Gigabit Ports Appliance LED ON for Active state or OFF for Bypass state 4.1 Copper LED L R S Description Link speed of the port. Green LED on signifies 1G. Green LED OFF signifies 10M or 100M speed. Link status of the port. Green LED ON signifies link is stable. Blinking LED signifies there is traffic on that port. Bypass/Active state; the LED will be ON if the module is in Active state and OFF if the module is in Bypass state. 4.2 Fiber LED L R S Description Link status of the port. Green LED ON signifies link is stable. Blinking LED signifies there is traffic on that port. Link status of the port. Green LED ON signifies link is stable. Blinking LED signifies there is traffic on that port. Bypass/Active state; the LED will be ON if the module is in Active state and OFF if the module is in Bypass state.

15 16 5. Theory of Operation Modules: There are four modules installed at the factory in each Bypass Switch. Modules are available in copper, fiber (multimode and singlemode) plus mixed media. Each module has 4 ports, where the top two ports are used to connect network devices, these are the network ports. The bottom two ports of the modules direct traffic through the inline appliance, these are the appliance ports. Heartbeat packets flow between the bottom ports to ensure the appliance is working properly. Heartbeat packets are not passed beyond the bottom ports. An inline appliance is connected on a single module using the following diagram: DS-4000 Bypass Switching Mode and Active Switching Mode Ports are designated as Network or Appliance Ports as shown below: Network and Appliance Port

16 17 6. Heartbeat Functionality The DURAstream-4000 can monitor the continual health of the appliance by sending and receiving Heartbeat packets. This functionality ensures the real-time safety and accuracy of the data stream. Heartbeat frames are generally configured to be sent from the DURAstream-4000 on one appliance port and received on the other under a set time limit defined by a userconfigured timeout value. The frequency at which the DURAstream-4000 sends the heartbeat can be defined by a user-configured timeout value. 6.1 Heartbeat Modes DURAstream-4000 provides various heartbeat modes to correspond with different appliance configurations including: Heartbeat Mode: Internal Heartbeat Frame Loop-back Mode The heartbeat signal is a user programmable Ethernet Heartbeat Frame and is generated by the DURAstream-4000 itself. The Heartbeat frames are sent out from the DURAstream-4000 Ethernet Port A1 every 100ms, and the Ethernet Port A2 expects to receive the same Heartbeat Frame from the appliance. The Normal Active Bypass mode for the DURAstream-4000 is designed for network appliance units that act as a bridge, like an IPS or Firewall. The user needs to make sure that the network appliance is properly configured so that the device will not filter out the Heartbeat Frame. No driver is needed for Appliance systems Heartbeat Mode: Link Status Heartbeat Mode The link up status indicator acts as the heartbeat signal of the DURAstream-4000 for Ethernet Ports A1 and A2. If any ports of A1 and A2 lose the link the DURAstream-4000 will activate bypass mode. 6.2 Heartbeat Frame Type The DURAstream-4000 has a configurable heartbeat frame allowing devices to properly recognize and forward the heartbeat frame. It includes the following types Etherframe The heartbeat packet type is an Etherframe packet where the source and destination MAC addresses are configurable.

17 ICMP The heartbeat packet type is an ICMP packet where the source and destination of both MAC and IP address are configurable IPX The heartbeat packet type is an IPX packet where the source and destination of both MAC and Network mask are configurable TCP-SYN The heartbeat packet type is a TCP-SYN packet where the source and destination of MAC, IP and Port are configurable. 7. Link Fault Detection This feature is available to be configured on a per-segment basis. With LFD enabled, if one of the two network ports goes down in a segment, it will force the other down. If LFD is not enabled, the network ports will come up or go down independently of one another.

18 19 8. DURAstream-4000 Operation Modes The DURAstream-4000 has four Operation Modes with Normal Active Bypass being the default Operation Mode. 8.1 Normal Active Bypass Traffic will flow between the network and appliance ports as shown in the following diagram. If heartbeat signals are not received within the timeout period, traffic will be routed between N1 and N2. Ports A1 and A2 will be bypassed. Heartbeat packets will continue to be sent out the Appliance port. This allows the module to automatically route traffic back through the appliance once it is repaired, or placed back into service. Normal Active Bypass Normal Active Bypass Device Failure

19 Normal Active Inline This setting allows traffic to flow between N1 and N2 while heartbeats continue to flow between A1 and A2. Loss of heartbeats will direct traffic from N1 to A1 and N2 to A2. This mode may be used to make sure the heartbeat is flowing through the appliance, while network traffic is not flowing through the appliance. Normal Active Inline Normal Active Inline Heartbeat is Blocked

20 Manual Active Inline Traffic flows from N1 to A1 and N2 to A2 until changed. No heartbeat packets are sent. Manual Active Inline 8.4 Manual Active Bypass Traffic flows between N1 and N2. No heartbeat packets are sent, and the device will remain in this mode until changed. Manual Active Bypass

21 Manual Passive Bypass This mode forces connectivity directly between N1 and N2. If the Bypass Switch loses power from both of its redundant power supplies, the mode will automatically occur, to maintain the network link. Note that switching to the mode will cause a brief interruption of the network link, which may force routing and link protocol algorithms to recalculate and renegotiate. This may cause link downtime. Manual Passive Bypass

22 23 9. DURAstream-4000 Power Fail Protection The DURAstream-4000 provides two redundant power supply inputs to minimize the chance of power loss or failure. In addition The DURAstream-4000 continuously monitors the power supply voltage to detect any instance of power decline or outage. If a power failure is detected, Power Fail Protection Operation is triggered, which initiates a switch to Bypass Switching Mode. During this no power state, the N1 and N2 ports will physically connect to create a passive bypass path with no ongoing traffic interruption between ports N1 and N2. When the switch first loses power there will be a very minimal interruption on the link while the switch enters passive bypass mode.

23 High Availability High availability uses 2 segments for failover purposes. In the case of one IPS failing, the other will become active. HA mode will control one pair of segments. As an example, when HA mode is enabled, Segment A will be considered primary while Segment B is considered secondary. The primary segment will be in Normal Active Bypass while the secondary segment will be in Manual Active Bypass. If the primary segment fails to active bypass, the secondary segment will become active and switch to Normal Active Bypass. The diagram below provides a visual explanation. Default HA mode: The left segment of the pair will be considered primary. The right segment of the pair will be considered secondary.

24 25 HA mode after the active segment switches: The right segment of the pair will be considered primary. The left segment of the pair will be considered secondary.

25 TAP Port The TAP Port enables easy and flexible parameter configuration to allow the mirroring of single-port or aggregated multi-port traffic to the TAP Port. This ability enables network administrators to set up passive analysis of one directional, bi-directional, single and aggregated port traffic. There are 4 TAP modes Mode: Disabled The traffic will not be mirrored in this mode Mode: TX The port will mirror the TX traffic to the user defined TAP port Mode: RX The port will mirror the RX traffic to the user defined TAP port Mode: RX/TX The port will mirror both the RX and TX traffic to the user defined TAP port. 12. Remote Management Features The DURAstream-4000 users can log into and manage the DURAstream-4000 through a Command Line Interface via the Console Port (serial terminal emulator) and through a Web based interface via a secure HTTPS connection via the Management Port (SSH remote shell emulator) Serial Terminal Setting Bits per second: Data bits: 8 Parity: None Stop: 1 Flow Control: None 12.2 IP Address Configuration All DS-4000 series units are shipped with a factory default configuration as follows: IP Address: ; Subnet Mask: ; Default Gateway:

26 SSH Setting The DURAstream-4000 SSH server uses standard port User Account/Password The admin account allows system administrators to configure programmable parameters and monitor unit status. The default password for admin is admin CLI Command Usage The admin account has permission to configure and check the system parameters. The CLI has the ability to show and configure the system settings. Help is available in the CLI by entering? symbol. The following is shown when? is executed at the datacom> prompt.! Comments configure Enter configuration mode exit exit Exit from the CLI show Display system or configuration information statistics Port statistics operations system System action The two main commands in this level of the CLI are configure and show. Entering show, then pressing? will display the following help option. datacom> show authentication -Shows authentication setting bypass -Shows bypass information ha -Shows high availability lfd -Shows Link Fault Detection information links -Shows link status management-if -Shows management interface information notification -Shows notification setting power -Shows power information statistics -Shows port statistics system -Shows system information tap -Shows tap information time -Shows time setting The column on the left is the parameter that can be entered after show. The column on the right describes what the parameter is doing. For example, show system will display the system information as shown below.

27 28 datacom> show system system: Product Name: DURA Stream Firmware Version: Management IP: MAC: 00:14:E2:00:75:00 CPU Limit: disabled Entering configure, then pressing? will display the following help option. datacom> configure authentication -Enter Configuration mode for authentication debug -Enter Configuration mode for debug ha -Enter Configuration mode for ha management-if -Enter Configuration mode for the management interface notification -Enter Configuration mode for notifications port -Enter Configuration mode for individual port settings segment -Enter Configuration mode for various segment aspects system -Enter Configuration mode for the system time -Enter Configuration mode for time The column on the left is the parameter that can be entered after configure. The column on the right describes what the parameter is doing. For example, configure notification will change the prompt to datacom(config-notifcation)> and enter configuration mode for notifications. Typing the? key will then show the user what aspects of the notification can be modified. The output will look like the following: datacom(config-notification)>! Comments do Root view prefix Notification exit Exit the configure mode snmp SNMP Notification syslog Syslog setting In addition to the?, entering Tab will show the next available commands only. If the string is partially completed, entering Tab or Space will finish the string. When there is only one option, entering Tab or Space Key will complete the next string.

28 SECURE WEB MANAGEMENT 13.1 Connecting to web management The DURAstream-4000 provides a Secure Web Management Interface for system administrators to manage and monitor DURAstream-4000 via any web browser. To access the management web page, the Ethernet Management port needs to be connected to the local network or host computer. The URL to access the Web Management interface, Port IP>, can be found though CLI interface or LCD interface. The default Mgmt Port IP is Certificate Error Page (Google Chrome) The above image shows the first page that appears on the web browser after entering the URL. Currently, DURAstream-4000 s website security certification is in the process of being approved. Therefore the user needs to click Proceed anyway to go to the login page (if using Google Chrome). If using Mozilla Firefox, the user needs to click I Understand the Risks then Add Exception to go to the login page.

29 Login Page An example of the User Login Page where the default user name is admin and the password is admin Status The Status page provides the system information including: revision information, power supply status, unit link status and the operation mode. This page is primarily used to observe many of the basic settings on the DS-4000.

30 Bypass Module The Segments page shows the Bypass module parameters and allows the user to set and tune them according to the site requirements. The blue Segment buttons can be clicked to modify the settings. Heartbeat, link fault detection, and Tap settings are capable of being modified on this page.

31 Management Port The Management Port page shows the Management Port parameters which can configure IP settings of the management port. The blue Management Port button can be clicked to modify the settings.

32 Notification The DURAstream-4000 provides an Notification function which initiates an notification upon switching mode of an I/O segment. The mail server and account settings can be configured through the Web management or CLI interface. The page shows the notification parameters which need to be filled up properly by the system administrator to enable or disable the notification function and configure the servers and accounts. The blue button can be clicked to modify the settings.

33 SNMP The DURAstream-4000 provides SNMP Trap function which can send messages to a destination IP when the I/O segment status or Power Supply status is changed. The SNMP page shows the SNMP parameters setting which enables or disables the SNMP Trap function and configures the SNMP destination IP and SNMPv2 community name. The blue SNMP button can be clicked to modify the settings.

34 User Account Settings The Users page shows the User Account parameters which allows for the change of a user name and password via the WEB management page. The blue Admin button can be clicked to change the password.

35 System Settings The Settings page shows the backup and restore parameters. These can be used to can restore the DURAstream-4000 to default settings. This page can also be used to configure the descriptions for both segments and ports.

36 Firmware Update The Firmware Update page shows firmware update parameters which enable firmware updates for the DURAstream Click Browse and then navigate to the new firmware file. Once the correct firmware file has been selected, click Upload Firmware and the DURAstream-4000 will reboot with new firmware. When selecting the firmware file to upload, make sure that the name reads vmlinux.64.gz. The DURAstream-4000 will only accept firmware with this name.

37 System Reboot The Reboot screen presents the reboot option.

38 NTP The NTP page allows the setting of NTP settings. The blue NTP button can be clicked to modify the settings.

39 Time Setting The Time Zone page shows the current time zone setting. The blue Time Zone button can be clicked to modify the setting.

40 Syslog Settings The Syslog page shows parameters for the Syslog server, which provides monitoring for heartbeats, LFD, power, and operation modes. The Syslog server IP, port, host name and templates can be modified by clicking the blue Syslog button near the top.

41 TACACS The TACACS page allows the user to view and set the TACACS server settings. The blue TACACS button near the top can be clicked to change the settings.

42 Links The Links page can be used to view the various attributes of ports on the DS To change the settings, the blue Links button can be clicked near the top. Each port can be controlled for the state and flow control settings. Only the network ports can be configured for the link speed. The link state controls the port link in which the port can be forced down or auto negotiated. The link speed can be controlled for the network ports to be auto negotiation, 10mb, 100mb, or fixed 1G

43 High Availability The HA Service page shows how to configure the high availability of the unit. Any two segments can be defined to be a pair. Each segment cannot be used in more than one pair. The settings can be changed by clicking the blue HA Service button near the top.

44 Port Statistics On the Statistics page, one or multiple ports can be selected to show the counter and traffic rate information. The peak traffic time and peak traffic rate will not show when multiple ports are selected.

45 Heartbeat Frame Format DS-4000 Heartbeat frame format. Total Frame Size: 128 Bytes (including CRC Checksum) Byte: 0-11 byte ( are Destination and Source Mac address ) ============================================================== Destination MAC: 00:14:BD:00:00:FF Source MAC: 00:14:BD:00:00:<Port Number> Byte: byte ( are Ether Frame Type : 0x8000) ============================================================== EtherFrame: 0x80 0x00 Byte: byte ( pattern count from 0x00-0x3F) ============================================================== Payload or Data: 0x00 0x01 0x02 0x03 0x04 0x05.. 0x3F Byte: byte ( pattern = 0x55 ) ============================================================== Payload or Data: 0x55 0x55 0x55 Byte: byte ( CRC Checksum field) =============================================================

46 Customer Service This USERguide was written to help you get to know your new DURAstream Bypass Switch quickly and easily. We would welcome any comments or suggestions you may have regarding this USERguide. Please send your remarks and recommendations via mail, telephone, or Internet . Datacom Customer Service is available via telephone or through our website. Outside of support hours, please leave a voice message and our Customer Service Staff will return your call as soon as possible. Tel: (315) Web: Internet You can obtain additional information about Datacom Systems, Inc. and its products and services from the Internet at: Warranty Please visit our website at for the latest support and warranty information Limits of Liability The warranties set forth above are exclusive and in lieu of all other warranties. Datacom Systems, Inc. (DSI) makes no other warranties, expressed or implied, and DSI expressly disclaims all other warranties, including but not limited to implied warranties of merchantability and fitness for a particular purpose. Moreover, the provisions set forth above state DSI s entire responsibility and your sole and exclusive remedy with respect to any breach of warranty or contract. No liability for consequential damages. Under no circumstances and under no theory of Liability shall DSI be liable for costs of procurement of substitute products or services, lost profits, lost savings, loss of information or data, or any other special, indirect, consequential or incidental damages, arising in any way out of the sale of, use of, or inability to use, any DSI product or service, even if DSI has been advised of the possibility of such damages.

47 Datacom Systems Inc. 9 Adler Drive East Syracuse, NY TEL: (315) FAX: (315) Datacom Systems Inc Access Your Network TM